overlays: disable RPM unshare plugin

We cannot use `unshare` within the Nix sandbox (where we execute `rpm` in via `tdnf`), so disable the plugin through an overlay.
edgelesssys · Jan 6, 2025 · 855705d · 855705d
1 parent bf3af79
commit 855705d
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/overlays/nixpkgs.nix b/overlays/nixpkgs.nix
@@ -31,4 +31,13 @@ final: prev:
         --set SOURCE_DATE_EPOCH 0
     '';
   });
+
+  rpm = prev.rpm.overrideAttrs (prev: {
+    # Disable the `unshare` RPM plugin, which hinders execution
+    # of `rpm` within the Nix sandbox due to namespacing restrictions.
+    # See: https://github.com/rpm-software-management/rpm/commit/fd8eaa52cc2cea87231bbe1a1adee72bef8c65ba
+    cmakeFlags = prev.cmakeFlags ++ [
+      "-DHAVE_UNSHARE=OFF"
+    ];
+  });
 }