Warning
This program is experimental and its interface is subject to change.
Name
nix
- a tool for reproducible and declarative configuration management
Synopsis
nix
[option...] subcommand
where subcommand is one of the following:
Help commands:
nix help
- show help aboutnix
or a particular subcommandnix help-stores
- show help about store types and their settings
Main commands:
nix build
- build a derivation or fetch a store pathnix develop
- run a bash shell that provides the build environment of a derivationnix flake
- manage Nix flakesnix profile
- manage Nix profilesnix run
- run a Nix applicationnix search
- search for packagesnix shell
- run a shell in which the specified packages are available
Main commands:
nix repl
- start an interactive environment for evaluating Nix expressions
Infrequently used commands:
nix bundle
- bundle an application so that it works outside of the Nix storenix copy
- copy paths between Nix storesnix edit
- open the Nix expression of a Nix package in $EDITORnix eval
- evaluate a Nix expressionnix fmt
- reformat your code in the standard stylenix log
- show the build log of the specified packages or paths, if availablenix path-info
- query information about store pathsnix registry
- manage the flake registrynix why-depends
- show why a package has another package in its closure
Utility/scripting commands:
nix daemon
- daemon to perform store operations on behalf of non-root clientsnix derivation
- Work with derivations, Nix's notion of a build plan.nix hash
- compute and convert cryptographic hashesnix key
- generate and convert Nix signing keysnix nar
- create or inspect NAR filesnix print-dev-env
- print shell code that can be sourced by bash to reproduce the build environment of a derivationnix realisation
- manipulate a Nix realisationnix show-config
- show the Nix configuration or the value of a specific settingnix store
- manipulate a Nix store
Commands for upgrading or troubleshooting your Nix installation:
nix doctor
- check your system for potential problems and print a PASS or FAIL for each checknix upgrade-nix
- upgrade Nix to the stable version declared in Nixpkgs
Examples
-
Create a new flake:
# nix flake new hello # cd hello
-
Build the flake in the current directory:
# nix build # ./result/bin/hello Hello, world!
-
Run the flake in the current directory:
# nix run Hello, world!
-
Start a development shell for hacking on this flake:
# nix develop # unpackPhase # cd hello-* # configurePhase # buildPhase # ./hello Hello, world! # installPhase # ../outputs/out/bin/hello Hello, world!
Description
Nix is a tool for building software, configurations and other artifacts in a reproducible and declarative way. For more information, see the Nix homepage or the Nix manual.
Installables
Warning
Installables are part of the unstablenix-command
experimental feature, and subject to change without notice.
Many nix
subcommands operate on one or more installables.
These are command line arguments that represent something that can be realised in the Nix store.
The following types of installable are supported by most commands:
- Flake output attribute (experimental)
- Store path
- Nix file, optionally qualified by an attribute path
- Nix expression, optionally qualified by an attribute path
For most commands, if no installable is specified, .
is assumed.
That is, Nix will operate on the default flake output attribute of the flake in the current directory.
Flake output attribute
Warning
Flake output attribute installables depend on both theflakes
andnix-command
experimental features, and subject to change without notice.
Example: nixpkgs#hello
These have the form flakeref[#
attrpath], where flakeref is a
flake reference and attrpath is an optional attribute path. For
more information on flakes, see the nix flake
manual
page. Flake references are most commonly a flake
identifier in the flake registry (e.g. nixpkgs
), or a raw path
(e.g. /path/to/my-flake
or .
or ../foo
), or a full URL
(e.g. github:nixos/nixpkgs
or path:.
