.\" -*- mode: troff; coding: utf-8 -*-
.TH "nix3-flake-check" "1" ""
.RS
.PP
\fBWarning\fR 
.br
This program is
\fB\fBexperimental\fR\fR
and its interface is subject to change.
.RE
.SH
Name
.LP
\f(CRnix flake check\fR - check whether the flake evaluates and run its tests
.SH
Synopsis
.LP
\f(CRnix flake check\fR [\fIoption\fR\[u2026]] \fIflake-url\fR
.SH
Examples
.IP "\(bu" 3
Evaluate the flake in the current directory, and build its checks:
.LP
.EX
# nix flake check
.EE
.IP "\(bu" 3
Verify that the \f(CRpatchelf\fR flake evaluates, but don\(cqt build its
checks:
.LP
.EX
# nix flake check --no-build github:NixOS/patchelf
.EE
.SH
Description
.LP
This command verifies that the flake specified by flake reference
\fIflake-url\fR can be evaluated successfully (as detailed below), and
that the derivations specified by the flake\(cqs \f(CRchecks\fR output can be
built successfully.
.PP
If the \f(CRkeep-going\fR option is set to \f(CRtrue\fR, Nix will keep evaluating as much
as it can and report the errors as it encounters them. Otherwise it will stop
at the first error.
.SH
Evaluation checks
.LP
The following flake output attributes must be derivations:
.IP "\(bu" 3
\f(CRchecks.\fR\fIsystem\fR\f(CR.\fR\fIname\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRdefaultPackage.\fR\fIsystem\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRdevShell.\fR\fIsystem\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRdevShells.\fR\fIsystem\fR\f(CR.\fR\fIname\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRnixosConfigurations.\fR\fIname\fR\f(CR.config.system.build.toplevel\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRpackages.\fR\fIsystem\fR\f(CR.\fR\fIname\fR
.LP
The following flake output attributes must be \fBapp
definitions\fR:
.IP "\(bu" 3
\f(CRapps.\fR\fIsystem\fR\f(CR.\fR\fIname\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRdefaultApp.\fR\fIsystem\fR
.LP
The following flake output attributes must be \fBtemplate
definitions\fR:
.IP "\(bu" 3
\f(CRdefaultTemplate\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRtemplates.\fR\fIname\fR
.LP
The following flake output attributes must be \fINixpkgs overlays\fR:
.IP "\(bu" 3
\f(CRoverlay\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRoverlays.\fR\fIname\fR
.LP
The following flake output attributes must be \fINixOS modules\fR:
.IP "\(bu" 3
\f(CRnixosModule\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRnixosModules.\fR\fIname\fR
.LP
The following flake output attributes must be
\fBbundlers\fR:
.IP "\(bu" 3
\f(CRbundlers.\fR\fIname\fR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 3
\f(CRdefaultBundler\fR
.LP
In addition, the \f(CRhydraJobs\fR output is evaluated in the same way as
Hydra\(cqs \f(CRhydra-eval-jobs\fR (i.e. as a arbitrarily deeply nested
attribute set of derivations). Similarly, the
\f(CRlegacyPackages\fR.\fIsystem\fR output is evaluated like \f(CRnix-env --query --available\fR.
.SH
Options
.IP "\(bu" 3
\fB\f(CR--all-systems\fR\fR
.IP
Check the outputs for all systems.
.IP "\(bu" 3
\fB\f(CR--no-build\fR\fR
.IP
Do not build checks.
.LP
\fBCommon evaluation options:\fR
.IP "\(bu" 3
\fB\f(CR--arg\fR\fR \fIname\fR \fIexpr\fR
.IP
Pass the value \fIexpr\fR as the argument \fIname\fR to Nix functions.
.IP "\(bu" 3
\fB\f(CR--argstr\fR\fR \fIname\fR \fIstring\fR
.IP
Pass the string \fIstring\fR as the argument \fIname\fR to Nix functions.
.IP "\(bu" 3
\fB\f(CR--debugger\fR\fR
.IP
Start an interactive environment if evaluation fails.
.IP "\(bu" 3
\fB\f(CR--eval-store\fR\fR \fIstore-url\fR
.IP
The \fBURL of the Nix store\fR
to use for evaluation, i.e. to store derivations (\f(CR.drv\fR files) and inputs referenced by them.
.IP "\(bu" 3
\fB\f(CR--impure\fR\fR
.IP
Allow access to mutable paths and repositories.
.IP "\(bu" 3
\fB\f(CR--include\fR\fR / \f(CR-I\fR \fIpath\fR
.IP
Add \fIpath\fR to the Nix search path. The Nix search path is
initialized from the colon-separated \fB\f(CRNIX_PATH\fR\fR environment
variable, and is used to look up the location of Nix expressions using \fBpaths\fR enclosed in angle
brackets (i.e., \f(CR<nixpkgs>\fR).
.IP
For instance, passing
.LP
.EX
-I /home/eelco/Dev
-I /etc/nixos
.EE
.IP
will cause Nix to look for paths relative to \f(CR/home/eelco/Dev\fR and
\f(CR/etc/nixos\fR, in that order. This is equivalent to setting the
\f(CRNIX_PATH\fR environment variable to
.LP
.EX
/home/eelco/Dev:/etc/nixos
.EE
.IP
It is also possible to match paths against a prefix. For example,
passing
.LP
.EX
-I nixpkgs=/home/eelco/Dev/nixpkgs-branch
-I /etc/nixos
.EE
.IP
will cause Nix to search for \f(CR<nixpkgs/path>\fR in
\f(CR/home/eelco/Dev/nixpkgs-branch/path\fR and \f(CR/etc/nixos/nixpkgs/path\fR.
.IP
If a path in the Nix search path starts with \f(CRhttp://\fR or \f(CRhttps://\fR,
it is interpreted as the URL of a tarball that will be downloaded and
unpacked to a temporary location. The tarball must consist of a single
top-level directory. For example, passing
.LP
.EX
-I nixpkgs=https://github.com/NixOS/nixpkgs/archive/master.tar.gz
.EE
.IP
tells Nix to download and use the current contents of the \f(CRmaster\fR
branch in the \f(CRnixpkgs\fR repository.
.IP
The URLs of the tarballs from the official \f(CRnixos.org\fR channels
(see \fBthe manual page for \f(CRnix-channel\fR\fR) can be
abbreviated as \f(CRchannel:<channel-name>\fR. For instance, the
following two flags are equivalent:
.LP
.EX
-I nixpkgs=channel:nixos-21.05
-I nixpkgs=https://nixos.org/channels/nixos-21.05/nixexprs.tar.xz
.EE
.IP
You can also fetch source trees using \fBflake URLs\fR and add them to the
search path. For instance,
.LP
.EX
-I nixpkgs=flake:nixpkgs
.EE
.IP
specifies that the prefix \f(CRnixpkgs\fR shall refer to the source tree
downloaded from the \f(CRnixpkgs\fR entry in the flake registry. Similarly,
.LP
.EX
-I nixpkgs=flake:github:NixOS/nixpkgs/nixos-22.05
.EE
.IP
makes \f(CR<nixpkgs>\fR refer to a particular branch of the
\f(CRNixOS/nixpkgs\fR repository on GitHub.
.IP "\(bu" 3
\fB\f(CR--override-flake\fR\fR \fIoriginal-ref\fR \fIresolved-ref\fR
.IP
Override the flake registries, redirecting \fIoriginal-ref\fR to \fIresolved-ref\fR.
.LP
\fBCommon flake-related options:\fR
.IP "\(bu" 3
\fB\f(CR--commit-lock-file\fR\fR
.IP
Commit changes to the flake\(cqs lock file.
.IP "\(bu" 3
\fB\f(CR--inputs-from\fR\fR \fIflake-url\fR
.IP
Use the inputs of the specified flake as registry entries.
.IP "\(bu" 3
\fB\f(CR--no-registries\fR\fR
.IP
Don\(cqt allow lookups in the flake registries. This option is deprecated; use \f(CR--no-use-registries\fR.
.IP "\(bu" 3
\fB\f(CR--no-update-lock-file\fR\fR
.IP
Do not allow any updates to the flake\(cqs lock file.
.IP "\(bu" 3
\fB\f(CR--no-write-lock-file\fR\fR
.IP
Do not write the flake\(cqs newly generated lock file.
.IP "\(bu" 3
\fB\f(CR--output-lock-file\fR\fR \fIflake-lock-path\fR
.IP
Write the given lock file instead of \f(CRflake.lock\fR within the top-level flake.
.IP "\(bu" 3
\fB\f(CR--override-input\fR\fR \fIinput-path\fR \fIflake-url\fR
.IP
Override a specific flake input (e.g. \f(CRdwarffs/nixpkgs\fR). This implies \f(CR--no-write-lock-file\fR.
