Format Nix code with nixfmt

Change-Id: I61efeb666ff7481c05fcb247168290e86a250151
Add treefmt pre-commit hook
2024-03-29 17:23:08 -07:00 · 2024-03-29 17:23:06 -07:00 · 2024-03-29 17:22:56 -07:00
131 changed files with 1725 additions and 1254 deletions
--- a/.clang-format
+++ b/.clang-format
@ -48,4 +48,3 @@ PointerAlignment: Middle
 SortIncludes: Never
 SpaceAfterCStyleCast: true
 SpaceAfterTemplateKeyword: false
-
--- a/.github/workflows/hydra_status.yml
+++ b/.github/workflows/hydra_status.yml
@ -17,4 +17,3 @@ jobs:
      with:
        fetch-depth: 0
    - run: bash scripts/check-hydra-status.sh
-
--- a/.gitignore
+++ b/.gitignore
@ -159,3 +159,5 @@ result-*
 buildtime.bin

 .envrc.local
+# We generate this with a Nix shell hook
+/.pre-commit-config.yaml
--- a/20
+++ b/20
@ -55,7 +55,7 @@ modified by someone else and passed on, the recipients should know
 that what they have is not the original version, so that the original
 author's reputation will not be affected by problems that might be
 introduced by others.
-
+
  Finally, software patents pose a constant threat to the existence of
 any free program.  We wish to make sure that a company cannot
 effectively restrict the users of a free program by obtaining a
@ -111,7 +111,7 @@ modification follow.  Pay close attention to the difference between a
 "work based on the library" and a "work that uses the library".  The
 former contains code derived from the library, whereas the latter must
 be combined with the library in order to run.
-
+
 		  GNU LESSER GENERAL PUBLIC LICENSE
   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION

@ -158,7 +158,7 @@ Library.
  You may charge a fee for the physical act of transferring a copy,
 and you may at your option offer warranty protection in exchange for a
 fee.
-
+
  2. You may modify your copy or copies of the Library or any portion
 of it, thus forming a work based on the Library, and copy and
 distribute such modifications or work under the terms of Section 1
@ -216,7 +216,7 @@ instead of to this License.  (If a newer version than version 2 of the
 ordinary GNU General Public License has appeared, then you can specify
 that version instead if you wish.)  Do not make any other change in
 these notices.
-
+
  Once this change is made in a given copy, it is irreversible for
 that copy, so the ordinary GNU General Public License applies to all
 subsequent copies and derivative works made from that copy.
@ -267,7 +267,7 @@ Library will still fall under Section 6.)
 distribute the object code for the work under the terms of Section 6.
 Any executables containing that work also fall under Section 6,
 whether or not they are linked directly with the Library itself.
-
+
  6. As an exception to the Sections above, you may also combine or
 link a "work that uses the Library" with the Library to produce a
 work containing portions of the Library, and distribute that work
@ -329,7 +329,7 @@ restrictions of other proprietary libraries that do not normally
 accompany the operating system.  Such a contradiction means you cannot
 use both them and the Library together in an executable that you
 distribute.
-
+
  7. You may place library facilities that are a work based on the
 Library side-by-side in a single library together with other library
 facilities not covered by this License, and distribute such a combined
@ -370,7 +370,7 @@ subject to these terms and conditions.  You may not impose any further
 restrictions on the recipients' exercise of the rights granted herein.
 You are not responsible for enforcing compliance by third parties with
 this License.
-
+
  11. If, as a consequence of a court judgment or allegation of patent
 infringement or for any other reason (not limited to patent issues),
 conditions are imposed on you (whether by court order, agreement or
@ -422,7 +422,7 @@ conditions either of that version or of any later version published by
 the Free Software Foundation.  If the Library does not specify a
 license version number, you may choose any version ever published by
 the Free Software Foundation.
-
+
  14. If you wish to incorporate parts of the Library into other free
 programs whose distribution conditions are incompatible with these,
 write to the author to ask for permission.  For software which is
@ -456,7 +456,7 @@ SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
 DAMAGES.

 		     END OF TERMS AND CONDITIONS
-
+
           How to Apply These Terms to Your New Libraries

  If you develop a new library, and you want it to be of the greatest
@ -500,5 +500,3 @@ necessary.  Here is a sample; alter the names:
  Ty Coon, President of Vice

 That's all there is to it!
-
-
--- a/default.nix
+++ b/default.nix
@ -1,10 +1,9 @@
-(import
-  (
-    let lock = builtins.fromJSON (builtins.readFile ./flake.lock); in
+(import (
+  let
+    lock = builtins.fromJSON (builtins.readFile ./flake.lock);
+  in
  fetchTarball {
    url = "https://github.com/edolstra/flake-compat/archive/${lock.nodes.flake-compat.locked.rev}.tar.gz";
    sha256 = lock.nodes.flake-compat.locked.narHash;
  }
-  )
-  { src = ./.; }
-).defaultNix
+) { src = ./.; }).defaultNix
--- a/doc/manual/anchors.jq
+++ b/doc/manual/anchors.jq
--- a/doc/manual/generate-builtin-constants.nix
+++ b/doc/manual/generate-builtin-constants.nix
@ -2,10 +2,15 @@ let
  inherit (builtins) concatStringsSep attrValues mapAttrs;
  inherit (import ./utils.nix) optionalString squash;
 in
-
 builtinsInfo:
 let
-  showBuiltin = name: { doc, type, impure-only }:
+  showBuiltin =
+    name:
+    {
+      doc,
+      type,
+      impure-only,
+    }:
    let
      type' = optionalString (type != null) " (${type})";

--- a/doc/manual/generate-builtins.nix
+++ b/doc/manual/generate-builtins.nix
@ -2,10 +2,16 @@ let
  inherit (builtins) concatStringsSep attrValues mapAttrs;
  inherit (import ./utils.nix) optionalString squash;
 in
-
 builtinsInfo:
 let
-  showBuiltin = name: { doc, args, arity, experimental-feature }:
+  showBuiltin =
+    name:
+    {
+      doc,
+      args,
+      arity,
+      experimental-feature,
+    }:
    let
      experimentalNotice = optionalString (experimental-feature != null) ''
        This function is only available if the [${experimental-feature}](@docroot@/contributing/experimental-features.md#xp-feature-${experimental-feature}) experimental feature is enabled.
--- a/doc/manual/generate-manpage.nix
+++ b/doc/manual/generate-manpage.nix
@ -1,19 +1,39 @@
 let
  inherit (builtins)
-    attrNames attrValues fromJSON listToAttrs mapAttrs
-    concatStringsSep concatMap length lessThan replaceStrings sort;
-  inherit (import ./utils.nix) concatStrings optionalString filterAttrs trim squash unique showSettings;
+    attrNames
+    attrValues
+    fromJSON
+    listToAttrs
+    mapAttrs
+    concatStringsSep
+    concatMap
+    length
+    lessThan
+    replaceStrings
+    sort
+    ;
+  inherit (import ./utils.nix)
+    concatStrings
+    optionalString
+    filterAttrs
+    trim
+    squash
+    unique
+    showSettings
+    ;
 in
-
 inlineHTML: commandDump:
-
 let
-
  commandInfo = fromJSON commandDump;