)
When the flake reference is a raw path (a path without any URL
scheme), it is interpreted as a path:
or git+file:
url in the following
way:
-
If the path is within a Git repository, then the url will be of the form
git+file://[GIT_REPO_ROOT]?dir=[RELATIVE_FLAKE_DIR_PATH]
whereGIT_REPO_ROOT
is the path to the root of the git repository, andRELATIVE_FLAKE_DIR_PATH
is the path (relative to the directory root) of the closest parent of the given path that contains aflake.nix
within the git repository. If no such directory exists, then Nix will error-out.Note that the search will only include files indexed by git. In particular, files which are matched by
.gitignore
or have never beengit add
-ed will not be available in the flake. If this is undesirable, specifypath:<directory>
explicitly;For example, if
/foo/bar
is a git repository with the following structure:. └── baz ├── blah │ └── file.txt └── flake.nix
Then
/foo/bar/baz/blah
will resolve togit+file:///foo/bar?dir=baz
-
If the supplied path is not a git repository, then the url will have the form
path:FLAKE_DIR_PATH
whereFLAKE_DIR_PATH
is the closest parent of the supplied path that contains aflake.nix
file (within the same file-system). If no such directory exists, then Nix will error-out.For example, if
/foo/bar/flake.nix
exists, then/foo/bar/baz/
will resolve topath:/foo/bar
If attrpath is omitted, Nix tries some default values; for most
subcommands, the default is packages.
system.default
(e.g. packages.x86_64-linux.default
), but some subcommands have
other defaults. If attrpath is specified, attrpath is
interpreted as relative to one or more prefixes; for most
subcommands, these are packages.
system,
legacyPackages.*system*
and the empty prefix. Thus, on
x86_64-linux
nix build nixpkgs#hello
will try to build the
attributes packages.x86_64-linux.hello
,
legacyPackages.x86_64-linux.hello
and hello
.
Store path
Example: /nix/store/v5sv61sszx301i0x6xysaqzla09nksnd-hello-2.10
These are paths inside the Nix store, or symlinks that resolve to a path in the Nix store.
A store derivation is also addressed by store path.
Example: /nix/store/p7gp6lxdg32h4ka1q398wd9r2zkbbz2v-hello-2.10.drv
If you want to refer to an output path of that store derivation, add the output name preceded by a caret (^
).
Example: /nix/store/p7gp6lxdg32h4ka1q398wd9r2zkbbz2v-hello-2.10.drv^out
All outputs can be referred to at once with the special syntax ^*
.
Example: /nix/store/p7gp6lxdg32h4ka1q398wd9r2zkbbz2v-hello-2.10.drv^*
Nix file
Example: --file /path/to/nixpkgs hello
When the option -f
/ --file
path [attrpath...] is given, installables are interpreted as the value of the expression in the Nix file at path.
If attribute paths are provided, commands will operate on the corresponding values accessible at these paths.
The Nix expression in that file, or any selected attribute, must evaluate to a derivation.
Nix expression
Example: --expr 'import <nixpkgs> {}' hello
When the option --expr
expression [attrpath...] is given, installables are interpreted as the value of the of the Nix expression.
If attribute paths are provided, commands will operate on the corresponding values accessible at these paths.
The Nix expression, or any selected attribute, must evaluate to a derivation.
You may need to specify --impure
if the expression references impure inputs (such as <nixpkgs>
).
Derivation output selection
Derivations can have multiple outputs, each corresponding to a
different store path. For instance, a package can have a bin
output
that contains programs, and a dev
output that provides development
artifacts like C/C++ header files. The outputs on which nix
commands
operate are determined as follows:
-
You can explicitly specify the desired outputs using the syntax installable
^
output1,
...,
outputN. For example, you can obtain thedev
andstatic
outputs of theglibc
package:# nix build 'nixpkgs#glibc^dev,static' # ls ./result-dev/include/ ./result-static/lib/ …
and likewise, using a store path to a "drv" file to specify the derivation:
# nix build '/nix/store/gzaflydcr6sb3567hap9q6srzx8ggdgg-glibc-2.33-78.drv^dev,static' …
-
You can also specify that all outputs should be used using the syntax installable
^*
. For example, the following shows the size of all outputs of theglibc
package in the binary cache:# nix path-info --closure-size --eval-store auto --store https://cache.nixos.org 'nixpkgs#glibc^*' /nix/store/g02b1lpbddhymmcjb923kf0l7s9nww58-glibc-2.33-123 33208200 /nix/store/851dp95qqiisjifi639r0zzg5l465ny4-glibc-2.33-123-bin 36142896 /nix/store/kdgs3q6r7xdff1p7a9hnjr43xw2404z7-glibc-2.33-123-debug 155787312 /nix/store/n4xa8h6pbmqmwnq0mmsz08l38abb06zc-glibc-2.33-123-static 42488328 /nix/store/q6580lr01jpcsqs4r5arlh4ki2c1m9rv-glibc-2.33-123-dev 44200560
and likewise, using a store path to a "drv" file to specify the derivation:
# nix path-info --closure-size '/nix/store/gzaflydcr6sb3567hap9q6srzx8ggdgg-glibc-2.33-78.drv^*' …
-
If you didn't specify the desired outputs, but the derivation has an attribute
meta.outputsToInstall
, Nix will use those outputs. For example, since the packagenixpkgs#libxml2
has this attribute:# nix eval 'nixpkgs#libxml2.meta.outputsToInstall' [ "bin" "man" ]
a command like
nix shell nixpkgs#libxml2
will provide only those two outputs by default.Note that a store derivation (given by its
.drv
file store path) doesn't have any attributes likemeta
, and thus this case doesn't apply to it. -
Otherwise, Nix will use all outputs of the derivation.
Nix stores
Most nix
subcommands operate on a Nix store. These are documented
in nix help-stores
.
Options
Logging-related options:
-
Set the logging verbosity level to 'debug'.
-
--log-format
formatSet the format of log output; one of
raw
,internal-json
,bar
orbar-with-logs
. -
--print-build-logs
/-L
Print full build logs on standard error.
-
Decrease the logging verbosity level.
-
--verbose
/-v
Increase the logging verbosity level.
Miscellaneous global options:
-
Show usage information.
-
Disable substituters and consider all previously downloaded files up-to-date.
-
--option
name valueSet the Nix configuration setting name to value (overriding
nix.conf
). -
Consider all previously downloaded files out-of-date.
-
Show version information.
Options to override configuration settings:
-
Enable the
accept-flake-config
setting. -
--access-tokens
valueSet the
access-tokens
setting. -
Enable the
allow-dirty
setting. -
--allow-import-from-derivation
Enable the
allow-import-from-derivation
setting. -
Enable the
allow-new-privileges
setting. -
Enable the
allow-symlinked-store
setting. -
--allow-unsafe-native-code-during-evaluation
Enable the
allow-unsafe-native-code-during-evaluation
setting. -
--allowed-impure-host-deps
valueSet the
allowed-impure-host-deps
setting. -
--allowed-uris
valueSet the
allowed-uris
setting. -
--allowed-users
valueSet the
allowed-users
setting. -
Enable the
auto-allocate-uids
setting. -
Enable the
auto-optimise-store
setting. -
--bash-prompt
valueSet the
bash-prompt
setting. -
--bash-prompt-prefix
valueSet the
bash-prompt-prefix
setting. -
--bash-prompt-suffix
valueSet the
bash-prompt-suffix
setting. -
--build-hook
valueSet the
build-hook
setting. -
--build-poll-interval
valueSet the
build-poll-interval
setting. -
--build-users-group
valueSet the
build-users-group
setting. -
--builders
valueSet the
builders
setting. -
Enable the
builders-use-substitutes
setting. -
--commit-lockfile-summary
valueSet the
commit-lockfile-summary
setting. -
Enable the
compress-build-log
setting. -
--connect-timeout
valueSet the
connect-timeout
setting. -
--cores
valueSet the
cores
setting. -
--diff-hook
valueSet the
diff-hook
setting. -
--download-attempts
valueSet the
download-attempts
