.\" -*- mode: troff; coding: utf-8 -*-
.TH "nix3-copy" "1" ""
.RS
.PP
\fBWarning\fR 
.br
This program is
\fB\fBexperimental\fR\fR
and its interface is subject to change.
.RE
.SH
Name
.LP
\f(CRnix copy\fR - copy paths between Nix stores
.SH
Synopsis
.LP
\f(CRnix copy\fR [\fIoption\fR\[u2026]] \fIinstallables\fR\[u2026]
.SH
Examples
.IP "\(bu" 3
Copy Firefox from the local store to a binary cache in \f(CR/tmp/cache\fR:
.LP
.EX
# nix copy --to file:///tmp/cache $(type -p firefox)
.EE
.IP
Note the \f(CRfile://\fR - without this, the destination is a chroot
store, not a binary cache.
.IP "\(bu" 3
Copy the entire current NixOS system closure to another machine via
SSH:
.LP
.EX
# nix copy --substitute-on-destination --to ssh://server /run/current-system
.EE
.IP
The \f(CR-s\fR flag causes the remote machine to try to substitute missing
store paths, which may be faster if the link between the local and
remote machines is slower than the link between the remote machine
and its substituters (e.g. \f(CRhttps://cache.nixos.org\fR).
.IP "\(bu" 3
Copy a closure from another machine via SSH:
.LP
.EX
# nix copy --from ssh://server /nix/store/a6cnl93nk1wxnq84brbbwr6hxw9gp2w9-blender-2.79-rc2
.EE
.IP "\(bu" 3
Copy Hello to a binary cache in an Amazon S3 bucket:
.LP
.EX
# nix copy --to s3://my-bucket?region=eu-west-1 nixpkgs#hello
.EE
.IP
or to an S3-compatible storage system:
.LP
.EX
# nix copy --to s3://my-bucket?region=eu-west-1&endpoint=example.com nixpkgs#hello
.EE
.IP
Note that this only works if Nix is built with AWS support.
.IP "\(bu" 3
Copy a closure from \f(CR/nix/store\fR to the chroot store \f(CR/tmp/nix/nix/store\fR:
.LP
.EX
# nix copy --to /tmp/nix nixpkgs#hello --no-check-sigs
.EE
.SH
Description
.LP
\f(CRnix copy\fR copies store path closures between two Nix stores. The
source store is specified using \f(CR--from\fR and the destination using
\f(CR--to\fR. If one of these is omitted, it defaults to the local store.
.SH
Options
.IP "\(bu" 3
\fB\f(CR--from\fR\fR \fIstore-uri\fR
.IP
URL of the source Nix store.
.IP "\(bu" 3
\fB\f(CR--no-check-sigs\fR\fR
.IP
Do not require that paths are signed by trusted keys.
.IP "\(bu" 3
\fB\f(CR--stdin\fR\fR
.IP
Read installables from the standard input. No default installable applied.
.IP "\(bu" 3
\fB\f(CR--substitute-on-destination\fR\fR / \f(CR-s\fR
.IP
Whether to try substitutes on the destination store (only supported by SSH stores).
.IP "\(bu" 3
\fB\f(CR--to\fR\fR \fIstore-uri\fR
.IP
URL of the destination Nix store.
.LP
\fBCommon evaluation options:\fR
.IP "\(bu" 3
\fB\f(CR--arg\fR\fR \fIname\fR \fIexpr\fR
.IP
Pass the value \fIexpr\fR as the argument \fIname\fR to Nix functions.
.IP "\(bu" 3
\fB\f(CR--argstr\fR\fR \fIname\fR \fIstring\fR
.IP
Pass the string \fIstring\fR as the argument \fIname\fR to Nix functions.
.IP "\(bu" 3
\fB\f(CR--debugger\fR\fR
.IP
Start an interactive environment if evaluation fails.
