Struct EvaluatedGeneration 

pub struct EvaluatedGeneration {
    pub source: Hash,
    pub options: BTreeMap<String, Value>,
    pub units: UnitDefs,
    pub user_units: Vec<UnitDef>,
    pub activation: ActivationPlan,
    pub locked: BTreeSet<String>,
    pub core_units: BTreeMap<String, Hash>,
    pub packages: BTreeMap<String, String>,
    pub insecure: BTreeSet<String>,
    pub declarations: BTreeMap<String, Vec<String>>,
    pub inputs: BTreeMap<String, (String, String)>,
    pub services: BTreeMap<String, Sensitivities>,
}

What evaluating a staged source yields (§9 step 2).

Fields

source: Hash

options: BTreeMap<String, Value>

units: UnitDefs

user_units: Vec<UnitDef>

Units instantiated once per logged-in user (Scope::User { uid: 0 } as a placeholder); state expands them per session (§10).

activation: ActivationPlan

Filled in by build (dry-activate); empty after evaluation alone.

locked: BTreeSet<String>

Option paths whose highest-priority definition beats Planarian’s mkOverride 90 (the owner used mkForce): locked (§9).

core_units: BTreeMap<String, Hash>

Content hashes of the evaluated unit files for planariad and planarian-recovery; a difference from the running ones is touches_core.

packages: BTreeMap<String, String>

The system’s packages, pname → version (§12e).

insecure: BTreeSet<String>

Those whose nixpkgs meta.knownVulnerabilities is not empty (§12e).

declarations: BTreeMap<String, Vec<String>>

Every system service the generation declares, watched or not, with the files that define it (NixOS’s definition locations): the provenance a malicious declaration leaves (§15).

inputs: BTreeMap<String, (String, String)>

The flake inputs the generation was built from, name → (revision, store path), when the owner’s flake passes them (services.planarian.flakeInputs): a declaration from an input is reported with the input’s lock change (§15).

services: BTreeMap<String, Sensitivities>

The shipped tables’ sensitivity for every system service NixOS defines that the manifest does not declare (§11 sensitivity completeness): a unit in neither has no entry, and fails closed.

Implementations

impl EvaluatedGeneration

pub fn security_fixes(&self, base: &EvaluatedGeneration) -> Vec<String>

§12e: packages this generation fixes relative to base: insecure in base, still present here, and no longer insecure.

Trait Implementations

impl Clone for EvaluatedGeneration

fn clone(&self) -> EvaluatedGeneration

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EvaluatedGeneration

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EvaluatedGeneration

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for EvaluatedGeneration

fn eq(&self, other: &EvaluatedGeneration) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for EvaluatedGeneration

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for EvaluatedGeneration

impl StructuralPartialEq for EvaluatedGeneration