Hello! Applied with a minor tweak: the ‘fetchgit’ invocation must be passed the expected SHA256, so we know what we expect (that makes it a fixed-output derivation, which can actually access the network, unlike regular derivations in chroot.) Thanks, Ludo’.