-
Notifications
You must be signed in to change notification settings - Fork 22
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add option to scan nix profile? #105
Comments
Thanks, this is a good suggestion. I'll look into this as soon as possible. |
On my test systems, this actually works with the current sbomnix out-of-the-box:
As stated in the error message you attached, the reason it fails in your example is that it's unable to find the derivation for:
Under the hood, sbomnix uses Not sure why that fails in your example case. How do you setup your system? If you set it up with flake, you could try running the sbomnix against the relevant flake reference, something like (using https://github.com/henrirosten/dotfiles as an example target):
|
The derivations get garbage collected after running nix garbage collect but the realized out paths remain So it will work for once when you install a package but as the profile grows over weeks parts will not have the original derivation file anymore I think? |
By default, nix shouldn't remove derivations if the associated store path is used (non-garbage):
|
Huh weird. It's on for me too. I'm wondering what's going on here. I'll report back if I can reproduce again. but it sounds like a problem with my setup |
On a new setup:
Really strange |
Even on a clean profile it doesn't work. @henrirosten are you sure you're using a new-style profile (
|
@arianvp: thanks for taking the time to explain the issue. With your instructions in the previous comment, I'm able to reproduce the problem. I was not aware that As you already suggested initially, I also think |
I.e. it can take
~/.nix-profile/manifest.json
as inputCurrently you get:
The text was updated successfully, but these errors were encountered: