···

       
100
       
 
       
  name = "hello";

     

       
101
       
 
       
  src = fetchgit {

     

       
102
       
 
       
    url = "https://...";

     

       
103
       
-
       
    sparseCheckout = ''

     

       
104
       
-
       
      directory/to/be/included

     

       
105
       
-
       
      another/directory

     

       
106
       
-
       
    '';

     

       
107
       
 
       
    sha256 = "0000000000000000000000000000000000000000000000000000";

     

       
108
       
 
       
  };

     

       
109
       
 
       
}

     

···

       
100
       
 
       
  name = "hello";

     

       
101
       
 
       
  src = fetchgit {

     

       
102
       
 
       
    url = "https://...";

     

       
103
       
+
       
    sparseCheckout = [

     

       
104
       
+
       
      "directory/to/be/included"

     

       
105
       
+
       
      "another/directory"

     

       
106
       
+
       
    ];

     

       
107
       
 
       
    sha256 = "0000000000000000000000000000000000000000000000000000";

     

       
108
       
 
       
  };

     

       
109
       
 
       
}

     

···

       
545
       
 
       
      </listitem>

     

       
546
       
 
       
      <listitem>

     

       
547
       
 
       
        <para>

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
548
       
 
       
          <literal>openssh</literal> was updated to version 9.1,

     

       
549
       
 
       
          disabling the generation of DSA keys when using

     

       
550
       
 
       
          <literal>ssh-keygen -A</literal> as they are insecure. Also,

     

···

       
545
       
 
       
      </listitem>

     

       
546
       
 
       
      <listitem>

     

       
547
       
 
       
        <para>

     

       
548
       
+
       
          The <literal>fetchgit</literal> fetcher supports sparse

     

       
549
       
+
       
          checkouts via the <literal>sparseCheckout</literal> option.

     

       
550
       
+
       
          This used to accept a multi-line string with

     

       
551
       
+
       
          directories/patterns to check out, but now requires a list of

     

       
552
       
+
       
          strings.

     

       
553
       
+
       
        </para>

     

       
554
       
+
       
      </listitem>

     

       
555
       
+
       
      <listitem>

     

       
556
       
+
       
        <para>

     

       
557
       
 
       
          <literal>openssh</literal> was updated to version 9.1,

     

       
558
       
 
       
          disabling the generation of DSA keys when using

     

       
559
       
 
       
          <literal>ssh-keygen -A</literal> as they are insecure. Also,

     

···

       
179
       
 
       


     

       
180
       
 
       
- The `fetchgit` fetcher now uses [cone mode](https://www.git-scm.com/docs/git-sparse-checkout/2.37.0#_internalscone_mode_handling) by default for sparse checkouts. [Non-cone mode](https://www.git-scm.com/docs/git-sparse-checkout/2.37.0#_internalsnon_cone_problems) can be enabled by passing `nonConeMode = true`, but note that non-cone mode is deprecated and this option may be removed alongside a future Git update without notice.

     

       
181
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
182
       
 
       
- `openssh` was updated to version 9.1, disabling the generation of DSA keys when using `ssh-keygen -A` as they are insecure. Also, `SetEnv` directives in `ssh_config` and `sshd_config` are now first-match-wins

     

       
183
       
 
       


     

       
184
       
 
       
- `bsp-layout` no longer uses the command `cycle` to switch to other window layouts, as it got replaced by the commands `previous` and `next`.

     

···

       
179
       
 
       


     

       
180
       
 
       
- The `fetchgit` fetcher now uses [cone mode](https://www.git-scm.com/docs/git-sparse-checkout/2.37.0#_internalscone_mode_handling) by default for sparse checkouts. [Non-cone mode](https://www.git-scm.com/docs/git-sparse-checkout/2.37.0#_internalsnon_cone_problems) can be enabled by passing `nonConeMode = true`, but note that non-cone mode is deprecated and this option may be removed alongside a future Git update without notice.

