зеркало из
				https://github.com/iharh/notes.git
				synced 2025-11-04 07:36:08 +02:00 
			
		
		
		
	
		
			
				
	
	
		
			594 строки
		
	
	
		
			19 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			594 строки
		
	
	
		
			19 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
# shellcheck shell=bash
 | 
						||
 | 
						||
if [ -x "/nix/store/561wgc73s0x1250hrgp7jm22hhv7yfln-bash-5.2-p15/bin/bash" ]; then export SHELL="/nix/store/561wgc73s0x1250hrgp7jm22hhv7yfln-bash-5.2-p15/bin/bash"; fi;
 | 
						||
 | 
						||
set -e
 | 
						||
set -o pipefail
 | 
						||
shopt -s inherit_errexit
 | 
						||
 | 
						||
export PATH=/nix/store/7w1s50i8yplw2gkpf9hpha6n9vci8g98-coreutils-9.1/bin:/nix/store/wrrsz1yq3dsbwlv239zcsifn30qvlhpp-gnused-4.9/bin:/nix/store/kj1hi99d4w5489y7nbikadadsvvkr87b-gnugrep-3.7/bin:$PATH
 | 
						||
 | 
						||
showSyntax() {
 | 
						||
    exec man nixos-rebuild
 | 
						||
    exit 1
 | 
						||
}
 | 
						||
 | 
						||
 | 
						||
# Parse the command line.
 | 
						||
origArgs=("$@")
 | 
						||
copyClosureFlags=()
 | 
						||
extraBuildFlags=()
 | 
						||
lockFlags=()
 | 
						||
flakeFlags=(--extra-experimental-features 'nix-command flakes')
 | 
						||
action=
 | 
						||
buildNix=1
 | 
						||
fast=
 | 
						||
rollback=
 | 
						||
upgrade=
 | 
						||
upgrade_all=
 | 
						||
profile=/nix/var/nix/profiles/system
 | 
						||
specialisation=
 | 
						||
buildHost=
 | 
						||
targetHost=
 | 
						||
remoteSudo=
 | 
						||
verboseScript=
 | 
						||
noFlake=
 | 
						||
# comma separated list of vars to preserve when using sudo
 | 
						||
preservedSudoVars=NIXOS_INSTALL_BOOTLOADER
 | 
						||
 | 
						||
# log the given argument to stderr
 | 
						||
log() {
 | 
						||
    echo "$@" >&2
 | 
						||
}
 | 
						||
 | 
						||
while [ "$#" -gt 0 ]; do
 | 
						||
    i="$1"; shift 1
 | 
						||
    case "$i" in
 | 
						||
      --help)
 | 
						||
        showSyntax
 | 
						||
        ;;
 | 
						||
      switch|boot|test|build|edit|dry-build|dry-run|dry-activate|build-vm|build-vm-with-bootloader)
 | 
						||
        if [ "$i" = dry-run ]; then i=dry-build; fi
 | 
						||
        # exactly one action mandatory, bail out if multiple are given
 | 
						||
        if [ -n "$action" ]; then showSyntax; fi
 | 
						||
        action="$i"
 | 
						||
        ;;
 | 
						||
      --install-grub)
 | 
						||
        log "$0: --install-grub deprecated, use --install-bootloader instead"
 | 
						||
        export NIXOS_INSTALL_BOOTLOADER=1
 | 
						||
        ;;
 | 
						||
      --install-bootloader)
 | 
						||
        export NIXOS_INSTALL_BOOTLOADER=1
 | 
						||
        ;;
 | 
						||
      --no-build-nix)
 | 
						||
        buildNix=
 | 
						||
        ;;
 | 
						||
      --rollback)
 | 
						||
        rollback=1
 | 
						||
        ;;
 | 
						||
      --upgrade)
 | 
						||
        upgrade=1
 | 
						||
        ;;
 | 
						||
      --upgrade-all)
 | 
						||
        upgrade=1
 | 
						||
        upgrade_all=1
 | 
						||
        ;;
 | 
						||
      --use-substitutes|-s)
 | 
						||
        copyClosureFlags+=("$i")
 | 
						||
        ;;
 | 
						||
      -I|--max-jobs|-j|--cores|--builders)
 | 
						||
        j="$1"; shift 1
 | 
						||
        extraBuildFlags+=("$i" "$j")
 | 
						||
        ;;
 | 
						||
