Dmitry Bushev

related #40

Currently, I see no ways of sandboxing the stackage2nix wrapper. See the issues below. stackage2nix wrapper requires following dependencies to be fetched, see [nix/lib.nix](https://github.com/typeable/stackage2nix/blob/7ff5d110006598ae584c08960919a5cdd30450d7/nix/lib.nix) - [x] [fpco/lts-haskell](https://github.com/fpco/lts-haskell) - [x] [fpco/stackage-nightly](https://github.com/fpco/stackage-nightly)...

Regarding the non-determinism of `all-cabal-hashes`. I've found [this old comment](https://github.com/NixOS/nixpkgs/issues/8567#issuecomment-133393592) on the original issue thread. The idea is to unpack the git objects and store them uncompressed https://github.com/bendlas/nixpkgs/commit/4b9c24a5d33407f88457d7e125ca78cbefa30afa We should...

I tried the approach referenced in my previous comment with the unpacking of git objects https://github.com/bendlas/nixpkgs/commit/4b9c24a5d33407f88457d7e125ca78cbefa30afa This led to the increase of `all-cabal-hashes` checkout size from 1.6 Gb to 16...

As far as I remember, back in the days, Nixpkgs used this particular naming for Stackage LTS releases, so I decided to inherit it. Sounds good. Let's stick to the...

As I see it, `nix/stackage2nix` builder is trying to [clone github.com/fpco/lts-haskell](https://github.com/typeable/stackage2nix/blob/b19fea5eff5846dda613b22f373a0def0b33b6fb/nix/lib.nix#L37) and `git` is unable to resolve the hostname. I can't reproduce it with nixpkgs pinned to fresh 17.09 version:...

please check if `nix-prefetch-git` works for you ``` nix-shell --pure -p nix-prefetch-scripts --run 'nix-prefetch-git --url https://github.com/fpco/lts-haskell.git --rev refs/heads/master' ```

You can try to add `impureEnvVars` attribute to `mkDerivation` functions in [lib.nix](https://github.com/typeable/stackage2nix/blob/master/nix/lib.nix), as it is done in [fetchgit/default.nix](https://github.com/NixOS/nixpkgs/blob/master/pkgs/build-support/fetchgit/default.nix#L65) and see if that helps.

There are other env variables defined in `proxyImpureEnvVars` that are inherited from the user. And it is the main difference I see between `nix-prefetch-git` and my custom fetcher. The other...

This is very peculiar indeed. I don't think it's related to SSL because first, it should resolve the hostname, and only then perform an SSL handshake. I returned to your...