     

       
181
       
 
       


     

       
182
       
+
       
- The `fetchgit` fetcher supports sparse checkouts via the `sparseCheckout` option. This used to accept a multi-line string with directories/patterns to check out, but now requires a list of strings.

     

       
183
       
+
       


     

       
184
       
 
       
- `openssh` was updated to version 9.1, disabling the generation of DSA keys when using `ssh-keygen -A` as they are insecure. Also, `SetEnv` directives in `ssh_config` and `sshd_config` are now first-match-wins

     

       
185
       
 
       


     

       
186
       
 
       
- `bsp-layout` no longer uses the command `cycle` to switch to other window layouts, as it got replaced by the commands `previous` and `next`.

     

···

       
15
       
 
       
{ url, rev ? "HEAD", md5 ? "", sha256 ? "", hash ? "", leaveDotGit ? deepClone

     

       
16
       
 
       
, fetchSubmodules ? true, deepClone ? false

     

       
17
       
 
       
, branchName ? null

     

       
18
       
-
       
, sparseCheckout ? ""

     

       
19
       
 
       
, nonConeMode ? false

     

       
20
       
 
       
, name ? urlToName url rev

     

       
21
       
 
       
, # Shell code executed after the file has been fetched

     
···

       
55
       
 
       
*/

     

       
56
       
 
       


     

       
57
       
 
       
assert deepClone -> leaveDotGit;

     

       
58
       
-
       
assert nonConeMode -> (sparseCheckout != "");

     

       
59
       
 
       


     

       
60
       
 
       
if md5 != "" then

     

       
61
       
 
       
  throw "fetchgit does not support md5 anymore, please use sha256"

     

       
62
       
 
       
else if hash != "" && sha256 != "" then

     

       
63
       
 
       
  throw "Only one of sha256 or hash can be set"

     

       
64
       
 
       
else

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
65
       
 
       
stdenvNoCC.mkDerivation {

     

       
66
       
 
       
  inherit name;

     

       
67
       
 
       
  builder = ./builder.sh;

     
···

       
79
       
 
       
  else

     

       
80
       
 
       
    lib.fakeSha256;

     

       
81
       
 
       


     

       
82
       
-
       
  inherit url rev leaveDotGit fetchLFS fetchSubmodules deepClone branchName sparseCheckout nonConeMode postFetch;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
83
       
 
       


     

       
84
       
 
       
  postHook = if netrcPhase == null then null else ''

     

       
85
       
 
       
    ${netrcPhase}

     

···

       
15
       
 
       
{ url, rev ? "HEAD", md5 ? "", sha256 ? "", hash ? "", leaveDotGit ? deepClone

     

       
16
       
 
       
, fetchSubmodules ? true, deepClone ? false

     

       
17
       
 
       
, branchName ? null

     

       
18
       
+
       
, sparseCheckout ? []

     

       
19
       
 
       
, nonConeMode ? false

     

       
20
       
 
       
, name ? urlToName url rev

     

       
21
       
 
       
, # Shell code executed after the file has been fetched

     
···

       
55
       
 
       
*/

     

       
56
       
 
       


     

       
57
       
 
       
assert deepClone -> leaveDotGit;

     

       
58
       
+
       
assert nonConeMode -> !(sparseCheckout == "" || sparseCheckout == []);

     

       
59
       
 
       


     

       
60
       
 
       
if md5 != "" then

     

       
61
       
 
       
  throw "fetchgit does not support md5 anymore, please use sha256"

     

       
62
       
 
       
else if hash != "" && sha256 != "" then

     

       
63
       
 
       
  throw "Only one of sha256 or hash can be set"

     

       
64
       
 
       
else

     

       
65
       
+
       
# Added 2022-11-12

     

       
66
       
+
       
lib.warnIf (builtins.isString sparseCheckout)

     

       
67
       
+
       
  "Please provide directories/patterns for sparse checkout as a list of strings. Support for passing a (multi-line) string is deprecated and will be removed in the next release."