.IP "\(bu" 3
\fB\f(CR--eval-store\fR\fR \fIstore-url\fR
.IP
The \fBURL of the Nix store\fR
to use for evaluation, i.e. to store derivations (\f(CR.drv\fR files) and inputs referenced by them.
.IP "\(bu" 3
\fB\f(CR--impure\fR\fR
.IP
Allow access to mutable paths and repositories.
.IP "\(bu" 3
\fB\f(CR--include\fR\fR / \f(CR-I\fR \fIpath\fR
.IP
Add \fIpath\fR to the Nix search path. The Nix search path is
initialized from the colon-separated \fB\f(CRNIX_PATH\fR\fR environment
variable, and is used to look up the location of Nix expressions using \fBpaths\fR enclosed in angle
brackets (i.e., \f(CR<nixpkgs>\fR).
.IP
For instance, passing
.LP
.EX
-I /home/eelco/Dev
-I /etc/nixos
.EE
.IP
will cause Nix to look for paths relative to \f(CR/home/eelco/Dev\fR and
\f(CR/etc/nixos\fR, in that order. This is equivalent to setting the
\f(CRNIX_PATH\fR environment variable to
.LP
.EX
/home/eelco/Dev:/etc/nixos
.EE
.IP
It is also possible to match paths against a prefix. For example,
passing
.LP
.EX
-I nixpkgs=/home/eelco/Dev/nixpkgs-branch
-I /etc/nixos
.EE
.IP
will cause Nix to search for \f(CR<nixpkgs/path>\fR in
\f(CR/home/eelco/Dev/nixpkgs-branch/path\fR and \f(CR/etc/nixos/nixpkgs/path\fR.
.IP
If a path in the Nix search path starts with \f(CRhttp://\fR or \f(CRhttps://\fR,
it is interpreted as the URL of a tarball that will be downloaded and
unpacked to a temporary location. The tarball must consist of a single
top-level directory. For example, passing
.LP
.EX
-I nixpkgs=https://github.com/NixOS/nixpkgs/archive/master.tar.gz
.EE
.IP
tells Nix to download and use the current contents of the \f(CRmaster\fR
branch in the \f(CRnixpkgs\fR repository.
.IP
The URLs of the tarballs from the official \f(CRnixos.org\fR channels
(see \fBthe manual page for \f(CRnix-channel\fR\fR) can be
abbreviated as \f(CRchannel:<channel-name>\fR. For instance, the
following two flags are equivalent:
.LP
.EX
-I nixpkgs=channel:nixos-21.05
-I nixpkgs=https://nixos.org/channels/nixos-21.05/nixexprs.tar.xz
.EE
.IP
You can also fetch source trees using \fBflake URLs\fR and add them to the
search path. For instance,
.LP
.EX
-I nixpkgs=flake:nixpkgs
.EE
.IP
specifies that the prefix \f(CRnixpkgs\fR shall refer to the source tree
downloaded from the \f(CRnixpkgs\fR entry in the flake registry. Similarly,
.LP
.EX
-I nixpkgs=flake:github:NixOS/nixpkgs/nixos-22.05
.EE
.IP
makes \f(CR<nixpkgs>\fR refer to a particular branch of the
\f(CRNixOS/nixpkgs\fR repository on GitHub.
.IP "\(bu" 3
\fB\f(CR--override-flake\fR\fR \fIoriginal-ref\fR \fIresolved-ref\fR
.IP
Override the flake registries, redirecting \fIoriginal-ref\fR to \fIresolved-ref\fR.
.LP
\fBCommon flake-related options:\fR
.IP "\(bu" 3
\fB\f(CR--commit-lock-file\fR\fR
.IP
Commit changes to the flake\(cqs lock file.
.IP "\(bu" 3
\fB\f(CR--inputs-from\fR\fR \fIflake-url\fR
.IP
Use the inputs of the specified flake as registry entries.
.IP "\(bu" 3
\fB\f(CR--no-registries\fR\fR
.IP
Don\(cqt allow lookups in the flake registries. This option is deprecated; use \f(CR--no-use-registries\fR.
