deps: update dependency DeterminateSystems/nix-installer to v3.9.0

[renovate]

This PR contains the following updates:

Package	Update	Change
DeterminateSystems/nix-installer	minor	v3.4.2 -> v3.9.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

DeterminateSystems/nix-installer (DeterminateSystems/nix-installer)

v3.9.0

Compare Source

What's Changed

• Pass --speed-limit and --speed-time when passing --retry by @​grahamc in #​1637
• Release v3.9.0 by @​github-actions[bot] in #​1640

Full Changelog: DeterminateSystems/nix-installer@v3.8.6...v3.9.0

v3.8.6

Compare Source

What's Changed

• Bump slab from 0.4.10 to 0.4.11 by @​dependabot[bot] in #​1635
• Release v3.8.6 by @​github-actions[bot] in #​1636

Full Changelog: DeterminateSystems/nix-installer@v3.8.5...v3.8.6

v3.8.5

Compare Source

What's Changed

• Determinate Nix Installer Readme Update by @​eytebit in #​1604
• Release v3.8.5 by @​github-actions[bot] in #​1626

New Contributors

• @​eytebit made their first contribution in #​1604

Full Changelog: DeterminateSystems/nix-installer@v3.8.4...v3.8.5

v3.8.4

Compare Source

What's Changed

• Release v3.8.4 by @​github-actions[bot] in #​1618

Full Changelog: DeterminateSystems/nix-installer@v3.8.2...v3.8.4

v3.8.2

Compare Source

What's Changed

• Release v3.8.2 by @​github-actions[bot] in #​1610

Full Changelog: DeterminateSystems/nix-installer@v3.8.1...v3.8.2

v3.8.1

Compare Source

What's Changed

• Pin back plist to 1.7.2 by @​grahamc in #​1607
• Release v3.8.1 by @​github-actions[bot] in #​1608

Full Changelog: DeterminateSystems/nix-installer@v3.8.0...v3.8.1

v3.8.0

Compare Source

What's Changed

• fixup: update upload_s3.sh to account for bucket policy changes by @​cole-h in #​1603
• Release v3.8.0 by @​github-actions[bot] in #​1606

Full Changelog: DeterminateSystems/nix-installer@v3.7.0...v3.8.0

v3.7.0

Compare Source

What's Changed

• Grahamc/update detsys ids client by @​grahamc in #​1599
• Release v3.7.0 by @​github-actions in #​1600

Full Changelog: DeterminateSystems/nix-installer@v3.6.8...v3.7.0

v3.6.8

Compare Source

What's Changed

• Ditch unnecessary concurrency groups by @​grahamc in #​1592
• Run the container / vm tests twice if they fail, with a timeout of 10… by @​grahamc in #​1591
• Release v3.6.8 by @​github-actions in #​1593

Full Changelog: DeterminateSystems/nix-installer@v3.6.7...v3.6.8

v3.6.7

Compare Source

What's Changed

• .github: switch from actions/cache to actions/{download,upload}-artifact by @​colemickens in #​1584
• Release v3.6.7 by @​github-actions in #​1590

Full Changelog: DeterminateSystems/nix-installer@v3.6.6...v3.6.7

v3.6.6

Compare Source

What's Changed

• Release v3.6.6 by @​github-actions in #​1583

Full Changelog: DeterminateSystems/nix-installer@v3.6.5...v3.6.6

v3.6.5

Compare Source

What's Changed

• ci: only publish on "published" event by @​cole-h in #​1569
• Support using nix profile when setting up the default profile by @​grahamc in #​1565
• Update to detsys-ids-client v0.4 by @​grahamc in #​1574
• Update update.yml: it was failing due to missing privs by @​grahamc in #​1575
• fixup: don't escape newlines in hardcoded "Install Determinate Nix?" prompt by @​cole-h in #​1577
• Release v3.6.3 by @​github-actions in #​1579
• Release v3.6.5 by @​github-actions in #​1582

