From f1a0d68a8fe99342677a078f7e93eaea1b7b44f2 Mon Sep 17 00:00:00 2001
From: Evan Petousis <evan@petousis.net>
Date: Fri, 23 Feb 2024 18:40:24 +1100
Subject: [PATCH] etc: add known hash for `/etc/zshenv` and `/etc/nix/nix.conf`

Adds support for DeterminateSystems installer 0.16.0 and later. Fixes #880.
---
 ...756c6f300f8cd558ec4d9234ca61deefd4f2478e91a49760b0747 | 9 +++++++++
 ...5f134976fce84c6c7a77b512079c1c5f9594dfa65c70b7968b65f | 7 +++++++
 modules/nix/default.nix                                  | 3 ++-
 modules/programs/zsh/default.nix                         | 4 ++++
 4 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 doc/known-files/5d23e6d7015756c6f300f8cd558ec4d9234ca61deefd4f2478e91a49760b0747
 create mode 100644 doc/known-files/d07015be6875f134976fce84c6c7a77b512079c1c5f9594dfa65c70b7968b65f

diff --git a/doc/known-files/5d23e6d7015756c6f300f8cd558ec4d9234ca61deefd4f2478e91a49760b0747 b/doc/known-files/5d23e6d7015756c6f300f8cd558ec4d9234ca61deefd4f2478e91a49760b0747
new file mode 100644
index 0000000..55a2da1
--- /dev/null
+++ b/doc/known-files/5d23e6d7015756c6f300f8cd558ec4d9234ca61deefd4f2478e91a49760b0747
@@ -0,0 +1,9 @@
+# Generated by https://github.com/DeterminateSystems/nix-installer.
+# See `/nix/nix-installer --version` for the version details.
+
+build-users-group = nixbld
+experimental-features = nix-command flakes repl-flake
+bash-prompt-prefix = (nix:$name)\040
+max-jobs = auto
+extra-nix-path = nixpkgs=flake:nixpkgs
+upgrade-nix-store-path-url = https://install.determinate.systems/nix-upgrade/stable/universal
diff --git a/doc/known-files/d07015be6875f134976fce84c6c7a77b512079c1c5f9594dfa65c70b7968b65f b/doc/known-files/d07015be6875f134976fce84c6c7a77b512079c1c5f9594dfa65c70b7968b65f
new file mode 100644
index 0000000..7a676da
--- /dev/null
+++ b/doc/known-files/d07015be6875f134976fce84c6c7a77b512079c1c5f9594dfa65c70b7968b65f
@@ -0,0 +1,7 @@
+
+# Set up Nix only on SSH connections
+# See: https://github.com/DeterminateSystems/nix-installer/pull/714
+if [ -e '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh' ] && [ -n "${SSH_CONNECTION}" ] && [ "${SHLVL}" -eq 1 ]; then
+    . '/nix/var/nix/profiles/default/etc/profile.d/nix-daemon.sh'
+fi
+# End Nix
diff --git a/modules/nix/default.nix b/modules/nix/default.nix
index ae7eb91..ceaad55 100644
--- a/modules/nix/default.nix
+++ b/modules/nix/default.nix
@@ -672,7 +672,8 @@ in
       "ff08c12813680da98c4240328f828647b67a65ba7aa89c022bd8072cba862cf1"  # official Nix installer as of 2.4
       "f3e03d851c240c1aa7daccd144ee929f0f5971982424c868c434eb6030e961d4"  # DeterminateSystems Nix installer 0.10.0
       "c6080216f2a170611e339c3f46e4e1d61aaf0d8b417ad93ade8d647da1382c11"  # DeterminateSystems Nix installer 0.14.0
-      "97f4135d262ca22d65c9554aad795c10a4491fa61b67d9c2430f4d82bbfec9a2"  # DeterminateSystems Nix installer 0.15.1+
+      "97f4135d262ca22d65c9554aad795c10a4491fa61b67d9c2430f4d82bbfec9a2"  # DeterminateSystems Nix installer 0.15.1
+      "5d23e6d7015756c6f300f8cd558ec4d9234ca61deefd4f2478e91a49760b0747" # DeterminateSystems Nix installer 0.16.0+
     ];
 
     environment.etc."nix/registry.json".text = builtins.toJSON {
diff --git a/modules/programs/zsh/default.nix b/modules/programs/zsh/default.nix
index 615589a..cce645c 100644
--- a/modules/programs/zsh/default.nix
+++ b/modules/programs/zsh/default.nix
@@ -219,5 +219,9 @@ in
       "2af1b563e389d11b76a651b446e858116d7a20370d9120a7e9f78991f3e5f336"  # DeterminateSystems installer
     ];
 
+    environment.etc."zshenv".knownSha256Hashes = [
+      "d07015be6875f134976fce84c6c7a77b512079c1c5f9594dfa65c70b7968b65f"  # DeterminateSystems installer
+    ];
+
   };
 }