.\" -*- mode: troff; coding: utf-8 -*-
.TH "nix" "1" ""
.PP
\fBWarning\fR: This program is \fBexperimental\fR and its interface is subject to change.
.SH Name
\fCnix\fR - a tool for reproducible and declarative configuration management
.SH Synopsis
\fCnix\fR [\fIoption\fR\[u2026]] \fIsubcommand\fR
.PP
where \fIsubcommand\fR is one of the following:
.PP
\fBMain commands:\fR
.IP "\(bu" 2
\fB\fCnix build\fR\fR (\fI./nix3-build.md\fR) - build a derivation or fetch a store path
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix develop\fR\fR (\fI./nix3-develop.md\fR) - run a bash shell that provides the build environment of a derivation
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix flake\fR\fR (\fI./nix3-flake.md\fR) - manage Nix flakes
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix help\fR\fR (\fI./nix3-help.md\fR) - show help about \fCnix\fR or a particular subcommand
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix profile\fR\fR (\fI./nix3-profile.md\fR) - manage Nix profiles
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix repl\fR\fR (\fI./nix3-repl.md\fR) - start an interactive environment for evaluating Nix expressions
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix run\fR\fR (\fI./nix3-run.md\fR) - run a Nix application
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix search\fR\fR (\fI./nix3-search.md\fR) - search for packages
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix shell\fR\fR (\fI./nix3-shell.md\fR) - run a shell in which the specified packages are available
.LP
\fBInfrequently used commands:\fR
.IP "\(bu" 2
\fB\fCnix bundle\fR\fR (\fI./nix3-bundle.md\fR) - bundle an application so that it works outside of the Nix store
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix copy\fR\fR (\fI./nix3-copy.md\fR) - copy paths between Nix stores
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix edit\fR\fR (\fI./nix3-edit.md\fR) - open the Nix expression of a Nix package in $EDITOR
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix eval\fR\fR (\fI./nix3-eval.md\fR) - evaluate a Nix expression
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix fmt\fR\fR (\fI./nix3-fmt.md\fR) - reformat your code in the standard style
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix log\fR\fR (\fI./nix3-log.md\fR) - show the build log of the specified packages or paths, if available
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix path-info\fR\fR (\fI./nix3-path-info.md\fR) - query information about store paths
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix registry\fR\fR (\fI./nix3-registry.md\fR) - manage the flake registry
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix why-depends\fR\fR (\fI./nix3-why-depends.md\fR) - show why a package has another package in its closure
.LP
\fBUtility/scripting commands:\fR
.IP "\(bu" 2
\fB\fCnix daemon\fR\fR (\fI./nix3-daemon.md\fR) - daemon to perform store operations on behalf of non-root clients
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix describe-stores\fR\fR (\fI./nix3-describe-stores.md\fR) - show registered store types and their available options
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix hash\fR\fR (\fI./nix3-hash.md\fR) - compute and convert cryptographic hashes
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix key\fR\fR (\fI./nix3-key.md\fR) - generate and convert Nix signing keys
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix nar\fR\fR (\fI./nix3-nar.md\fR) - create or inspect NAR files
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix print-dev-env\fR\fR (\fI./nix3-print-dev-env.md\fR) - print shell code that can be sourced by bash to reproduce the build environment of a derivation
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix realisation\fR\fR (\fI./nix3-realisation.md\fR) - manipulate a Nix realisation
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix show-config\fR\fR (\fI./nix3-show-config.md\fR) - show the Nix configuration
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix show-derivation\fR\fR (\fI./nix3-show-derivation.md\fR) - show the contents of a store derivation
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix store\fR\fR (\fI./nix3-store.md\fR) - manipulate a Nix store
.LP
\fBCommands for upgrading or troubleshooting your Nix installation:\fR
.IP "\(bu" 2
\fB\fCnix doctor\fR\fR (\fI./nix3-doctor.md\fR) - check your system for potential problems and print a PASS or FAIL for each check
.if n \
.sp -1
.if t \
.sp -0.25v
.IP "\(bu" 2
\fB\fCnix upgrade-nix\fR\fR (\fI./nix3-upgrade-nix.md\fR) - upgrade Nix to the latest stable version
.SH Examples
.IP "\(bu" 2
Create a new flake:
.LP
.EX
# nix flake new hello
# cd hello
.EE
.IP "\(bu" 2
Build the flake in the current directory:
.LP
.EX
# nix build
# ./result/bin/hello
Hello, world!
.EE
.IP "\(bu" 2
Run the flake in the current directory:
.LP
.EX
# nix run
Hello, world!
.EE
.IP "\(bu" 2
Start a development shell for hacking on this flake:
.LP
.EX
# nix develop
# unpackPhase
# cd hello-*
# configurePhase
# buildPhase
# ./hello
Hello, world!
# installPhase
# ../outputs/out/bin/hello
Hello, world!
.EE
.SH Description
Nix is a tool for building software, configurations and other
artifacts in a reproducible and declarative way. For more information,
see the \fBNix homepage\fR (\fIhttps://nixos.org/\fR) or the \fBNix
manual\fR (\fIhttps://nixos.org/manual/nix/stable/\fR).
.SH Installables
Many \fCnix\fR subcommands operate on one or more \fIinstallables\fR. These are
command line arguments that represent something that can be built in
the Nix store. Here are the recognised types of installables:
.IP "\(bu" 2
\fBFlake output attributes\fR: \fCnixpkgs#hello\fR
.IP
These have the form \fIflakeref\fR[\fC#\fR\fIattrpath\fR], where \fIflakeref\fR is a
flake reference and \fIattrpath\fR is an optional attribute path. For
more information on flakes, see \fBthe \fCnix flake\fR manual
page\fR (\fI./nix3-flake.md\fR).  Flake references are most commonly a flake
identifier in the flake registry (e.g. \fCnixpkgs\fR), or a raw path
(e.g. \fC/path/to/my-flake\fR or \fC.\fR or \fC../foo\fR), or a full URL
(e.g. \fCgithub:nixos/nixpkgs\fR or \fCpath:.\fR)
.IP
When the flake reference is a raw path (a path without any URL
scheme), it is interpreted as a \fCpath:\fR or \fCgit+file:\fR url in the following
way:
.RS
.IP "\(bu" 2
If the path is within a Git repository, then the url will be of the form
\fCgit+file://[GIT_REPO_ROOT]?dir=[RELATIVE_FLAKE_DIR_PATH]\fR
where \fCGIT_REPO_ROOT\fR is the path to the root of the git repository,
and \fCRELATIVE_FLAKE_DIR_PATH\fR is the path (relative to the directory
root) of the closest parent of the given path that contains a \fCflake.nix\fR within
the git repository.
If no such directory exists, then Nix will error-out.
.RE
.IP
Note that the search will only include files indexed by git. In particular, files
which are matched by \fC.gitignore\fR or have never been \fCgit add\fR-ed will not be
available in the flake. If this is undesirable, specify \fCpath:<directory>\fR explicitly;
.IP
For example, if \fC/foo/bar\fR is a git repository with the following structure:
\fC
\&.
└── baz
├── blah
│   └── file.txt
└── flake.nix
\fR
.IP
Then \fC/foo/bar/baz/blah\fR will resolve to \fCgit+file:///foo/bar?dir=baz\fR
.RS
.IP "\(bu" 2
If the supplied path is not a git repository, then the url will have the form
\fCpath:FLAKE_DIR_PATH\fR where \fCFLAKE_DIR_PATH\fR is the closest parent
of the supplied path that contains a \fCflake.nix\fR file (within the same file-system).
If no such directory exists, then Nix will error-out.
