release-python.nix: allow evaluation with openssl_1_1

Home Assistant is a big part of nixpkgs python ecosystem and how I
started participating in python maintenance.

Recently it started including `openssl_1_1` in its transitive dependency
closure, which resulted in its exclusion from python-updates.

This is detrimental to the health of the `home-assistant` ecosystem,
since it would not be built and tested anymore.

Permitting `openssl_1_1` for python-updates, as was done for
`release.nix`, will allow me to get in contact with the upstream, to
hopefully arrive at a favorable outcome.
This commit is contained in:
Martin Weinelt 2023-12-12 04:08:43 +01:00
parent b576bc2681
commit 18523dedab
No known key found for this signature in database
GPG key ID: 87C1E9888F856759

View file

@ -9,7 +9,17 @@
"x86_64-linux"
]
, # Attributes passed to nixpkgs. Don't build packages marked as unfree.
nixpkgsArgs ? { config = { allowUnfree = false; inHydra = true; }; }
nixpkgsArgs ? { config = {
allowUnfree = false;
allowInsecure = false;
inHydra = true;
permittedInsecurePackages = [
# Keep evaluating home-assistant, which is transitively affected
# by home-assistant-chip-core consuming OpenSSL 1.1. Affects roughly
# 800 jobs.
"openssl-1.1.1w"
];
}; }
}:
with import ./release-lib.nix {inherit supportedSystems nixpkgsArgs; };