      -j*|--quiet|--print-build-logs|-L|--no-build-output|-Q| --show-trace|--keep-going|-k|--keep-failed|-K|--fallback|--refresh|--repair|--impure|--offline|--no-net)
 | 
						||
        extraBuildFlags+=("$i")
 | 
						||
        ;;
 | 
						||
      --verbose|-v|-vv|-vvv|-vvvv|-vvvvv)
 | 
						||
        verboseScript="true"
 | 
						||
        extraBuildFlags+=("$i")
 | 
						||
        ;;
 | 
						||
      --option)
 | 
						||
        j="$1"; shift 1
 | 
						||
        k="$1"; shift 1
 | 
						||
        extraBuildFlags+=("$i" "$j" "$k")
 | 
						||
        ;;
 | 
						||
      --fast)
 | 
						||
        buildNix=
 | 
						||
        fast=1
 | 
						||
        ;;
 | 
						||
      --profile-name|-p)
 | 
						||
        if [ -z "$1" ]; then
 | 
						||
            log "$0: ‘--profile-name’ requires an argument"
 | 
						||
            exit 1
 | 
						||
        fi
 | 
						||
        if [ "$1" != system ]; then
 | 
						||
            profile="/nix/var/nix/profiles/system-profiles/$1"
 | 
						||
            mkdir -p -m 0755 "$(dirname "$profile")"
 | 
						||
        fi
 | 
						||
        shift 1
 | 
						||
        ;;
 | 
						||
      --specialisation|-c)
 | 
						||
        if [ -z "$1" ]; then
 | 
						||
            log "$0: ‘--specialisation’ requires an argument"
 | 
						||
            exit 1
 | 
						||
        fi
 | 
						||
        specialisation="$1"
 | 
						||
        shift 1
 | 
						||
        ;;
 | 
						||
      --build-host|h)
 | 
						||
        buildHost="$1"
 | 
						||
        shift 1
 | 
						||
        ;;
 | 
						||
      --target-host|t)
 | 
						||
        targetHost="$1"
 | 
						||
        shift 1
 | 
						||
        ;;
 | 
						||
      --use-remote-sudo)
 | 
						||
        remoteSudo=1
 | 
						||
        ;;
 | 
						||
      --flake)
 | 
						||
        flake="$1"
 | 
						||
        shift 1
 | 
						||
        ;;
 | 
						||
      --no-flake)
 | 
						||
        noFlake=1
 | 
						||
        ;;
 | 
						||
      --recreate-lock-file|--no-update-lock-file|--no-write-lock-file|--no-registries|--commit-lock-file)
 | 
						||
        lockFlags+=("$i")
 | 
						||
        ;;
 | 
						||
      --update-input)
 | 
						||
        j="$1"; shift 1
 | 
						||
        lockFlags+=("$i" "$j")
 | 
						||
        ;;
 | 
						||
      --override-input)
 | 
						||
        j="$1"; shift 1
 | 
						||
        k="$1"; shift 1
 | 
						||
        lockFlags+=("$i" "$j" "$k")
 | 
						||
        ;;
 | 
						||
      *)
 | 
						||
        log "$0: unknown option \`$i'"
 | 
						||
        exit 1
 | 
						||
        ;;
 | 
						||
    esac
 | 
						||
done
 | 
						||
 | 
						||
if [[ -n "$SUDO_USER" || -n $remoteSudo ]]; then
 | 
						||
    maybeSudo=(sudo --preserve-env="$preservedSudoVars" --)
 | 
						||
fi
 | 
						||
 | 
						||
# log the given argument to stderr if verbose mode is on
 | 
						||
logVerbose() {
 | 
						||
    if [ -n "$verboseScript" ]; then
 | 
						||
      echo "$@" >&2
 | 
						||
    fi
 | 
						||
}
 | 
						||
 | 
						||
# Run a command, logging it first if verbose mode is on
 | 
						||
runCmd() {
 | 
						||
    logVerbose "$" "$@"
 | 
						||
    "$@"
 | 
						||
}
 | 
						||
 | 
						||
buildHostCmd() {
 | 
						||
    if [ -z "$buildHost" ]; then
 | 
						||
        runCmd "$@"
 | 
						||
    elif [ -n "$remoteNix" ]; then
 | 
						||
        runCmd ssh $SSHOPTS "$buildHost" "${maybeSudo[@]}" env PATH="$remoteNix":'$PATH' "$@"