.RE
.IP
For example, if \fC/foo/bar/flake.nix\fR exists, then \fC/foo/bar/baz/\fR will resolve to
\fCpath:/foo/bar\fR
.IP
If \fIattrpath\fR is omitted, Nix tries some default values; for most
subcommands, the default is \fCpackages.\fR\fIsystem\fR\fC.default\fR
(e.g. \fCpackages.x86_64-linux.default\fR), but some subcommands have
other defaults. If \fIattrpath\fR \fIis\fR specified, \fIattrpath\fR is
interpreted as relative to one or more prefixes; for most
subcommands, these are \fCpackages.\fR\fIsystem\fR,
\fClegacyPackages.*system*\fR and the empty prefix. Thus, on
\fCx86_64-linux\fR \fCnix build nixpkgs#hello\fR will try to build the
attributes \fCpackages.x86_64-linux.hello\fR,
\fClegacyPackages.x86_64-linux.hello\fR and \fChello\fR.
.IP "\(bu" 2
\fBStore paths\fR: \fC/nix/store/v5sv61sszx301i0x6xysaqzla09nksnd-hello-2.10\fR
.IP
These are paths inside the Nix store, or symlinks that resolve to a
path in the Nix store.
.IP "\(bu" 2
\fBStore derivations\fR: \fC/nix/store/p7gp6lxdg32h4ka1q398wd9r2zkbbz2v-hello-2.10.drv\fR
.IP
Store derivations are store paths with extension \fC.drv\fR and are a
low-level representation of a build-time dependency graph used
internally by Nix. By default, if you pass a store derivation to a
\fCnix\fR subcommand, it will operate on the \fIoutput paths\fR of the
derivation. For example, \fCnix path-info\fR prints information about
the output paths:
.LP
.EX
# nix path-info --json /nix/store/p7gp6lxdg32h4ka1q398wd9r2zkbbz2v-hello-2.10.drv
[{\(dqpath\(dq:\(dq/nix/store/v5sv61sszx301i0x6xysaqzla09nksnd-hello-2.10\(dq,…}]
.EE
.IP
If you want to operate on the store derivation itself, pass the
\fC--derivation\fR flag.
.IP "\(bu" 2
\fBNix attributes\fR: \fC--file /path/to/nixpkgs hello\fR
.IP
When the \fC-f\fR / \fC--file\fR \fIpath\fR option is given, installables are
interpreted as attribute paths referencing a value returned by
evaluating the Nix file \fIpath\fR.
.IP "\(bu" 2
\fBNix expressions\fR: \fC--expr '(import <nixpkgs> {}).hello.overrideDerivation (prev: { name = \(dqmy-hello\(dq; })'\fR.
.IP
When the \fC--expr\fR option is given, all installables are interpreted
as Nix expressions. You may need to specify \fC--impure\fR if the
expression references impure inputs (such as \fC<nixpkgs>\fR).
.LP
For most commands, if no installable is specified, the default is \fC.\fR,
i.e. Nix will operate on the default flake output attribute of the
flake in the current directory.
.SH Nix stores
Most \fCnix\fR subcommands operate on a \fINix store\fR.
.PP
TODO: list store types, options
.SH Options
.IP "\(bu" 2
\fC--help\fR
.br
Show usage information.
.IP "\(bu" 2
\fC--offline\fR
.br
Disable substituters and consider all previously downloaded files up-to-date.
.IP "\(bu" 2
\fC--option\fR \fIname\fR \fIvalue\fR
.br
Set the Nix configuration setting \fIname\fR to \fIvalue\fR (overriding \fCnix.conf\fR).
.IP "\(bu" 2
\fC--refresh\fR
.br
Consider all previously downloaded files out-of-date.
.IP "\(bu" 2
\fC--version\fR
.br
Show version information.
.LP
\fBLogging-related options:\fR
.IP "\(bu" 2
\fC--debug\fR
.br
Set the logging verbosity level to \[u2018]debug\[u2019].
.IP "\(bu" 2
\fC--log-format\fR \fIformat\fR
.br
Set the format of log output; one of \fCraw\fR, \fCinternal-json\fR, \fCbar\fR or \fCbar-with-logs\fR.
.IP "\(bu" 2
\fC--print-build-logs\fR / \fC-L\fR
.br
Print full build logs on standard error.
.IP "\(bu" 2
\fC--quiet\fR
.br
Decrease the logging verbosity level.
.IP "\(bu" 2
\fC--verbose\fR / \fC-v\fR
.br
Increase the logging verbosity level.
.LP
\fBOptions to override configuration settings:\fR
.IP "\(bu" 2
\fC--accept-flake-config\fR
.br
Enable the \fCaccept-flake-config\fR setting.
.IP "\(bu" 2
\fC--access-tokens\fR \fIvalue\fR
.br
Set the \fCaccess-tokens\fR setting.
.IP "\(bu" 2
\fC--allow-dirty\fR
.br
Enable the \fCallow-dirty\fR setting.
.IP "\(bu" 2
\fC--allow-import-from-derivation\fR
.br
Enable the \fCallow-import-from-derivation\fR setting.
.IP "\(bu" 2
\fC--allow-new-privileges\fR
.br
Enable the \fCallow-new-privileges\fR setting.
.IP "\(bu" 2
\fC--allow-symlinked-store\fR
.br
Enable the \fCallow-symlinked-store\fR setting.
.IP "\(bu" 2
\fC--allow-unsafe-native-code-during-evaluation\fR
.br
Enable the \fCallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 2
\fC--allowed-impure-host-deps\fR \fIvalue\fR
.br
Set the \fCallowed-impure-host-deps\fR setting.
.IP "\(bu" 2
\fC--allowed-uris\fR \fIvalue\fR
.br
Set the \fCallowed-uris\fR setting.
.IP "\(bu" 2
\fC--allowed-users\fR \fIvalue\fR
.br
Set the \fCallowed-users\fR setting.
.IP "\(bu" 2
\fC--auto-optimise-store\fR
.br
Enable the \fCauto-optimise-store\fR setting.
.IP "\(bu" 2
\fC--bash-prompt\fR \fIvalue\fR
.br
Set the \fCbash-prompt\fR setting.
.IP "\(bu" 2
\fC--bash-prompt-suffix\fR \fIvalue\fR
.br
Set the \fCbash-prompt-suffix\fR setting.
.IP "\(bu" 2
\fC--build-hook\fR \fIvalue\fR
.br
Set the \fCbuild-hook\fR setting.
.IP "\(bu" 2
\fC--build-poll-interval\fR \fIvalue\fR
.br
Set the \fCbuild-poll-interval\fR setting.
.IP "\(bu" 2
\fC--build-users-group\fR \fIvalue\fR
.br
Set the \fCbuild-users-group\fR setting.
.IP "\(bu" 2
\fC--builders\fR \fIvalue\fR
.br
Set the \fCbuilders\fR setting.
.IP "\(bu" 2
\fC--builders-use-substitutes\fR
.br
Enable the \fCbuilders-use-substitutes\fR setting.
.IP "\(bu" 2
\fC--commit-lockfile-summary\fR \fIvalue\fR
.br
Set the \fCcommit-lockfile-summary\fR setting.
.IP "\(bu" 2
\fC--compress-build-log\fR
.br
Enable the \fCcompress-build-log\fR setting.
.IP "\(bu" 2
\fC--connect-timeout\fR \fIvalue\fR
.br
Set the \fCconnect-timeout\fR setting.
.IP "\(bu" 2
\fC--cores\fR \fIvalue\fR
.br
Set the \fCcores\fR setting.
.IP "\(bu" 2
\fC--diff-hook\fR \fIvalue\fR
.br
Set the \fCdiff-hook\fR setting.
.IP "\(bu" 2
\fC--download-attempts\fR \fIvalue\fR
.br
Set the \fCdownload-attempts\fR setting.
.IP "\(bu" 2
\fC--enforce-determinism\fR
.br
Enable the \fCenforce-determinism\fR setting.
.IP "\(bu" 2
\fC--eval-cache\fR
.br
Enable the \fCeval-cache\fR setting.
.IP "\(bu" 2
\fC--experimental-features\fR \fIvalue\fR
.br
Set the \fCexperimental-features\fR setting.
.IP "\(bu" 2
\fC--extra-access-tokens\fR \fIvalue\fR
.br
Append to the \fCaccess-tokens\fR setting.
