Build failure: vintagestory depends on insecure package dotnet-runtime-wrapped-7.0.20

[frostplexx]

Steps To Reproduce

Steps to reproduce the behavior:

1. build vintagestory

Build log

Build Log

building the system configuration...
error:
       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1570:24:
         1569|     let f = attrPath:
         1570|       zipAttrsWith (n: values:
             |                        ^
         1571|         let here = attrPath ++ [n]; in

       … while calling the 'head' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1574:11:
         1573|         || pred here (elemAt values 1) (head values) then
         1574|           head values
             |           ^
         1575|         else

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1204:18:
         1203|         mapAttrs
         1204|           (name: value:
             |                  ^
         1205|             if isAttrs value && cond value

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1207:18:
         1206|             then recurse (path ++ [ name ]) value
         1207|             else f (path ++ [ name ]) value);
             |                  ^
         1208|     in

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:254:72:
          253|           # For definitions that have an associated option
          254|           declaredConfig = mapAttrsRecursiveCond (v: ! isOption v) (_: v: v.value) options;
             |                                                                        ^
          255|

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:816:9:
          815|     in warnDeprecation opt //
          816|       { value = addErrorContext "while evaluating the option `${showOption loc}':" value;
             |         ^
          817|         inherit (res.defsFinal') highestPrio;

       … while evaluating the option `system.build.toplevel':

       … while evaluating the attribute 'mergedValue'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:851:5:
          850|     # Type-check the remaining definitions, and merge them. Or throw if no definitions.
          851|     mergedValue =
             |     ^
          852|       if isDefined then

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:852:7:
          851|     mergedValue =
          852|       if isDefined then
             |       ^
          853|         if all (def: type.check def.value) defsFinal then type.merge loc defsFinal

       … while evaluating the attribute 'values'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:845:9:
          844|       in {
          845|         values = defs''';
             |         ^
          846|         inherit (defs'') highestPrio;

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:841:11:
          840|           # Avoid sorting if we don't have to.
          841|           if any (def: def.value._type or "" == "order") defs''.values
             |           ^
          842|           then sortProperties defs''.values

       … while calling the 'any' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:841:14:
          840|           # Avoid sorting if we don't have to.
          841|           if any (def: def.value._type or "" == "order") defs''.values
             |              ^
          842|           then sortProperties defs''.values

       … while evaluating the attribute 'values'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:944:7:
          943|     in {
          944|       values = concatMap (def: if getPrio def == highestPrio then [(strip def)] else []) defs;
             |       ^
          945|       inherit highestPrio;

       … while calling the 'concatMap' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:944:16:
          943|     in {
          944|       values = concatMap (def: if getPrio def == highestPrio then [(strip def)] else []) defs;
             |                ^
          945|       inherit highestPrio;

       … while calling the 'concatMap' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:831:17:
          830|         # Process mkMerge and mkIf properties.
          831|         defs' = concatMap (m:
             |                 ^
          832|           map (value: { inherit (m) file; inherit value; }) (addErrorContext "while evaluating definitions from `${m.file}':" (dischargeProperties m.value))

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:831:28:
          830|         # Process mkMerge and mkIf properties.
          831|         defs' = concatMap (m:
             |                            ^
          832|           map (value: { inherit (m) file; inherit value; }) (addErrorContext "while evaluating definitions from `${m.file}':" (dischargeProperties m.value))

       … while calling the 'map' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:832:11:
          831|         defs' = concatMap (m:
          832|           map (value: { inherit (m) file; inherit value; }) (addErrorContext "while evaluating definitions from `${m.file}':" (dischargeProperties m.value))
             |           ^
          833|         ) defs;

       … while evaluating definitions from `/nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/top-level.nix':

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:832:128:
          831|         defs' = concatMap (m:
          832|           map (value: { inherit (m) file; inherit value; }) (addErrorContext "while evaluating definitions from `${m.file}':" (dischargeProperties m.value))
             |                                                                                                                                ^
          833|         ) defs;

       … while calling 'dischargeProperties'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:903:25:
          902|   */
          903|   dischargeProperties = def:
             |                         ^
          904|     if def._type or "" == "merge" then