.IP "\(bu" 3
\fB\f(CR--no-update-lock-file\fR\fR
.IP
Do not allow any updates to the flake\(cqs lock file.
.IP "\(bu" 3
\fB\f(CR--no-write-lock-file\fR\fR
.IP
Do not write the flake\(cqs newly generated lock file.
.IP "\(bu" 3
\fB\f(CR--output-lock-file\fR\fR \fIflake-lock-path\fR
.IP
Write the given lock file instead of \f(CRflake.lock\fR within the top-level flake.
.IP "\(bu" 3
\fB\f(CR--override-input\fR\fR \fIinput-path\fR \fIflake-url\fR
.IP
Override a specific flake input (e.g. \f(CRdwarffs/nixpkgs\fR). This implies \f(CR--no-write-lock-file\fR.
.IP "\(bu" 3
\fB\f(CR--recreate-lock-file\fR\fR
.IP
Recreate the flake\(cqs lock file from scratch.
.IP "\(bu" 3
\fB\f(CR--reference-lock-file\fR\fR \fIflake-lock-path\fR
.IP
Read the given lock file instead of \f(CRflake.lock\fR within the top-level flake.
.IP "\(bu" 3
\fB\f(CR--update-input\fR\fR \fIinput-path\fR
.IP
Update a specific flake input (ignoring its previous entry in the lock file).
.LP
\fBLogging-related options:\fR
.IP "\(bu" 3
\fB\f(CR--debug\fR\fR
.IP
Set the logging verbosity level to \(oqdebug\(cq.
.IP "\(bu" 3
\fB\f(CR--log-format\fR\fR \fIformat\fR
.IP
Set the format of log output; one of \f(CRraw\fR, \f(CRinternal-json\fR, \f(CRbar\fR or \f(CRbar-with-logs\fR.
.IP "\(bu" 3
\fB\f(CR--print-build-logs\fR\fR / \f(CR-L\fR
.IP
Print full build logs on standard error.
.IP "\(bu" 3
\fB\f(CR--quiet\fR\fR
.IP
Decrease the logging verbosity level.
.IP "\(bu" 3
\fB\f(CR--verbose\fR\fR / \f(CR-v\fR
.IP
Increase the logging verbosity level.
.LP
\fBMiscellaneous global options:\fR
.IP "\(bu" 3
\fB\f(CR--help\fR\fR
.IP
Show usage information.
.IP "\(bu" 3
\fB\f(CR--offline\fR\fR
.IP
Disable substituters and consider all previously downloaded files up-to-date.
.IP "\(bu" 3
\fB\f(CR--option\fR\fR \fIname\fR \fIvalue\fR
.IP
Set the Nix configuration setting \fIname\fR to \fIvalue\fR (overriding \f(CRnix.conf\fR).
.IP "\(bu" 3
\fB\f(CR--refresh\fR\fR
.IP
Consider all previously downloaded files out-of-date.
.IP "\(bu" 3
\fB\f(CR--repair\fR\fR
.IP
During evaluation, rewrite missing or corrupted files in the Nix store. During building, rebuild missing or corrupted store paths.
.IP "\(bu" 3
\fB\f(CR--version\fR\fR
.IP
Show version information.
.LP
\fBOptions that change the interpretation of \fBinstallables\fB:\fR
.IP "\(bu" 3
\fB\f(CR--all\fR\fR
.IP
Apply the operation to every store path.
.IP "\(bu" 3
\fB\f(CR--derivation\fR\fR
.IP
Operate on the \fBstore derivation\fR rather than its outputs.
.IP "\(bu" 3
\fB\f(CR--expr\fR\fR \fIexpr\fR
.IP
Interpret \fB\fIinstallables\fR\fR as attribute paths relative to the Nix expression \fIexpr\fR.
