Merge pull request #14348 from NixOS/fetchClosure-access

Allow access to the result of fetchClosure

src/libexpr/primops/fetchClosure.cc

@@ -64,6 +64,8 @@ static void runFetchClosureWithRewrite(
              .pos = state.positions[pos]});
     }
 
+    state.allowClosure(toPath);
+
     state.mkStorePathString(toPath, v);
 }
 
@@ -91,6 +93,8 @@ static void runFetchClosureWithContentAddressedPath(
              .pos = state.positions[pos]});
     }
 
+    state.allowClosure(fromPath);
+
     state.mkStorePathString(fromPath, v);
 }
 
@@ -115,6 +119,8 @@ static void runFetchClosureWithInputAddressedPath(
              .pos = state.positions[pos]});
     }
 
+    state.allowClosure(fromPath);
+
     state.mkStorePathString(fromPath, v);
 }
 

tests/functional/dependencies.builder0.sh

@@ -17,4 +17,6 @@ ln -s "$out" "$out"/self
 echo program > "$out"/program
 chmod +x "$out"/program
 
+echo '1 + 2' > "$out"/foo.nix
+
 echo FOO

tests/functional/fetchClosure.sh

@@ -99,6 +99,14 @@ clearStore
 
 [ -e "$caPath" ]
 
+# Test import-from-derivation on the result of fetchClosure.
+[[ $(nix eval -v --expr "
+  import \"\${builtins.fetchClosure {
+    fromStore = \"file://$cacheDir\";
+    fromPath = $caPath;
+  }}/foo.nix\"
+") = 3 ]]
+
 # Check that URL query parameters aren't allowed.
 clearStore
 narCache=$TEST_ROOT/nar-cache