.\" -*- mode: troff; coding: utf-8 -*-
.TH "nix3-store-make-content-addressed" "1" ""
.RS
.PP
\fBWarning\fR 
.br
This program is
\fB\fBexperimental\fR\fR
and its interface is subject to change.
.RE
.SH
Name
.LP
\f(CRnix store make-content-addressed\fR - rewrite a path or closure to content-addressed form
.SH
Synopsis
.LP
\f(CRnix store make-content-addressed\fR [\fIoption\fR\[u2026]] \fIinstallables\fR\[u2026]
.SH
Examples
.IP "\(bu" 3
Create a content-addressed representation of the closure of GNU Hello:
.LP
.EX
# nix store make-content-addressed nixpkgs#hello
…
rewrote '/nix/store/v5sv61sszx301i0x6xysaqzla09nksnd-hello-2.10' to '/nix/store/5skmmcb9svys5lj3kbsrjg7vf2irid63-hello-2.10'
.EE
.IP
Since the resulting paths are content-addressed, they are always
trusted and don\(cqt need signatures to copied to another store:
.LP
.EX
# nix copy --to /tmp/nix --trusted-public-keys '' /nix/store/5skmmcb9svys5lj3kbsrjg7vf2irid63-hello-2.10
.EE
.IP
By contrast, the original closure is input-addressed, so it does
need signatures to be trusted:
.LP
.EX
# nix copy --to /tmp/nix --trusted-public-keys '' nixpkgs#hello
cannot add path '/nix/store/zy9wbxwcygrwnh8n2w9qbbcr6zk87m26-libunistring-0.9.10' because it lacks a signature by a trusted key
.EE
.IP "\(bu" 3
Create a content-addressed representation of the current NixOS
system closure:
.LP
.EX
# nix store make-content-addressed /run/current-system
.EE
.SH
Description
.LP
This command converts the closure of the store paths specified by
\fB\fIinstallables\fR\fR to content-addressed form.
.PP
Nix store paths are usually
\fIinput-addressed\fR, meaning that the hash part of the store path is
computed from the contents of the derivation (i.e., the build-time
dependency graph). Input-addressed paths need to be signed by a
trusted key if you want to import them into a store, because we need
to trust that the contents of the path were actually built by the
derivation.
.PP
By contrast, in a \fIcontent-addressed\fR path, the hash part is computed
from the contents of the path. This allows the contents of the path to
be verified without any additional information such as
signatures. This means that a command like
.LP
.EX
# nix store build /nix/store/5skmmcb9svys5lj3kbsrjg7vf2irid63-hello-2.10 \e
    --substituters https://my-cache.example.org
.EE
.PP
will succeed even if the binary cache \f(CRhttps://my-cache.example.org\fR
doesn\(cqt present any signatures.
.SH
Options
.IP "\(bu" 3
\fB\f(CR--from\fR\fR \fIstore-uri\fR
.IP
URL of the source Nix store.
.IP "\(bu" 3
\fB\f(CR--json\fR\fR
.IP
Produce output in JSON format, suitable for consumption by another program.
.IP "\(bu" 3
\fB\f(CR--stdin\fR\fR
.IP
Read installables from the standard input. No default installable applied.
.IP "\(bu" 3
\fB\f(CR--to\fR\fR \fIstore-uri\fR
.IP
URL of the destination Nix store.
.LP
\fBCommon evaluation options:\fR
.IP "\(bu" 3
\fB\f(CR--arg\fR\fR \fIname\fR \fIexpr\fR
.IP
Pass the value \fIexpr\fR as the argument \fIname\fR to Nix functions.
.IP "\(bu" 3
\fB\f(CR--argstr\fR\fR \fIname\fR \fIstring\fR
.IP
Pass the string \fIstring\fR as the argument \fIname\fR to Nix functions.
.IP "\(bu" 3
\fB\f(CR--debugger\fR\fR
.IP
Start an interactive environment if evaluation fails.
.IP "\(bu" 3
\fB\f(CR--eval-store\fR\fR \fIstore-url\fR
.IP
The \fBURL of the Nix store\fR
to use for evaluation, i.e. to store derivations (\f(CR.drv\fR files) and inputs referenced by them.
.IP "\(bu" 3
\fB\f(CR--impure\fR\fR
.IP
Allow access to mutable paths and repositories.
.IP "\(bu" 3
\fB\f(CR--include\fR\fR / \f(CR-I\fR \fIpath\fR
.IP
Add \fIpath\fR to the Nix search path. The Nix search path is
initialized from the colon-separated \fB\f(CRNIX_PATH\fR\fR environment
variable, and is used to look up the location of Nix expressions using \fBpaths\fR enclosed in angle
brackets (i.e., \f(CR<nixpkgs>\fR).
.IP
For instance, passing
.LP
.EX
-I /home/eelco/Dev
-I /etc/nixos
.EE
.IP
will cause Nix to look for paths relative to \f(CR/home/eelco/Dev\fR and
\f(CR/etc/nixos\fR, in that order. This is equivalent to setting the
\f(CRNIX_PATH\fR environment variable to
.LP
.EX
/home/eelco/Dev:/etc/nixos
.EE
.IP
It is also possible to match paths against a prefix. For example,
passing
.LP
.EX
-I nixpkgs=/home/eelco/Dev/nixpkgs-branch
-I /etc/nixos
.EE
.IP
will cause Nix to search for \f(CR<nixpkgs/path>\fR in
\f(CR/home/eelco/Dev/nixpkgs-branch/path\fR and \f(CR/etc/nixos/nixpkgs/path\fR.
.IP
If a path in the Nix search path starts with \f(CRhttp://\fR or \f(CRhttps://\fR,
it is interpreted as the URL of a tarball that will be downloaded and
unpacked to a temporary location. The tarball must consist of a single
top-level directory. For example, passing
.LP
.EX
-I nixpkgs=https://github.com/NixOS/nixpkgs/archive/master.tar.gz
.EE
.IP
tells Nix to download and use the current contents of the \f(CRmaster\fR
branch in the \f(CRnixpkgs\fR repository.
.IP
The URLs of the tarballs from the official \f(CRnixos.org\fR channels
(see \fBthe manual page for \f(CRnix-channel\fR\fR) can be
abbreviated as \f(CRchannel:<channel-name>\fR. For instance, the
following two flags are equivalent:
.LP
.EX
-I nixpkgs=channel:nixos-21.05
-I nixpkgs=https://nixos.org/channels/nixos-21.05/nixexprs.tar.xz
.EE
.IP
You can also fetch source trees using \fBflake URLs\fR and add them to the
search path. For instance,
.LP
.EX
-I nixpkgs=flake:nixpkgs
.EE
.IP
specifies that the prefix \f(CRnixpkgs\fR shall refer to the source tree
downloaded from the \f(CRnixpkgs\fR entry in the flake registry. Similarly,
.LP
.EX
-I nixpkgs=flake:github:NixOS/nixpkgs/nixos-22.05
.EE
.IP
makes \f(CR<nixpkgs>\fR refer to a particular branch of the
\f(CRNixOS/nixpkgs\fR repository on GitHub.
.IP "\(bu" 3
\fB\f(CR--override-flake\fR\fR \fIoriginal-ref\fR \fIresolved-ref\fR
.IP
Override the flake registries, redirecting \fIoriginal-ref\fR to \fIresolved-ref\fR.
.LP
\fBCommon flake-related options:\fR
.IP "\(bu" 3
\fB\f(CR--commit-lock-file\fR\fR
.IP
Commit changes to the flake\(cqs lock file.
.IP "\(bu" 3
\fB\f(CR--inputs-from\fR\fR \fIflake-url\fR
.IP
Use the inputs of the specified flake as registry entries.
.IP "\(bu" 3
\fB\f(CR--no-registries\fR\fR
.IP
Don\(cqt allow lookups in the flake registries. This option is deprecated; use \f(CR--no-use-registries\fR.
.IP "\(bu" 3
\fB\f(CR--no-update-lock-file\fR\fR
.IP
Do not allow any updates to the flake\(cqs lock file.
.IP "\(bu" 3
\fB\f(CR--no-write-lock-file\fR\fR
.IP
Do not write the flake\(cqs newly generated lock file.
.IP "\(bu" 3
\fB\f(CR--output-lock-file\fR\fR \fIflake-lock-path\fR
.IP
Write the given lock file instead of \f(CRflake.lock\fR within the top-level flake.