-  showCommand = { command, details, filename, toplevel }:
+  showCommand =
+    {
+      command,
+      details,
+      filename,
+      toplevel,
+    }:
    let
-
      result = ''
        > **Warning** \
        > This program is
@ -35,26 +55,27 @@ let
        ${maybeOptions}
      '';

-      showSynopsis = command: args:
+      showSynopsis =
+        command: args:
        let
-          showArgument = arg: "*${arg.label}*" + optionalString (! arg ? arity) "...";
+          showArgument = arg: "*${arg.label}*" + optionalString (!arg ? arity) "...";
          arguments = concatStringsSep " " (map showArgument args);
-        in ''
+        in
+        ''
          `${command}` [*option*...] ${arguments}
        '';

-      maybeSubcommands = optionalString (details ? commands && details.commands != {})
-         ''
+      maybeSubcommands = optionalString (details ? commands && details.commands != { }) ''
        where *subcommand* is one of the following:

        ${subcommands}
      '';

-      subcommands = if length categories > 1
-        then listCategories
-        else listSubcommands details.commands;
+      subcommands = if length categories > 1 then listCategories else listSubcommands details.commands;

-      categories = sort (x: y: x.id < y.id) (unique (map (cmd: cmd.category) (attrValues details.commands)));
+      categories = sort (x: y: x.id < y.id) (
+        unique (map (cmd: cmd.category) (attrValues details.commands))
+      );

      listCategories = concatStrings (map showCategory categories);

@ -71,11 +92,11 @@ let
      '';

      # TODO: move this confusing special case out of here when implementing #8496
-      maybeStoreDocs = optionalString
-        (details ? doc)
-        (replaceStrings ["@stores@"] [storeDocs] details.doc);
+      maybeStoreDocs = optionalString (details ? doc) (
+        replaceStrings [ "@stores@" ] [ storeDocs ] details.doc
+      );

-      maybeOptions = optionalString (details.flags != {}) ''
+      maybeOptions = optionalString (details.flags != { }) ''
        # Options

        ${showOptions details.flags toplevel.flags}
@ -85,7 +106,8 @@ let
        > See [`man nix.conf`](@docroot@/command-ref/conf-file.md#command-line-flags) for overriding configuration settings with command line flags.
      '';

-      showOptions = options: commonOptions:
+      showOptions =
+        options: commonOptions:
        let
          allOptions = options // commonOptions;
          showCategory = cat: ''
@ -94,42 +116,60 @@ let
            ${listOptions (filterAttrs (n: v: v.category == cat) allOptions)}
          '';
          listOptions = opts: concatStringsSep "\n" (attrValues (mapAttrs showOption opts));
-          showOption = name: option:
+          showOption =
+            name: option:
            let
              result = trim ''
                - ${item}
                  ${option.description}
              '';
-              item = if inlineHTML
-                then ''<span id="opt-${name}">[`--${name}`](#opt-${name})</span> ${shortName} ${labels}''
-                else "`--${name}` ${shortName} ${labels}";
-              shortName = optionalString
-                (option ? shortName)
-                ("/ `-${option.shortName}`");
-              labels = optionalString
-                (option ? labels)
-                (concatStringsSep " " (map (s: "*${s}*") option.labels));
-            in result;
+              item =
+                if inlineHTML then
+                  ''<span id="opt-${name}">[`--${name}`](#opt-${name})</span> ${shortName} ${labels}''
+                else
+                  "`--${name}` ${shortName} ${labels}";
+              shortName = optionalString (option ? shortName) "/ `-${option.shortName}`";
+              labels = optionalString (option ? labels) (concatStringsSep " " (map (s: "*${s}*") option.labels));
+            in
+            result;
          categories = sort lessThan (unique (map (cmd: cmd.category) (attrValues allOptions)));
-        in concatStrings (map showCategory categories);
-    in squash result;
+        in
+        concatStrings (map showCategory categories);
+    in
+    squash result;

  appendName = filename: name: (if filename == "nix" then "nix3" else filename) + "-" + name;

-  processCommand = { command, details, filename, toplevel }:
+  processCommand =
+    {
+      command,
+      details,
+      filename,
+      toplevel,
+    }:
    let
      cmd = {
        inherit command;
        name = filename + ".md";
-        value = showCommand { inherit command details filename toplevel; };
+        value = showCommand {
+          inherit
+            command
+            details
+            filename
+            toplevel
+            ;
        };
-      subcommand = subCmd: processCommand {
+      };
+      subcommand =
+        subCmd:
+        processCommand {
          command = command + " " + subCmd;
          details = details.commands.${subCmd};
          filename = appendName filename subCmd;
          inherit toplevel;
        };
-    in [ cmd ] ++ concatMap subcommand (attrNames details.commands or {});
+    in
+    [ cmd ] ++ concatMap subcommand (attrNames details.commands or { });

  manpages = processCommand {
    command = "nix";
@ -138,14 +178,21 @@ let
    toplevel = commandInfo.args;
  };

-  tableOfContents = let
-    showEntry = page:
-      "    - [${page.command}](command-ref/new-cli/${page.name})";
-    in concatStringsSep "\n" (map showEntry manpages) + "\n";
+  tableOfContents =
+    let
+      showEntry = page: "    - [${page.command}](command-ref/new-cli/${page.name})";
+    in
+    concatStringsSep "\n" (map showEntry manpages) + "\n";

  storeDocs =
    let
-      showStore = name: { settings, doc, experimentalFeature }:
+      showStore =
+        name:
+        {
+          settings,
+          doc,
+          experimentalFeature,
+        }:
        let
          experimentalFeatureNote = optionalString (experimentalFeature != null) ''
            > **Warning**
@ -161,7 +208,8 @@ let
            extra-experimental-features = ${experimentalFeature}
            ```
          '';
-        in ''
+        in
+        ''
          ## ${name}

          ${doc}
@ -172,6 +220,7 @@ let

          ${showSettings { inherit inlineHTML; } settings}
        '';
-    in concatStrings (attrValues (mapAttrs showStore commandInfo.stores));
-
-in (listToAttrs manpages) // { "SUMMARY.md" = tableOfContents; }
+    in
+    concatStrings (attrValues (mapAttrs showStore commandInfo.stores));
+in
+(listToAttrs manpages) // { "SUMMARY.md" = tableOfContents; }
--- a/doc/manual/generate-xp-features-shortlist.nix
+++ b/doc/manual/generate-xp-features-shortlist.nix
@ -1,9 +1,8 @@
 with builtins;
 with import ./utils.nix;
-
 let
-  showExperimentalFeature = name: doc:
-    ''
+  showExperimentalFeature = name: doc: ''
    - [`${name}`](@docroot@/contributing/experimental-features.md#xp-feature-${name})
  '';
-in xps: indent "  " (concatStrings (attrValues (mapAttrs showExperimentalFeature xps)))
+in
+xps: indent "  " (concatStrings (attrValues (mapAttrs showExperimentalFeature xps)))
--- a/doc/manual/generate-xp-features.nix
+++ b/doc/manual/generate-xp-features.nix
@ -1,11 +1,12 @@
 with builtins;
 with import ./utils.nix;
-
 let
-  showExperimentalFeature = name: doc:
+  showExperimentalFeature =
+    name: doc:
    squash ''
      ## [`${name}`]{#xp-feature-${name}}

