Skip to content

Comments

Improve support for relative path inputs#10089

Merged
edolstra merged 25 commits intoNixOS:masterfrom
edolstra:relative-flakes
Jan 16, 2025
Merged

Improve support for relative path inputs#10089
edolstra merged 25 commits intoNixOS:masterfrom
edolstra:relative-flakes

Conversation

@edolstra
Copy link
Member

@edolstra edolstra commented Feb 26, 2024

Motivation

We want it to be possible to refer to flake inputs that reside in the same repo via relative paths (e.g. inputs.foo.url = "path:./subdir"). Previously this didn't work very well because those inputs would be separately copied to the store, which is inefficient and makes references to parent directories tricky or impossible. Furthermore, they had their own NAR hash in the lock file, which is superfluous since the parent is already locked. In fact, if relative path inputs worked at all, it was by accident.

Now relative path inputs are accessed via the accessor of the calling flake. This avoids the unnecessary copy and makes it possible for relative path inputs to depend on flakes in a parent directory (so long as they're in the same tree).

Lock file nodes for relative path inputs now have a new parent field:

{
  "locked": {
    "path": "./subdir",
    "type": "path"
  },
  "original": {
    "path": "./subdir",
    "type": "path"
  },
  "parent": [
    "foo",
    "bar"
  ]
}

which denotes that ./subdir is to be interpreted relative to the directory of the bar input of the foo input of the root flake.

Extracted from the lazy-trees branch.

Context

Priorities and Process

Add 👍 to pull requests you find important.

The Nix maintainer team uses a GitHub project board to schedule and track reviews.

@edolstra edolstra marked this pull request as draft February 26, 2024 18:53
@github-actions github-actions bot added documentation new-cli Relating to the "nix" command with-tests Issues related to testing. PRs with tests have some priority fetching Networking with the outside (non-Nix) world, input locking labels Feb 26, 2024
@dpulls
Copy link

dpulls bot commented Mar 4, 2024

🎉 All dependencies have been resolved !

@thufschmitt thufschmitt added the idea approved The given proposal has been discussed and approved by the Nix team. An implementation is welcome. label Mar 5, 2024
@thufschmitt
Copy link
Member

Discussed during the Nix maintainers meeting on 2024-03-04.

  • Idea approved
  • Document that directly accessing .. in subflakes is likely to break in the future
  • Use path literals as the url for subflakes
Details
  • Great overall
  • Right now, the PR allows import ../. in a subflake. Do we want that?
    • Directly accessing .. is convenient, but breaks the encapsulation property of flakes
    • We can however access other parts of the tree with relative inputs (that can go up until the root)
      • inputs.something_else = ../foo
    • From an implementation perspective, hard to forbid without lazy trees
    • Decision:
      • Don't formally forbid direct access to .. since it's hard without lazy trees
      • Once lazy trees lands, make that conditional on a flag
      • Potentially make the default restrictive. Would be a breaking change, but
        • can be mitigated by only making that change effective after a flake update
        • small breakage as getting the old behavior back would only be a one-line change
  • Syntax for relative flakes?
    • Currently reuses url = "path:./foo" that already kinda works on master
    • A more natural syntax would be url = ./foo
      • This is actually what most people seem to try first when they want subflakes

@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/2024-03-04-nix-team-meeting-minute-130/40830/1

edolstra added a commit that referenced this pull request Mar 7, 2024
This wasn't caught by CI because #10149 and #10152 pass
individually... It doesn't happen on lazy-trees either because we
never try to fetch relative path flakes (#10089).
edolstra added a commit to edolstra/nix that referenced this pull request Apr 15, 2024
…re path

This is needed for the path:// input scheme (until it returns a
FSInputAccessor to the original path, but that's blocked by NixOS#10089)
and the Mercurial input scheme.
edolstra added a commit to edolstra/nix that referenced this pull request Apr 19, 2024
…re path

This is needed for the path:// input scheme (until it returns a
FSInputAccessor to the original path, but that's blocked by NixOS#10089)
and the Mercurial input scheme.
Subflakes are flakes in the same tree, accessed in flake inputs via
relative paths (e.g. `inputs.foo.url = "path:./subdir"`). Previously
these didn't work very well because they would be separately copied to
the store, which is inefficient and makes references to parent
directories tricky or impossible. Furthermore, they had their own NAR
hash in the lock file, which is superfluous since the parent is
already locked.

Now subflakes are accessed via the accessor of the calling flake. This
avoids the unnecessary copy and makes it possible for subflakes to
depend on flakes in a parent directory (so long as they're in the same
tree).

Lock file nodes for relative flake inputs now have a new `parent` field:

  {
    "locked": {
      "path": "./subdir",
      "type": "path"
    },
    "original": {
      "path": "./subdir",
      "type": "path"
    },
    "parent": [
      "foo",
      "bar"
    ]
  }

which denotes that `./subdir` is to be interpreted relative to the
directory of the `bar` input of the `foo` input of the root flake.

Extracted from the lazy-trees branch.
edolstra added 2 commits May 17, 2024 16:38
`parentNode.sourceInfo.outPath` does not include the subdir of the
parent flake, while `parentNode.outPath` does. So we need to use the
latter.
edolstra added a commit to edolstra/nix that referenced this pull request Sep 11, 2024
Relative path flakes ("subflakes") are basically fundamentally
broken, since they produce lock file entries like

  "locked": {
    "lastModified": 1,
    "narHash": "sha256-/2tW9SKjQbRLzfcJs5SHijli6l3+iPr1235zylGynK8=",
    "path": "./flakeC",
    "type": "path"
  },

that don't specify what "./flakeC" is relative to. They *sometimes*
worked by accident because the `narHash` field allowed
`fetchToStore()` to get the store path of the subflake *if* it
happened to exist in the local store or in a substituter.

Subflakes are properly fixed in NixOS#10089 (which adds a "parent" field to
the lock file). Rather than come up with some crazy hack to make them
work in the interim, let's just disable the only test that depends on
the broken behaviour for now.
@edolstra edolstra marked this pull request as ready for review November 27, 2024 14:25
@alurm
Copy link
Contributor

alurm commented Jan 18, 2025

I'm pretty sure I was in the subdirectory, the top level flake didn't have any nixosConfigurations.

I'll try to see what's going on tomorrow, thanks for the link to the tests.

@alurm
Copy link
Contributor

alurm commented Jan 19, 2025

@roberth, alright, I was doing something wrong, it works. Sorry for bothering.

However I think I found out why I was confused, I think it's an issue with nixos-rebuild repl. I made a small example. Please look at it. If it's a bug indeed, I can create an issue in the tracker (though I'm not sure which project nixos-rebuild belongs to).

/test: Test

/subdir/flake.nix:

{
  inputs.nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";

  outputs = inputs: {
    nixosConfigurations.test = inputs.nixpkgs.lib.nixosSystem {
      modules = [
        {
          nixpkgs.system = "aarch64-linux";
          fileSystems."/".device = "/dev/null";
          boot.loader.systemd-boot.enable = true;
          environment.etc.my-test.text = builtins.readFile ../test;
        }
      ];
    };
  };
}

All of the following is executed in subdir.

Test 1.

$ nix repl
nix-repl> :lf .
nix-repl> nixosConfigurations.test.config.environment.etc.my-test.text
"Test\n"

This works as I expect it to work.

Test 2.

$ nixos-rebuild .#test build
$ cat result/etc/my-test
Test

This works as I expect it to work.

Test 3.

$ nixos-rebuild --flake .#test repl
nix-repl> nix-repl> config.environment.etc.my-test.text
error:
[Part of the log omitted...]
       error: opening file '/nix/store/test': No such file or directory

I expected Test and not an error.

Can you confirm if this is a bug, at least conceptually?

@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/relative-path-support-for-nix-flakes/18795/7

@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/nix-2-26-released/59211/1

Comment on lines +44 to +54
parentNode = allNodes.${getInputByPath lockFile.root node.parent};

sourceInfo =
if overrides ? ${key}
then
overrides.${key}.sourceInfo
else if node.locked.type == "path" && builtins.substring 0 1 node.locked.path != "/"
then
parentNode.sourceInfo // {
outPath = parentNode.outPath + ("/" + node.locked.path);
}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This introduces an unnecessary dependency from the current sourceInfo onto the result of outputs of the parent flake. It should only be strict in the fetchTree result of the parent, not the outputs.

The full chain (all WHNF) is something like sourceInfo (current) -> parentNode -> allNodes.${...} -> if (line 81) -> result -> outputs // ... -> outputs.

Reproducer:

mkdir -p ~/tmp/repro-10089/example
cd ~/tmp/repro-10089
git init
echo '{ outputs = _: { }; }' >flake.nix
cat >example/flake.nix <<EOF
{
  inputs.parent.url = ../.;
  outputs = { self, parent, nixpkgs, ... }: builtins.seq parent {};
}
EOF
git add -N .
cd example
# might succeed:
nix build
# fails:
nix build

->

       error: stack overflow; max-call-depth exceeded

The fact that it succeeds the first time suggests that a freshly locked lock is treated in a significantly different way regarding flake directories, which may be a separate problem if there's other differences than just this failing.
nix build --recreate-lock-file --no-write-lock-file always works.

MattSturgeon added a commit to MattSturgeon/flake-compat that referenced this pull request May 12, 2025
Based on the upstream implementation added in Nix 2.26
See NixOS/nix#10089
MattSturgeon added a commit to MattSturgeon/flake-compat that referenced this pull request May 12, 2025
Based on the upstream implementation added in Nix 2.26
See NixOS/nix#10089
MattSturgeon pushed a commit to MattSturgeon/flake-compat that referenced this pull request May 12, 2025
MattSturgeon pushed a commit to MattSturgeon/flake-compat that referenced this pull request May 12, 2025
MattSturgeon pushed a commit to MattSturgeon/flake-compat that referenced this pull request May 12, 2025
MattSturgeon pushed a commit to MattSturgeon/flake-compat that referenced this pull request May 19, 2025
@nixos-discourse
Copy link

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:

https://discourse.nixos.org/t/nix-2-30-0-released/66449/1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation fetching Networking with the outside (non-Nix) world, input locking flakes idea approved The given proposal has been discussed and approved by the Nix team. An implementation is welcome. new-cli Relating to the "nix" command with-tests Issues related to testing. PRs with tests have some priority

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

Allow flakes to refer to other flakes by relative path

10 participants