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:904:5:
          903|   dischargeProperties = def:
          904|     if def._type or "" == "merge" then
             |     ^
          905|       concatMap dischargeProperties def.contents

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:614:53:
          613|                 (n: value:
          614|                   [{ inherit (module) file; inherit value; }]
             |                                                     ^
          615|                 )

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/top-level.nix:74:10:
           73|     then throw "\nFailed assertions:\n${concatStringsSep "\n" (map (x: "- ${x}") failedAssertions)}"
           74|     else showWarnings config.warnings baseSystem;
             |          ^
           75|

       … while calling 'showWarnings'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/trivial.nix:938:28:
          937|
          938|   showWarnings = warnings: res: lib.foldr (w: x: warn w x) res warnings;
             |                            ^
          939|

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/trivial.nix:938:33:
          937|
          938|   showWarnings = warnings: res: lib.foldr (w: x: warn w x) res warnings;
             |                                 ^
          939|

       … while calling 'foldr'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/lists.nix:121:20:
          120|   */
          121|   foldr = op: nul: list:
             |                    ^
          122|     let

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/lists.nix:128:8:
          127|         else op (elemAt list n) (fold' (n + 1));
          128|     in fold' 0;
             |        ^
          129|

       … while calling 'fold''
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/lists.nix:124:15:
          123|       len = length list;
          124|       fold' = n:
             |               ^
          125|         if n == len

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/top-level.nix:54:16:
           53|   # makes it bootable. See `activatable-system.nix`.
           54|   baseSystem = pkgs.stdenvNoCC.mkDerivation ({
             |                ^
           55|     name = "nixos-system-${config.system.name}-${config.system.nixos.label}";

       … while calling 'mkDerivation'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/make-derivation.nix:64:5:
           63|   mkDerivation =
           64|     fnOrAttrs:
             |     ^
           65|       if builtins.isFunction fnOrAttrs

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/make-derivation.nix:65:7:
           64|     fnOrAttrs:
           65|       if builtins.isFunction fnOrAttrs
             |       ^
           66|       then makeDerivationExtensible fnOrAttrs

       … while calling the 'isFunction' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/make-derivation.nix:65:10:
           64|     fnOrAttrs:
           65|       if builtins.isFunction fnOrAttrs
             |          ^
           66|       then makeDerivationExtensible fnOrAttrs

       … in the right operand of the update (//) operator
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/top-level.nix:66:5:
           65|     inherit (config.system) extraDependencies;
           66|   } // config.system.systemBuilderArgs);
             |     ^
           67|

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/top-level.nix:66:8:
           65|     inherit (config.system) extraDependencies;
           66|   } // config.system.systemBuilderArgs);
             |        ^
           67|

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1204:18:
         1203|         mapAttrs
         1204|           (name: value:
             |                  ^
         1205|             if isAttrs value && cond value

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1207:18:
         1206|             then recurse (path ++ [ name ]) value
         1207|             else f (path ++ [ name ]) value);
             |                  ^
         1208|     in

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:254:72:
          253|           # For definitions that have an associated option
          254|           declaredConfig = mapAttrsRecursiveCond (v: ! isOption v) (_: v: v.value) options;
             |                                                                        ^
          255|

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:816:9:
          815|     in warnDeprecation opt //
          816|       { value = addErrorContext "while evaluating the option `${showOption loc}':" value;
             |         ^
          817|         inherit (res.defsFinal') highestPrio;

       … while evaluating the option `system.systemBuilderArgs':

       … while evaluating the attribute 'mergedValue'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:851:5:
          850|     # Type-check the remaining definitions, and merge them. Or throw if no definitions.
          851|     mergedValue =
             |     ^
          852|       if isDefined then

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:853:59:
          852|       if isDefined then
          853|         if all (def: type.check def.value) defsFinal then type.merge loc defsFinal
             |                                                           ^
          854|         else let allInvalid = filter (def: ! type.check def.value) defsFinal;

       … while calling 'merge'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:590:20:
          589|       check = isAttrs;
          590|       merge = loc: defs:
             |                    ^
          591|         mapAttrs (n: v: v.value) (filterAttrs (n: v: v ? value) (zipAttrsWith (name: defs:

