From 295e1fa74577ccf2309cfae493f8bc0138278e55 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Thu, 3 Dec 2020 20:53:17 +0100
Subject: [PATCH] ci: add eval check
---
.github/workflows/build.yml | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e63ed8f..76eaf92 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -48,6 +48,15 @@ jobs:
with:
name: ${{ matrix.cachixName }}
signingKey: '${{ secrets.CACHIX_SIGNING_KEY }}'
+ - name: Check evaluation
+ run: |
+ nix-env -f . -qa \* --meta --xml \
+ --allowed-uris https://static.rust-lang.org \
+ --option restrict-eval true \
+ --option allow-import-from-derivation true \
+ --drv-path --show-trace \
+ -I nixpkgs=$(nix-instantiate --find-file nixpkgs) \
+ -I $PWD
- name: Build nix packages
# TODO switch to default nixpkgs channel once nix-build-uncached 1.0.0 is in stable
run: nix run -I 'nixpkgs=channel:nixos-unstable' nixpkgs.nix-build-uncached -c nix-build-uncached ci.nix -A cacheOutputs