Add sha256 to go closer to purity

hm/common.nix

@@ -20,6 +20,7 @@ in
 {
 
   nixpkgs.config.allowUnfree = true;
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
   programs =
     let
@@ -163,7 +164,23 @@ in
           style = "full";
         };
       };
-      lsd.enable = true;
+      lsd = {
+        enable = true;
+        settings = {
+          size = "short";
+        };
+        colors = { # Base16 only, so it reuses the current theme.
+          date = { day-old = 4; hour-old = 6; older = 5; };
+          git-status = { conflicted = 14; default = 13; deleted = 1; ignored = 13; modified = 3; new-in-index = 2; new-in-workdir = 2; renamed = 4; typechange = 3; unmodified = 13; };
+          group = 6;
+          inode = { invalid = 245; valid = 13; };
+          links = { invalid = 9; valid = 14; };
+          permission = { acl = 6; context = 14; exec = 1; exec-sticky = 5; no-access = 245; octal = 6; read = 2; write = 3; };
+          size = { large = 1; medium = 9; none = 11; small = 3; };
+          tree-edge = 13;
+          user = 2;
+        };
+      };
       dircolors = {
         enable = true;
         enableBashIntegration = true;
@@ -412,6 +429,7 @@ in
       neofetch
 
       # nix utils
+      nix
       nix-diff
       nix-tree
       nix-output-monitor

hm/desktop.nix

@@ -1,11 +1,10 @@
 { pkgs, config, lib, ... }:
 let
-  nixgl = import
-    (builtins.fetchGit {
-      url = "https://github.com/nix-community/nixGL";
-      rev = "489d6b095ab9d289fe11af0219a9ff00fe87c7c5";
-    })
-    { };
+  nixglsrc = builtins.fetchTarball {
+    url = "https://github.com/nix-community/nixGL/archive/489d6b095ab9d289fe11af0219a9ff00fe87c7c5.tar.gz";
+    sha256 = "16b9jh46a02m79swsk5i5xw44738zy1i31al77mm1k8y4nxc8d9b";
+  };
+  nixgl = import (nixglsrc) { };
   nixGLIntelPrefix = "${nixgl.nixVulkanIntel}/bin/nixVulkanIntel ${nixgl.nixGLIntel}/bin/nixGLIntel ";
   wmPrefix = "${lib.optionalString config.frogeye.desktop.nixGLIntel nixGLIntelPrefix}";
 in
@@ -651,7 +650,8 @@ in
 
     home = {
       file = {
-        ".face" = { # TODO Only works on pindakaas? See https://wiki.archlinux.org/title/LightDM#Changing_your_avatar
+        ".face" = {
+          # TODO Only works on pindakaas? See https://wiki.archlinux.org/title/LightDM#Changing_your_avatar
           source = pkgs.runCommand "face.png" { } "${pkgs.inkscape}/bin/inkscape ${./face.svg} -w 1024 -o $out";
         };
       };

hm/style.nix

@@ -1,7 +1,10 @@
 { pkgs, config, lib, ... }:
 let
   # Currently last commit in https://github.com/danth/stylix/pull/194
-  stylix = builtins.fetchTarball "https://github.com/willemml/stylix/archive/2ed2b0086b41d582aca26e083c19c0e47c8991e3.tar.gz";
+  stylix = builtins.fetchTarball {
+    url = "https://github.com/willemml/stylix/archive/2ed2b0086b41d582aca26e083c19c0e47c8991e3.tar.gz";
+    sha256 = "1mwhpbfmw4n1lmy22s0dhbklzd8b0r7mn0mg7vbz44ac35m7kzf2";
+  };
   polarityFile = "${config.xdg.stateHome}/theme_polarity";
   polarityFromFile = if builtins.pathExists polarityFile then lib.strings.fileContents polarityFile else "light";
   polarity = if config.frogeye.polarity == "dynamic" then polarityFromFile else config.frogeye.polarity;

hm/vim.nix

@@ -1,9 +1,10 @@
 { pkgs, lib, config, ... }:
 let
-  nixvim = import (builtins.fetchGit {
-    url = "https://github.com/nix-community/nixvim";
-    rev = "c96d7b46d05a78e695ed1c725d1596b65509b4f9"; # 24.05 Anythin after this commit works
-  });
+  nixvim = builtins.fetchTarball {
+    url = "https://github.com/nix-community/nixvim/archive/c96d7b46d05a78e695ed1c725d1596b65509b4f9.tar.gz";
+    # 24.05 Anythin after this commit works
+    sha256 = "0brzl3k11qjy81wvs1i8ngbk4kkxild9ps3ammnbr912ldvq9nac";
+  };
   vim-shot-f = pkgs.vimUtils.buildVimPlugin {
     pname = "vim-shot-f";
     version = "2016-02-05";

os/common.nix

@@ -29,6 +29,7 @@
   ];
 
   nixpkgs.config.allowUnfree = true;
+  nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
   programs = {
     adb.enable = true;

os/default.nix

@@ -9,6 +9,10 @@
     ./gaming
     ./geoffrey.nix
     ./wireless.nix
-    "${builtins.fetchTarball "https://github.com/nix-community/disko/archive/3cb78c93e6a02f494aaf6aeb37481c27a2e2ee22.tar.gz"}/module.nix"
+    "${builtins.fetchTarball {
+      url = "https://github.com/nix-community/disko/archive/3cb78c93e6a02f494aaf6aeb37481c27a2e2ee22.tar.gz";
+      sha256 = "0slkd86c7viv8ping6wizhab6iwxz0bn9fxvzrscz0r745d8iaca";
+      }
+    }/module.nix"
   ];
 }