.IP "\(bu" 2
\fC--extra-allowed-impure-host-deps\fR \fIvalue\fR
.br
Append to the \fCallowed-impure-host-deps\fR setting.
.IP "\(bu" 2
\fC--extra-allowed-uris\fR \fIvalue\fR
.br
Append to the \fCallowed-uris\fR setting.
.IP "\(bu" 2
\fC--extra-allowed-users\fR \fIvalue\fR
.br
Append to the \fCallowed-users\fR setting.
.IP "\(bu" 2
\fC--extra-experimental-features\fR \fIvalue\fR
.br
Append to the \fCexperimental-features\fR setting.
.IP "\(bu" 2
\fC--extra-extra-platforms\fR \fIvalue\fR
.br
Append to the \fCextra-platforms\fR setting.
.IP "\(bu" 2
\fC--extra-hashed-mirrors\fR \fIvalue\fR
.br
Append to the \fChashed-mirrors\fR setting.
.IP "\(bu" 2
\fC--extra-ignored-acls\fR \fIvalue\fR
.br
Append to the \fCignored-acls\fR setting.
.IP "\(bu" 2
\fC--extra-nix-path\fR \fIvalue\fR
.br
Append to the \fCnix-path\fR setting.
.IP "\(bu" 2
\fC--extra-platforms\fR \fIvalue\fR
.br
Set the \fCextra-platforms\fR setting.
.IP "\(bu" 2
\fC--extra-plugin-files\fR \fIvalue\fR
.br
Append to the \fCplugin-files\fR setting.
.IP "\(bu" 2
\fC--extra-sandbox-paths\fR \fIvalue\fR
.br
Append to the \fCsandbox-paths\fR setting.
.IP "\(bu" 2
\fC--extra-secret-key-files\fR \fIvalue\fR
.br
Append to the \fCsecret-key-files\fR setting.
.IP "\(bu" 2
\fC--extra-substituters\fR \fIvalue\fR
.br
Append to the \fCsubstituters\fR setting.
.IP "\(bu" 2
\fC--extra-system-features\fR \fIvalue\fR
.br
Append to the \fCsystem-features\fR setting.
.IP "\(bu" 2
\fC--extra-trusted-public-keys\fR \fIvalue\fR
.br
Append to the \fCtrusted-public-keys\fR setting.
.IP "\(bu" 2
\fC--extra-trusted-substituters\fR \fIvalue\fR
.br
Append to the \fCtrusted-substituters\fR setting.
.IP "\(bu" 2
\fC--extra-trusted-users\fR \fIvalue\fR
.br
Append to the \fCtrusted-users\fR setting.
.IP "\(bu" 2
\fC--fallback\fR
.br
Enable the \fCfallback\fR setting.
.IP "\(bu" 2
\fC--filter-syscalls\fR
.br
Enable the \fCfilter-syscalls\fR setting.
.IP "\(bu" 2
\fC--flake-registry\fR \fIvalue\fR
.br
Set the \fCflake-registry\fR setting.
.IP "\(bu" 2
\fC--fsync-metadata\fR
.br
Enable the \fCfsync-metadata\fR setting.
.IP "\(bu" 2
\fC--gc-reserved-space\fR \fIvalue\fR
.br
Set the \fCgc-reserved-space\fR setting.
.IP "\(bu" 2
\fC--hashed-mirrors\fR \fIvalue\fR
.br
Set the \fChashed-mirrors\fR setting.
.IP "\(bu" 2
\fC--http-connections\fR \fIvalue\fR
.br
Set the \fChttp-connections\fR setting.
.IP "\(bu" 2
\fC--http2\fR
.br
Enable the \fChttp2\fR setting.
.IP "\(bu" 2
\fC--ignored-acls\fR \fIvalue\fR
.br
Set the \fCignored-acls\fR setting.
.IP "\(bu" 2
\fC--impersonate-linux-26\fR
.br
Enable the \fCimpersonate-linux-26\fR setting.
.IP "\(bu" 2
\fC--keep-build-log\fR
.br
Enable the \fCkeep-build-log\fR setting.
