GitLab

Add git to the base image

Update Nix to 2.3.15

update to Nix 2.3.12

update to Nix 2.3.11

This is a pre-requisite for builtins.fetchGit to work. This is
especially painful to deal with if we're using flakes and
flake-compat: we have this nice self-contained set of inputs
but to use them in presence of any git dependencies, we have to first
install git separately.

Fixes #33

Lookup hostnames via /etc/hosts before asking DNS

Changes the order of lookups given in /etc/nsswitch.conf and thus
resolves #35.

update to Nix 2.3.10

Download nix for the host architecture instead of x86_64

This allows building locally for arm64 (see #28 as well).

Update the readme to warn users about the missing sandbox.

Regression test for https://github.com/NixOS/docker/issues/21.
Closes https://github.com/NixOS/docker/pull/22.

This is the choice the installed Nix profile.sh script makes, too.

Fixes https://github.com/NixOS/docker/issues/21.

Update to nix 2.3.4

This change also includes an addition of ARG instruction,
so the installed nix version could be easily changed via
docker build --build-arg NIX_VERSION=<version>

Checking the sha256 fingerprint of the downloaded archive doesn't
accomplish anything for 2 reasons:

 (1) We download via HTTPS, so the archive is authenticated already.

 (2) This entire build runs on untrusted hardware, so verifying the
     input doesn't add any "security" anyway. Nobody knows what
     hub.docker.com does exactly while building that image.

Closes https://github.com/NixOS/docker/pull/10

.
Suggested-by: Harley Laue <losinggeneration@gmail.com>

Set content of nsswitch.conf file

Fix #7

The new version has sandboxed builds enabled by default, which
won't work in an unprivileged docker container, so we disable
that feature by way of /etc/nix/nix.conf.

Closes https://github.com/NixOS/docker/issues/6.

This saves 0.02 MiB. :-)

Suggested by @domenkozar in https://github.com/NixOS/docker/pull/5. With this
change, /var/cache/apk is empty at the time we try to clean it, so we must use
--force to prevent the build from failing.

First, run "nix-collect-garbage --delete-old" to clean out all unnecessary
files, then "nix-store --verify --check-contents" the result.

Bump to Nix 2.1.3

Upgrade to Nix 2.1.1

Avoids regressions like https://github.com/NixOS/docker/issues/1.

This reverts commit e166d64c. I assumed
incorrectly that these settings are unnecessary, but in fact they are required
so that users can execute nix commands *directly*, without going through a
shell:

    $ docker run -it --rm nixos/nix nix-channel --list
    Error response from daemon:
    OCI runtime create failed:
    starting container process caused "exec: \"nix-channel\":
    executable file not found in $PATH": unknown.

Fixes https://github.com/NixOS/docker/issues/1. I am sorry about the
regression.

Setting those values in the ONBUILD ENV makes sense, but the interactive
environment doesn't need those definitions because /etc/profile.d/nix.sh
provides all those variables for us.

Without that variable, /etc/profile.d/nix.sh won't do anything.