Project Colony packages for Nix

Nix expressions for the Project Colony ecosystem, kept current automatically.

Nix has no AUR. Nixpkgs is a reviewed monorepo, so it cannot follow our releases at our pace; this repository is the equivalent of maintaining our own package repo, and it tracks upstream releases within the hour.

Install

Try it once, install nothing:

nix run github:Project-Colony/nix#spherecord

Install it into your profile:

nix profile install github:Project-Colony/nix#spherecord

Update it later. This is the paru -Syu of this repository:

nix profile upgrade spherecord

On older Nix, profile entries are addressed by index rather than by name. nix profile list shows what yours is called, and nix profile upgrade --all works everywhere.

Declaratively, in a NixOS or home-manager flake:

{
  inputs.colony.url = "github:Project-Colony/nix";

  # ... then, in your configuration:
  environment.systemPackages = [ inputs.colony.packages.${pkgs.system}.spherecord ];
}

Move forward with nix flake update colony. There is also overlays.default, if you would rather have the packages appear in pkgs.

What is packaged

Attribute	Upstream	Source	Systems
spherecord	SphereCord	published AppImage	x86_64-linux, aarch64-linux

These wrap the release artifacts we already build and sign. They do not build from source, which is why installing is a download rather than a compile.

How updates work

scripts/update.sh reads each upstream repo's latest release and rewrites sources.json. .github/workflows/update.yml runs it hourly, builds every package to prove the bump is good, and only then commits.

It never downloads a release asset to hash it: GitHub's release API returns each asset's sha256 in digest, and a Nix SRI hash is that same digest base64-encoded. So the updater is gh plus jq plus python3, it finishes in seconds, and it needs no Nix at all. The download path in the script exists only for assets published before GitHub started emitting digest.

Run it by hand any time:

./scripts/update.sh

Known rough edges

• Electron and the sandbox. Electron applications inside an FHS environment sometimes fail with "The SUID sandbox helper binary was found, but is not configured correctly". If SphereCord refuses to start with that message, that is the cause, and the fix belongs in pkgs/spherecord/package.nix. Please open an issue rather than working around it locally.
• Disk. The AppImage is 166 MB and Nix keeps both the fetched file and the extracted tree, so budget roughly 350 MB per retained version until nix-collect-garbage runs.
• aarch64 is unverified. The expression covers it and CI evaluates it, but no CI runner builds it yet.

Adding a package

1. Add a line to the PACKAGES table at the top of scripts/update.sh.
2. Add pkgs/<name>/package.nix.
3. Add it to packagesFor in flake.nix.
4. Run ./scripts/update.sh and commit the resulting sources.json.

CI derives the list of packages to build from the flake itself, so it needs no change.