.IP "\(bu" 3
\fB\f(CR--override-input\fR\fR \fIinput-path\fR \fIflake-url\fR
.IP
Override a specific flake input (e.g. \f(CRdwarffs/nixpkgs\fR). This implies \f(CR--no-write-lock-file\fR.
.IP "\(bu" 3
\fB\f(CR--recreate-lock-file\fR\fR
.IP
Recreate the flake\(cqs lock file from scratch.
.IP "\(bu" 3
\fB\f(CR--reference-lock-file\fR\fR \fIflake-lock-path\fR
.IP
Read the given lock file instead of \f(CRflake.lock\fR within the top-level flake.
.IP "\(bu" 3
\fB\f(CR--update-input\fR\fR \fIinput-path\fR
.IP
Update a specific flake input (ignoring its previous entry in the lock file).
.LP
\fBLogging-related options:\fR
.IP "\(bu" 3
\fB\f(CR--debug\fR\fR
.IP
Set the logging verbosity level to \(oqdebug\(cq.
.IP "\(bu" 3
\fB\f(CR--log-format\fR\fR \fIformat\fR
.IP
Set the format of log output; one of \f(CRraw\fR, \f(CRinternal-json\fR, \f(CRbar\fR or \f(CRbar-with-logs\fR.
.IP "\(bu" 3
\fB\f(CR--print-build-logs\fR\fR / \f(CR-L\fR
.IP
Print full build logs on standard error.
.IP "\(bu" 3
\fB\f(CR--quiet\fR\fR
.IP
Decrease the logging verbosity level.
.IP "\(bu" 3
\fB\f(CR--verbose\fR\fR / \f(CR-v\fR
.IP
Increase the logging verbosity level.
.LP
\fBMiscellaneous global options:\fR
.IP "\(bu" 3
\fB\f(CR--help\fR\fR
.IP
Show usage information.
.IP "\(bu" 3
\fB\f(CR--offline\fR\fR
.IP
Disable substituters and consider all previously downloaded files up-to-date.
.IP "\(bu" 3
\fB\f(CR--option\fR\fR \fIname\fR \fIvalue\fR
.IP
Set the Nix configuration setting \fIname\fR to \fIvalue\fR (overriding \f(CRnix.conf\fR).
.IP "\(bu" 3
\fB\f(CR--refresh\fR\fR
.IP
Consider all previously downloaded files out-of-date.
.IP "\(bu" 3
\fB\f(CR--repair\fR\fR
.IP
During evaluation, rewrite missing or corrupted files in the Nix store. During building, rebuild missing or corrupted store paths.
.IP "\(bu" 3
\fB\f(CR--version\fR\fR
.IP
Show version information.
.LP
\fBOptions that change the interpretation of \fBinstallables\fB:\fR
.IP "\(bu" 3
\fB\f(CR--all\fR\fR
.IP
Apply the operation to every store path.
.IP "\(bu" 3
\fB\f(CR--derivation\fR\fR
.IP
Operate on the \fBstore derivation\fR rather than its outputs.
.IP "\(bu" 3
\fB\f(CR--expr\fR\fR \fIexpr\fR
.IP
Interpret \fB\fIinstallables\fR\fR as attribute paths relative to the Nix expression \fIexpr\fR.
.IP "\(bu" 3
\fB\f(CR--file\fR\fR / \f(CR-f\fR \fIfile\fR
.IP
Interpret \fB\fIinstallables\fR\fR as attribute paths relative to the Nix expression stored in \fIfile\fR. If \fIfile\fR is the character -, then a Nix expression will be read from standard input. Implies \f(CR--impure\fR.
.IP "\(bu" 3
\fB\f(CR--recursive\fR\fR / \f(CR-r\fR
.IP
Apply operation to closure of the specified paths.
.LP
\fBOptions to override configuration settings:\fR
.IP "\(bu" 3
\fB\f(CR--accept-flake-config\fR\fR
.IP
Enable the \f(CRaccept-flake-config\fR setting.
