.github/workflows/nix.yml

@@ -17,7 +17,8 @@ jobs:
       matrix:
         channel:
           - nixos-unstable
-          - nixos-25.05
+          - nixos-24.05
+          - nixos-24.11
         system:
           - aarch64-linux
           - x86_64-linux
@@ -64,7 +65,8 @@ jobs:
       matrix:
         channel:
           - nixos-unstable
-          - nixos-25.05
+          - nixos-24.05
+          - nixos-24.11
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4

.gitlab-ci.yml

@@ -10,4 +10,5 @@ build:
       - NIXPKGS_CHANNEL: nixos-unstable
         IMAGE_TAG: latest
       - NIXPKGS_CHANNEL:
-          - nixos-25.05
+          - nixos-24.05
+          - nixos-24.11

README.md

@@ -39,7 +39,8 @@ nixpkgs channel describes.
 
 | Channel        | Image Tag   | Description                                       |
 | ---            | ---         | ---                                               |
-| nixos-25.05    | nixos-25.05 | only minor versions that include security updates |
+| nixos-24.05    | nixos-24.05 | only minor versions that include security updates |
+| nixos-24.11    | nixos-24.11 | only minor versions that include security updates |
 | nixos-unstable | latest      | latest and greatest, major versions might change  |
 
 ## List of images

images/attic/default.nix

@@ -1,10 +0,0 @@
-{ docker-nixpkgs
-, attic-client
-}:
-(docker-nixpkgs.nix.override {
-  extraContents = [ attic-client ];
-}).overrideAttrs (prev: {
-  meta = (prev.meta or { }) // {
-    description = "Nix and Attic client image";
-  };
-})

images/devcontainer/default.nix

@@ -14,7 +14,7 @@
 , gnutar
 , gzip
 , iana-etc
-, iproute2
+, iproute
 , less
 , lib
 , nix
@@ -42,11 +42,7 @@ let
       nix
 
       # runtime dependencies of nix
-      # HACK: don't include the "hashed" output. It has overlapping files with
-      #       the "unbundled" output, and that breaks the build.
-      (cacert // {
-        outputs = builtins.filter (x: x != "hashed") cacert.outputs;
-      })
+      cacert
       gitReallyMinimal
       gnutar
       gzip
@@ -65,7 +61,7 @@ let
       (gcc-unwrapped // {
         outputs = builtins.filter (x: x != "libgcc") gcc-unwrapped.outputs;
       })
-      iproute2
+      iproute
     ];
   };
 

images/devenv/default.nix

@@ -3,7 +3,7 @@
 }:
 (docker-nixpkgs.nix.override {
   # only available since 24.05
-  extraContents = [ devenv ];
+  extraContents = if devenv == null then [] else [ devenv ];
 }).overrideAttrs (prev: {
   meta = (prev.meta or { }) // {
     description = "Nix and devenv image";

images/maddy/default.nix

@@ -1,6 +0,0 @@
-{ buildCLIImage
-, maddy
-}:
-buildCLIImage {
-  drv = maddy;
-}

images/nix-flakes/default.nix

@@ -1,10 +1,10 @@
 { docker-nixpkgs
-, nixVersions
+, nixFlakes
 , writeTextFile
 , extraContents ? [ ]
 }:
 docker-nixpkgs.nix.override {
-  nix = nixVersions.stable;
+  nix = nixFlakes;
   extraContents = [
     (writeTextFile {
       name = "nix.conf";
@@ -12,7 +12,6 @@ docker-nixpkgs.nix.override {
       text = ''
         accept-flake-config = true
         experimental-features = nix-command flakes
-        max-jobs = auto
       '';
     })
   ] ++ extraContents;

images/nix-unstable-static/default.nix

@@ -84,12 +84,11 @@ let
     mkdir -p libexec/nix
     ln -s /bin/nix libexec/nix/build-remote
 
-    # Enable flakes and parallel building
+    # Enable flakes
     mkdir -p etc/nix
     cat <<NIX_CONFIG > etc/nix/nix.conf
     accept-flake-config = true
     experimental-features = nix-command flakes
-    max-jobs = auto
     NIX_CONFIG
 
     # Add run-as-user script

images/nix-unstable/default.nix

@@ -1,6 +1,7 @@
 { docker-nixpkgs
 , pkgs
+, nixUnstable
 }:
 docker-nixpkgs.nix.override {
-  nix = pkgs.nixVersions.latest;
+  nix = pkgs.nixVersions.latest or pkgs.nixUnstable;
 }

images/pocket-id/default.nix

@@ -1,6 +0,0 @@
-{ buildCLIImage
-, pocket-id
-}:
-buildCLIImage {
-  drv = pocket-id;
-}