 | 
						||
    else
 | 
						||
        runCmd ssh $SSHOPTS "$buildHost" "${maybeSudo[@]}" "$@"
 | 
						||
    fi
 | 
						||
}
 | 
						||
 | 
						||
targetHostCmd() {
 | 
						||
    if [ -z "$targetHost" ]; then
 | 
						||
        runCmd "${maybeSudo[@]}" "$@"
 | 
						||
    else
 | 
						||
        runCmd ssh $SSHOPTS "$targetHost" "${maybeSudo[@]}" "$@"
 | 
						||
    fi
 | 
						||
}
 | 
						||
 | 
						||
copyToTarget() {
 | 
						||
    if ! [ "$targetHost" = "$buildHost" ]; then
 | 
						||
        if [ -z "$targetHost" ]; then
 | 
						||
            logVerbose "Running nix-copy-closure with these NIX_SSHOPTS: $SSHOPTS"
 | 
						||
            NIX_SSHOPTS=$SSHOPTS runCmd nix-copy-closure "${copyClosureFlags[@]}" --from "$buildHost" "$1"
 | 
						||
        elif [ -z "$buildHost" ]; then
 | 
						||
            logVerbose "Running nix-copy-closure with these NIX_SSHOPTS: $SSHOPTS"
 | 
						||
            NIX_SSHOPTS=$SSHOPTS runCmd nix-copy-closure "${copyClosureFlags[@]}" --to "$targetHost" "$1"
 | 
						||
        else
 | 
						||
            buildHostCmd nix-copy-closure "${copyClosureFlags[@]}" --to "$targetHost" "$1"
 | 
						||
        fi
 | 
						||
    fi
 | 
						||
}
 | 
						||
 | 
						||
nixBuild() {
 | 
						||
    logVerbose "Building in legacy (non-flake) mode."
 | 
						||
    if [ -z "$buildHost" ]; then
 | 
						||
        logVerbose "No --build-host given, running nix-build locally"
 | 
						||
        runCmd nix-build "$@"
 | 
						||
    else
 | 
						||
        logVerbose "buildHost set to \"$buildHost\", running nix-build remotely"
 | 
						||
        local instArgs=()
 | 
						||
        local buildArgs=()
 | 
						||
        local drv=
 | 
						||
 | 
						||
        while [ "$#" -gt 0 ]; do
 | 
						||
            local i="$1"; shift 1
 | 
						||
            case "$i" in
 | 
						||
              -o)
 | 
						||
                local out="$1"; shift 1
 | 
						||
                buildArgs+=("--add-root" "$out" "--indirect")
 | 
						||
                ;;
 | 
						||
              -A)
 | 
						||
                local j="$1"; shift 1
 | 
						||
                instArgs+=("$i" "$j")
 | 
						||
                ;;
 | 
						||
              -I) # We don't want this in buildArgs
 | 
						||
                shift 1
 | 
						||
                ;;
 | 
						||
              --no-out-link) # We don't want this in buildArgs
 | 
						||
                ;;
 | 
						||
              "<"*) # nix paths
 | 
						||
                instArgs+=("$i")
 | 
						||
                ;;
 | 
						||
              *)
 | 
						||
                buildArgs+=("$i")
 | 
						||
                ;;
 | 
						||
            esac
 | 
						||
        done
 | 
						||
 | 
						||
        drv="$(runCmd nix-instantiate "${instArgs[@]}" "${extraBuildFlags[@]}")"
 | 
						||
        if [ -a "$drv" ]; then
 | 
						||
            logVerbose "Running nix-copy-closure with these NIX_SSHOPTS: $SSHOPTS"
 | 
						||
            NIX_SSHOPTS=$SSHOPTS runCmd nix-copy-closure --to "$buildHost" "$drv"
 | 
						||
            buildHostCmd nix-store -r "$drv" "${buildArgs[@]}"
 | 
						||
        else
 | 
						||
            log "nix-instantiate failed"
 | 
						||
            exit 1
 | 
						||
        fi
 | 
						||
  fi
 | 
						||
}
 | 
						||
 | 
						||
nixFlakeBuild() {
 | 
						||
    logVerbose "Building in flake mode."
