Add sandbox warning in setup script

1 files changed, 13 insertions, 0 deletions

diff --git a/nixops/scripts/setup b/nixops/scripts/setup
index 929b27a..38cee65 100755
--- a/nixops/scripts/setup
+++ b/nixops/scripts/setup
@@ -93,6 +93,19 @@ if [ ! -f /etc/ssh/ssh_rsa_key_nixops ]; then
   fi
 fi
 
+if nix show-config --json | jq -e '.sandbox.value == "true"' >/dev/null; then
+  cat <<-EOF
+        There are some impure derivations in the repo currently (grep __noChroot), please put
+          sandbox = "relaxed"
+        in /etc/nix/nix.conf
+        you may also want to add
+          keep-outputs = true
+          keep-derivations = true
+        to prevent garbage collector from deleting build dependencies (they take a lot of time to build)
+        EOF
+  exit 1
+fi
+
 if ! which nixops 2>/dev/null >/dev/null; then
   cat <<-EOF
         nixops is needed: