refactor(#2111): remove nixpkgs-unstable, source claude-code from main nixpkgs
This commit is contained in:
parent
26dd8b0d34
commit
ae41e39dfb
8 changed files with 26 additions and 147 deletions
|
|
@ -76,14 +76,13 @@ socket without needing a clean reinstall.
|
|||
|
||||
## `claude-code` is unfree
|
||||
|
||||
The flake pins it to **nixpkgs-unstable** via
|
||||
`overlays.claude-unstable` (stable lags too far). The overlay sets
|
||||
`config.allowUnfreePredicate` on its unstable import to whitelist
|
||||
`claude-code` specifically — scoped, only this one package.
|
||||
`harness-base.nix` does the same at the container level because
|
||||
each per-agent `nixosConfiguration` evaluates its own nixpkgs
|
||||
instance and the operator's host-level `allowUnfree` does **not**
|
||||
propagate in. Operators don't need to set anything on their side.
|
||||
`claude-code` comes from the flake's main `nixpkgs` (nixos-26.05).
|
||||
It's unfree, so `harness-base.nix` sets `config.allowUnfreePredicate`
|
||||
at the container level to whitelist `claude-code` specifically —
|
||||
scoped, only this one package. This is needed because each per-agent
|
||||
`nixosConfiguration` evaluates its own nixpkgs instance and the
|
||||
operator's host-level `allowUnfree` does **not** propagate in.
|
||||
Operators don't need to set anything on their side.
|
||||
|
||||
## Claude credentials are per-agent
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue