Naïm Camille Favier

Ah but `(listOf (attrsOf str)).check [ "foo" ]` evaluates to `true`... Apparently [`listOf`](https://github.com/NixOS/nixpkgs/blob/59bfda72480496f32787cec8c557182738b1bd3f/lib/types.nix#L369) and [`attrsOf`](https://github.com/NixOS/nixpkgs/blob/59bfda72480496f32787cec8c557182738b1bd3f/lib/types.nix#L398) don't bother to check the types of their elements? Relevant commits: https://github.com/NixOS/nixpkgs/commit/e4bc2592f3c5fa2f05484e7258f99ebb0507d304 and https://github.com/NixOS/nixpkgs/commit/8737d1783f8a8e0c219ec00dd995e8851fd65b3b (https://github.com/NixOS/nixpkgs/pull/6794)

The current import failure is caused by a use of `literalDocBook` in an option `description` (https://github.com/NixOS/nixpkgs/pull/155928).

See https://github.com/NixOS/nixos-search/issues/323 and https://github.com/nix-community/home-manager/issues/2297

Didn't see this was a PR, reopening in case we want to add home-manager now, but beware it will only index the NixOS module options in https://github.com/nix-community/home-manager/blob/master/nixos/default.nix

We're hitting a nix bug because home-manager has no lock file. Opened an issue upstream: https://github.com/NixOS/nix/issues/6541

> beware it will only index the NixOS module options in [https://github.com/nix-community/home-manager/blob/master/nixos/default.nix](https://github.com/nix-community/home-manager/blob/master/nixos/default.nix?rgh-link-date=2022-05-17T15%3A00%3A09Z)

Maybe a silly question but: why don't we just expose the Nix parser as a library and use that in rnix-parser?

Can't reproduce on i3 or on bare `startx`, but I can reproduce on bspwm without sxhkd running.

I can reproduce *without* sxhkd running, so if anything it's a problem with bspwm. I don't see anything suspicious when I do the same with `xev` though. I'm a bit...

This would also need to check for an iptables or nftables rule invoking the `rpfilter` netfilter module; AFAICT the `rp_filter` sysctl is [deprecated](https://home.regit.org/2011/08/florian-westphal-moving-rp_filter-into-netfilter/). There is hope of fixing the underlying...