···

       
1415
       
 
       
This hook can be disabled by setting `dontCheckForBrokenSymlinks`.

     

       
1416
       
 
       


     

       
1417
       
 
       
::: {.note}

     

       
1418
       
-
       
The hook only considers symlinks with targets inside the Nix store.

     

       
1419
       
 
       
:::

     

       
1420
       
 
       


     

       
1421
       
 
       
::: {.note}

     

···

       
1415
       
 
       
This hook can be disabled by setting `dontCheckForBrokenSymlinks`.

     

       
1416
       
 
       


     

       
1417
       
 
       
::: {.note}

     

       
1418
       
+
       
The hook only considers symlinks with targets inside the Nix store or $TMPDIR directory (typically /nix/store and /build in the builder environment, the later being where build is executed).

     

       
1419
       
 
       
:::

     

       
1420
       
 
       


     

       
1421
       
 
       
::: {.note}

     

···

       
38
       
 
       


     

       
39
       
 
       
<!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

     

       
40
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
41
       
 
       
- The `services.polipo` module has been removed as `polipo` is unmaintained and archived upstream.

     

       
42
       
 
       


     

       
43
       
 
       
- The Pocket ID module ([`services.pocket-id`][#opt-services.pocket-id.enable]) and package (`pocket-id`) has been updated to 1.0.0. Some environment variables have been changed or removed, see the [migration guide](https://pocket-id.org/docs/setup/migrate-to-v1/).

     

···

       
38
       
 
       


     

       
39
       
 
       
<!-- To avoid merge conflicts, consider adding your item at an arbitrary place in the list instead. -->

     

       
40
       
 
       


     

       
41
       
+
       
- The `no-broken-symlink` build hook now also fails builds whose output derivation contains links to $TMPDIR (typically /build, which contains the build directory).

     

       
42
       
+
       


     

       
43
       
 
       
- The `services.polipo` module has been removed as `polipo` is unmaintained and archived upstream.

     

       
44
       
 
       


     

       
45
       
 
       
- The Pocket ID module ([`services.pocket-id`][#opt-services.pocket-id.enable]) and package (`pocket-id`) has been updated to 1.0.0. Some environment variables have been changed or removed, see the [migration guide](https://pocket-id.org/docs/setup/migrate-to-v1/).

     

···

       
51
       
 
       
      symlinkTarget="$(realpath --no-symlinks --canonicalize-missing "$pathParent/$symlinkTarget")"

     

       
52
       
 
       
    fi

     

       
53
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
54
       
 
       
    if [[ $symlinkTarget != "$NIX_STORE"/* ]]; then

     

       
55
       
 
       
      nixInfoLog "symlink $path points outside the Nix store; ignoring"

     

       
56
       
 
       
      continue

     

···

       
51
       
 
       
      symlinkTarget="$(realpath --no-symlinks --canonicalize-missing "$pathParent/$symlinkTarget")"

     

       
52
       
 
       
    fi

     

       
53
       
 
       


     

       
54
       
+
       
    # use $TMPDIR like audit-tmpdir.sh

     

       
55
       
+
       
    if [[ $symlinkTarget = "$TMPDIR"/* ]]; then

     

       
56
       
+
       
      nixErrorLog "the symlink $path points to $TMPDIR directory: $symlinkTarget"

     

       
57
       
+
       
      numDanglingSymlinks+=1

     

       
58
       
+
       
      continue

     

       
59
       
+
       
    fi

     

       
60
       
 
       
    if [[ $symlinkTarget != "$NIX_STORE"/* ]]; then

     

       
61
       
 
       
      nixInfoLog "symlink $path points outside the Nix store; ignoring"

     

       
62
       
 
       
      continue