      ${doc}
    '';
-in xps: (concatStringsSep "\n" (attrValues (mapAttrs showExperimentalFeature xps)))
+in
+xps: (concatStringsSep "\n" (attrValues (mapAttrs showExperimentalFeature xps)))
--- a/doc/manual/rl-next/better-errors-in-nix-repl.md
+++ b/doc/manual/rl-next/better-errors-in-nix-repl.md
@ -37,4 +37,3 @@ error:

       error: uh oh!
 ```
-
--- a/doc/manual/src/_redirects
+++ b/doc/manual/src/_redirects
@ -27,4 +27,3 @@
 /package-management/channels* /command-ref/nix-channel 301!

 /package-management/s3-substituter* /command-ref/new-cli/nix3-help-stores#s3-binary-cache-store 301!
-
--- a/doc/manual/src/architecture/architecture.md
+++ b/doc/manual/src/architecture/architecture.md
@ -112,4 +112,3 @@ Build inputs used as instructions to a build task are marked accordingly:
 |                                                                    |
 +--------------------------------------------------------------------+
 ```
-
--- a/doc/manual/src/command-ref/conf-file-prefix.md
+++ b/doc/manual/src/command-ref/conf-file-prefix.md
@ -67,4 +67,3 @@ Configuration options can be set on the command line, overriding the values set
 The `extra-` prefix is supported for settings that take a list of items (e.g. `--extra-trusted users alice` or `--option extra-trusted-users alice`).

 # Available settings
-
--- a/doc/manual/src/command-ref/nix-env/install.md
+++ b/doc/manual/src/command-ref/nix-env/install.md
@ -184,4 +184,3 @@ channel:
 ```console
 $ nix-env --file https://github.com/NixOS/nixpkgs/archive/nixos-14.12.tar.gz --install --attr firefox
 ```
-
--- a/doc/manual/src/command-ref/nix-env/list-generations.md
+++ b/doc/manual/src/command-ref/nix-env/list-generations.md
@ -30,4 +30,3 @@ $ nix-env --list-generations
  97   2004-02-06 16:22:45
  98   2004-02-06 16:24:33   (current)
 ```
-
--- a/doc/manual/src/command-ref/nix-env/query.md
+++ b/doc/manual/src/command-ref/nix-env/query.md
@ -212,4 +212,3 @@ To show all packages in the latest revision of the Nixpkgs repository:
 ```console
 $ nix-env --file https://github.com/NixOS/nixpkgs/archive/master.tar.gz --query --available
 ```
-
--- a/doc/manual/src/command-ref/nix-env/set-flag.md
+++ b/doc/manual/src/command-ref/nix-env/set-flag.md
@ -79,4 +79,3 @@ To make files from `binutils` take precedence over files from `gcc`:
 $ nix-env --set-flag priority 5 binutils
 $ nix-env --set-flag priority 10 gcc
 ```
-
--- a/doc/manual/src/command-ref/nix-env/set.md
+++ b/doc/manual/src/command-ref/nix-env/set.md
@ -27,4 +27,3 @@ contain just Firefox:
 ```console
 $ nix-env --profile /nix/var/nix/profiles/browser --set firefox
 ```
-
--- a/doc/manual/src/command-ref/nix-env/switch-generation.md
+++ b/doc/manual/src/command-ref/nix-env/switch-generation.md
@ -30,4 +30,3 @@ Switching will fail if the specified generation does not exist.
 $ nix-env --switch-generation 42
 switching from generation 50 to 42
 ```
-
--- a/doc/manual/src/command-ref/nix-env/upgrade.md
+++ b/doc/manual/src/command-ref/nix-env/upgrade.md
@ -138,4 +138,3 @@ This is illustrated by the following examples:
    2.3a < 2.3c
    2.3pre1 < 2.3c
    2.3pre1 < 2.3q
-
--- a/doc/manual/src/command-ref/nix-store/add-fixed.md
+++ b/doc/manual/src/command-ref/nix-store/add-fixed.md
@ -32,4 +32,3 @@ This operation has the following options:
 $ nix-store --add-fixed sha256 ./hello-2.10.tar.gz
 /nix/store/3x7dwzq014bblazs7kq20p9hyzz0qh8g-hello-2.10.tar.gz
 ```
-
--- a/doc/manual/src/command-ref/nix-store/gc.md
+++ b/doc/manual/src/command-ref/nix-store/gc.md
@ -69,4 +69,3 @@ To delete at least 100 MiBs of unreachable paths:
 ```console
 $ nix-store --gc --max-freed $((100 * 1024 * 1024))
 ```
-
--- a/doc/manual/src/command-ref/nix-store/opt-common.md
+++ b/doc/manual/src/command-ref/nix-store/opt-common.md
@ -33,4 +33,3 @@ The following options are allowed for all `nix-store` operations, but may not al
  If there are multiple results, then multiple symlinks will be
  created by sequentially numbering symlinks beyond the first one
  (e.g., `foo`, `foo-2`, `foo-3`, and so on).
-
--- a/doc/manual/src/command-ref/nix-store/optimise.md
+++ b/doc/manual/src/command-ref/nix-store/optimise.md
@ -37,4 +37,3 @@ hashing files in `/nix/store/qhqx7l2f1kmwihc9bnxs7rc159hsxnf3-gcc-4.1.1'
 541838819 bytes (516.74 MiB) freed by hard-linking 54143 files;
 there are 114486 files with equal contents out of 215894 files in total
 ```
-
--- a/doc/manual/src/command-ref/nix-store/print-env.md
+++ b/doc/manual/src/command-ref/nix-store/print-env.md
@ -28,4 +28,3 @@ export stdenv; stdenv='/nix/store/7c8asx3yfrg5dg1gzhzyq2236zfgibnn-stdenv'
 export system; system='x86_64-linux'
 export _args; _args='-e /nix/store/9krlzvny65gdc8s7kpb6lkx8cd02c25c-default-builder.sh'
 ```
-
--- a/doc/manual/src/command-ref/nix-store/query.md
+++ b/doc/manual/src/command-ref/nix-store/query.md
@ -225,4 +225,3 @@ $ nix-store --query --roots $(which svn)
 /nix/var/nix/profiles/default-82-link
 /home/eelco/.local/state/nix/profiles/profile-97-link
 ```
-
--- a/doc/manual/src/command-ref/nix-store/read-log.md
+++ b/doc/manual/src/command-ref/nix-store/read-log.md
@ -35,4 +35,3 @@ ktorrent-2.2.1/
 ktorrent-2.2.1/NEWS
 ...
 ```
-
--- a/doc/manual/src/command-ref/nix-store/repair-path.md
+++ b/doc/manual/src/command-ref/nix-store/repair-path.md
@ -32,4 +32,3 @@ $ nix-store --repair-path /nix/store/dj7a81wsm1ijwwpkks3725661h3263p5-glibc-2.13
 fetching path `/nix/store/d7a81wsm1ijwwpkks3725661h3263p5-glibc-2.13'...
 …
 ```
-
--- a/doc/manual/src/command-ref/nix-store/serve.md
+++ b/doc/manual/src/command-ref/nix-store/serve.md
@ -35,4 +35,3 @@ $ cat <<EOF >>/root/.ssh/authorized_keys
 command="nice -n20 nix-store --serve --write" ssh-rsa AAAAB3NzaC1yc2EAAAA...
 EOF
 ```
-
--- a/doc/manual/src/command-ref/nix-store/verify-path.md
+++ b/doc/manual/src/command-ref/nix-store/verify-path.md
@ -26,4 +26,3 @@ To verify the integrity of the `svn` command and all its dependencies:
 ```console
 $ nix-store --verify-path $(nix-store --query --requisites $(which svn))
 ```
-
--- a/doc/manual/src/contributing/testing.md
+++ b/doc/manual/src/contributing/testing.md
@ -289,4 +289,3 @@ search/replaced in it for each new build.
 The installer now supports a `--tarball-url-prefix` flag which _may_ have
 solved this need?
 -->
-
--- a/doc/manual/src/installation/uninstall.md
+++ b/doc/manual/src/installation/uninstall.md
@ -145,4 +145,3 @@ which you may remove.
 > complete. macOS (Catalina+) directly controls root directories and its
 > read-only root will prevent you from manually deleting the empty `/nix`
 > mountpoint.
-
--- a/doc/manual/src/language/operators.md
+++ b/doc/manual/src/language/operators.md
@ -161,4 +161,3 @@ All comparison operators are implemented in terms of `<`, and the following equi
 Equivalent to `!`*b1* `||` *b2*.

 [Logical implication]: #logical-implication
-
--- a/doc/manual/utils.nix
+++ b/doc/manual/utils.nix
@ -1,14 +1,18 @@
 with builtins;
-
 rec {
  splitLines = s: filter (x: !isList x) (split "\n" s);

  concatStrings = concatStringsSep "";

-  attrsToList = a:
-    map (name: { inherit name; value = a.${name}; }) (builtins.attrNames a);
+  attrsToList =
+    a:
+    map (name: {
+      inherit name;
+      value = a.${name};
+    }) (builtins.attrNames a);

-  replaceStringsRec = from: to: string:
+  replaceStringsRec =
+    from: to: string:
    # recursively replace occurrences of `from` with `to` within `string`
    # example:
    #     replaceStringRec "--" "-" "hello-----world"
@ -20,10 +24,12 @@ rec {

  squash = replaceStringsRec "\n\n\n" "\n\n";

-  trim = string:
+  trim =
+    string:
    # trim trailing spaces and squash non-leading spaces
    let
-      trimLine = line:
+      trimLine =
+        line:
        let
          # separate leading spaces from the rest
          parts = split "(^ *)" line;
@ -31,25 +37,46 @@ rec {
          rest = elemAt parts 2;
          # drop trailing spaces
          body = head (split " *$" rest);
-        in spaces + replaceStringsRec "  " " " body;
-    in concatStringsSep "\n" (map trimLine (splitLines string));
+        in
+        spaces + replaceStringsRec "  " " " body;
+    in
+    concatStringsSep "\n" (map trimLine (splitLines string));

  # FIXME: O(n^2)
-  unique = foldl' (acc: e: if elem e acc then acc else acc ++ [ e ]) [];
+  unique = foldl' (acc: e: if elem e acc then acc else acc ++ [ e ]) [ ];

  nameValuePair = name: value: { inherit name value; };

-  filterAttrs = pred: set:
-    listToAttrs (concatMap (name: let v = set.${name}; in if pred name v then [(nameValuePair name v)] else []) (attrNames set));
+  filterAttrs =
+    pred: set:
+    listToAttrs (
+      concatMap (
+        name:
+        let
+          v = set.${name};
+        in
+        if pred name v then [ (nameValuePair name v) ] else [ ]
+      ) (attrNames set)
+    );

  optionalString = cond: string: if cond then string else "";

-  showSetting = { inlineHTML }: name: { description, documentDefault, defaultValue, aliases, value, experimentalFeature }:
+  showSetting =
+    { inlineHTML }:
+    name:
+    {
+      description,
+      documentDefault,
+      defaultValue,
+      aliases,
+      value,
+      experimentalFeature,
+    }:
    let
      result = squash ''
-          - ${if inlineHTML
-              then ''<span id="conf-${name}">[`${name}`](#conf-${name})</span>''
-              else ''`${name}`''}
+        - ${
+          if inlineHTML then ''<span id="conf-${name}">[`${name}`](#conf-${name})</span>'' else ''`${name}`''
+        }

        ${indent "  " body}
      '';
@ -81,26 +108,31 @@ rec {
        ${showAliases aliases}
      '';

-      showDefault = documentDefault: defaultValue:
+      showDefault =
+        documentDefault: defaultValue:
        if documentDefault then
          # a StringMap value type is specified as a string, but
          # this shows the value type. The empty stringmap is `null` in
          # JSON, but that converts to `{ }` here.
-          if defaultValue == "" || defaultValue == [] || isAttrs defaultValue
-            then "*empty*"
+          if defaultValue == "" || defaultValue == [ ] || isAttrs defaultValue then
+            "*empty*"
          else if isBool defaultValue then
            if defaultValue then "`true`" else "`false`"
-            else "`${toString defaultValue}`"
-        else "*machine-specific*";
+          else
+            "`${toString defaultValue}`"
+        else
+          "*machine-specific*";

-      showAliases = aliases:
-          optionalString (aliases != [])
+      showAliases =
+        aliases:
+        optionalString (aliases != [ ])
          "**Deprecated alias:** ${(concatStringsSep ", " (map (s: "`${s}`") aliases))}";
+    in
+    result;

-    in result;
+  indent =
+    prefix: s: concatStringsSep "\n" (map (x: if x == "" then x else "${prefix}${x}") (splitLines s));

-  indent = prefix: s:
-    concatStringsSep "\n" (map (x: if x == "" then x else "${prefix}${x}") (splitLines s));
-
-  showSettings = args: settingsInfo: concatStrings (attrValues (mapAttrs (showSetting args) settingsInfo));
+  showSettings =
+    args: settingsInfo: concatStrings (attrValues (mapAttrs (showSetting args) settingsInfo));
 }
--- a/docker.nix
+++ b/docker.nix
@ -1,17 +1,20 @@
-{ pkgs ? import <nixpkgs> { }
-, lib ? pkgs.lib
-, name ? "nix"
-, tag ? "latest"
-, bundleNixpkgs ? true
-, channelName ? "nixpkgs"
-, channelURL ? "https://nixos.org/channels/nixpkgs-unstable"
-, extraPkgs ? []
-, maxLayers ? 100
-, nixConf ? {}
-, flake-registry ? null
+{
+  pkgs ? import <nixpkgs> { },
+  lib ? pkgs.lib,
+  name ? "nix",
+  tag ? "latest",
+  bundleNixpkgs ? true,
+  channelName ? "nixpkgs",
+  channelURL ? "https://nixos.org/channels/nixpkgs-unstable",
+  extraPkgs ? [ ],
+  maxLayers ? 100,
+  nixConf ? { },
+  flake-registry ? null,
 }:
 let
-  defaultPkgs = with pkgs; [
+  defaultPkgs =
+    with pkgs;
+    [
      nix
      bashInteractive
      coreutils-full
@ -28,10 +31,11 @@ let
      iana-etc
      git
      openssh
-  ] ++ extraPkgs;
-
-  users = {
+    ]
+    ++ extraPkgs;

