Fix sandbox issue with Python source fetching (#45)

domenkozar · claude · domenkozar · commit 2571ebc7280f · 2026-02-24T13:07:38.000Z
Pass the real hash to cpython's fetchurl instead of null, making it a
proper fixed-output derivation with sandbox network access. This
prevents DNS failures when nixpkgs.follows is overridden.

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/flake.nix b/flake.nix
@@ -304,7 +304,7 @@
               callPackage pythonFun (
                 {
                   inherit sourceVersion;
-                  hash = null;
+                  hash = "sha256-${hash}";
                   self = packages.${version};
                   passthruFun = callPackage "${pkgs.path}/pkgs/development/interpreters/python/passthrufun.nix" { };
                 }

Original file line number	Diff line number	Diff line change
`@@ -304,7 +304,7 @@`
`304`	`304`	`callPackage pythonFun (`
`305`	`305`	`{`
`306`	`306`	`inherit sourceVersion;`
`307`		`- hash = null;`
	`307`	`+ hash = "sha256-${hash}";`
`308`	`308`	`self = packages.${version};`
`309`	`309`	`passthruFun = callPackage "${pkgs.path}/pkgs/development/interpreters/python/passthrufun.nix" { };`
`310`	`310`	`}`