     

       
68
       
 
       
stdenvNoCC.mkDerivation {

     

       
69
       
 
       
  inherit name;

     

       
70
       
 
       
  builder = ./builder.sh;

     
···

       
82
       
 
       
  else

     

       
83
       
 
       
    lib.fakeSha256;

     

       
84
       
 
       


     

       
85
       
+
       
  # git-sparse-checkout(1) says:

     

       
86
       
+
       
  # > When the --stdin option is provided, the directories or patterns are read

     

       
87
       
+
       
  # > from standard in as a newline-delimited list instead of from the arguments.

     

       
88
       
+
       
  sparseCheckout = if builtins.isString sparseCheckout then sparseCheckout else builtins.concatStringsSep "\n" sparseCheckout;

     

       
89
       
+
       


     

       
90
       
+
       
  inherit url rev leaveDotGit fetchLFS fetchSubmodules deepClone branchName nonConeMode postFetch;

     

       
91
       
 
       


     

       
92
       
 
       
  postHook = if netrcPhase == null then null else ''

     

       
93
       
 
       
    ${netrcPhase}

     

···

       
12
       
 
       
    name = "nix-source";

     

       
13
       
 
       
    url = "https://github.com/NixOS/nix";

     

       
14
       
 
       
    rev = "9d9dbe6ed05854e03811c361a3380e09183f4f4a";

     

       
15
       
-
       
    sparseCheckout = ''

     

       
16
       
-
       
      src

     

       
17
       
-
       
      tests

     

       
18
       
-
       
    '';

     

       
19
       
 
       
    sha256 = "sha256-g1PHGTWgAcd/+sXHo1o6AjVWCvC6HiocOfMbMh873LQ=";

     

       
20
       
 
       
  };

     

       
21
       
 
       


     
···

       
23
       
 
       
    name = "nix-source";

     

       
24
       
 
       
    url = "https://github.com/NixOS/nix";

     

       
25
       
 
       
    rev = "9d9dbe6ed05854e03811c361a3380e09183f4f4a";

     

       
26
       
-
       
    sparseCheckout = ''

     

       
27
       
-
       
      src

     

       
28
       
-
       
      tests

     

       
29
       
-
       
    '';

     

       
30
       
 
       
    nonConeMode = true;

     

       
31
       
 
       
    sha256 = "sha256-FknO6C/PSnMPfhUqObD4vsW4PhkwdmPa9blNzcNvJQ4=";

     

       
32
       
 
       
  };

     

···

       
12
       
 
       
    name = "nix-source";

     

       
13
       
 
       
    url = "https://github.com/NixOS/nix";

     

       
14
       
 
       
    rev = "9d9dbe6ed05854e03811c361a3380e09183f4f4a";

     

       
15
       
+
       
    sparseCheckout = [

     

       
16
       
+
       
      "src"

     

       
17
       
+
       
      "tests"

     

       
18
       
+
       
    ];

     

       
19
       
 
       
    sha256 = "sha256-g1PHGTWgAcd/+sXHo1o6AjVWCvC6HiocOfMbMh873LQ=";

     

       
20
       
 
       
  };

     

       
21
       
 
       


     
···

       
23
       
 
       
    name = "nix-source";

     

       
24
       
 
       
    url = "https://github.com/NixOS/nix";

     

       
25
       
 
       
    rev = "9d9dbe6ed05854e03811c361a3380e09183f4f4a";

     

       
26
       
+
       
    sparseCheckout = [

     

       
27
       
+
       
      "src"

     

       
28
       
+
       
      "tests"

     

       
29
       
+
       
    ];

     

       
30
       
 
       
    nonConeMode = true;

     

       
31
       
 
       
    sha256 = "sha256-FknO6C/PSnMPfhUqObD4vsW4PhkwdmPa9blNzcNvJQ4=";

     

       
32
       
 
       
  };