.IP "\(bu" 3
\fB\f(CR--file\fR\fR / \f(CR-f\fR \fIfile\fR
.IP
Interpret \fB\fIinstallables\fR\fR as attribute paths relative to the Nix expression stored in \fIfile\fR. If \fIfile\fR is the character -, then a Nix expression will be read from standard input. Implies \f(CR--impure\fR.
.IP "\(bu" 3
\fB\f(CR--no-recursive\fR\fR
.IP
Apply operation to specified paths only.
.LP
\fBOptions to override configuration settings:\fR
.IP "\(bu" 3
\fB\f(CR--accept-flake-config\fR\fR
.IP
Enable the \f(CRaccept-flake-config\fR setting.
.IP "\(bu" 3
\fB\f(CR--access-tokens\fR\fR \fIvalue\fR
.IP
Set the \f(CRaccess-tokens\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-dirty\fR\fR
.IP
Enable the \f(CRallow-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-import-from-derivation\fR\fR
.IP
Enable the \f(CRallow-import-from-derivation\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-new-privileges\fR\fR
.IP
Enable the \f(CRallow-new-privileges\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-symlinked-store\fR\fR
.IP
Enable the \f(CRallow-symlinked-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-unsafe-native-code-during-evaluation\fR\fR
.IP
Enable the \f(CRallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-impure-host-deps\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-impure-host-deps\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-uris\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-uris\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-users\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--auto-allocate-uids\fR\fR
.IP
Enable the \f(CRauto-allocate-uids\fR setting.
.IP "\(bu" 3
\fB\f(CR--auto-optimise-store\fR\fR
.IP
Enable the \f(CRauto-optimise-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt-prefix\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt-prefix\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt-suffix\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt-suffix\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-poll-interval\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-poll-interval\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-users-group\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-users-group\fR setting.
.IP "\(bu" 3
\fB\f(CR--builders\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuilders\fR setting.
.IP "\(bu" 3
\fB\f(CR--builders-use-substitutes\fR\fR
.IP
Enable the \f(CRbuilders-use-substitutes\fR setting.
.IP "\(bu" 3
\fB\f(CR--commit-lockfile-summary\fR\fR \fIvalue\fR
.IP
Set the \f(CRcommit-lockfile-summary\fR setting.
.IP "\(bu" 3
\fB\f(CR--compress-build-log\fR\fR
.IP
Enable the \f(CRcompress-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--connect-timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRconnect-timeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--cores\fR\fR \fIvalue\fR
.IP
Set the \f(CRcores\fR setting.
.IP "\(bu" 3
\fB\f(CR--diff-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRdiff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--download-attempts\fR\fR \fIvalue\fR
.IP
Set the \f(CRdownload-attempts\fR setting.
.IP "\(bu" 3
\fB\f(CR--download-speed\fR\fR \fIvalue\fR
.IP
Set the \f(CRdownload-speed\fR setting.
.IP "\(bu" 3
\fB\f(CR--eval-cache\fR\fR
.IP
Enable the \f(CReval-cache\fR setting.
.IP "\(bu" 3
\fB\f(CR--experimental-features\fR\fR \fIvalue\fR
.IP
Set the \f(CRexperimental-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-access-tokens\fR\fR \fIvalue\fR
.IP
Append to the \f(CRaccess-tokens\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-impure-host-deps\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-impure-host-deps\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-uris\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-uris\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-users\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-build-hook\fR\fR \fIvalue\fR
.IP
Append to the \f(CRbuild-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-experimental-features\fR\fR \fIvalue\fR
.IP
Append to the \f(CRexperimental-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-extra-platforms\fR\fR \fIvalue\fR
.IP
Append to the \f(CRextra-platforms\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-hashed-mirrors\fR\fR \fIvalue\fR
.IP
Append to the \f(CRhashed-mirrors\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-ignored-acls\fR\fR \fIvalue\fR
.IP
Append to the \f(CRignored-acls\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-nix-path\fR\fR \fIvalue\fR
.IP
Append to the \f(CRnix-path\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-platforms\fR\fR \fIvalue\fR
.IP
Set the \f(CRextra-platforms\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-plugin-files\fR\fR \fIvalue\fR
.IP
Append to the \f(CRplugin-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-sandbox-paths\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsandbox-paths\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-secret-key-files\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsecret-key-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-substituters\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsubstituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-system-features\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsystem-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-public-keys\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-public-keys\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-substituters\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-substituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-users\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--fallback\fR\fR
.IP
Enable the \f(CRfallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--filter-syscalls\fR\fR
.IP
Enable the \f(CRfilter-syscalls\fR setting.
.IP "\(bu" 3
\fB\f(CR--flake-registry\fR\fR \fIvalue\fR
.IP
Set the \f(CRflake-registry\fR setting.
.IP "\(bu" 3
\fB\f(CR--fsync-metadata\fR\fR
.IP
Enable the \f(CRfsync-metadata\fR setting.
.IP "\(bu" 3
\fB\f(CR--gc-reserved-space\fR\fR \fIvalue\fR
.IP
Set the \f(CRgc-reserved-space\fR setting.
.IP "\(bu" 3
\fB\f(CR--hashed-mirrors\fR\fR \fIvalue\fR
.IP
Set the \f(CRhashed-mirrors\fR setting.
.IP "\(bu" 3
\fB\f(CR--http-connections\fR\fR \fIvalue\fR
.IP
Set the \f(CRhttp-connections\fR setting.
.IP "\(bu" 3
\fB\f(CR--http2\fR\fR
.IP
Enable the \f(CRhttp2\fR setting.
.IP "\(bu" 3
\fB\f(CR--id-count\fR\fR \fIvalue\fR
.IP
Set the \f(CRid-count\fR setting.
.IP "\(bu" 3
\fB\f(CR--ignore-try\fR\fR
.IP
Enable the \f(CRignore-try\fR setting.
.IP "\(bu" 3
\fB\f(CR--ignored-acls\fR\fR \fIvalue\fR
.IP
Set the \f(CRignored-acls\fR setting.
.IP "\(bu" 3
\fB\f(CR--impersonate-linux-26\fR\fR
.IP
Enable the \f(CRimpersonate-linux-26\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-build-log\fR\fR
.IP
Enable the \f(CRkeep-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-derivations\fR\fR
.IP
Enable the \f(CRkeep-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-env-derivations\fR\fR
.IP
Enable the \f(CRkeep-env-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-failed\fR\fR
.IP
Enable the \f(CRkeep-failed\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-going\fR\fR
.IP
Enable the \f(CRkeep-going\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-outputs\fR\fR
.IP
Enable the \f(CRkeep-outputs\fR setting.
.IP "\(bu" 3
\fB\f(CR--log-lines\fR\fR \fIvalue\fR
.IP
Set the \f(CRlog-lines\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-build-log-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-build-log-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-free\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-free\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-jobs\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-jobs\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-silent-time\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-silent-time\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-substitution-jobs\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-substitution-jobs\fR setting.
.IP "\(bu" 3
\fB\f(CR--min-free\fR\fR \fIvalue\fR
.IP
Set the \f(CRmin-free\fR setting.
.IP "\(bu" 3
\fB\f(CR--min-free-check-interval\fR\fR \fIvalue\fR
.IP
Set the \f(CRmin-free-check-interval\fR setting.
.IP "\(bu" 3
\fB\f(CR--nar-buffer-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRnar-buffer-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--narinfo-cache-negative-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRnarinfo-cache-negative-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--narinfo-cache-positive-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRnarinfo-cache-positive-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--netrc-file\fR\fR \fIvalue\fR
.IP
Set the \f(CRnetrc-file\fR setting.
.IP "\(bu" 3
\fB\f(CR--nix-path\fR\fR \fIvalue\fR
.IP
Set the \f(CRnix-path\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-accept-flake-config\fR\fR
.IP
Disable the \f(CRaccept-flake-config\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-dirty\fR\fR
.IP
Disable the \f(CRallow-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-import-from-derivation\fR\fR
.IP
Disable the \f(CRallow-import-from-derivation\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-new-privileges\fR\fR
.IP
Disable the \f(CRallow-new-privileges\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-symlinked-store\fR\fR
.IP
Disable the \f(CRallow-symlinked-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-unsafe-native-code-during-evaluation\fR\fR
.IP
Disable the \f(CRallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-auto-allocate-uids\fR\fR
.IP
Disable the \f(CRauto-allocate-uids\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-auto-optimise-store\fR\fR
.IP
Disable the \f(CRauto-optimise-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-builders-use-substitutes\fR\fR
.IP
Disable the \f(CRbuilders-use-substitutes\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-compress-build-log\fR\fR
.IP
Disable the \f(CRcompress-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-eval-cache\fR\fR
.IP
Disable the \f(CReval-cache\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-fallback\fR\fR
.IP
Disable the \f(CRfallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-filter-syscalls\fR\fR
.IP
Disable the \f(CRfilter-syscalls\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-fsync-metadata\fR\fR
.IP
Disable the \f(CRfsync-metadata\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-http2\fR\fR
.IP
Disable the \f(CRhttp2\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-ignore-try\fR\fR
.IP
Disable the \f(CRignore-try\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-impersonate-linux-26\fR\fR
.IP
Disable the \f(CRimpersonate-linux-26\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-build-log\fR\fR
.IP
Disable the \f(CRkeep-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-derivations\fR\fR
.IP
Disable the \f(CRkeep-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-env-derivations\fR\fR
.IP
Disable the \f(CRkeep-env-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-failed\fR\fR
.IP
Disable the \f(CRkeep-failed\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-going\fR\fR
.IP
Disable the \f(CRkeep-going\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-outputs\fR\fR
.IP
Disable the \f(CRkeep-outputs\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-preallocate-contents\fR\fR
.IP
Disable the \f(CRpreallocate-contents\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-print-missing\fR\fR
.IP
Disable the \f(CRprint-missing\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-pure-eval\fR\fR
.IP
Disable the \f(CRpure-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-require-drop-supplementary-groups\fR\fR
.IP
Disable the \f(CRrequire-drop-supplementary-groups\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-require-sigs\fR\fR
.IP
Disable the \f(CRrequire-sigs\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-restrict-eval\fR\fR
.IP
Disable the \f(CRrestrict-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-run-diff-hook\fR\fR
.IP
Disable the \f(CRrun-diff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-sandbox\fR\fR
.IP
Disable sandboxing.
.IP "\(bu" 3
\fB\f(CR--no-sandbox-fallback\fR\fR
.IP
Disable the \f(CRsandbox-fallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-show-trace\fR\fR
.IP
Disable the \f(CRshow-trace\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-substitute\fR\fR
.IP
Disable the \f(CRsubstitute\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-sync-before-registering\fR\fR
.IP
Disable the \f(CRsync-before-registering\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-trace-function-calls\fR\fR
.IP
Disable the \f(CRtrace-function-calls\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-trace-verbose\fR\fR
.IP
Disable the \f(CRtrace-verbose\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-case-hack\fR\fR
.IP
Disable the \f(CRuse-case-hack\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-cgroups\fR\fR
.IP
Disable the \f(CRuse-cgroups\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-registries\fR\fR
.IP
Disable the \f(CRuse-registries\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-sqlite-wal\fR\fR
.IP
Disable the \f(CRuse-sqlite-wal\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-xdg-base-directories\fR\fR
.IP
Disable the \f(CRuse-xdg-base-directories\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-warn-dirty\fR\fR
.IP
Disable the \f(CRwarn-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--plugin-files\fR\fR \fIvalue\fR
.IP
Set the \f(CRplugin-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--post-build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRpost-build-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--pre-build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRpre-build-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--preallocate-contents\fR\fR
.IP
Enable the \f(CRpreallocate-contents\fR setting.