.IP "\(bu" 3
\fB\f(CR--access-tokens\fR\fR \fIvalue\fR
.IP
Set the \f(CRaccess-tokens\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-dirty\fR\fR
.IP
Enable the \f(CRallow-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-import-from-derivation\fR\fR
.IP
Enable the \f(CRallow-import-from-derivation\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-new-privileges\fR\fR
.IP
Enable the \f(CRallow-new-privileges\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-symlinked-store\fR\fR
.IP
Enable the \f(CRallow-symlinked-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--allow-unsafe-native-code-during-evaluation\fR\fR
.IP
Enable the \f(CRallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-impure-host-deps\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-impure-host-deps\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-uris\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-uris\fR setting.
.IP "\(bu" 3
\fB\f(CR--allowed-users\fR\fR \fIvalue\fR
.IP
Set the \f(CRallowed-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--auto-allocate-uids\fR\fR
.IP
Enable the \f(CRauto-allocate-uids\fR setting.
.IP "\(bu" 3
\fB\f(CR--auto-optimise-store\fR\fR
.IP
Enable the \f(CRauto-optimise-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt-prefix\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt-prefix\fR setting.
.IP "\(bu" 3
\fB\f(CR--bash-prompt-suffix\fR\fR \fIvalue\fR
.IP
Set the \f(CRbash-prompt-suffix\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-poll-interval\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-poll-interval\fR setting.
.IP "\(bu" 3
\fB\f(CR--build-users-group\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuild-users-group\fR setting.
.IP "\(bu" 3
\fB\f(CR--builders\fR\fR \fIvalue\fR
.IP
Set the \f(CRbuilders\fR setting.
.IP "\(bu" 3
\fB\f(CR--builders-use-substitutes\fR\fR
.IP
Enable the \f(CRbuilders-use-substitutes\fR setting.
.IP "\(bu" 3
\fB\f(CR--commit-lockfile-summary\fR\fR \fIvalue\fR
.IP
Set the \f(CRcommit-lockfile-summary\fR setting.
.IP "\(bu" 3
\fB\f(CR--compress-build-log\fR\fR
.IP
Enable the \f(CRcompress-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--connect-timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRconnect-timeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--cores\fR\fR \fIvalue\fR
.IP
Set the \f(CRcores\fR setting.
.IP "\(bu" 3
\fB\f(CR--diff-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRdiff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--download-attempts\fR\fR \fIvalue\fR
.IP
Set the \f(CRdownload-attempts\fR setting.
.IP "\(bu" 3
\fB\f(CR--download-speed\fR\fR \fIvalue\fR
.IP
Set the \f(CRdownload-speed\fR setting.
.IP "\(bu" 3
\fB\f(CR--eval-cache\fR\fR
.IP
Enable the \f(CReval-cache\fR setting.
.IP "\(bu" 3
\fB\f(CR--experimental-features\fR\fR \fIvalue\fR
.IP
Set the \f(CRexperimental-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-access-tokens\fR\fR \fIvalue\fR
.IP
Append to the \f(CRaccess-tokens\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-impure-host-deps\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-impure-host-deps\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-uris\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-uris\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-allowed-users\fR\fR \fIvalue\fR
.IP
Append to the \f(CRallowed-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-build-hook\fR\fR \fIvalue\fR
.IP
Append to the \f(CRbuild-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-experimental-features\fR\fR \fIvalue\fR
.IP
Append to the \f(CRexperimental-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-extra-platforms\fR\fR \fIvalue\fR
.IP
Append to the \f(CRextra-platforms\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-hashed-mirrors\fR\fR \fIvalue\fR
.IP
Append to the \f(CRhashed-mirrors\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-ignored-acls\fR\fR \fIvalue\fR
.IP
Append to the \f(CRignored-acls\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-nix-path\fR\fR \fIvalue\fR
.IP
Append to the \f(CRnix-path\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-platforms\fR\fR \fIvalue\fR
.IP
Set the \f(CRextra-platforms\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-plugin-files\fR\fR \fIvalue\fR
.IP
Append to the \f(CRplugin-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-sandbox-paths\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsandbox-paths\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-secret-key-files\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsecret-key-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-substituters\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsubstituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-system-features\fR\fR \fIvalue\fR
.IP
Append to the \f(CRsystem-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-public-keys\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-public-keys\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-substituters\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-substituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--extra-trusted-users\fR\fR \fIvalue\fR
.IP
Append to the \f(CRtrusted-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--fallback\fR\fR
.IP
Enable the \f(CRfallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--filter-syscalls\fR\fR
.IP
Enable the \f(CRfilter-syscalls\fR setting.
.IP "\(bu" 3
\fB\f(CR--flake-registry\fR\fR \fIvalue\fR
.IP
Set the \f(CRflake-registry\fR setting.
.IP "\(bu" 3
\fB\f(CR--fsync-metadata\fR\fR
.IP
Enable the \f(CRfsync-metadata\fR setting.
.IP "\(bu" 3
\fB\f(CR--gc-reserved-space\fR\fR \fIvalue\fR
.IP
Set the \f(CRgc-reserved-space\fR setting.
.IP "\(bu" 3
\fB\f(CR--hashed-mirrors\fR\fR \fIvalue\fR
.IP
Set the \f(CRhashed-mirrors\fR setting.
.IP "\(bu" 3
\fB\f(CR--http-connections\fR\fR \fIvalue\fR
.IP
Set the \f(CRhttp-connections\fR setting.
.IP "\(bu" 3
\fB\f(CR--http2\fR\fR
.IP
Enable the \f(CRhttp2\fR setting.
.IP "\(bu" 3
\fB\f(CR--id-count\fR\fR \fIvalue\fR
.IP
Set the \f(CRid-count\fR setting.
.IP "\(bu" 3
\fB\f(CR--ignore-try\fR\fR
.IP
Enable the \f(CRignore-try\fR setting.
.IP "\(bu" 3
\fB\f(CR--ignored-acls\fR\fR \fIvalue\fR
.IP
Set the \f(CRignored-acls\fR setting.
.IP "\(bu" 3
\fB\f(CR--impersonate-linux-26\fR\fR
.IP
Enable the \f(CRimpersonate-linux-26\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-build-log\fR\fR
.IP
Enable the \f(CRkeep-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-derivations\fR\fR
.IP
Enable the \f(CRkeep-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-env-derivations\fR\fR
.IP
Enable the \f(CRkeep-env-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-failed\fR\fR
.IP
Enable the \f(CRkeep-failed\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-going\fR\fR
.IP
Enable the \f(CRkeep-going\fR setting.
.IP "\(bu" 3
\fB\f(CR--keep-outputs\fR\fR
.IP
Enable the \f(CRkeep-outputs\fR setting.
.IP "\(bu" 3
\fB\f(CR--log-lines\fR\fR \fIvalue\fR
.IP
Set the \f(CRlog-lines\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-build-log-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-build-log-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-free\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-free\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-jobs\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-jobs\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-silent-time\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-silent-time\fR setting.
.IP "\(bu" 3
\fB\f(CR--max-substitution-jobs\fR\fR \fIvalue\fR
.IP
Set the \f(CRmax-substitution-jobs\fR setting.
.IP "\(bu" 3
\fB\f(CR--min-free\fR\fR \fIvalue\fR
.IP
Set the \f(CRmin-free\fR setting.
.IP "\(bu" 3
\fB\f(CR--min-free-check-interval\fR\fR \fIvalue\fR
.IP
Set the \f(CRmin-free-check-interval\fR setting.
.IP "\(bu" 3
\fB\f(CR--nar-buffer-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRnar-buffer-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--narinfo-cache-negative-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRnarinfo-cache-negative-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--narinfo-cache-positive-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRnarinfo-cache-positive-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--netrc-file\fR\fR \fIvalue\fR
.IP
Set the \f(CRnetrc-file\fR setting.
.IP "\(bu" 3
\fB\f(CR--nix-path\fR\fR \fIvalue\fR
.IP
Set the \f(CRnix-path\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-accept-flake-config\fR\fR
.IP
Disable the \f(CRaccept-flake-config\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-dirty\fR\fR
.IP
Disable the \f(CRallow-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-import-from-derivation\fR\fR
.IP
Disable the \f(CRallow-import-from-derivation\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-new-privileges\fR\fR
.IP
Disable the \f(CRallow-new-privileges\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-symlinked-store\fR\fR
.IP
Disable the \f(CRallow-symlinked-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-allow-unsafe-native-code-during-evaluation\fR\fR
.IP
Disable the \f(CRallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-auto-allocate-uids\fR\fR
.IP
Disable the \f(CRauto-allocate-uids\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-auto-optimise-store\fR\fR
.IP
Disable the \f(CRauto-optimise-store\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-builders-use-substitutes\fR\fR
.IP
Disable the \f(CRbuilders-use-substitutes\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-compress-build-log\fR\fR
.IP
Disable the \f(CRcompress-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-eval-cache\fR\fR
.IP
Disable the \f(CReval-cache\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-fallback\fR\fR
.IP
Disable the \f(CRfallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-filter-syscalls\fR\fR
.IP
Disable the \f(CRfilter-syscalls\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-fsync-metadata\fR\fR
.IP
Disable the \f(CRfsync-metadata\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-http2\fR\fR
.IP
Disable the \f(CRhttp2\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-ignore-try\fR\fR
.IP
Disable the \f(CRignore-try\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-impersonate-linux-26\fR\fR
.IP
Disable the \f(CRimpersonate-linux-26\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-build-log\fR\fR
.IP
Disable the \f(CRkeep-build-log\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-derivations\fR\fR
.IP
Disable the \f(CRkeep-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-env-derivations\fR\fR
.IP
Disable the \f(CRkeep-env-derivations\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-failed\fR\fR
.IP
Disable the \f(CRkeep-failed\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-going\fR\fR
.IP
Disable the \f(CRkeep-going\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-keep-outputs\fR\fR
.IP
Disable the \f(CRkeep-outputs\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-preallocate-contents\fR\fR
.IP
Disable the \f(CRpreallocate-contents\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-print-missing\fR\fR
.IP
Disable the \f(CRprint-missing\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-pure-eval\fR\fR
.IP
Disable the \f(CRpure-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-require-drop-supplementary-groups\fR\fR
.IP
Disable the \f(CRrequire-drop-supplementary-groups\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-require-sigs\fR\fR
.IP
Disable the \f(CRrequire-sigs\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-restrict-eval\fR\fR
.IP
Disable the \f(CRrestrict-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-run-diff-hook\fR\fR
.IP
Disable the \f(CRrun-diff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-sandbox\fR\fR
.IP
Disable sandboxing.
.IP "\(bu" 3
\fB\f(CR--no-sandbox-fallback\fR\fR
.IP
Disable the \f(CRsandbox-fallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-show-trace\fR\fR
.IP
Disable the \f(CRshow-trace\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-substitute\fR\fR
.IP
Disable the \f(CRsubstitute\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-sync-before-registering\fR\fR
.IP
Disable the \f(CRsync-before-registering\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-trace-function-calls\fR\fR
.IP
Disable the \f(CRtrace-function-calls\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-trace-verbose\fR\fR
.IP
Disable the \f(CRtrace-verbose\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-case-hack\fR\fR
.IP
Disable the \f(CRuse-case-hack\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-cgroups\fR\fR
.IP
Disable the \f(CRuse-cgroups\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-registries\fR\fR
.IP
Disable the \f(CRuse-registries\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-sqlite-wal\fR\fR
.IP
Disable the \f(CRuse-sqlite-wal\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-use-xdg-base-directories\fR\fR
.IP
Disable the \f(CRuse-xdg-base-directories\fR setting.
.IP "\(bu" 3
\fB\f(CR--no-warn-dirty\fR\fR
.IP
Disable the \f(CRwarn-dirty\fR setting.
.IP "\(bu" 3
\fB\f(CR--plugin-files\fR\fR \fIvalue\fR
.IP
Set the \f(CRplugin-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--post-build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRpost-build-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--pre-build-hook\fR\fR \fIvalue\fR
.IP
Set the \f(CRpre-build-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--preallocate-contents\fR\fR
.IP
Enable the \f(CRpreallocate-contents\fR setting.
.IP "\(bu" 3
\fB\f(CR--print-missing\fR\fR
.IP
Enable the \f(CRprint-missing\fR setting.
.IP "\(bu" 3
\fB\f(CR--pure-eval\fR\fR
.IP
Enable the \f(CRpure-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--relaxed-sandbox\fR\fR
.IP
Enable sandboxing, but allow builds to disable it.
.IP "\(bu" 3
\fB\f(CR--require-drop-supplementary-groups\fR\fR
.IP
Enable the \f(CRrequire-drop-supplementary-groups\fR setting.
