Adding insecure packages to permittedInsecurePackages #7

New issue

Open

opened 2026-05-14 07:01:28 +00:00 by xfeusw · 2 comments

xfeusw commented

2026-05-14 07:01:28 +00:00

Member

Problem

When we try to install insecure package (e.g. ventoy-full), we have to deal with error which describes we're installing insecure package and we should add that package into nixpkgs.config.permittedInsecurePackages to install that package.

Example

To generate this error, try to install ventoy-full package from nixpkgs. Then it will ask you to add a code like this to your config:

nixpkgs.config.permittedInsecurePackages = [
  "ventoy-1.1.12"
];

# Problem When we try to install insecure package (e.g. [`ventoy-full`](https://search.nixos.org/packages?channel=unstable&query=ventoy-full)), we have to deal with error which describes we're installing insecure package and we should add that package into nixpkgs.config.permittedInsecurePackages to install that package. ## Example To generate this error, try to install [`ventoy-full`](https://search.nixos.org/packages?channel=unstable&query=ventoy-full) package from nixpkgs. Then it will ask you to add a code like this to your config: ```nix nixpkgs.config.permittedInsecurePackages = [ "ventoy-1.1.12" ]; ```

👍 1

xfeusw added the

bug

label

2026-05-14 07:01:28 +00:00

xfeusw added this to the Xinux projects (~26.05) project

2026-05-14 07:01:29 +00:00

xfeusw commented

2026-05-14 07:01:40 +00:00

Author

Member

@bahrom04

bahrom04 self-assigned this

2026-05-14 08:10:41 +00:00

bahrom04 commented

2026-05-14 08:20:21 +00:00

Owner

Currently I can suggest 2 options to apply these insecure app installation:

1. For example on bazaar app when you try to delete the app, it will prompt to ask some selections

2. On user preferences add switch to accept insecure apps:

But we have to keep in mind, all these information should come with app metadata. I will provide more info regardless appstream metadata in separate issue

## Currently I can suggest 2 options to apply these insecure app installation: ![image](/attachments/bd1a38a3-c248-433a-9f3e-d52150734455) ### 1. For example on bazaar app when you try to delete the app, it will prompt to ask some selections ![image](/attachments/5b8804f6-df21-4aa2-afae-9711ed203be3) ### 2. On user preferences add switch to accept insecure apps: ![image](/attachments/258824a2-f51b-46bd-83d2-ac7d5c9df43a) But we have to keep in mind, all these information should come with app metadata. I will provide more info regardless appstream metadata in separate issue

image.png

175 KiB

image.png

286 KiB

image.png

248 KiB