       … while calling the 'mapAttrs' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:591:9:
          590|       merge = loc: defs:
          591|         mapAttrs (n: v: v.value) (filterAttrs (n: v: v ? value) (zipAttrsWith (name: defs:
             |         ^
          592|             (mergeDefinitions (loc ++ [name]) elemType defs).optionalValue

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:591:35:
          590|       merge = loc: defs:
          591|         mapAttrs (n: v: v.value) (filterAttrs (n: v: v ? value) (zipAttrsWith (name: defs:
             |                                   ^
          592|             (mergeDefinitions (loc ++ [name]) elemType defs).optionalValue

       … while calling 'filterAttrs'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:646:5:
          645|     pred:
          646|     set:
             |     ^
          647|     removeAttrs set (filter (name: ! pred name set.${name}) (attrNames set));

       … while calling the 'removeAttrs' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:647:5:
          646|     set:
          647|     removeAttrs set (filter (name: ! pred name set.${name}) (attrNames set));
             |     ^
          648|

       … while calling the 'filter' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:647:22:
          646|     set:
          647|     removeAttrs set (filter (name: ! pred name set.${name}) (attrNames set));
             |                      ^
          648|

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:647:30:
          646|     set:
          647|     removeAttrs set (filter (name: ! pred name set.${name}) (attrNames set));
             |                              ^
          648|

       … in the argument of the not operator
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:647:38:
          646|     set:
          647|     removeAttrs set (filter (name: ! pred name set.${name}) (attrNames set));
             |                                      ^
          648|

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:647:38:
          646|     set:
          647|     removeAttrs set (filter (name: ! pred name set.${name}) (attrNames set));
             |                                      ^
          648|

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:591:51:
          590|       merge = loc: defs:
          591|         mapAttrs (n: v: v.value) (filterAttrs (n: v: v ? value) (zipAttrsWith (name: defs:
             |                                                   ^
          592|             (mergeDefinitions (loc ++ [name]) elemType defs).optionalValue

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:647:48:
          646|     set:
          647|     removeAttrs set (filter (name: ! pred name set.${name}) (attrNames set));
             |                                                ^
          648|

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:591:86:
          590|       merge = loc: defs:
          591|         mapAttrs (n: v: v.value) (filterAttrs (n: v: v ? value) (zipAttrsWith (name: defs:
             |                                                                                      ^
          592|             (mergeDefinitions (loc ++ [name]) elemType defs).optionalValue

       … while evaluating the attribute 'optionalValue'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:863:5:
          862|
          863|     optionalValue =
             |     ^
          864|       if isDefined then { value = mergedValue; }

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:864:7:
          863|     optionalValue =
          864|       if isDefined then { value = mergedValue; }
             |       ^
          865|       else {};

       (8 duplicate frames omitted)

       … while evaluating definitions from `/nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/activatable-system.nix':

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:832:128:
          831|         defs' = concatMap (m:
          832|           map (value: { inherit (m) file; inherit value; }) (addErrorContext "while evaluating definitions from `${m.file}':" (dischargeProperties m.value))
             |                                                                                                                                ^
          833|         ) defs;

       … while calling 'dischargeProperties'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:903:25:
          902|   */
          903|   dischargeProperties = def:
             |                         ^
          904|     if def._type or "" == "merge" then

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:904:5:
          903|   dischargeProperties = def:
          904|     if def._type or "" == "merge" then
             |     ^
          905|       concatMap dischargeProperties def.contents

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:595:60:
          594|           # Push down position info.
          595|           (map (def: mapAttrs (n: v: { inherit (def) file; value = v; }) def.value) defs)));
             |                                                            ^
          596|       emptyValue = { value = {}; };

       … while evaluating the attribute 'system.activationScripts.script'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/activation-script.nix:135:9:
          134|       apply = set: set // {
          135|         script = systemActivationScript set false;
             |         ^
          136|       };

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/activation-script.nix:135:18:
          134|       apply = set: set // {
          135|         script = systemActivationScript set false;
             |                  ^
          136|       };

       … while calling 'systemActivationScript'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/activation-script.nix:20:33:
           19|
           20|   systemActivationScript = set: onlyDry: let
             |                                 ^
           21|     set' = mapAttrs (_: v: if isString v then (noDepEntry v) // { supportsDryActivation = false; } else v) set;

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/activation-script.nix:51:9:
           50|
           51|       ${textClosureMap id (withDrySnippets) (attrNames withDrySnippets)}
             |         ^
           52|

       … while calling 'textClosureMap'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings-with-deps.nix:75:35:
           74|
           75|   textClosureMap = f: predefined: names:
             |                                   ^
           76|     concatStringsSep "\n" (map f (textClosureList predefined names));

       … while calling the 'concatStringsSep' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings-with-deps.nix:76:5:
           75|   textClosureMap = f: predefined: names:
           76|     concatStringsSep "\n" (map f (textClosureList predefined names));
             |     ^
           77|

       … while calling 'id'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/trivial.nix:39:8:
           38|   */
           39|   id = x: x;
             |        ^
           40|

       … while evaluating the attribute 'text'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/activation-script.nix:9:5:
            8|   addAttributeName = mapAttrs (a: v: v // {
            9|     text = ''
             |     ^
           10|       #### Activation script snippet ${a}:

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/activation/activation-script.nix:12:9:
           11|       _localstatus=0
           12|       ${v.text}
             |         ^
           13|

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1204:18:
         1203|         mapAttrs
         1204|           (name: value:
             |                  ^
         1205|             if isAttrs value && cond value

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1207:18:
         1206|             then recurse (path ++ [ name ]) value
         1207|             else f (path ++ [ name ]) value);
             |                  ^
         1208|     in

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:254:72:
          253|           # For definitions that have an associated option
          254|           declaredConfig = mapAttrsRecursiveCond (v: ! isOption v) (_: v: v.value) options;
             |                                                                        ^
          255|

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:816:9:
          815|     in warnDeprecation opt //
          816|       { value = addErrorContext "while evaluating the option `${showOption loc}':" value;
             |         ^
          817|         inherit (res.defsFinal') highestPrio;

       … while evaluating the option `system.activationScripts.etc.text':

       (10 duplicate frames omitted)

       … while evaluating definitions from `/nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/etc/etc-activation.nix':

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:832:128:
          831|         defs' = concatMap (m:
          832|           map (value: { inherit (m) file; inherit value; }) (addErrorContext "while evaluating definitions from `${m.file}':" (dischargeProperties m.value))
             |                                                                                                                                ^
          833|         ) defs;

       … while calling 'dischargeProperties'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:903:25:
          902|   */
          903|   dischargeProperties = def:
             |                         ^
          904|     if def._type or "" == "merge" then

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:904:5:
          903|   dischargeProperties = def:
          904|     if def._type or "" == "merge" then
             |     ^
          905|       concatMap dischargeProperties def.contents

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:614:53:
          613|                 (n: value:
          614|                   [{ inherit (module) file; inherit value; }]
             |                                                     ^
          615|                 )

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/etc/etc-activation.nix:11:46:
           10|       system.activationScripts.etc =
           11|         lib.stringAfter [ "users" "groups" ] config.system.build.etcActivationCommands;
             |                                              ^
           12|     }

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1570:24:
         1569|     let f = attrPath:
         1570|       zipAttrsWith (n: values:
             |                        ^
         1571|         let here = attrPath ++ [n]; in

       … while calling the 'head' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1574:11:
         1573|         || pred here (elemAt values 1) (head values) then
         1574|           head values
             |           ^
         1575|         else

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:615:29:
          614|       merge = loc: defs:
          615|         zipAttrsWith (name: defs:
             |                             ^
          616|           let merged = mergeDefinitions (loc ++ [name]) elemType defs;

       … while evaluating the attribute 'optionalValue.value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:863:5:
          862|
          863|     optionalValue =
             |     ^
          864|       if isDefined then { value = mergedValue; }

       (9 duplicate frames omitted)

       … while evaluating definitions from `/nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/etc/etc.nix':

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:832:128:
          831|         defs' = concatMap (m:
          832|           map (value: { inherit (m) file; inherit value; }) (addErrorContext "while evaluating definitions from `${m.file}':" (dischargeProperties m.value))
             |                                                                                                                                ^
          833|         ) defs;

       … while calling 'dischargeProperties'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:903:25:
          902|   */
          903|   dischargeProperties = def:
             |                         ^
          904|     if def._type or "" == "merge" then

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:904:5:
          903|   dischargeProperties = def:
          904|     if def._type or "" == "merge" then
             |     ^
          905|       concatMap dischargeProperties def.contents

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:621:58:
          620|         # Push down position info.
          621|         (map (def: mapAttrs (n: v: { inherit (def) file; value = v; }) def.value) defs);
             |                                                          ^
          622|       emptyValue = { value = {}; };

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:273:39:
          272|         then value
          273|         else { ${elemAt attrPath n} = atDepth (n + 1); };
             |                                       ^
          274|     in atDepth 0;

       … while calling 'atDepth'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:270:17:
          269|       len = length attrPath;
          270|       atDepth = n:
             |                 ^
          271|         if n == len

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:614:53:
          613|                 (n: value:
          614|                   [{ inherit (module) file; inherit value; }]
             |                                                     ^
          615|                 )

       … while calling the 'getAttr' builtin
         at <nix/derivation-internal.nix>:44:19:
           43|       value = commonAttrs // {
           44|         outPath = builtins.getAttr outputName strict;
             |                   ^
           45|         drvPath = strict.drvPath;

       … while calling the 'derivationStrict' builtin
         at <nix/derivation-internal.nix>:34:12:
           33|
           34|   strict = derivationStrict drvAttrs;
             |            ^
           35|

       … while evaluating derivation 'etc'
         whose name attribute is located at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/make-derivation.nix:336:7

       … while evaluating attribute 'buildCommand' of derivation 'etc'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/trivial-builders/default.nix:59:17:
           58|         enableParallelBuilding = true;
           59|         inherit buildCommand name;
             |                 ^
           60|         passAsFile = [ "buildCommand" ]

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/etc/etc.nix:50:7:
           49|     mkdir -p "$out/etc"
           50|     ${lib.concatMapStringsSep "\n" (etcEntry: lib.escapeShellArgs [
             |       ^
           51|       "makeEtcEntry"

       … while calling 'concatMapStringsSep'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings.nix:232:5:
          231|     f:
          232|     list: concatStringsSep sep (map f list);
             |     ^
          233|

       … while calling the 'concatStringsSep' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings.nix:232:11:
          231|     f:
          232|     list: concatStringsSep sep (map f list);
             |           ^
          233|

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/etc/etc.nix:50:37:
           49|     mkdir -p "$out/etc"
           50|     ${lib.concatMapStringsSep "\n" (etcEntry: lib.escapeShellArgs [
             |                                     ^
           51|       "makeEtcEntry"

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/etc/etc.nix:50:47:
           49|     mkdir -p "$out/etc"
           50|     ${lib.concatMapStringsSep "\n" (etcEntry: lib.escapeShellArgs [
             |                                               ^
           51|       "makeEtcEntry"

       … while calling 'concatMapStringsSep'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings.nix:232:5:
          231|     f:
          232|     list: concatStringsSep sep (map f list);
             |     ^
          233|

       … while calling the 'concatStringsSep' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings.nix:232:11:
          231|     f:
          232|     list: concatStringsSep sep (map f list);
             |           ^
          233|

       … while calling 'escapeShellArg'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings.nix:1056:20:
         1055|   */
         1056|   escapeShellArg = arg:
             |                    ^
         1057|     let

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings.nix:1060:7:
         1059|     in
         1060|       if match "[[:alnum:],._+:@%/-]+" string == null
             |       ^
         1061|       then "'${replaceStrings ["'"] ["'\\''"] string}'"

       … while calling the 'match' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings.nix:1060:10:
         1059|     in
         1060|       if match "[[:alnum:],._+:@%/-]+" string == null
             |          ^
         1061|       then "'${replaceStrings ["'"] ["'\\''"] string}'"

       … while evaluating the second argument passed to builtins.match

       … while calling the 'toString' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/strings.nix:1058:16:
         1057|     let
         1058|       string = toString arg;
             |                ^
         1059|     in

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/nixos/modules/system/etc/etc.nix:53:10:
           52|       # Force local source paths to be added to the store
           53|       "${etcEntry.source}"
             |          ^
           54|       etcEntry.target

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1204:18:
         1203|         mapAttrs
         1204|           (name: value:
             |                  ^
         1205|             if isAttrs value && cond value

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/attrsets.nix:1207:18:
         1206|             then recurse (path ++ [ name ]) value
         1207|             else f (path ++ [ name ]) value);
             |                  ^
         1208|     in

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:254:72:
          253|           # For definitions that have an associated option
          254|           declaredConfig = mapAttrsRecursiveCond (v: ! isOption v) (_: v: v.value) options;
             |                                                                        ^
          255|

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:816:9:
          815|     in warnDeprecation opt //
          816|       { value = addErrorContext "while evaluating the option `${showOption loc}':" value;
             |         ^
          817|         inherit (res.defsFinal') highestPrio;

       … while evaluating the option `environment.etc.dbus-1.source':

       … while evaluating the attribute 'mergedValue'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:851:5:
          850|     # Type-check the remaining definitions, and merge them. Or throw if no definitions.
          851|     mergedValue =
             |     ^
          852|       if isDefined then

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:853:9:
          852|       if isDefined then
          853|         if all (def: type.check def.value) defsFinal then type.merge loc defsFinal
             |         ^
          854|         else let allInvalid = filter (def: ! type.check def.value) defsFinal;

       … while calling the 'all' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:853:12:
          852|       if isDefined then
          853|         if all (def: type.check def.value) defsFinal then type.merge loc defsFinal
             |            ^
          854|         else let allInvalid = filter (def: ! type.check def.value) defsFinal;

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:853:17:
          852|       if isDefined then
          853|         if all (def: type.check def.value) defsFinal then type.merge loc defsFinal
             |                 ^
          854|         else let allInvalid = filter (def: ! type.check def.value) defsFinal;

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:853:22:
          852|       if isDefined then
          853|         if all (def: type.check def.value) defsFinal then type.merge loc defsFinal
             |                      ^
          854|         else let allInvalid = filter (def: ! type.check def.value) defsFinal;

       … while calling 'check'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:542:15:
          541|       descriptionClass = "noun";
          542|       check = x: isStringLike x && builtins.substring 0 1 (toString x) == "/";
             |               ^
          543|       merge = mergeEqualOption;

       … in the right operand of the AND (&&) operator
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:542:33:
          541|       descriptionClass = "noun";
          542|       check = x: isStringLike x && builtins.substring 0 1 (toString x) == "/";
             |                                 ^
          543|       merge = mergeEqualOption;

       … while calling the 'substring' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:542:36:
          541|       descriptionClass = "noun";
          542|       check = x: isStringLike x && builtins.substring 0 1 (toString x) == "/";
             |                                    ^
          543|       merge = mergeEqualOption;

       … while calling the 'toString' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:542:60:
          541|       descriptionClass = "noun";
          542|       check = x: isStringLike x && builtins.substring 0 1 (toString x) == "/";
             |                                                            ^
          543|       merge = mergeEqualOption;

       … while calling the 'getAttr' builtin
         at <nix/derivation-internal.nix>:44:19:
           43|       value = commonAttrs // {
           44|         outPath = builtins.getAttr outputName strict;
             |                   ^
           45|         drvPath = strict.drvPath;

       … while calling the 'derivationStrict' builtin
         at <nix/derivation-internal.nix>:34:12:
           33|
           34|   strict = derivationStrict drvAttrs;
             |            ^
           35|

       … while evaluating derivation 'dbus-1'
         whose name attribute is located at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/make-derivation.nix:336:7

       … while evaluating attribute 'serviceDirectories' of derivation 'dbus-1'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/development/libraries/dbus/make-dbus-conf.nix:17:13:
           16|   {
           17|     inherit serviceDirectories suidHelper apparmor;
             |             ^
           18|     preferLocalBuild = true;

       … while calling anonymous lambda
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/types.nix:560:14:
          559|       merge = loc: defs:
          560|         map (x: x.value) (filter (x: x ? value) (concatLists (imap1 (n: def:
             |              ^
          561|           imap1 (m: def':

       … while evaluating the attribute 'value'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/modules.nix:864:27:
          863|     optionalValue =
          864|       if isDefined then { value = mergedValue; }
             |                           ^
          865|       else {};

       (10 duplicate frames omitted)

       … while evaluating derivation 'system-path'
         whose name attribute is located at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/make-derivation.nix:336:7

       … while evaluating attribute 'passAsFile' of derivation 'system-path'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/trivial-builders/default.nix:60:9:
           59|         inherit buildCommand name;
           60|         passAsFile = [ "buildCommand" ]
             |         ^
           61|           ++ (derivationArgs.passAsFile or [ ]);

       … while evaluating the attribute 'passAsFile'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/buildenv/default.nix:87:5:
           86|     # XXX: The size is somewhat arbitrary
           87|     passAsFile = if builtins.stringLength pkgs >= 128*1024 then [ "pkgs" ] else [ ];
             |     ^
           88|   }

       … while evaluating a branch condition
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/buildenv/default.nix:87:18:
           86|     # XXX: The size is somewhat arbitrary
           87|     passAsFile = if builtins.stringLength pkgs >= 128*1024 then [ "pkgs" ] else [ ];
             |                  ^
           88|   }

       … in the argument of the not operator
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/buildenv/default.nix:87:48:
           86|     # XXX: The size is somewhat arbitrary
           87|     passAsFile = if builtins.stringLength pkgs >= 128*1024 then [ "pkgs" ] else [ ];
             |                                                ^
           88|   }

       … while calling the 'lessThan' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/buildenv/default.nix:87:48:
           86|     # XXX: The size is somewhat arbitrary
           87|     passAsFile = if builtins.stringLength pkgs >= 128*1024 then [ "pkgs" ] else [ ];
             |                                                ^
           88|   }

       … while calling the 'stringLength' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/buildenv/default.nix:87:21:
           86|     # XXX: The size is somewhat arbitrary
           87|     passAsFile = if builtins.stringLength pkgs >= 128*1024 then [ "pkgs" ] else [ ];
             |                     ^
           88|   }

       … while calling the 'toJSON' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/buildenv/default.nix:82:12:
           81|             nativeBuildInputs buildInputs;
           82|     pkgs = builtins.toJSON chosenOutputs;
             |            ^
           83|     extraPathsFrom = lib.optional includeClosures (writeClosure pathsForClosure);

       … while evaluating list element at index 3

       … while evaluating attribute 'paths'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/buildenv/default.nix:57:5:
           56|   chosenOutputs = map (drv: {
           57|     paths =
             |     ^
           58|       # First add the usual output(s): respect if user has chosen explicitly,

       … while evaluating list element at index 0
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/build-support/buildenv/default.nix:57:5:
           56|   chosenOutputs = map (drv: {
           57|     paths =
             |     ^
           58|       # First add the usual output(s): respect if user has chosen explicitly,

       … while calling the 'getAttr' builtin
         at <nix/derivation-internal.nix>:44:19:
           43|       value = commonAttrs // {
           44|         outPath = builtins.getAttr outputName strict;
             |                   ^
           45|         drvPath = strict.drvPath;

       … while calling the 'derivationStrict' builtin
         at <nix/derivation-internal.nix>:34:12:
           33|
           34|   strict = derivationStrict drvAttrs;
             |            ^
           35|

       … while evaluating derivation 'vintagestory-1.19.8'
         whose name attribute is located at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/make-derivation.nix:336:7

       … while evaluating attribute 'buildInputs' of derivation 'vintagestory-1.19.8'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/make-derivation.nix:383:7:
          382|       depsHostHost                = elemAt (elemAt dependencies 1) 0;
          383|       buildInputs                 = elemAt (elemAt dependencies 1) 1;
             |       ^
          384|       depsTargetTarget            = elemAt (elemAt dependencies 2) 0;

       … in the condition of the assert statement
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/lib/customisation.nix:352:23:
          351|             drvPath = assert condition; drv.${outputName}.drvPath;
          352|             outPath = assert condition; drv.${outputName}.outPath;
             |                       ^
          353|           } //

       … while evaluating the attribute 'handled'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/check-meta.nix:507:7:
          506|       # or, alternatively, just output a warning message.
          507|       handled =
             |       ^
          508|         (

       … from call site
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/check-meta.nix:511:13:
          510|           else if valid == "no" then (
          511|             handleEvalIssue { inherit meta attrs; } { inherit (validity) reason errormsg; }
             |             ^
          512|           )

       … while calling 'handleEvalIssue'
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/check-meta.nix:269:38:
          268|
          269|   handleEvalIssue = { meta, attrs }: { reason , errormsg ? "" }:
             |                                      ^
          270|     let

       … while calling the 'throw' builtin
         at /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/stdenv/generic/check-meta.nix:281:8:
          280|         else throw;
          281|     in handler msg;
             |        ^
          282|

       error: Package ‘dotnet-runtime-wrapped-7.0.20’ in /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source/pkgs/development/compilers/dotnet/build-dotnet.nix:212 is marked as insecure, refusing to evaluate.


       Known issues:
        - Dotnet SDK 7.0.20 is EOL, please use 8.0 (LTS) or 9.0 (Current)

       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

          Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
                then pass `--impure` in order to allow use of environment variables.

       b) for `nixos-rebuild` you can add ‘dotnet-runtime-wrapped-7.0.20’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "dotnet-runtime-wrapped-7.0.20"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘dotnet-runtime-wrapped-7.0.20’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "dotnet-runtime-wrapped-7.0.20"
              ];
            }

Additional context

Related to #326335

Metadata

• system: "x86_64-linux"
• host os: Linux 6.11.10, NixOS, 25.05 (Warbler), 25.05.20241128.fa42b5a
• multi-user?: yes
• sandbox: yes
• version: nix-env (Nix) 2.25.0pre20241101_2e5759e3
• channels(root): "nixos-24.05"
• nixpkgs: /nix/store/4wjygyks9w9z3548738hpfjnaqvwxmcw-source

Notify maintainers

@Artturin @GiggleSquid

---

Note for maintainers: Please tag this issue in your PR.

---

Add a 👍 reaction to issues you find important.

[GiggleSquid]

Vintagesotry upstream is built with dotnet 7 (and has only recently migrated from dotnet 4 which was a very involved process for upstream).

For now you'll have to allow the insecure exception for dotnet 7.

There's a thread on the vintagestory forums about dotnet 7:
https://www.vintagestory.at/forums/topic/11608-add-net-8-support/#comment-50071

They may update to a newer dotnet release at some point, but until then, there's nothing else we can do

[Vixenin]

Vintagesotry upstream is built with dotnet 7 (and has only recently migrated from dotnet 4 which was a very involved process for upstream).

For now you'll have to allow the insecure exception for dotnet 7.

There's a thread on the vintagestory forums about dotnet 7: https://www.vintagestory.at/forums/topic/11608-add-net-8-support/#comment-50071

They may update to a newer dotnet release at some point, but until then, there's nothing else we can do

I just made a wrapper that 'fixed' the issue and forced the dotnet-runtime_8

preFixup = ''
makeWrapper ${dotnet-runtime_8}/bin/dotnet $out/bin/vintagestory
--prefix LD_LIBRARY_PATH : "${runtimeLibs}"
--set DOTNET_ROOT ${dotnet-runtime_8}/share/dotnet
--set DOTNET_ROLL_FORWARD Major
--add-flags $out/share/vintagestory/Vintagestory.dll

makeWrapper ${dotnet-runtime_8}/bin/dotnet $out/bin/vintagestory-server
--prefix LD_LIBRARY_PATH : "${runtimeLibs}"
--set DOTNET_ROOT ${dotnet-runtime_8}/share/dotnet
--set DOTNET_ROLL_FORWARD Major
--add-flags $out/share/vintagestory/VintagestoryServer.dll

find "$out/share/vintagestory/assets/" -not -path "/fonts/" -regex "./.[A-Z]." | while read -r file; do
local filename="$(basename -- "$file")"
ln -sf "$filename" "''${file%/}"/"''${filename,,}"
done
'';