.IP "\(bu" 3
\fB\f(CR--print-missing\fR\fR
.IP
Enable the \f(CRprint-missing\fR setting.
.IP "\(bu" 3
\fB\f(CR--pure-eval\fR\fR
.IP
Enable the \f(CRpure-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--relaxed-sandbox\fR\fR
.IP
Enable sandboxing, but allow builds to disable it.
.IP "\(bu" 3
\fB\f(CR--require-drop-supplementary-groups\fR\fR
.IP
Enable the \f(CRrequire-drop-supplementary-groups\fR setting.
.IP "\(bu" 3
\fB\f(CR--require-sigs\fR\fR
.IP
Enable the \f(CRrequire-sigs\fR setting.
.IP "\(bu" 3
\fB\f(CR--restrict-eval\fR\fR
.IP
Enable the \f(CRrestrict-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--run-diff-hook\fR\fR
.IP
Enable the \f(CRrun-diff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox\fR\fR
.IP
Enable sandboxing.
.IP "\(bu" 3
\fB\f(CR--sandbox-build-dir\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-build-dir\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-dev-shm-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-dev-shm-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-fallback\fR\fR
.IP
Enable the \f(CRsandbox-fallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-paths\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-paths\fR setting.
.IP "\(bu" 3
\fB\f(CR--secret-key-files\fR\fR \fIvalue\fR
.IP
Set the \f(CRsecret-key-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--show-trace\fR\fR
.IP
Enable the \f(CRshow-trace\fR setting.
.IP "\(bu" 3
\fB\f(CR--ssl-cert-file\fR\fR \fIvalue\fR
.IP
Set the \f(CRssl-cert-file\fR setting.
.IP "\(bu" 3
\fB\f(CR--stalled-download-timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRstalled-download-timeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--start-id\fR\fR \fIvalue\fR
.IP
Set the \f(CRstart-id\fR setting.
.IP "\(bu" 3
\fB\f(CR--store\fR\fR \fIvalue\fR
.IP
Set the \f(CRstore\fR setting.
.IP "\(bu" 3
\fB\f(CR--substitute\fR\fR
.IP
Enable the \f(CRsubstitute\fR setting.
.IP "\(bu" 3
\fB\f(CR--substituters\fR\fR \fIvalue\fR
.IP
Set the \f(CRsubstituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--sync-before-registering\fR\fR
.IP
Enable the \f(CRsync-before-registering\fR setting.
.IP "\(bu" 3
\fB\f(CR--system\fR\fR \fIvalue\fR
.IP
Set the \f(CRsystem\fR setting.
.IP "\(bu" 3
\fB\f(CR--system-features\fR\fR \fIvalue\fR
.IP
Set the \f(CRsystem-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--tarball-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRtarball-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRtimeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--trace-function-calls\fR\fR
.IP
Enable the \f(CRtrace-function-calls\fR setting.
.IP "\(bu" 3
\fB\f(CR--trace-verbose\fR\fR
.IP
Enable the \f(CRtrace-verbose\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-public-keys\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-public-keys\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-substituters\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-substituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-users\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-case-hack\fR\fR
.IP
Enable the \f(CRuse-case-hack\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-cgroups\fR\fR
.IP
Enable the \f(CRuse-cgroups\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-registries\fR\fR
.IP
Enable the \f(CRuse-registries\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-sqlite-wal\fR\fR
.IP
Enable the \f(CRuse-sqlite-wal\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-xdg-base-directories\fR\fR
.IP
Enable the \f(CRuse-xdg-base-directories\fR setting.
.IP "\(bu" 3
\fB\f(CR--user-agent-suffix\fR\fR \fIvalue\fR
.IP
Set the \f(CRuser-agent-suffix\fR setting.
.IP "\(bu" 3
\fB\f(CR--warn-dirty\fR\fR
.IP
Enable the \f(CRwarn-dirty\fR setting.