hive-ci: build locally when a remote builder is unreachable

The CI container set `nix.settings.sandbox-fallback` but never
`nix.settings.fallback`, so a cache-miss build with an unreachable
remote build machine had no local fallback and hard-failed. A single
down or DNS-unresolvable `nix.buildMachines` host therefore turned every
fresh `nix flake check` red hive-wide, in ~30s, even for diffs that
can't affect the nix build (pure JS/markdown). Add
`nix.settings.fallback = true` so CI degrades to a slower local build
instead of failing.
This commit is contained in:
atlas 2026-06-21 14:47:15 +02:00 committed by mara
commit 86ad8bc914

View file

@ -393,6 +393,13 @@ in
# sandboxing always fails. Fall back to unsandboxed builds.
# See docs/gotchas.md.
nix.settings.sandbox-fallback = lib.mkForce true;
# Build locally when a configured remote builder is unreachable
# instead of hard-failing. Without this a single down/unresolvable
# build machine (e.g. a DNS blip on a `nix.buildMachines` host)
# turns every cache-miss `nix flake check` red hive-wide — CI must
# degrade to a slower local build, not fail. (`sandbox-fallback`
# above is unrelated: it only governs the sandbox, not builders.)
nix.settings.fallback = lib.mkForce true;
nix.settings.experimental-features = [
"nix-command"
"flakes"