+  users =
+    {
      root = {
        uid = 0;
        shell = "${pkgs.bashInteractive}/bin/bash";
@ -49,11 +53,9 @@ let
        groups = [ "nobody" ];
        description = "Unprivileged account (don't use!)";
      };
-
-  } // lib.listToAttrs (
-    map
-      (
-        n: {
+    }
+    // lib.listToAttrs (
+      map (n: {
        name = "nixbld${toString n}";
        value = {
          uid = 30000 + n;
@ -61,9 +63,7 @@ let
          groups = [ "nixbld" ];
          description = "Nix build user ${toString n}";
        };
-        }
-      )
-      (lib.lists.range 1 32)
+      }) (lib.lists.range 1 32)
    );

  groups = {
@ -74,24 +74,20 @@ let

  userToPasswd = (
    k:
-    { uid
-    , gid ? 65534
-    , home ? "/var/empty"
-    , description ? ""
-    , shell ? "/bin/false"
-    , groups ? [ ]
-    }: "${k}:x:${toString uid}:${toString gid}:${description}:${home}:${shell}"
-  );
-  passwdContents = (
-    lib.concatStringsSep "\n"
-      (lib.attrValues (lib.mapAttrs userToPasswd users))
+    {
+      uid,
+      gid ? 65534,
+      home ? "/var/empty",
+      description ? "",
+      shell ? "/bin/false",
+      groups ? [ ],
+    }:
+    "${k}:x:${toString uid}:${toString gid}:${description}:${home}:${shell}"
  );
+  passwdContents = (lib.concatStringsSep "\n" (lib.attrValues (lib.mapAttrs userToPasswd users)));

  userToShadow = k: { ... }: "${k}:!:1::::::";
-  shadowContents = (
-    lib.concatStringsSep "\n"
-      (lib.attrValues (lib.mapAttrs userToShadow users))
-  );
+  shadowContents = (lib.concatStringsSep "\n" (lib.attrValues (lib.mapAttrs userToShadow users)));

  # Map groups to members
  # {
@ -101,42 +97,28 @@ let
    let
      # Create a flat list of user/group mappings
      mappings = (
-        builtins.foldl'
-          (
+        builtins.foldl' (
          acc: user:
          let
            groups = users.${user}.groups or [ ];
          in
-              acc ++ map
-                (group: {
-                  inherit user group;
-                })
-                groups
-          )
-          [ ]
-          (lib.attrNames users)
+          acc ++ map (group: { inherit user group; }) groups
+        ) [ ] (lib.attrNames users)
      );
    in
-    (
-      builtins.foldl'
-        (
-          acc: v: acc // {
-            ${v.group} = acc.${v.group} or [ ] ++ [ v.user ];
-          }
-        )
-        { }
-        mappings)
+    (builtins.foldl' (
+      acc: v: acc // { ${v.group} = acc.${v.group} or [ ] ++ [ v.user ]; }
+    ) { } mappings)
  );

-  groupToGroup = k: { gid }:
+  groupToGroup =
+    k:
+    { gid }:
    let
      members = groupMemberMap.${k} or [ ];
    in
    "${k}:x:${toString gid}:${lib.concatStringsSep "," members}";
-  groupContents = (
-    lib.concatStringsSep "\n"
-      (lib.attrValues (lib.mapAttrs groupToGroup groups))
-  );
+  groupContents = (lib.concatStringsSep "\n" (lib.attrValues (lib.mapAttrs groupToGroup groups)));

  defaultNixConf = {
    sandbox = "false";
@ -144,11 +126,17 @@ let
    trusted-public-keys = [ "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=" ];
  };

-  nixConfContents = (lib.concatStringsSep "\n" (lib.mapAttrsFlatten (n: v:
+  nixConfContents =
+    (lib.concatStringsSep "\n" (
+      lib.mapAttrsFlatten (
+        n: v:
        let
          vStr = if builtins.isList v then lib.concatStringsSep " " v else v;
        in
-      "${n} = ${vStr}") (defaultNixConf // nixConf))) + "\n";
+        "${n} = ${vStr}"
+      ) (defaultNixConf // nixConf)
+    ))
+    + "\n";

  baseSystem =
    let
@ -167,13 +155,21 @@ let
      manifest = pkgs.buildPackages.runCommand "manifest.nix" { } ''
        cat > $out <<EOF
        [
-        ${lib.concatStringsSep "\n" (builtins.map (drv: let
+        ${lib.concatStringsSep "\n" (
+          builtins.map (
+            drv:
+            let
              outputs = drv.outputsToInstall or [ "out" ];
-        in ''
+            in
+            ''
              {
-            ${lib.concatStringsSep "\n" (builtins.map (output: ''
+                ${
+                  lib.concatStringsSep "\n" (
+                    builtins.map (output: ''
                      ${output} = { outPath = "${lib.getOutput output drv}"; };
-            '') outputs)}
+                    '') outputs
+                  )
+                }
                outputs = [ ${lib.concatStringsSep " " (builtins.map (x: "\"${x}\"") outputs)} ];
                name = "${drv.name}";
                outPath = "${drv}";
@ -181,7 +177,9 @@ let
                type = "derivation";
                meta = { };
              }
-        '') defaultPkgs)}
+            ''
+          ) defaultPkgs
+        )}
        ]
        EOF
      '';
@ -190,7 +188,8 @@ let
        cp -a ${rootEnv}/* $out/
        ln -s ${manifest} $out/manifest.nix
      '';
-      flake-registry-path = if (flake-registry == null) then
+      flake-registry-path =
+        if (flake-registry == null) then
          null
        else if (builtins.readFileType (toString flake-registry)) == "directory" then
          "${flake-registry}/flake-registry.json"
@ -199,7 +198,12 @@ let
    in
    pkgs.runCommand "base-system"
      {
-        inherit passwdContents groupContents shadowContents nixConfContents;
+        inherit
+          passwdContents
+          groupContents
+          shadowContents
+          nixConfContents
+          ;
        passAsFile = [
          "passwdContents"
          "groupContents"
@ -208,7 +212,9 @@ let
        ];
        allowSubstitutes = false;
        preferLocalBuild = true;
-      } (''
+      }
+      (
+        ''
          env
          set -x
          mkdir -p $out/etc
@ -255,7 +261,8 @@ let
          ln -s ${pkgs.coreutils}/bin/env $out/usr/bin/env
          ln -s ${pkgs.bashInteractive}/bin/bash $out/bin/sh

