Unable to install about sops-nix

[Mic92]

modSha256 was used in 20.03. Starting with 20.09 there is vendorSha256. Can you upgrade?

[denibertovic]

@Mic92 Thanks for the insight! I wanted to try and upgrade but for some reason "niv update nixpkgs -b nixos-20.09" is saying that nixos-20.09 tag/commit doesn't exist.

Update nixpkgs
  FATAL: Cannot get latest revision for branch 'nixos-20.09' (NixOS/nixpkgs-channels)
  The request failed: Response {responseStatus = Status {statusCode = 422, statusMessage = "Unprocessable Entity"}, responseVersion = HTTP/1.1, responseHeaders = [("server","GitHub.com"),("date","Thu, 12 Nov 2020 13:44:01 GMT"),("content-type","application/json; charset=utf-8"),("content-length","130"),("status","422 Unprocessable Entity"),("x-github-media-type","github.v3; param=sha"),("access-control-expose-headers","ETag, Link, Location, Retry-After, X-GitHub-OTP, X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Used, X-RateLimit-Reset, X-OAuth-Scopes, X-Accepted-OAuth-Scopes, X-Poll-Interval, X-GitHub-Media-Type, Deprecation, Sunset"),("access-control-allow-origin","*"),("strict-transport-security","max-age=31536000; includeSubdomains; preload"),("x-frame-options","deny"),("x-content-type-options","nosniff"),("x-xss-protection","1; mode=block"),("referrer-policy","origin-when-cross-origin, strict-origin-when-cross-origin"),("content-security-policy","default-src 'none'"),("vary","Accept-Encoding, Accept, X-Requested-With"),("X-Ratelimit-Limit","60"),("X-Ratelimit-Remaining","58"),("X-Ratelimit-Reset","1605192024"),("X-Ratelimit-Used","2"),("X-GitHub-Request-Id","88A2:4222:C0146D:1A0A2B0:5FAD3C20")], responseBody = "{\"message\":\"No commit found for SHA: nixos-20.09\",\"documentation_url\":\"https://docs.github.com/rest/reference/repos#get-a-commit\"}", responseCookieJar = CJ {expose = []}, responseClose' = ResponseClose}

[denibertovic]

Nevermind. niv update nixpkgs -o NixOS -r nixpkgs -b nixos-20.09 works. I'll try with that.

[denibertovic]

hey @Mic92 I was able to install it when bumping nixpkgs to nixos-20.09! Hooray! 🍰
I was wondering though...I had to upgrade the entire system and it would be great if I could have used 20.09 just for sops-nix. If I had an entry in my source.json file nixpkgs-20.09 and left the original nixpkgs entry alone would it be possible to pass in the new nixpkgs value to ${(import ../../nix/sources.nix).sops-nix}/modules/sops somehow ? So it would get built with 20.09 but the rest of the system would be left alone.

[Mic92]

Yes. you can override pkgs here:

sops-nix/default.nix

Line 1 in b67ae45

{ pkgs ? import <nixpkgs> {} }: let

when importing it and pass it a different versions of nixpkgs. For the NixOS module it is trickier. You could create a wrapper module:

sops-nix/modules/sops/default.nix

Line 8 in b67ae45

sops-install-secrets = (pkgs.callPackage ../.. {}).sops-install-secrets;

It would be roughly like this (untested) snippet:

{ config, lib, pkgs, ... }:
{
  imports = [ 
     ({ config, lib, ... }: (import ${(import ../../nix/sources.nix).sops-nix}/modules/sops
) {inherit config lib; pkgs = import <nixos-20.09> {};})
  ];
}

[denibertovic]

Thanks @Mic92 I'll give it a try. I'm going to close this since it's resolved the issue for me.