setting. -
--download-speed
valueSet the
download-speed
setting. -
Enable the
eval-cache
setting. -
--experimental-features
valueSet the
experimental-features
setting. -
--extra-access-tokens
valueAppend to the
access-tokens
setting. -
--extra-allowed-impure-host-deps
valueAppend to the
allowed-impure-host-deps
setting. -
--extra-allowed-uris
valueAppend to the
allowed-uris
setting. -
--extra-allowed-users
valueAppend to the
allowed-users
setting. -
--extra-build-hook
valueAppend to the
build-hook
setting. -
--extra-experimental-features
valueAppend to the
experimental-features
setting. -
--extra-extra-platforms
valueAppend to the
extra-platforms
setting. -
--extra-hashed-mirrors
valueAppend to the
hashed-mirrors
setting. -
--extra-ignored-acls
valueAppend to the
ignored-acls
setting. -
--extra-nix-path
valueAppend to the
nix-path
setting. -
--extra-platforms
valueSet the
extra-platforms
setting. -
--extra-plugin-files
valueAppend to the
plugin-files
setting. -
--extra-sandbox-paths
valueAppend to the
sandbox-paths
setting. -
--extra-secret-key-files
valueAppend to the
secret-key-files
setting. -
--extra-substituters
valueAppend to the
substituters
setting. -
--extra-system-features
valueAppend to the
system-features
setting. -
--extra-trusted-public-keys
valueAppend to the
trusted-public-keys
setting. -
--extra-trusted-substituters
valueAppend to the
trusted-substituters
setting. -
--extra-trusted-users
valueAppend to the
trusted-users
setting. -
Enable the
fallback
setting. -
Enable the
filter-syscalls
setting. -
--flake-registry
valueSet the
flake-registry
setting. -
Enable the
fsync-metadata
setting. -
--gc-reserved-space
valueSet the
gc-reserved-space
setting. -
--hashed-mirrors
valueSet the
hashed-mirrors
setting. -
--http-connections
valueSet the
http-connections
setting. -
Enable the
http2
setting. -
--id-count
valueSet the
id-count
setting. -
Enable the
ignore-try
setting. -
--ignored-acls
valueSet the
ignored-acls
setting. -
Enable the
impersonate-linux-26
setting. -
Enable the
keep-build-log
setting. -
Enable the
keep-derivations
setting. -
Enable the
keep-env-derivations
setting. -
Enable the
keep-failed
setting. -
Enable the
keep-going
setting. -
Enable the
keep-outputs
setting. -
--log-lines
valueSet the
log-lines
setting. -
--max-build-log-size
valueSet the
max-build-log-size
setting. -
--max-free
valueSet the
max-free
setting. -
--max-jobs
valueSet the
max-jobs
setting. -
--max-silent-time
valueSet the
max-silent-time
setting. -
--max-substitution-jobs
valueSet the
max-substitution-jobs
setting. -
--min-free
valueSet the
min-free
setting. -
--min-free-check-interval
valueSet the
min-free-check-interval
setting. -
--nar-buffer-size
valueSet the
nar-buffer-size
setting. -
--narinfo-cache-negative-ttl
valueSet the
narinfo-cache-negative-ttl
setting. -
--narinfo-cache-positive-ttl
valueSet the
narinfo-cache-positive-ttl
setting. -
--netrc-file
valueSet the
netrc-file
setting. -
--nix-path
valueSet the
nix-path
setting. -
Disable the
accept-flake-config
setting. -
Disable the
allow-dirty
setting. -
--no-allow-import-from-derivation
Disable the
allow-import-from-derivation
setting. -
Disable the
allow-new-privileges
setting. -
Disable the
allow-symlinked-store
setting. -
--no-allow-unsafe-native-code-during-evaluation
Disable the
allow-unsafe-native-code-during-evaluation
setting. -
Disable the
auto-allocate-uids
setting. -
Disable the
auto-optimise-store
setting. -
Disable the
builders-use-substitutes
setting. -
Disable the
compress-build-log
setting. -
Disable the
eval-cache
setting. -
Disable the
fallback
setting. -
Disable the
filter-syscalls
setting. -
Disable the
fsync-metadata
setting. -
Disable the
http2
setting. -
Disable the
ignore-try
setting. -
Disable the
impersonate-linux-26
setting. -
Disable the
keep-build-log
setting. -
Disable the
keep-derivations
setting. -
Disable the
keep-env-derivations
setting. -
Disable the
keep-failed
setting. -
Disable the
keep-going
setting. -
Disable the
keep-outputs
setting. -
Disable the
preallocate-contents
setting. -
Disable the
print-missing
setting. -
Disable the
pure-eval
setting. -
--no-require-drop-supplementary-groups
Disable the
require-drop-supplementary-groups
setting. -
Disable the
require-sigs
setting. -
Disable the
restrict-eval
setting. -
Disable the
run-diff-hook
setting. -
Disable sandboxing.