-    '' + (lib.optionalString (flake-registry-path != null) ''
+        ''
+        + (lib.optionalString (flake-registry-path != null) ''
          nixCacheDir="/root/.cache/nix"
          mkdir -p $out$nixCacheDir
          globalFlakeRegistryPath="$nixCacheDir/flake-registry.json"
@ -263,11 +270,10 @@ let
          mkdir -p $out/nix/var/nix/gcroots/auto
          rootName=$(${pkgs.nix}/bin/nix --extra-experimental-features nix-command hash file --type sha1 --base32 <(echo -n $globalFlakeRegistryPath))
          ln -s $globalFlakeRegistryPath $out/nix/var/nix/gcroots/auto/$rootName
-    ''));
-
+        '')
+      );
 in
 pkgs.dockerTools.buildLayeredImageWithNixDb {
-
  inherit name tag maxLayers;

  contents = [ baseSystem ];
@ -285,20 +291,23 @@ pkgs.dockerTools.buildLayeredImageWithNixDb {
    Cmd = [ "/root/.nix-profile/bin/bash" ];
    Env = [
      "USER=root"
-      "PATH=${lib.concatStringsSep ":" [
+      "PATH=${
+        lib.concatStringsSep ":" [
          "/root/.nix-profile/bin"
          "/nix/var/nix/profiles/default/bin"
          "/nix/var/nix/profiles/default/sbin"
-      ]}"
-      "MANPATH=${lib.concatStringsSep ":" [
+        ]
+      }"
+      "MANPATH=${
+        lib.concatStringsSep ":" [
          "/root/.nix-profile/share/man"
          "/nix/var/nix/profiles/default/share/man"
-      ]}"
+        ]
+      }"
      "SSL_CERT_FILE=/nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt"
      "GIT_SSL_CAINFO=/nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt"
      "NIX_SSL_CERT_FILE=/nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt"
      "NIX_PATH=/nix/var/nix/profiles/per-user/root/channels:/root/.nix-defexpr/channels"
    ];
  };
-
 }
--- a/flake.lock
+++ b/flake.lock
@ -3,11 +3,11 @@
    "flake-compat": {
      "flake": false,
      "locked": {
-        "lastModified": 1673956053,
-        "narHash": "sha256-4gtG9iQuiKITOjNQQeQIpoIB6b16fm+504Ch3sNKLd8=",
+        "lastModified": 1696426674,
+        "narHash": "sha256-kvjfFW7WAETZlt09AgDn1MrtKzP7t90Vf7vypd3OL1U=",
        "owner": "edolstra",
        "repo": "flake-compat",
-        "rev": "35bb57c0c8d8b62bbfd284272c928ceb64ddbde9",
+        "rev": "0f9255e01c2351cc7d116c072cb317785dd33b33",
        "type": "github"
      },
      "original": {
@ -16,13 +16,52 @@
        "type": "github"
      }
    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "gitignore": {
+      "inputs": {
+        "nixpkgs": [
+          "pre-commit-hooks",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1709087332,
+        "narHash": "sha256-HG2cCnktfHsKV0s4XW83gU3F57gaTljL9KNSuG6bnQs=",
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "rev": "637db329424fd7e46cf4185293b9cc8c88c95394",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "gitignore.nix",
+        "type": "github"
+      }
+    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1709884566,
-        "narHash": "sha256-NSYJg2sfdO/XS3L8XN/59Zhzn0dqWm7XtVnKI2mHq3w=",
+        "lastModified": 1711481231,
+        "narHash": "sha256-J/fW3Xhm3WsJPNd8ksZmfMnol5aOG2qEMDPbOnNNdTQ=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "2be119add7b37dc535da2dd4cba68e2cf8d1517e",
+        "rev": "9d6ddb13cee3cc1192e4430277708c732685f38a",
        "type": "github"
      },
      "original": {
@ -48,11 +87,56 @@
        "type": "github"
      }
    },
+    "pre-commit-hooks": {
+      "inputs": {
+        "flake-compat": [
+          "flake-compat"
+        ],
+        "flake-utils": "flake-utils",
+        "gitignore": "gitignore",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "nixpkgs-stable": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1711562502,
+        "narHash": "sha256-SLo1yf/lfozph818VME9Y56uhaZWY0juZcj/qJZPPrs=",
+        "owner": "9999years",
+        "repo": "git-hooks.nix",
+        "rev": "d2f6f9376c38fb0c48526720793a17f10cd3ac10",
+        "type": "github"
+      },
+      "original": {
+        "owner": "9999years",
+        "ref": "add-default-pre-commit-hooks",
+        "repo": "git-hooks.nix",
+        "type": "github"
+      }
+    },
    "root": {
      "inputs": {
        "flake-compat": "flake-compat",
        "nixpkgs": "nixpkgs",
-        "nixpkgs-regression": "nixpkgs-regression"
+        "nixpkgs-regression": "nixpkgs-regression",
+        "pre-commit-hooks": "pre-commit-hooks"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
      }
    }
  },
--- a/flake.nix
+++ b/flake.nix
@ -1,12 +1,33 @@
 {
  description = "The purely functional package manager";

-  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.11-small";
-  inputs.nixpkgs-regression.url = "github:NixOS/nixpkgs/215d4d0fd80ca5163643b03a33fde804a29cc1e2";
-  inputs.flake-compat = { url = "github:edolstra/flake-compat"; flake = false; };
-
-  outputs = { self, nixpkgs, nixpkgs-regression, flake-compat }:
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.11-small";
+    nixpkgs-regression.url = "github:NixOS/nixpkgs/215d4d0fd80ca5163643b03a33fde804a29cc1e2";
+    pre-commit-hooks = {
+      # Can go back to `cachix/git-hooks.nix` when this is merged:
+      # https://github.com/cachix/git-hooks.nix/pull/401
+      url = "github:9999years/git-hooks.nix/add-default-pre-commit-hooks";
+      inputs = {
+        flake-compat.follows = "flake-compat";
+        nixpkgs.follows = "nixpkgs";
+        nixpkgs-stable.follows = "nixpkgs";
+      };
+    };
+    flake-compat = {
+      url = "github:edolstra/flake-compat";
+      flake = false;
+    };
+  };