 | 
						||
    if [[ -z "$buildHost" && -z "$targetHost" && "$action" != switch && "$action" != boot && "$action" != test && "$action" != dry-activate ]]
 | 
						||
    then
 | 
						||
        runCmd nix "${flakeFlags[@]}" build "$@"
 | 
						||
        readlink -f ./result
 | 
						||
    elif [ -z "$buildHost" ]; then
 | 
						||
        runCmd nix "${flakeFlags[@]}" build "$@" --out-link "${tmpDir}/result"
 | 
						||
        readlink -f "${tmpDir}/result"
 | 
						||
    else
 | 
						||
        local attr="$1"
 | 
						||
        shift 1
 | 
						||
        local evalArgs=()
 | 
						||
        local buildArgs=()
 | 
						||
        local drv=
 | 
						||
 | 
						||
        while [ "$#" -gt 0 ]; do
 | 
						||
            local i="$1"; shift 1
 | 
						||
            case "$i" in
 | 
						||
              --recreate-lock-file|--no-update-lock-file|--no-write-lock-file|--no-registries|--commit-lock-file)
 | 
						||
                evalArgs+=("$i")
 | 
						||
                ;;
 | 
						||
              --update-input)
 | 
						||
                local j="$1"; shift 1
 | 
						||
                evalArgs+=("$i" "$j")
 | 
						||
                ;;
 | 
						||
              --override-input)
 | 
						||
                local j="$1"; shift 1
 | 
						||
                local k="$1"; shift 1
 | 
						||
                evalArgs+=("$i" "$j" "$k")
 | 
						||
                ;;
 | 
						||
              --impure) # We don't want this in buildArgs, it's only needed at evaluation time, and unsupported during realisation
 | 
						||
                ;;
 | 
						||
              *)
 | 
						||
                buildArgs+=("$i")
 | 
						||
                ;;
 | 
						||
            esac
 | 
						||
        done
 | 
						||
 | 
						||
        drv="$(runCm nix "${flakeFlags[@]}" eval --raw "${attr}.drvPath" "${evalArgs[@]}" "${extraBuildFlags[@]}")"
 | 
						||
        if [ -a "$drv" ]; then
 | 
						||
            logVerbose "Running nix with these NIX_SSHOPTS: $SSHOPTS"
 | 
						||
            NIX_SSHOPTS=$SSHOPTS runCmd nix "${flakeFlags[@]}" copy --derivation --to "ssh://$buildHost" "$drv"
 | 
						||
            buildHostCmd nix-store -r "$drv" "${buildArgs[@]}"
 | 
						||
        else
 | 
						||
            log "nix eval failed"
 | 
						||
            exit 1
 | 
						||
        fi
 | 
						||
    fi
 | 
						||
}
 | 
						||
 | 
						||
 | 
						||
if [ -z "$action" ]; then showSyntax; fi
 | 
						||
 | 
						||
# Only run shell scripts from the Nixpkgs tree if the action is
 | 
						||
# "switch", "boot", or "test". With other actions (such as "build"),
 | 
						||
# the user may reasonably expect that no code from the Nixpkgs tree is
 | 
						||
# executed, so it's safe to run nixos-rebuild against a potentially
 | 
						||
# untrusted tree.
 | 
						||
canRun=
 | 
						||
if [[ "$action" = switch || "$action" = boot || "$action" = test ]]; then
 | 
						||
    canRun=1
 | 
						||
fi
 | 
						||
 | 
						||
 | 
						||
# If ‘--upgrade’ or `--upgrade-all` is given,
 | 
						||
# run ‘nix-channel --update nixos’.
 | 
						||
if [[ -n $upgrade && -z $_NIXOS_REBUILD_REEXEC && -z $flake ]]; then
 | 
						||
    # If --upgrade-all is passed, or there are other channels that
 | 
						||
    # contain a file called ".update-on-nixos-rebuild", update them as
 | 
						||
    # well. Also upgrade the nixos channel.
 | 
						||
 | 
						||
    for channelpath in /nix/var/nix/profiles/per-user/root/channels/*; do
 | 
						||
        channel_name=$(basename "$channelpath")
 | 
						||
 | 
						||
        if [[ "$channel_name" == "nixos" ]]; then
 | 
						||
            runCmd nix-channel --update "$channel_name"
 | 
						||
        elif [ -e "$channelpath/.update-on-nixos-rebuild" ]; then
 | 
						||
            runCmd nix-channel --update "$channel_name"
 | 
						||
        elif [[ -n $upgrade_all ]] ; then
 | 
						||
            runCmd nix-channel --update "$channel_name"
 | 
						||
        fi
 | 
						||
    done
 | 
						||
fi
 | 
						||
 | 
						||
# Make sure that we use the Nix package we depend on, not something
 | 
						||
# else from the PATH for nix-{env,instantiate,build}.  This is
 | 
						||
# important, because NixOS defaults the architecture of the rebuilt
 | 
						||
# system to the architecture of the nix-* binaries used.  So if on an
 | 
						||
# amd64 system the user has an i686 Nix package in her PATH, then we
 | 
						||
# would silently downgrade the whole system to be i686 NixOS on the
 | 
						||
# next reboot.
 | 
						||
if [ -z "$_NIXOS_REBUILD_REEXEC" ]; then
 | 
						||
    export PATH=/nix/store/4d5r7ibhfyjajbr853b6hqy2x1nhn4pz-nix-2.13.2/bin:$PATH
 | 
						||
fi
 | 
						||
 | 
						||
# Use /etc/nixos/flake.nix if it exists. It can be a symlink to the
 | 
						||
# actual flake.
 | 
						||
if [[ -z $flake && -e /etc/nixos/flake.nix && -z $noFlake ]]; then
 | 
						||
    flake="$(dirname "$(readlink -f /etc/nixos/flake.nix)")"
 | 
						||
fi
 | 
						||
 | 
						||
# For convenience, use the hostname as the default configuration to
 | 
						||
# build from the flake.
 | 
						||
if [[ -n $flake ]]; then
 | 
						||
    if [[ $flake =~ ^(.*)\#([^\#\"]*)$ ]]; then
 | 
						||
       flake="${BASH_REMATCH[1]}"
 | 
						||
       flakeAttr="${BASH_REMATCH[2]}"
 | 
						||
    fi
 | 
						||
    if [[ -z $flakeAttr ]]; then
 | 
						||
        read -r hostname < /proc/sys/kernel/hostname
 | 
						||
        if [[ -z $hostname ]]; then
 | 
						||
            hostname=default
 | 
						||
        fi
 | 
						||
        flakeAttr="nixosConfigurations.\"$hostname\""
 | 
						||
    else
 | 
						||
        flakeAttr="nixosConfigurations.\"$flakeAttr\""
 | 
						||
    fi
 | 
						||
fi
 | 
						||
 | 
						||
if [[ ! -z "$specialisation" && ! "$action" = switch && ! "$action" = test ]]; then
 | 
						||
    log "error: ‘--specialisation’ can only be used with ‘switch’ and ‘test’"
 | 
						||
    exit 1
 | 
						||
fi
 | 
						||
 | 
						||
tmpDir=$(mktemp -t -d nixos-rebuild.XXXXXX)
 | 
						||
 | 
						||
cleanup() {
 | 
						||
    for ctrl in "$tmpDir"/ssh-*; do
 | 
						||
        ssh -o ControlPath="$ctrl" -O exit dummyhost 2>/dev/null || true
 | 
						||
    done
 | 
						||
    rm -rf "$tmpDir"
