v0.23.0

This release has a couple important-to-note changes:

• It changes the installed-by-default Nix version back to 2.23.3 due an observed regression in substitution. For more information, see the upstream bug report: NixOS/nix#11387.
• All new macOS installations will now have a build GID of 350 and build UIDs that start at 351 (for nixbld1), in order to be robust against the upcoming macOS Sequoia update. Work is still in progress on implementing a migration helper for existing pre-Sequoia macOS installations; stay tuned for more information.

What's Changed

• Move determinate-nixd to /usr/local/bin/determinate-nixd on Linux by @grahamc in #1120
• Synchronize macOS UIDs and GIDs with upstream scripts to prepare for Sequoia by @cole-h in #1123
• Update and unify limits across systemd and macOS. by @grahamc in #1126
• Print the nix-installer version when it runs by @cole-h in #1127
• Bring LimitNOFILE back down to 1024 * 1024 due to the performance impact of too many FDs by @grahamc in #1128
• Update flake inputs, downgrade Nix to 2.23.3 due to curl issues by @grahamc in #1129
• Update cargo deps by @cole-h in #1130
• Release v0.23.0 by @cole-h in #1131

Full Changelog: v0.22.0...v0.23.0

v0.22.0

What's Changed

• Update determinate-nixd by @grahamc in #1109
• Update nix 2 24 4 by @grahamc in #1110
• Update cargo dependencies by @grahamc in #1111
• release v0.22.0 by @grahamc in #1112

Full Changelog: v0.21.0...v0.22.0

v0.21.0

This release has a few important-to-note changes:

• It removes support for i686-linux (see https://determinate.systems/posts/nix-installer-i686-linux/)
• It bumps the installed-by-default Nix version to 2.24.3
• It is the first release with the --determinate flag. For more details, see: https://determinate.systems/nix

What's Changed

• Drop a ton of target_os based cfg's to allow more tests and clippies to be caught cross-platform by @grahamc in #1058
• Add troubleshooting doc by @lucperkins in #1037
• Distribute Determinate Nix by @grahamc in #1003
• --determinate fixups by @grahamc in #1068
• Update cache pubkeys by @grahamc in #1076
• In the plan json, specify the action name for every action by @noamraph in #1061
• flesh out some further deployment integration by @grahamc in #1081
• Test --determinate in CI, and fix integration issues by @grahamc in #1084
• Update deps by @cole-h in #1090
• Remove support for i686-linux by @cole-h in #1093
• fixup: socket enablement on older systemd versions by @cole-h in #1094
• Properly fixup socket enablement on older systemd versions by @cole-h in #1095
• Upgrade Nix to 2.24.3 by @cole-h in #1100
• setup_default_profile: don't substitute by @cole-h in #1101
• fixup: add Service= to determinate-nixd.socket by @cole-h in #1102
• Add --determinate container and VM tests by @cole-h in #1103
• Release v0.21.0 by @cole-h in #1091

New Contributors

• @noamraph made their first contribution in #1061

Full Changelog: v0.20.2...v0.21.0

v0.20.2

This patch release release improves macOS 15 beta fresh install support by handling the case where reading the current system version from SystemVersion.plist returns the compatibility version 10.16, instead of 15.0.

A huge thank you to @ratbag98 for their assistance in narrowing down the issue and testing out various approaches to resolve the problem!

What's Changed

• Work around macOS compatibility SystemVersion.plist by @cole-h in #1046

Full Changelog: v0.20.1...v0.20.2

v0.20.1

This release includes preliminary support for the macOS 15 beta, by relocating the build user UIDs into the 450-499 range. This will only be useful for fresh installations.

What's Changed

• add missing SELinux directives by @kbknapp in #1031
• Prefer launchtl's bootstrap / bootout by @grahamc in #1033
• Preliminary support for macOS 15 beta by @cole-h in #1038
• Upgrade Nix to 2.23.3 by @cole-h in #1039
• Update dependencies by @cole-h in #1040
• Release v0.20.1 by @cole-h in #1042

New Contributors

• @kbknapp made their first contribution in #1031

Full Changelog: v0.20.0...v0.20.1

v0.20.0

This release bumps the installed-by-default Nix version to 2.23.1, addressing CVE-2024-38531 (GHSA-q82p-44mg-mgh5).

What's Changed

• Allow the 'nix' input to point to the Nix repo by @edolstra in #1013
• Run shellcheck on nix-installer.sh by @lucperkins in #995
• Upgrade to Nix 2.23.1 (CVE-2024-38531) by @cole-h in #1022
• Update dependencies by @cole-h in #1023

Full Changelog: v0.19.1...v0.20.0

v0.19.1

This release includes one significant change to the installer's behavior: it now sets always-allow-substitutes = true by default in nix.conf. Beyond that, changes include some additional README documentation of CLI flags and environment variables, new testing suites for ARM64, and a standard round of Rust dependency updates.

What's Changed

• Test installer on aarch64-linux runner by @lucperkins in #972
• Test installer on aarch64-darwin runner by @lucperkins in #973
• Set always-allow-substitutes to true in nix.conf by @lucperkins in #977
• Bump nix from 0.28.0 to 0.29.0 by @dependabot in #984
• Bump serde from 1.0.200 to 1.0.203 by @dependabot in #983
• Bump serde_json from 1.0.116 to 1.0.117 by @dependabot in #982
• Bump semver from 1.0.22 to 1.0.23 by @dependabot in #980
• Document installer configs by @lucperkins in #975
• Bump thiserror from 1.0.59 to 1.0.61 by @dependabot in #981
• Update dependencies by @lucperkins in #993
• Patch bump to 0.19.1 by @lucperkins in #992

Full Changelog: v0.19.0...v0.19.1

v0.19.0

This release includes a couple of improvements:

1. On all targets, we bundle the default Nix version we install into the installer binary itself.
2. On macOS, we give a better error message when a device policy would prevent mounting the internal Nix Store volume we want to create.

What's Changed

• Embedding the Nix installer in the binary. by @grahamc in #897
• Error on SUIS by @grahamc in #941

Full Changelog: v0.18.0...v0.19.0

v0.18.0

This release bumps the installed-by-default Nix version to 2.21.2 and fixes a couple bugs.

For more information on what goodies this Nix release brings, take a look at their release notes.

Bug Fixes

• Fallback to empty terminfo by @cole-h in #869
• Add --set-home to sudo invocation by @mkenigs in #902 (#922)

What's Changed

• Update flake/Rust dependencies by @edolstra in #883
• Fix typo by @nanashi-1 in #876 (#922)
• Factor out find_nix_and_ca_cert by @mkenigs in #903 (#922)
• Upgrade to Nix 2.21.2 by @edolstra in #921
• Support targeting installs to Determinate Nix Enterprise Edition. by @grahamc in #905
• Move all CI to GitHub Actions by @cole-h in #923
• Commit build-i686-linux action by @cole-h in #932
• Update deps by @cole-h in #933
• Release v0.18.0 by @cole-h in #934

Full Changelog: v0.17.1...v0.18.0

v0.17.1

This release bumps the installed-by-default Nix version to 2.20.5, addressing CVE-2024-27297.

What's Changed

• Nix 2.20.4 by @edolstra in #882
• Updated the privacy policy link

Full Changelog: v0.17.0...v0.17.1