.IP "\(bu" 2
\fC--keep-derivations\fR
.br
Enable the \fCkeep-derivations\fR setting.
.IP "\(bu" 2
\fC--keep-env-derivations\fR
.br
Enable the \fCkeep-env-derivations\fR setting.
.IP "\(bu" 2
\fC--keep-failed\fR
.br
Enable the \fCkeep-failed\fR setting.
.IP "\(bu" 2
\fC--keep-going\fR
.br
Enable the \fCkeep-going\fR setting.
.IP "\(bu" 2
\fC--keep-outputs\fR
.br
Enable the \fCkeep-outputs\fR setting.
.IP "\(bu" 2
\fC--log-lines\fR \fIvalue\fR
.br
Set the \fClog-lines\fR setting.
.IP "\(bu" 2
\fC--max-build-log-size\fR \fIvalue\fR
.br
Set the \fCmax-build-log-size\fR setting.
.IP "\(bu" 2
\fC--max-free\fR \fIvalue\fR
.br
Set the \fCmax-free\fR setting.
.IP "\(bu" 2
\fC--max-jobs\fR \fIvalue\fR
.br
Set the \fCmax-jobs\fR setting.
.IP "\(bu" 2
\fC--max-silent-time\fR \fIvalue\fR
.br
Set the \fCmax-silent-time\fR setting.
.IP "\(bu" 2
\fC--min-free\fR \fIvalue\fR
.br
Set the \fCmin-free\fR setting.
.IP "\(bu" 2
\fC--min-free-check-interval\fR \fIvalue\fR
.br
Set the \fCmin-free-check-interval\fR setting.
.IP "\(bu" 2
\fC--nar-buffer-size\fR \fIvalue\fR
.br
Set the \fCnar-buffer-size\fR setting.
.IP "\(bu" 2
\fC--narinfo-cache-negative-ttl\fR \fIvalue\fR
.br
Set the \fCnarinfo-cache-negative-ttl\fR setting.
.IP "\(bu" 2
\fC--narinfo-cache-positive-ttl\fR \fIvalue\fR
.br
Set the \fCnarinfo-cache-positive-ttl\fR setting.
.IP "\(bu" 2
\fC--netrc-file\fR \fIvalue\fR
.br
Set the \fCnetrc-file\fR setting.
.IP "\(bu" 2
\fC--nix-path\fR \fIvalue\fR
.br
Set the \fCnix-path\fR setting.
.IP "\(bu" 2
\fC--no-accept-flake-config\fR
.br
Disable the \fCaccept-flake-config\fR setting.
.IP "\(bu" 2
\fC--no-allow-dirty\fR
.br
Disable the \fCallow-dirty\fR setting.
.IP "\(bu" 2
\fC--no-allow-import-from-derivation\fR
.br
Disable the \fCallow-import-from-derivation\fR setting.
.IP "\(bu" 2
\fC--no-allow-new-privileges\fR
.br
Disable the \fCallow-new-privileges\fR setting.
.IP "\(bu" 2
\fC--no-allow-symlinked-store\fR
.br
Disable the \fCallow-symlinked-store\fR setting.
.IP "\(bu" 2
\fC--no-allow-unsafe-native-code-during-evaluation\fR
.br
Disable the \fCallow-unsafe-native-code-during-evaluation\fR setting.
.IP "\(bu" 2
\fC--no-auto-optimise-store\fR
.br
Disable the \fCauto-optimise-store\fR setting.
.IP "\(bu" 2
\fC--no-builders-use-substitutes\fR
.br
Disable the \fCbuilders-use-substitutes\fR setting.
.IP "\(bu" 2
\fC--no-compress-build-log\fR
.br
Disable the \fCcompress-build-log\fR setting.
.IP "\(bu" 2
\fC--no-enforce-determinism\fR
.br
Disable the \fCenforce-determinism\fR setting.
.IP "\(bu" 2
\fC--no-eval-cache\fR
.br
Disable the \fCeval-cache\fR setting.
.IP "\(bu" 2
\fC--no-fallback\fR
.br
Disable the \fCfallback\fR setting.
.IP "\(bu" 2
\fC--no-filter-syscalls\fR
.br
Disable the \fCfilter-syscalls\fR setting.
.IP "\(bu" 2
\fC--no-fsync-metadata\fR
.br
Disable the \fCfsync-metadata\fR setting.
.IP "\(bu" 2
\fC--no-http2\fR
.br
Disable the \fChttp2\fR setting.
.IP "\(bu" 2
\fC--no-impersonate-linux-26\fR
.br
Disable the \fCimpersonate-linux-26\fR setting.
.IP "\(bu" 2
\fC--no-keep-build-log\fR
.br
Disable the \fCkeep-build-log\fR setting.
.IP "\(bu" 2
\fC--no-keep-derivations\fR
.br
Disable the \fCkeep-derivations\fR setting.
.IP "\(bu" 2
\fC--no-keep-env-derivations\fR
.br
Disable the \fCkeep-env-derivations\fR setting.
.IP "\(bu" 2
\fC--no-keep-failed\fR
.br
Disable the \fCkeep-failed\fR setting.
.IP "\(bu" 2
\fC--no-keep-going\fR
.br
Disable the \fCkeep-going\fR setting.
.IP "\(bu" 2
\fC--no-keep-outputs\fR
.br
Disable the \fCkeep-outputs\fR setting.
.IP "\(bu" 2
\fC--no-preallocate-contents\fR
.br
Disable the \fCpreallocate-contents\fR setting.
.IP "\(bu" 2
\fC--no-print-missing\fR
.br
Disable the \fCprint-missing\fR setting.
.IP "\(bu" 2
\fC--no-pure-eval\fR
.br
Disable the \fCpure-eval\fR setting.
.IP "\(bu" 2
\fC--no-require-sigs\fR
.br
Disable the \fCrequire-sigs\fR setting.
.IP "\(bu" 2
\fC--no-restrict-eval\fR
.br
Disable the \fCrestrict-eval\fR setting.
.IP "\(bu" 2
\fC--no-run-diff-hook\fR
.br
Disable the \fCrun-diff-hook\fR setting.
.IP "\(bu" 2
\fC--no-sandbox\fR
.br
Disable sandboxing.
.IP "\(bu" 2
\fC--no-sandbox-fallback\fR
.br
Disable the \fCsandbox-fallback\fR setting.
.IP "\(bu" 2
\fC--no-show-trace\fR
.br
Disable the \fCshow-trace\fR setting.
.IP "\(bu" 2
\fC--no-substitute\fR
.br
Disable the \fCsubstitute\fR setting.
.IP "\(bu" 2
\fC--no-sync-before-registering\fR
.br
Disable the \fCsync-before-registering\fR setting.
.IP "\(bu" 2
\fC--no-trace-function-calls\fR
.br
Disable the \fCtrace-function-calls\fR setting.
.IP "\(bu" 2
\fC--no-use-case-hack\fR
.br
Disable the \fCuse-case-hack\fR setting.
.IP "\(bu" 2
\fC--no-use-registries\fR
.br
Disable the \fCuse-registries\fR setting.
.IP "\(bu" 2
\fC--no-use-sqlite-wal\fR
.br
Disable the \fCuse-sqlite-wal\fR setting.
.IP "\(bu" 2
\fC--no-warn-dirty\fR
.br
Disable the \fCwarn-dirty\fR setting.
.IP "\(bu" 2
\fC--plugin-files\fR \fIvalue\fR
.br
Set the \fCplugin-files\fR setting.
.IP "\(bu" 2
\fC--post-build-hook\fR \fIvalue\fR
.br
Set the \fCpost-build-hook\fR setting.
.IP "\(bu" 2
\fC--pre-build-hook\fR \fIvalue\fR
.br
Set the \fCpre-build-hook\fR setting.
.IP "\(bu" 2
\fC--preallocate-contents\fR
.br
Enable the \fCpreallocate-contents\fR setting.
.IP "\(bu" 2
\fC--print-missing\fR
.br
Enable the \fCprint-missing\fR setting.
.IP "\(bu" 2
\fC--pure-eval\fR
.br
Enable the \fCpure-eval\fR setting.