-
Disable the
sandbox-fallback
setting. -
Disable the
show-trace
setting. -
Disable the
substitute
setting. -
Disable the
sync-before-registering
setting. -
Disable the
trace-function-calls
setting. -
Disable the
trace-verbose
setting. -
Disable the
use-case-hack
setting. -
Disable the
use-cgroups
setting. -
Disable the
use-registries
setting. -
Disable the
use-sqlite-wal
setting. -
Disable the
use-xdg-base-directories
setting. -
Disable the
warn-dirty
setting. -
--plugin-files
valueSet the
plugin-files
setting. -
--post-build-hook
valueSet the
post-build-hook
setting. -
--pre-build-hook
valueSet the
pre-build-hook
setting. -
Enable the
preallocate-contents
setting. -
Enable the
print-missing
setting. -
Enable the
pure-eval
setting. -
Enable sandboxing, but allow builds to disable it.
-
--require-drop-supplementary-groups
Enable the
require-drop-supplementary-groups
setting. -
Enable the
require-sigs
setting. -
Enable the
restrict-eval
setting. -
Enable the
run-diff-hook
setting. -
Enable sandboxing.
-
--sandbox-build-dir
valueSet the
sandbox-build-dir
setting. -
--sandbox-dev-shm-size
valueSet the
sandbox-dev-shm-size
setting. -
Enable the
sandbox-fallback
setting. -
--sandbox-paths
valueSet the
sandbox-paths
setting. -
--secret-key-files
valueSet the
secret-key-files
setting. -
Enable the
show-trace
setting. -
--ssl-cert-file
valueSet the
ssl-cert-file
setting. -
--stalled-download-timeout
valueSet the
stalled-download-timeout
setting. -
--start-id
valueSet the
start-id
setting. -
--store
valueSet the
store
setting. -
Enable the
substitute
setting. -
--substituters
valueSet the
substituters
setting. -
Enable the
sync-before-registering
setting. -
--system
valueSet the
system
setting. -
--system-features
valueSet the
system-features
setting. -
--tarball-ttl
valueSet the
tarball-ttl
setting. -
--timeout
valueSet the
timeout
setting. -
Enable the
trace-function-calls
setting. -
Enable the
trace-verbose
setting. -
--trusted-public-keys
valueSet the
trusted-public-keys
setting. -
--trusted-substituters
valueSet the
trusted-substituters
setting. -
--trusted-users
valueSet the
trusted-users
setting. -
Enable the
use-case-hack
setting. -
Enable the
use-cgroups
setting. -
Enable the
use-registries
setting. -
Enable the
use-sqlite-wal
setting. -
Enable the
use-xdg-base-directories
setting. -
--user-agent-suffix
valueSet the
user-agent-suffix
setting. -
Enable the
warn-dirty
setting.