 | 
						||
}
 | 
						||
trap cleanup EXIT
 | 
						||
 | 
						||
 | 
						||
# Re-execute nixos-rebuild from the Nixpkgs tree.
 | 
						||
if [[ -z $_NIXOS_REBUILD_REEXEC && -n $canRun && -z $fast ]]; then
 | 
						||
    if [[ -z $flake ]]; then
 | 
						||
        if p=$(runCmd nix-build --no-out-link --expr 'with import <nixpkgs/nixos> {}; config.system.build.nixos-rebuild' "${extraBuildFlags[@]}"); then
 | 
						||
            SHOULD_REEXEC=1
 | 
						||
        fi
 | 
						||
    else
 | 
						||
        runCmd nix "${flakeFlags[@]}" build --out-link "${tmpDir}/nixos-rebuild" "$flake#$flakeAttr.config.system.build.nixos-rebuild" "${extraBuildFlags[@]}" "${lockFlags[@]}"
 | 
						||
        if p=$(readlink -e "${tmpDir}/nixos-rebuild"); then
 | 
						||
            SHOULD_REEXEC=1
 | 
						||
        fi
 | 
						||
    fi
 | 
						||
 | 
						||
    if [[ -n $SHOULD_REEXEC ]]; then
 | 
						||
        export _NIXOS_REBUILD_REEXEC=1
 | 
						||
        # Manually call cleanup as the EXIT trap is not triggered when using exec
 | 
						||
        cleanup
 | 
						||
        runCmd exec "$p/bin/nixos-rebuild" "${origArgs[@]}"
 | 
						||
        exit 1
 | 
						||
    fi
 | 
						||
fi
 | 
						||
 | 
						||
# Find configuration.nix and open editor instead of building.
 | 
						||
if [ "$action" = edit ]; then
 | 
						||
    if [[ -z $flake ]]; then
 | 
						||
        NIXOS_CONFIG=${NIXOS_CONFIG:-$(runCmd nix-instantiate --find-file nixos-config)}
 | 
						||
        if [[ -d $NIXOS_CONFIG ]]; then
 | 
						||
            NIXOS_CONFIG=$NIXOS_CONFIG/default.nix
 | 
						||
        fi
 | 
						||
        runCmd exec ${EDITOR:-nano} "$NIXOS_CONFIG"
 | 
						||
    else
 | 
						||
        runCmd exec nix "${flakeFlags[@]}" edit "${lockFlags[@]}" -- "$flake#$flakeAttr"
 | 
						||
    fi
 | 
						||
    exit 1
 | 
						||
fi
 | 
						||
 | 
						||
SSHOPTS="$NIX_SSHOPTS -o ControlMaster=auto -o ControlPath=$tmpDir/ssh-%n -o ControlPersist=60"
 | 
						||
 | 
						||
# First build Nix, since NixOS may require a newer version than the
 | 
						||
# current one.
 | 
						||
if [[ -n "$rollback" || "$action" = dry-build ]]; then
 | 
						||
    buildNix=
 | 
						||
fi
 | 
						||
 | 
						||
nixSystem() {
 | 
						||
    machine="$(uname -m)"
 | 
						||
    if [[ "$machine" =~ i.86 ]]; then
 | 
						||
        machine=i686
 | 
						||
    fi
 | 
						||
    echo $machine-linux
 | 
						||
}
 | 
						||
 | 
						||
prebuiltNix() {
 | 
						||
    machine="$1"
 | 
						||
    if [ "$machine" = x86_64 ]; then
 | 
						||
        echo /nix/store/lsr79q5xqd9dv97wn87x12kzax8s8i1s-nix-2.13.2
 | 
						||
    elif [[ "$machine" =~ i.86 ]]; then
 | 
						||
        echo /nix/store/wky9xjwiwzpifgk0s3f2nrg8nr67bi7x-nix-2.13.2
 | 
						||
    elif [[ "$machine" = aarch64 ]]; then
 | 
						||
        echo /nix/store/v8drr3x1ia6bdr8y4vl79mlz61xynrpm-nix-2.13.2
 | 
						||
    else
 | 
						||
        log "$0: unsupported platform"
 | 
						||
        exit 1
 | 
						||
    fi
 | 
						||
}
 | 
						||
 | 
						||
if [[ -n $buildNix && -z $flake ]]; then
 | 
						||
    log "building Nix..."
 | 
						||
    nixDrv=
 | 
						||
    if ! nixDrv="$(runCmd nix-instantiate '<nixpkgs/nixos>' --add-root "$tmpDir/nix.drv" --indirect -A config.nix.package.out "${extraBuildFlags[@]}")"; then
 | 
						||
        if ! nixDrv="$(runCmd nix-instantiate '<nixpkgs>' --add-root "$tmpDir/nix.drv" --indirect -A nix "${extraBuildFlags[@]}")"; then
 | 
						||
            if ! nixStorePath="$(runCmd nix-instantiate --eval '<nixpkgs/nixos/modules/installer/tools/nix-fallback-paths.nix>' -A "$(nixSystem)" | sed -e 's/^"//' -e 's/"$//')"; then
 | 
						||
                nixStorePath="$(prebuiltNix "$(uname -m)")"
 | 
						||
            fi
 | 
						||
            if ! runCmd nix-store -r "$nixStorePath" --add-root "${tmpDir}/nix" --indirect \
 | 
						||
                --option extra-binary-caches https://cache.nixos.org/; then
 | 
						||
                log "warning: don't know how to get latest Nix"
 | 
						||
            fi
 | 
						||
            # Older version of nix-store -r don't support --add-root.
 | 
						||
            [ -e "$tmpDir/nix" ] || ln -sf "$nixStorePath" "$tmpDir/nix"
 | 
						||
            if [ -n "$buildHost" ]; then
 | 
						||
                remoteNixStorePath="$(runCmd prebuiltNix "$(buildHostCmd uname -m)")"
 | 
						||
                remoteNix="$remoteNixStorePath/bin"
 | 
						||
                if ! buildHostCmd nix-store -r "$remoteNixStorePath" \
 | 
						||
                  --option extra-binary-caches https://cache.nixos.org/ >/dev/null; then
 | 
						||
                    remoteNix=
 | 
						||
                    log "warning: don't know how to get latest Nix"
 | 
						||
                fi
 | 
						||
            fi
 | 
						||
        fi
 | 
						||
    fi
 | 
						||
    if [ -a "$nixDrv" ]; then
 | 
						||
        nix-store -r "$nixDrv"'!'"out" --add-root "$tmpDir/nix" --indirect >/dev/null
 | 
						||
        if [ -n "$buildHost" ]; then
 | 
						||
            nix-copy-closure "${copyClosureFlags[@]}" --to "$buildHost" "$nixDrv"
 | 
						||
            # The nix build produces multiple outputs, we add them all to the remote path
 | 
						||
            for p in $(buildHostCmd nix-store -r "$(readlink "$nixDrv")" "${buildArgs[@]}"); do
 | 
						||
                remoteNix="$remoteNix${remoteNix:+:}$p/bin"
 | 
						||
            done
 | 
						||
        fi
 | 
						||
    fi
 | 
						||
    PATH="$tmpDir/nix/bin:$PATH"
 | 
						||
fi
 | 
						||
 | 
						||
 | 
						||
# Update the version suffix if we're building from Git (so that
 | 
						||
# nixos-version shows something useful).
 | 
						||
if [[ -n $canRun && -z $flake ]]; then
 | 
						||
    if nixpkgs=$(runCmd nix-instantiate --find-file nixpkgs "${extraBuildFlags[@]}"); then
 | 
						||
        suffix=$(runCmd $SHELL "$nixpkgs/nixos/modules/installer/tools/get-version-suffix" "${extraBuildFlags[@]}" || true)
 | 
						||
        if [ -n "$suffix" ]; then
 | 
						||
            echo -n "$suffix" > "$nixpkgs/.version-suffix" || true
 | 
						||
        fi
 | 
						||
    fi
 | 
						||
fi
 | 
						||
 | 
						||
 | 
						||
if [ "$action" = dry-build ]; then
 | 
						||
    extraBuildFlags+=(--dry-run)
 | 
						||
fi
 | 
						||
 | 
						||
 | 
						||
# Either upgrade the configuration in the system profile (for "switch"
 | 
						||
# or "boot"), or just build it and create a symlink "result" in the
 | 
						||
# current directory (for "build" and "test").
 | 
						||
if [ -z "$rollback" ]; then
 | 
						||
    log "building the system configuration..."
 | 
						||
    if [[ "$action" = switch || "$action" = boot ]]; then
 | 
						||
        if [[ -z $flake ]]; then
 | 
						||
            pathToConfig="$(nixBuild '<nixpkgs/nixos>' --no-out-link -A system "${extraBuildFlags[@]}")"
 | 
						||
        else
 | 
						||
            pathToConfig="$(nixFlakeBuild "$flake#$flakeAttr.config.system.build.toplevel" "${extraBuildFlags[@]}" "${lockFlags[@]}")"
 | 
						||
        fi
 | 
						||
        copyToTarget "$pathToConfig"
 | 
						||
        targetHostCmd nix-env -p "$profile" --set "$pathToConfig"
 | 
						||
    elif [[ "$action" = test || "$action" = build || "$action" = dry-build || "$action" = dry-activate ]]; then
 | 
						||
        if [[ -z $flake ]]; then
 | 
						||
            pathToConfig="$(nixBuild '<nixpkgs/nixos>' -A system -k "${extraBuildFlags[@]}")"
 | 
						||
        else
 | 
						||
            pathToConfig="$(nixFlakeBuild "$flake#$flakeAttr.config.system.build.toplevel" "${extraBuildFlags[@]}" "${lockFlags[@]}")"
 | 
						||
        fi
 | 
						||
    elif [ "$action" = build-vm ]; then
 | 
						||
        if [[ -z $flake ]]; then
 | 
						||
            pathToConfig="$(nixBuild '<nixpkgs/nixos>' -A vm -k "${extraBuildFlags[@]}")"
 | 
						||
        else
 | 
						||
            pathToConfig="$(nixFlakeBuild "$flake#$flakeAttr.config.system.build.vm" "${extraBuildFlags[@]}" "${lockFlags[@]}")"
 | 
						||
        fi
 | 
						||
    elif [ "$action" = build-vm-with-bootloader ]; then
 | 
						||
        if [[ -z $flake ]]; then
 | 
						||
            pathToConfig="$(nixBuild '<nixpkgs/nixos>' -A vmWithBootLoader -k "${extraBuildFlags[@]}")"
 | 
						||
        else
 | 
						||
            pathToConfig="$(nixFlakeBuild "$flake#$flakeAttr.config.system.build.vmWithBootLoader" "${extraBuildFlags[@]}" "${lockFlags[@]}")"
 | 
						||
        fi
 | 
						||
    else
 | 
						||
        showSyntax
 | 
						||
    fi
 | 
						||
    # Copy build to target host if we haven't already done it
 | 
						||
    if ! [[ "$action" = switch || "$action" = boot ]]; then
 | 
						||
        copyToTarget "$pathToConfig"
 | 
						||
    fi
 | 
						||
else # [ -n "$rollback" ]
 | 
						||
    if [[ "$action" = switch || "$action" = boot ]]; then
 | 
						||
        targetHostCmd nix-env --rollback -p "$profile"
 | 
						||
        pathToConfig="$profile"
 | 
						||
    elif [[ "$action" = test || "$action" = build ]]; then
 | 
						||
        systemNumber=$(
 | 
						||
            targetHostCmd nix-env -p "$profile" --list-generations |
 | 
						||
            sed -n '/current/ {g; p;}; s/ *\([0-9]*\).*/\1/; h'
 | 
						||
        )
 | 
						||
        pathToConfig="$profile"-${systemNumber}-link
 | 
						||
        if [ -z "$targetHost" ]; then
 | 
						||
            ln -sT "$pathToConfig" ./result
 | 
						||
        fi
 | 
						||
    else
 | 
						||
        showSyntax
 | 
						||
    fi
 | 
						||
fi
 | 
						||
 | 
						||
 | 
						||
# If we're not just building, then make the new configuration the boot
 | 
						||
# default and/or activate it now.
 | 
						||
if [[ "$action" = switch || "$action" = boot || "$action" = test || "$action" = dry-activate ]]; then
 | 
						||
    if [[ -z "$specialisation" ]]; then
 | 
						||
        cmd="$pathToConfig/bin/switch-to-configuration"
 | 
						||
    else
 | 
						||
        cmd="$pathToConfig/specialisation/$specialisation/bin/switch-to-configuration"
 | 
						||
 | 
						||
        if [[ ! -f "$cmd" ]]; then
 | 
						||
            log "error: specialisation not found: $specialisation"
 | 
						||
            exit 1
 | 
						||
        fi
 | 
						||
    fi
 | 
						||
 | 
						||
    if ! targetHostCmd "$cmd" "$action"; then
 | 
						||
        log "warning: error(s) occurred while switching to the new configuration"
 | 
						||
        exit 1
 | 
						||
    fi
 | 
						||
fi
 | 
						||
 | 
						||
 | 
						||
if [[ "$action" = build-vm || "$action" = build-vm-with-bootloader ]]; then
 | 
						||
    cat >&2 <<EOF
 | 
						||
 | 
						||
Done.  The virtual machine can be started by running $(echo "${pathToConfig}/bin/"run-*-vm)
 | 
						||
EOF
 | 
						||
fi
 |