.IP "\(bu" 3
\fB\f(CR--recreate-lock-file\fR\fR
.IP
Recreate the flake\(cqs lock file from scratch.
.IP "\(bu" 3
\fB\f(CR--reference-lock-file\fR\fR \fIflake-lock-path\fR
.IP
Read the given lock file instead of \f(CRflake.lock\fR within the top-level flake.
.IP "\(bu" 3
\fB\f(CR--update-input\fR\fR \fIinput-path\fR
.IP
Update a specific flake input (ignoring its previous entry in the lock file).
.LP
\fBLogging-related options:\fR
.IP "\(bu" 3
\fB\f(CR--debug\fR\fR
.IP
Set the logging verbosity level to \(oqdebug\(cq.
.IP "\(bu" 3
\fB\f(CR--log-format\fR\fR \fIformat\fR
.IP
Set the format of log output; one of \f(CRraw\fR, \f(CRinternal-json\fR, \f(CRbar\fR or \f(CRbar-with-logs\fR.
.IP "\(bu" 3
\fB\f(CR--print-build-logs\fR\fR / \f(CR-L\fR
.IP
Print full build logs on standard error.
.IP "\(bu" 3
\fB\f(CR--quiet\fR\fR
.IP
Decrease the logging verbosity level.
.IP "\(bu" 3
\fB\f(CR--verbose\fR\fR / \f(CR-v\fR
.IP
Increase the logging verbosity level.
.LP
\fBMiscellaneous global options:\fR
.IP "\(bu" 3
\fB\f(CR--help\fR\fR
.IP
Show usage information.
.IP "\(bu" 3
\fB\f(CR--offline\fR\fR
.IP
Disable substituters and consider all previously downloaded files up-to-date.
.IP "\(bu" 3
\fB\f(CR--option\fR\fR \fIname\fR \fIvalue\fR
.IP
Set the Nix configuration setting \fIname\fR to \fIvalue\fR (overriding \f(CRnix.conf\fR).
.IP "\(bu" 3
\fB\f(CR--refresh\fR\fR
.IP
Consider all previously downloaded files out-of-date.
.IP "\(bu" 3
\fB\f(CR--repair\fR\fR
.IP
During evaluation, rewrite missing or corrupted files in the Nix store. During building, rebuild missing or corrupted store paths.
.IP "\(bu" 3
\fB\f(CR--version\fR\fR
.IP
Show version information.
.LP
\fBOptions to override configuration settings:\fR
.IP "\(bu" 3
\fB\f(CR--accept-flake-config\fR\fR
.IP
Enable the \f(CRaccept-flake-config\fR setting.
.IP "\(bu" 3
\fB\f(CR--access-tokens\fR\fR \fIvalue\fR
.IP
Set the \f(CRaccess-tokens\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-dirty\fR\fR
.IP
Enable the \f(CRallow-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-import-from-derivation\fR\fR
.IP
Enable the \f(CRallow-import-from-derivation\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-new-privileges\fR\fR
.IP
Enable the \f(CRallow-new-privileges\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-symlinked-store\fR\fR
.IP
Enable the \f(CRallow-symlinked-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-unsafe-native-code-during-evaluation\fR\fR
.IP
Enable the \f(CRallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-impure-host-deps\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-impure-host-deps\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-uris\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-uris\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-users\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--auto-allocate-uids\fR\fR
.IP
Enable the \f(CRauto-allocate-uids\fR setting.
.IP "\(bu" 3
\fB\f(CR--auto-optimise-store\fR\fR
.IP
Enable the \f(CRauto-optimise-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt-prefix\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt-prefix\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt-suffix\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt-suffix\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-poll-interval\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-poll-interval\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-users-group\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-users-group\fR setting.
.IP "\(bu" 3
\fB\f(CR--builders\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuilders\fR setting.
.IP "\(bu" 3
\fB\f(CR--builders-use-substitutes\fR\fR
.IP
Enable the \f(CRbuilders-use-substitutes\fR setting.
.IP "\(bu" 3
\fB\f(CR--commit-lockfile-summary\fR\fR \fIvalue\fR
.IP
Set the \f(CRcommit-lockfile-summary\fR setting.
.IP "\(bu" 3
\fB\f(CR--compress-build-log\fR\fR
.IP
Enable the \f(CRcompress-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--connect-timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRconnect-timeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--cores\fR\fR \fIvalue\fR
.IP
Set the \f(CRcores\fR setting.
