l: use unstable channel by default

lass/krops.nix

@@ -5,16 +5,33 @@
     pkgs
   ;
 
-
   source = { test }: lib.evalSource ([
     (krebs-source { test = test; })
     {
       nixos-config.symlink = "stockholm/lass/1systems/${name}/physical.nix";
-      nixpkgs-unstable.git = {
+      nixpkgs = lib.mkForce (if test then {
-        url = "https://github.com/nixos/nixpkgs";
+        derivation = let
-        ref = (lib.importJSON ../krebs/nixpkgs-unstable.json).rev;
+          rev = (lib.importJSON ../krebs/nixpkgs-unstable.json).rev;
-        shallow = true;
+          sha256 = (lib.importJSON ../krebs/nixpkgs-unstable.json).sha256;
-      };
+        in ''
+          with import (builtins.fetchTarball {
+            url = "https://github.com/nixos/nixpkgs/archive/${rev}.tar.gz";
+            sha256 = "${sha256}";
+          }) {};
+          pkgs.fetchFromGitHub {
+            owner = "nixos";
+            repo = "nixpkgs";
+            rev = "${rev}";
+            sha256 = "${sha256}";
+          }
+        '';
+      } else {
+        git = {
+          ref = (lib.importJSON ./nixpkgs.json).rev;
+          url = https://github.com/NixOS/nixpkgs;
+          shallow = true;
+        };
+      });
       secrets = if test then {
         file = toString ./2configs/tests/dummy-secrets;
       } else {