.IP "\(bu" 3
\fB\f(CR--require-sigs\fR\fR
.IP
Enable the \f(CRrequire-sigs\fR setting.
.IP "\(bu" 3
\fB\f(CR--restrict-eval\fR\fR
.IP
Enable the \f(CRrestrict-eval\fR setting.
.IP "\(bu" 3
\fB\f(CR--run-diff-hook\fR\fR
.IP
Enable the \f(CRrun-diff-hook\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox\fR\fR
.IP
Enable sandboxing.
.IP "\(bu" 3
\fB\f(CR--sandbox-build-dir\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-build-dir\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-dev-shm-size\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-dev-shm-size\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-fallback\fR\fR
.IP
Enable the \f(CRsandbox-fallback\fR setting.
.IP "\(bu" 3
\fB\f(CR--sandbox-paths\fR\fR \fIvalue\fR
.IP
Set the \f(CRsandbox-paths\fR setting.
.IP "\(bu" 3
\fB\f(CR--secret-key-files\fR\fR \fIvalue\fR
.IP
Set the \f(CRsecret-key-files\fR setting.
.IP "\(bu" 3
\fB\f(CR--show-trace\fR\fR
.IP
Enable the \f(CRshow-trace\fR setting.
.IP "\(bu" 3
\fB\f(CR--ssl-cert-file\fR\fR \fIvalue\fR
.IP
Set the \f(CRssl-cert-file\fR setting.
.IP "\(bu" 3
\fB\f(CR--stalled-download-timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRstalled-download-timeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--start-id\fR\fR \fIvalue\fR
.IP
Set the \f(CRstart-id\fR setting.
.IP "\(bu" 3
\fB\f(CR--store\fR\fR \fIvalue\fR
.IP
Set the \f(CRstore\fR setting.
.IP "\(bu" 3
\fB\f(CR--substitute\fR\fR
.IP
Enable the \f(CRsubstitute\fR setting.
.IP "\(bu" 3
\fB\f(CR--substituters\fR\fR \fIvalue\fR
.IP
Set the \f(CRsubstituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--sync-before-registering\fR\fR
.IP
Enable the \f(CRsync-before-registering\fR setting.
.IP "\(bu" 3
\fB\f(CR--system\fR\fR \fIvalue\fR
.IP
Set the \f(CRsystem\fR setting.
.IP "\(bu" 3
\fB\f(CR--system-features\fR\fR \fIvalue\fR
.IP
Set the \f(CRsystem-features\fR setting.
.IP "\(bu" 3
\fB\f(CR--tarball-ttl\fR\fR \fIvalue\fR
.IP
Set the \f(CRtarball-ttl\fR setting.
.IP "\(bu" 3
\fB\f(CR--timeout\fR\fR \fIvalue\fR
.IP
Set the \f(CRtimeout\fR setting.
.IP "\(bu" 3
\fB\f(CR--trace-function-calls\fR\fR
.IP
Enable the \f(CRtrace-function-calls\fR setting.
.IP "\(bu" 3
\fB\f(CR--trace-verbose\fR\fR
.IP
Enable the \f(CRtrace-verbose\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-public-keys\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-public-keys\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-substituters\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-substituters\fR setting.
.IP "\(bu" 3
\fB\f(CR--trusted-users\fR\fR \fIvalue\fR
.IP
Set the \f(CRtrusted-users\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-case-hack\fR\fR
.IP
Enable the \f(CRuse-case-hack\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-cgroups\fR\fR
.IP
Enable the \f(CRuse-cgroups\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-registries\fR\fR
.IP
Enable the \f(CRuse-registries\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-sqlite-wal\fR\fR
.IP
Enable the \f(CRuse-sqlite-wal\fR setting.
.IP "\(bu" 3
\fB\f(CR--use-xdg-base-directories\fR\fR
.IP
Enable the \f(CRuse-xdg-base-directories\fR setting.
.IP "\(bu" 3
\fB\f(CR--user-agent-suffix\fR\fR \fIvalue\fR
.IP
Set the \f(CRuser-agent-suffix\fR setting.
.IP "\(bu" 3
\fB\f(CR--warn-dirty\fR\fR
.IP
Enable the \f(CRwarn-dirty\fR setting.