Full Changelog: DeterminateSystems/nix-installer@v3.6.2...v3.6.5

v3.6.3

Compare Source

What's Changed

• ci: only publish on "published" event by @​cole-h in #​1569
• Support using nix profile when setting up the default profile by @​grahamc in #​1565
• Update to detsys-ids-client v0.4 by @​grahamc in #​1574
• Update update.yml: it was failing due to missing privs by @​grahamc in #​1575
• fixup: don't escape newlines in hardcoded "Install Determinate Nix?" prompt by @​cole-h in #​1577
• Release v3.6.3 by @​github-actions in #​1579

Full Changelog: DeterminateSystems/nix-installer@v3.6.2...v3.6.3

v3.6.2

Compare Source

What's Changed

• Release v3.6.2 by @​github-actions in #​1567

Full Changelog: DeterminateSystems/nix-installer@v3.6.1...v3.6.2

v3.6.1

Compare Source

What's Changed

• Release v3.6.1 by @​github-actions in #​1564

Full Changelog: DeterminateSystems/nix-installer@v3.6.0...v3.6.1

v3.6.0

Compare Source

What's Changed

• Updates re our new nix action by @​grahamc in #​1555
• Avoid zsh taking over /dev/tty in self-test by @​joshheinrichs-shopify in #​1557
• Use UnitSrc for determinate nixd init by @​grahamc in #​1560
• Release v3.6.0 by @​github-actions in #​1562

New Contributors

• @​joshheinrichs-shopify made their first contribution in #​1557

Full Changelog: DeterminateSystems/nix-installer@v3.5.2...v3.6.0

v3.5.2

Compare Source

What's Changed

• Release v3.5.2 by @​github-actions in #​1552

Full Changelog: DeterminateSystems/nix-installer@v3.5.1...v3.5.2

v3.5.1

Compare Source

What's Changed

• Remove flake-compat input by @​lucperkins in #​1544
• Release v3.5.1 by @​github-actions in #​1549
• Release v3.5.1 by @​github-actions in #​1550

Full Changelog: DeterminateSystems/nix-installer@v3.4.2...v3.5.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for constellation-docs canceled.

Name	Link
🔨 Latest commit	7ef9dbc
🔍 Latest deploy log	https://app.netlify.com/projects/constellation-docs/deploys/68ae772b3ea02700084123d8

[burgerdev]

The images produced in the repro workflow have a lot of diffs: symlink targets /lib vs. /usr/lib, different kernel modules, directory inodes and /usr/lib/udev/hwdb.bin. I don't know how the determinate systems nix installer causes this difference, though, given that the nix source is pinned.

│ -lrwxrwxrwx root/root                49 1970-01-01 00:00 /etc/systemd/system/basic.target.wants/configure-constel-csp.service -> /lib/systemd/system/configure-constel-csp.service
│ -lrwxrwxrwx root/root                41 1970-01-01 00:00 /etc/systemd/system/basic.target.wants/rpmdb-migrate.service -> /lib/systemd/system/rpmdb-migrate.service
│ -lrwxrwxrwx root/root                41 1970-01-01 00:00 /etc/systemd/system/basic.target.wants/rpmdb-rebuild.service -> /lib/systemd/system/rpmdb-rebuild.service
│ +lrwxrwxrwx root/root                53 1970-01-01 00:00 /etc/systemd/system/basic.target.wants/configure-constel-csp.service -> /usr/lib/systemd/system/configure-constel-csp.service
│ +lrwxrwxrwx root/root                45 1970-01-01 00:00 /etc/systemd/system/basic.target.wants/rpmdb-migrate.service -> /usr/lib/systemd/system/rpmdb-migrate.service
│ +lrwxrwxrwx root/root                45 1970-01-01 00:00 /etc/systemd/system/basic.target.wants/rpmdb-rebuild.service -> /usr/lib/systemd/system/rpmdb-rebuild.service

│ -drwx------ root/root                65 1970-01-01 00:00 /var/lib/selinux/targeted/active/modules/100/fwupd
│ +drwx------ root/root                53 1970-01-01 00:00 /var/lib/selinux/targeted/active/modules/100/fwupd