Re: Build failures against staging

[Yureka <yuka@yuka.dev>]

On 10/11/25 12:57, Yureka wrote:
> Hello everyone,
>
>
> I attempted to build a spectrum (rev. 
> c5d5786d3dc938af0b279c542d1e43bce381b4b9) image against nixpkgs 
> staging (rev eb681f8139a93020f51b8256fc7dfe057b44747f) on x86_64. Here 
> are the derivations which failed to build, for further investigation:
>
> - /nix/store/cbjmszj7r5r0abka3jsr6pijxba0sd2q-iproute2-6.17.0.drv 
> (pkgsMusl.iproute2)

This was fixed by https://github.com/NixOS/nixpkgs/pull/451338 (merged) 
and https://github.com/NixOS/nixpkgs/pull/451397

Masked by the iproute2 failure was the fact that systemd 258 needs an 
updated patchset to build with Musl. After emilazy hinting at upstream 
efforts to improve musl support, I have made an attempt to use the 
patchset by the systemd folks: https://github.com/NixOS/nixpkgs/pull/451274

> - 
> /nix/store/f1cc5abbfjslqvy6wkzrzsmsjj4hpk6h-openssl-static-x86_64-unknown-linux-musl-3.6.0.drv 
> (pkgsStatic.openssl)
This was fixed by https://github.com/NixOS/nixpkgs/pull/451291
>
> The following also fail, but seem to have no specific connection 
> spectrum or pkgsMusl/pkgsStatic (the GNU counterparts are broken on 
> staging with the same error):
>
> - 
> /nix/store/g0bklsp2daxxq74pkb3mqjcrb919194i-python3.13-inkex-1.4.2.drv 
> (python3.pkgs.inkex)
> - 
> /nix/store/nfwcjnbp6rv4cgzrxdqljc1k1h72z3kk-python3.13-cryptography-vectors-46.0.1.drv 
> (python3.pkgs.cryptography.vectors)
This will be fixed by https://github.com/NixOS/nixpkgs/pull/450599
> - 
> /nix/store/36674wi2rkanm2ds2bx1183w7knj9mr0-wasilibc-static-wasm32-unknown-wasi-27.drv 
> (pkgsCross.wasi32.stdenv.cc.libc, needed for firefox)
The cause has been tracked down to 
https://github.com/NixOS/nixpkgs/pull/442945 which unintentionally 
enabled new hardening flags for the wasi target
>
>
> I hope this is useful to catch any problems affecting spectrum before 
> the following staging-next cycle.
>
>
> — Yureka
>

I've accumulated the fixes which have not yet been merged (which are 
currently still the systemd and python3.pkgs.inkex fixes) in the 
spectrum branch of my nixpkgs fork, which can be used to build a 
spectrum live image: 
https://github.com/yuyuyureka/nixpkgs/commits/a1634bbc11630b7f77f276cde448e691be2f0296/