web-arm: rebuild fails on authelia-web pnpm hash mismatch from unpinned nixos-unstable #456

New issue

Open

opened 2026-10-10 13:47:05 +02:00 by dominik.polakovics · 1 comment

dominik.polakovics commented

2026-10-10 13:47:05 +02:00

Owner

hosts/web-arm/modules/authelia.nix takes package = unstable.authelia from an unpinned nixos-unstable tarball. Unstable now carries authelia 4.39.28 whose authelia-web-pnpm-deps fixed-output hash (sha256-B/Au9Y…) does not reproduce on web-arm, so nixos-rebuild fails and the host is stuck on its previous generation, which blocks the Authelia switch from #454. nixos-26.05 ships 4.39.20 and should be used instead.

`hosts/web-arm/modules/authelia.nix` takes `package = unstable.authelia` from an unpinned `nixos-unstable` tarball. Unstable now carries authelia 4.39.28 whose `authelia-web-pnpm-deps` fixed-output hash (`sha256-B/Au9Y…`) does not reproduce on web-arm, so `nixos-rebuild` fails and the host is stuck on its previous generation, which blocks the Authelia switch from #454. nixos-26.05 ships 4.39.20 and should be used instead.

dominik.polakovics commented

2026-10-10 13:47:21 +02:00

Author

Owner

Fix on branch fix/web-arm-authelia-channel-package (473d92a2): drop the unstable import and let services.authelia use the channel's 4.39.20. Open the PR from https://git.cloonar.com/Cloonar/nixos/compare/main...fix/web-arm-authelia-channel-package with Closes #456.

Fix on branch `fix/web-arm-authelia-channel-package` (473d92a2): drop the unstable import and let `services.authelia` use the channel's 4.39.20. Open the PR from https://git.cloonar.com/Cloonar/nixos/compare/main...fix/web-arm-authelia-channel-package with `Closes #456`.