.IP "\(bu" 2
\fC--relaxed-sandbox\fR
.br
Enable sandboxing, but allow builds to disable it.
.IP "\(bu" 2
\fC--repeat\fR \fIvalue\fR
.br
Set the \fCrepeat\fR setting.
.IP "\(bu" 2
\fC--require-sigs\fR
.br
Enable the \fCrequire-sigs\fR setting.
.IP "\(bu" 2
\fC--restrict-eval\fR
.br
Enable the \fCrestrict-eval\fR setting.
.IP "\(bu" 2
\fC--run-diff-hook\fR
.br
Enable the \fCrun-diff-hook\fR setting.
.IP "\(bu" 2
\fC--sandbox\fR
.br
Enable sandboxing.
.IP "\(bu" 2
\fC--sandbox-build-dir\fR \fIvalue\fR
.br
Set the \fCsandbox-build-dir\fR setting.
.IP "\(bu" 2
\fC--sandbox-dev-shm-size\fR \fIvalue\fR
.br
Set the \fCsandbox-dev-shm-size\fR setting.
.IP "\(bu" 2
\fC--sandbox-fallback\fR
.br
Enable the \fCsandbox-fallback\fR setting.
.IP "\(bu" 2
\fC--sandbox-paths\fR \fIvalue\fR
.br
Set the \fCsandbox-paths\fR setting.
.IP "\(bu" 2
\fC--secret-key-files\fR \fIvalue\fR
.br
Set the \fCsecret-key-files\fR setting.
.IP "\(bu" 2
\fC--show-trace\fR
.br
Enable the \fCshow-trace\fR setting.
.IP "\(bu" 2
\fC--stalled-download-timeout\fR \fIvalue\fR
.br
Set the \fCstalled-download-timeout\fR setting.
.IP "\(bu" 2
\fC--store\fR \fIvalue\fR
.br
Set the \fCstore\fR setting.
.IP "\(bu" 2
\fC--substitute\fR
.br
Enable the \fCsubstitute\fR setting.
.IP "\(bu" 2
\fC--substituters\fR \fIvalue\fR
.br
Set the \fCsubstituters\fR setting.
.IP "\(bu" 2
\fC--sync-before-registering\fR
.br
Enable the \fCsync-before-registering\fR setting.
.IP "\(bu" 2
\fC--system\fR \fIvalue\fR
.br
Set the \fCsystem\fR setting.
.IP "\(bu" 2
\fC--system-features\fR \fIvalue\fR
.br
Set the \fCsystem-features\fR setting.
.IP "\(bu" 2
\fC--tarball-ttl\fR \fIvalue\fR
.br
Set the \fCtarball-ttl\fR setting.
.IP "\(bu" 2
\fC--timeout\fR \fIvalue\fR
.br
Set the \fCtimeout\fR setting.
.IP "\(bu" 2
\fC--trace-function-calls\fR
.br
Enable the \fCtrace-function-calls\fR setting.
.IP "\(bu" 2
\fC--trusted-public-keys\fR \fIvalue\fR
.br
Set the \fCtrusted-public-keys\fR setting.
.IP "\(bu" 2
\fC--trusted-substituters\fR \fIvalue\fR
.br
Set the \fCtrusted-substituters\fR setting.
.IP "\(bu" 2
\fC--trusted-users\fR \fIvalue\fR
.br
Set the \fCtrusted-users\fR setting.
.IP "\(bu" 2
\fC--use-case-hack\fR
.br
Enable the \fCuse-case-hack\fR setting.
.IP "\(bu" 2
\fC--use-registries\fR
.br
Enable the \fCuse-registries\fR setting.
.IP "\(bu" 2
\fC--use-sqlite-wal\fR
.br
Enable the \fCuse-sqlite-wal\fR setting.
.IP "\(bu" 2
\fC--user-agent-suffix\fR \fIvalue\fR
.br
Set the \fCuser-agent-suffix\fR setting.
.IP "\(bu" 2
\fC--warn-dirty\fR
.br
Enable the \fCwarn-dirty\fR setting.