.IP "\(bu" 3
\fB\f(CR--diff-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRdiff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--download-attempts\fR\fR \fIvalue\fR
.IP
Set the \f(CRdownload-attempts\fR setting.
.IP "\(bu" 3
\fB\f(CR--download-speed\fR\fR \fIvalue\fR
.IP
Set the \f(CRdownload-speed\fR setting.
.IP "\(bu" 3
\fB\f(CR--eval-cache\fR\fR
.IP
Enable the \f(CReval-cache\fR setting.
.IP "\(bu" 3
\fB\f(CR--experimental-features\fR\fR \fIvalue\fR
.IP
Set the \f(CRexperimental-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-access-tokens\fR\fR \fIvalue\fR
.IP
Append to the \f(CRaccess-tokens\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-impure-host-deps\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-impure-host-deps\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-uris\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-uris\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-users\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-build-hook\fR\fR \fIvalue\fR
.IP
Append to the \f(CRbuild-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-experimental-features\fR\fR \fIvalue\fR
.IP
Append to the \f(CRexperimental-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-extra-platforms\fR\fR \fIvalue\fR
.IP
Append to the \f(CRextra-platforms\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-hashed-mirrors\fR\fR \fIvalue\fR
.IP
Append to the \f(CRhashed-mirrors\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-ignored-acls\fR\fR \fIvalue\fR
.IP
Append to the \f(CRignored-acls\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-nix-path\fR\fR \fIvalue\fR
.IP
Append to the \f(CRnix-path\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-platforms\fR\fR \fIvalue\fR
.IP
Set the \f(CRextra-platforms\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-plugin-files\fR\fR \fIvalue\fR
.IP
Append to the \f(CRplugin-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-sandbox-paths\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsandbox-paths\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-secret-key-files\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsecret-key-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-substituters\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsubstituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-system-features\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsystem-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-public-keys\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-public-keys\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-substituters\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-substituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-users\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--fallback\fR\fR
.IP
Enable the \f(CRfallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--filter-syscalls\fR\fR
.IP
Enable the \f(CRfilter-syscalls\fR setting.
.IP "\(bu" 3
\fB\f(CR--flake-registry\fR\fR \fIvalue\fR
.IP
Set the \f(CRflake-registry\fR setting.
.IP "\(bu" 3
\fB\f(CR--fsync-metadata\fR\fR
.IP
Enable the \f(CRfsync-metadata\fR setting.
.IP "\(bu" 3
\fB\f(CR--gc-reserved-space\fR\fR \fIvalue\fR
.IP
Set the \f(CRgc-reserved-space\fR setting.
.IP "\(bu" 3
\fB\f(CR--hashed-mirrors\fR\fR \fIvalue\fR
.IP
Set the \f(CRhashed-mirrors\fR setting.
.IP "\(bu" 3
\fB\f(CR--http-connections\fR\fR \fIvalue\fR
.IP
Set the \f(CRhttp-connections\fR setting.
.IP "\(bu" 3
\fB\f(CR--http2\fR\fR
.IP
Enable the \f(CRhttp2\fR setting.
.IP "\(bu" 3
\fB\f(CR--id-count\fR\fR \fIvalue\fR
.IP
Set the \f(CRid-count\fR setting.
.IP "\(bu" 3
\fB\f(CR--ignore-try\fR\fR
.IP
Enable the \f(CRignore-try\fR setting.
.IP "\(bu" 3
\fB\f(CR--ignored-acls\fR\fR \fIvalue\fR
.IP
Set the \f(CRignored-acls\fR setting.
.IP "\(bu" 3
\fB\f(CR--impersonate-linux-26\fR\fR
.IP
Enable the \f(CRimpersonate-linux-26\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-build-log\fR\fR
.IP
Enable the \f(CRkeep-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-derivations\fR\fR
.IP
Enable the \f(CRkeep-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-env-derivations\fR\fR
.IP
Enable the \f(CRkeep-env-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-failed\fR\fR
.IP
Enable the \f(CRkeep-failed\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-going\fR\fR
.IP
Enable the \f(CRkeep-going\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-outputs\fR\fR
.IP
Enable the \f(CRkeep-outputs\fR setting.
.IP "\(bu" 3
\fB\f(CR--log-lines\fR\fR \fIvalue\fR
.IP
Set the \f(CRlog-lines\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-build-log-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-build-log-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-free\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-free\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-jobs\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-jobs\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-silent-time\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-silent-time\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-substitution-jobs\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-substitution-jobs\fR setting.
