global: fix xz backdoor temporarily

brckd · Apr 1, 2024 · 3a70da9 · 3a70da9
1 parent deb7e65
commit 3a70da9
Show file tree

Hide file tree

Showing 3 changed files with 28 additions and 0 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -86,6 +86,8 @@
 
   inputs = {
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+
+    nixpkgs-staging.url = "github:nixos/nixpkgs/staging-next";
 
     # Systems
     home-manager = {

diff --git a/modules/nixos/default.nix b/modules/nixos/default.nix
@@ -1,4 +1,6 @@
 {
+	pkgs,
+	nixpkgs-staging,
   stylix,
   erosanix,
   ...
@@ -13,4 +15,11 @@
     ./pipewire
     ./steam
   ];
+
+	system.replaceRuntimeDependencies = [
+	{
+		original = pkgs.xz;
+		replacement = nixpkgs-staging.legacyPackages.${pkgs.system}.xz;
+	}
+	];
 }