.IP "\(bu" 3
\fB\f(CR--min-free\fR\fR \fIvalue\fR
.IP
Set the \f(CRmin-free\fR setting.
.IP "\(bu" 3
\fB\f(CR--min-free-check-interval\fR\fR \fIvalue\fR
.IP
Set the \f(CRmin-free-check-interval\fR setting.
.IP "\(bu" 3
\fB\f(CR--nar-buffer-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRnar-buffer-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--narinfo-cache-negative-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRnarinfo-cache-negative-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--narinfo-cache-positive-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRnarinfo-cache-positive-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--netrc-file\fR\fR \fIvalue\fR
.IP
Set the \f(CRnetrc-file\fR setting.
.IP "\(bu" 3
\fB\f(CR--nix-path\fR\fR \fIvalue\fR
.IP
Set the \f(CRnix-path\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-accept-flake-config\fR\fR
.IP
Disable the \f(CRaccept-flake-config\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-dirty\fR\fR
.IP
Disable the \f(CRallow-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-import-from-derivation\fR\fR
.IP
Disable the \f(CRallow-import-from-derivation\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-new-privileges\fR\fR
.IP
Disable the \f(CRallow-new-privileges\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-symlinked-store\fR\fR
.IP
Disable the \f(CRallow-symlinked-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-unsafe-native-code-during-evaluation\fR\fR
.IP
Disable the \f(CRallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-auto-allocate-uids\fR\fR
.IP
Disable the \f(CRauto-allocate-uids\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-auto-optimise-store\fR\fR
.IP
Disable the \f(CRauto-optimise-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-builders-use-substitutes\fR\fR
.IP
Disable the \f(CRbuilders-use-substitutes\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-compress-build-log\fR\fR
.IP
Disable the \f(CRcompress-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-eval-cache\fR\fR
.IP
Disable the \f(CReval-cache\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-fallback\fR\fR
.IP
Disable the \f(CRfallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-filter-syscalls\fR\fR
.IP
Disable the \f(CRfilter-syscalls\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-fsync-metadata\fR\fR
.IP
Disable the \f(CRfsync-metadata\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-http2\fR\fR
.IP
Disable the \f(CRhttp2\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-ignore-try\fR\fR
.IP
Disable the \f(CRignore-try\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-impersonate-linux-26\fR\fR
.IP
Disable the \f(CRimpersonate-linux-26\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-build-log\fR\fR
.IP
Disable the \f(CRkeep-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-derivations\fR\fR
.IP
Disable the \f(CRkeep-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-env-derivations\fR\fR
.IP
Disable the \f(CRkeep-env-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-failed\fR\fR
.IP
Disable the \f(CRkeep-failed\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-going\fR\fR
.IP
Disable the \f(CRkeep-going\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-outputs\fR\fR
.IP
Disable the \f(CRkeep-outputs\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-preallocate-contents\fR\fR
.IP
Disable the \f(CRpreallocate-contents\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-print-missing\fR\fR
.IP
Disable the \f(CRprint-missing\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-pure-eval\fR\fR
.IP
Disable the \f(CRpure-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-require-drop-supplementary-groups\fR\fR
.IP
Disable the \f(CRrequire-drop-supplementary-groups\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-require-sigs\fR\fR
.IP
Disable the \f(CRrequire-sigs\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-restrict-eval\fR\fR
.IP
Disable the \f(CRrestrict-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-run-diff-hook\fR\fR
.IP
Disable the \f(CRrun-diff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-sandbox\fR\fR
.IP
Disable sandboxing.
.IP "\(bu" 3
\fB\f(CR--no-sandbox-fallback\fR\fR
.IP
Disable the \f(CRsandbox-fallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-show-trace\fR\fR
.IP
Disable the \f(CRshow-trace\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-substitute\fR\fR
.IP
Disable the \f(CRsubstitute\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-sync-before-registering\fR\fR
.IP
Disable the \f(CRsync-before-registering\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-trace-function-calls\fR\fR
.IP
Disable the \f(CRtrace-function-calls\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-trace-verbose\fR\fR
.IP
Disable the \f(CRtrace-verbose\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-case-hack\fR\fR
.IP
Disable the \f(CRuse-case-hack\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-cgroups\fR\fR
.IP
Disable the \f(CRuse-cgroups\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-registries\fR\fR
.IP
Disable the \f(CRuse-registries\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-sqlite-wal\fR\fR
.IP
Disable the \f(CRuse-sqlite-wal\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-xdg-base-directories\fR\fR
.IP
Disable the \f(CRuse-xdg-base-directories\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-warn-dirty\fR\fR
.IP
Disable the \f(CRwarn-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--plugin-files\fR\fR \fIvalue\fR
.IP
Set the \f(CRplugin-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--post-build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRpost-build-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--pre-build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRpre-build-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--preallocate-contents\fR\fR
.IP
Enable the \f(CRpreallocate-contents\fR setting.
.IP "\(bu" 3
\fB\f(CR--print-missing\fR\fR
.IP
Enable the \f(CRprint-missing\fR setting.
.IP "\(bu" 3
\fB\f(CR--pure-eval\fR\fR
.IP
Enable the \f(CRpure-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--relaxed-sandbox\fR\fR
.IP
Enable sandboxing, but allow builds to disable it.
.IP "\(bu" 3
\fB\f(CR--require-drop-supplementary-groups\fR\fR
.IP
Enable the \f(CRrequire-drop-supplementary-groups\fR setting.
.IP "\(bu" 3
\fB\f(CR--require-sigs\fR\fR
.IP
Enable the \f(CRrequire-sigs\fR setting.
.IP "\(bu" 3
\fB\f(CR--restrict-eval\fR\fR
.IP
Enable the \f(CRrestrict-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--run-diff-hook\fR\fR
.IP
Enable the \f(CRrun-diff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox\fR\fR
.IP
Enable sandboxing.
.IP "\(bu" 3
\fB\f(CR--sandbox-build-dir\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-build-dir\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-dev-shm-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-dev-shm-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-fallback\fR\fR
.IP
Enable the \f(CRsandbox-fallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-paths\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-paths\fR setting.
.IP "\(bu" 3
\fB\f(CR--secret-key-files\fR\fR \fIvalue\fR
.IP
Set the \f(CRsecret-key-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--show-trace\fR\fR
.IP
Enable the \f(CRshow-trace\fR setting.
.IP "\(bu" 3
\fB\f(CR--ssl-cert-file\fR\fR \fIvalue\fR
.IP
Set the \f(CRssl-cert-file\fR setting.
.IP "\(bu" 3
\fB\f(CR--stalled-download-timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRstalled-download-timeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--start-id\fR\fR \fIvalue\fR
.IP
Set the \f(CRstart-id\fR setting.
.IP "\(bu" 3
\fB\f(CR--store\fR\fR \fIvalue\fR
.IP
Set the \f(CRstore\fR setting.
.IP "\(bu" 3
\fB\f(CR--substitute\fR\fR
.IP
Enable the \f(CRsubstitute\fR setting.
.IP "\(bu" 3
\fB\f(CR--substituters\fR\fR \fIvalue\fR
.IP
Set the \f(CRsubstituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--sync-before-registering\fR\fR
.IP
Enable the \f(CRsync-before-registering\fR setting.
.IP "\(bu" 3
\fB\f(CR--system\fR\fR \fIvalue\fR
.IP
Set the \f(CRsystem\fR setting.
.IP "\(bu" 3
\fB\f(CR--system-features\fR\fR \fIvalue\fR
.IP
Set the \f(CRsystem-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--tarball-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRtarball-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRtimeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--trace-function-calls\fR\fR
.IP
Enable the \f(CRtrace-function-calls\fR setting.
.IP "\(bu" 3
\fB\f(CR--trace-verbose\fR\fR
.IP
Enable the \f(CRtrace-verbose\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-public-keys\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-public-keys\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-substituters\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-substituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-users\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-case-hack\fR\fR
.IP
Enable the \f(CRuse-case-hack\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-cgroups\fR\fR
.IP
Enable the \f(CRuse-cgroups\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-registries\fR\fR
.IP
Enable the \f(CRuse-registries\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-sqlite-wal\fR\fR
.IP
Enable the \f(CRuse-sqlite-wal\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-xdg-base-directories\fR\fR
.IP
Enable the \f(CRuse-xdg-base-directories\fR setting.
.IP "\(bu" 3
\fB\f(CR--user-agent-suffix\fR\fR \fIvalue\fR
.IP
Set the \f(CRuser-agent-suffix\fR setting.
.IP "\(bu" 3
\fB\f(CR--warn-dirty\fR\fR
.IP
Enable the \f(CRwarn-dirty\fR setting.