+  outputs =
+    {
+      self,
+      nixpkgs,
+      nixpkgs-regression,
+      pre-commit-hooks,
+      flake-compat,
+    }:
    let
      inherit (nixpkgs) lib;
      inherit (lib) fileset;
@ -18,74 +39,103 @@

      version = lib.fileContents ./.version + versionSuffix;
      versionSuffix =
-        if officialRelease
-        then ""
-        else "pre${builtins.substring 0 8 (self.lastModifiedDate or self.lastModified or "19700101")}_${self.shortRev or "dirty"}";
+        if officialRelease then
+          ""
+        else
+          "pre${
+            builtins.substring 0 8 (self.lastModifiedDate or self.lastModified or "19700101")
+          }_${self.shortRev or "dirty"}";

      linux32BitSystems = [ "i686-linux" ];
-      linux64BitSystems = [ "x86_64-linux" "aarch64-linux" ];
+      linux64BitSystems = [
+        "x86_64-linux"
+        "aarch64-linux"
+      ];
      linuxSystems = linux32BitSystems ++ linux64BitSystems;
-      darwinSystems = [ "x86_64-darwin" "aarch64-darwin" ];
+      darwinSystems = [
+        "x86_64-darwin"
+        "aarch64-darwin"
+      ];
      systems = linuxSystems ++ darwinSystems;

      crossSystems = [
-        "armv6l-linux" "armv7l-linux"
-        "x86_64-freebsd13" "x86_64-netbsd"
+        "armv6l-linux"
+        "armv7l-linux"
+        "x86_64-freebsd13"
+        "x86_64-netbsd"
      ];

-      stdenvs = [ "gccStdenv" "clangStdenv" "stdenv" "libcxxStdenv" "ccacheStdenv" ];
+      stdenvs = [
+        "gccStdenv"
+        "clangStdenv"
+        "stdenv"
+        "libcxxStdenv"
+        "ccacheStdenv"
+      ];

      forAllSystems = lib.genAttrs systems;

      forAllCrossSystems = lib.genAttrs crossSystems;

-      forAllStdenvs = f:
-        lib.listToAttrs
-          (map
-            (stdenvName: {
+      forAllStdenvs =
+        f:
+        lib.listToAttrs (
+          map (stdenvName: {
            name = "${stdenvName}Packages";
            value = f stdenvName;
-            })
-            stdenvs);
+          }) stdenvs
+        );

      # Memoize nixpkgs for different platforms for efficiency.
-      nixpkgsFor = forAllSystems
-        (system: let
-          make-pkgs = crossSystem: stdenv: import nixpkgs {
+      nixpkgsFor = forAllSystems (
+        system:
+        let
+          make-pkgs =
+            crossSystem: stdenv:
+            import nixpkgs {
              localSystem = {
                inherit system;
              };
-            crossSystem = if crossSystem == null then null else {
+              crossSystem =
+                if crossSystem == null then
+                  null
+                else
+                  {
                    system = crossSystem;
-            } // lib.optionalAttrs (crossSystem == "x86_64-freebsd13") {
-              useLLVM = true;
-            };
+                  }
+                  // lib.optionalAttrs (crossSystem == "x86_64-freebsd13") { useLLVM = true; };
              overlays = [
                (overlayFor (p: p.${stdenv}))
+                (final: prev: { nixfmt = final.callPackage ./nix-support/nixfmt.nix { }; })
              ];

              config.permittedInsecurePackages = [ "nix-2.13.6" ];
            };
          stdenvs = forAllStdenvs (make-pkgs null);
          native = stdenvs.stdenvPackages;
-        in {
+        in
+        {
          inherit stdenvs native;
          static = native.pkgsStatic;
          cross = forAllCrossSystems (crossSystem: make-pkgs crossSystem "stdenv");
-        });
+        }
+      );

-      testNixVersions = pkgs: client: daemon: let
+      testNixVersions =
+        pkgs: client: daemon:
+        let
          nix = pkgs.callPackage ./package.nix {
            pname =
              "nix-tests"
-            + lib.optionalString
-            (lib.versionAtLeast daemon.version "2.4pre20211005" &&
-            lib.versionAtLeast client.version "2.4pre20211005")
-            "-${client.version}-against-${daemon.version}";
+              + lib.optionalString (
+                lib.versionAtLeast daemon.version "2.4pre20211005"
+                && lib.versionAtLeast client.version "2.4pre20211005"
+              ) "-${client.version}-against-${daemon.version}";

            inherit fileset;
          };
-      in nix.overrideAttrs (prevAttrs: {
+        in
+        nix.overrideAttrs (prevAttrs: {
          NIX_DAEMON_PACKAGE = daemon;
          NIX_CLIENT_PACKAGE = client;

@ -101,22 +151,25 @@
            mkdir -p $out
          '';

-        installCheckPhase = lib.optionalString pkgs.stdenv.hostPlatform.isDarwin ''
+          installCheckPhase =
+            lib.optionalString pkgs.stdenv.hostPlatform.isDarwin ''
              export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES
-        '' + ''
+            ''
+            + ''
              mkdir -p src/nix-channel
              make installcheck -j$NIX_BUILD_CORES -l$NIX_BUILD_CORES
            '';
        });

-      binaryTarball = nix: pkgs:
+      binaryTarball =
+        nix: pkgs:
        let
          inherit (pkgs) buildPackages;
          installerClosureInfo = buildPackages.closureInfo { rootPaths = [ nix ]; };
        in
-
        buildPackages.runCommand "nix-binary-tarball-${version}"
-          { #nativeBuildInputs = lib.optional (system != "aarch64-linux") shellcheck;
+          {
+            #nativeBuildInputs = lib.optional (system != "aarch64-linux") shellcheck;
            meta.description = "Distribution-independent Nix bootstrap binaries for ${pkgs.system}";
          }
          ''
@ -137,25 +190,26 @@
              $(cat ${installerClosureInfo}/store-paths)
          '';

-      overlayFor = getStdenv: final: prev:
+      overlayFor =
+        getStdenv: final: prev:
        let
          currentStdenv = getStdenv final;
-          comDeps = with final; commonDeps {
+          comDeps =
+            with final;
+            commonDeps {
              inherit pkgs;
              inherit (currentStdenv.hostPlatform) isStatic;
            };
-        in {
+        in
+        {
          nixStable = prev.nix;

          # Forward from the previous stage as we don’t want it to pick the lowdown override
          nixUnstable = prev.nixUnstable;

-          build-release-notes =
-            final.buildPackages.callPackage ./maintainers/build-release-notes.nix { };
+          build-release-notes = final.buildPackages.callPackage ./maintainers/build-release-notes.nix { };
          clangbuildanalyzer = final.buildPackages.callPackage ./misc/clangbuildanalyzer.nix { };
-          boehmgc-nix = (final.boehmgc.override {
-            enableLargeConfig = true;
-          }).overrideAttrs (o: {
+          boehmgc-nix = (final.boehmgc.override { enableLargeConfig = true; }).overrideAttrs (o: {
            patches = (o.patches or [ ]) ++ [
              ./boehmgc-coroutine-sp-fallback.diff

@ -195,30 +249,30 @@
            busybox-sandbox-shell = final.busybox-sandbox-shell or final.default-busybox-sandbox-shell;
          };
        };
-
-    in {
+    in
+    {
      # A Nixpkgs overlay that overrides the 'nix' and
      # 'nix.perl-bindings' packages.
      overlays.default = overlayFor (p: p.stdenv);

      hydraJobs = {
-
        # Binary package for various platforms.
        build = forAllSystems (system: self.packages.${system}.nix);

        # FIXME(Qyriad): remove this when the migration to Meson has been completed.
        # NOTE: mesonBuildClang depends on mesonBuild depends on build to avoid OOMs
        # on aarch64 builders caused by too many parallel compiler/linker processes.
-        mesonBuild = forAllSystems (system:
-          (self.packages.${system}.nix.override {
-            buildWithMeson = true;
-          }).overrideAttrs (prev: {
+        mesonBuild = forAllSystems (
+          system:
+          (self.packages.${system}.nix.override { buildWithMeson = true; }).overrideAttrs (prev: {
            buildInputs = prev.buildInputs ++ [ self.packages.${system}.nix ];
-          }));
-        mesonBuildClang = forAllSystems (system:
-          (nixpkgsFor.${system}.stdenvs.clangStdenvPackages.nix.override {
-              buildWithMeson = true;
-          }).overrideAttrs (prev: {
+          })
+        );
+        mesonBuildClang = forAllSystems (
+          system:
+          (nixpkgsFor.${system}.stdenvs.clangStdenvPackages.nix.override { buildWithMeson = true; })
+          .overrideAttrs
+            (prev: {
              buildInputs = prev.buildInputs ++ [ self.hydraJobs.mesonBuild.${system} ];
            })
        );
@ -228,18 +282,26 @@

        # Binary tarball for various platforms, containing a Nix store
        # with the closure of 'nix' package.
-        binaryTarball = forAllSystems (system: binaryTarball nixpkgsFor.${system}.native.nix nixpkgsFor.${system}.native);
+        binaryTarball = forAllSystems (
+          system: binaryTarball nixpkgsFor.${system}.native.nix nixpkgsFor.${system}.native
+        );

        # docker image with Nix inside
        dockerImage = lib.genAttrs linux64BitSystems (system: self.packages.${system}.dockerImage);

        # API docs for Nix's unstable internal C++ interfaces.
-        internal-api-docs = let
+        internal-api-docs =
+          let
            nixpkgs = nixpkgsFor.x86_64-linux.native;
            inherit (nixpkgs) pkgs;

            nix = pkgs.callPackage ./package.nix {
-            inherit versionSuffix fileset officialRelease buildUnreleasedNotes;
+              inherit
+                versionSuffix
+                fileset
+                officialRelease
+                buildUnreleasedNotes
+                ;
              inherit (pkgs) build-release-notes;
              internalApiDocs = true;
              boehmgc = pkgs.boehmgc-nix;
@ -256,13 +318,11 @@

        # System tests.
        tests = import ./tests/nixos { inherit lib nixpkgs nixpkgsFor; } // {
-
          # Make sure that nix-env still produces the exact same result
          # on a particular version of Nixpkgs.
          evalNixpkgs =
            with nixpkgsFor.x86_64-linux.native;
-            runCommand "eval-nixos" { buildInputs = [ nix ]; }
-              ''
+            runCommand "eval-nixos" { buildInputs = [ nix ]; } ''
              type -p nix-env
              # Note: we're filtering out nixos-install-tools because https://github.com/NixOS/nixpkgs/pull/153594#issuecomment-1020530593.
              time nix-env --store dummy:// -f ${nixpkgs-regression} -qaP --drv-path | sort | grep -v nixos-install-tools > packages
@ -270,23 +330,83 @@
              mkdir $out
            '';

-          nixpkgsLibTests =
-            forAllSystems (system:
-              import (nixpkgs + "/lib/tests/release.nix")
-                { pkgs = nixpkgsFor.${system}.native;
+          nixpkgsLibTests = forAllSystems (
+            system:
+            import (nixpkgs + "/lib/tests/release.nix") {
+              pkgs = nixpkgsFor.${system}.native;
              nixVersions = [ self.packages.${system}.nix ];
            }
          );
        };
+
+        pre-commit = builtins.mapAttrs (
+          system: pre-commit-lib:
+          pre-commit-lib.run {
+            src = self;
+            hooks = {
+              no-commit-to-branch = {
+                enable = true;
+                settings.branch = [ "main" ];
+              };
+              check-case-conflicts.enable = true;
+              check-executables-have-shebangs = {
+                enable = true;
+                stages = [ "commit" ];
+              };
+              check-shebang-scripts-are-executable = {
+                enable = true;
+                stages = [ "commit" ];
+              };
+              check-symlinks = {
+                enable = true;
+                excludes = [ "^tests/functional/lang/symlink-resolution/broken$" ];
+              };
+              check-merge-conflicts.enable = true;
+              end-of-file-fixer = {
+                enable = true;
+                excludes = [
+                  "\\.drv$"
+                  "^tests/functional/lang/"
+                ];
+              };
+              mixed-line-endings = {
+                enable = true;
+                excludes = [ "^tests/functional/lang/" ];
+              };
+              # TODO: Once the test suite is nicer, clean up and start
+              # enforcing trailing whitespace on tests that don't explicitly
+              # check for it.
+              trim-trailing-whitespace = {
+                enable = true;
+                stages = [ "commit" ];
+                excludes = [ "^tests/functional/lang/" ];
+              };
+              treefmt = {
+                enable = true;
+                settings.formatters =
+                  let
+                    pkgs = nixpkgsFor.${system}.native;
+                  in
+                  [ pkgs.nixfmt ];
+              };
+            };
+          }
+        ) pre-commit-hooks.lib;
      };

-      checks = forAllSystems (system: let
-        rl-next-check = name: dir:
-          let pkgs = nixpkgsFor.${system}.native;
-          in pkgs.buildPackages.runCommand "test-${name}-release-notes" { } ''
+      checks = forAllSystems (
+        system:
+        let
+          rl-next-check =
+            name: dir:
+            let
+              pkgs = nixpkgsFor.${system}.native;
+            in
+            pkgs.buildPackages.runCommand "test-${name}-release-notes" { } ''
              LANG=C.UTF-8 ${lib.getExe pkgs.build-release-notes} ${dir} >$out
            '';
-      in {
+        in
+        {
          # FIXME(Qyriad): remove this when the migration to Meson has been completed.
          mesonBuild = self.hydraJobs.mesonBuild.${system};
          mesonBuildClang = self.hydraJobs.mesonBuildClang.${system};
@ -295,22 +415,31 @@
          nixpkgsLibTests = self.hydraJobs.tests.nixpkgsLibTests.${system};
          rl-next = rl-next-check "rl-next" ./doc/manual/rl-next;
          rl-next-dev = rl-next-check "rl-next-dev" ./doc/manual/rl-next-dev;
-      } // (lib.optionalAttrs (builtins.elem system linux64BitSystems)) {
+          pre-commit = self.hydraJobs.pre-commit.${system};
+        }
+        // (lib.optionalAttrs (builtins.elem system linux64BitSystems)) {
          dockerImage = self.hydraJobs.dockerImage.${system};
-      });
+        }
+      );

-      packages = forAllSystems (system: rec {
+      packages = forAllSystems (
+        system:
+        rec {
          inherit (nixpkgsFor.${system}.native) nix;
          default = nix;
-      } // (lib.optionalAttrs (builtins.elem system linux64BitSystems) {
+        }
+        // (
+          lib.optionalAttrs (builtins.elem system linux64BitSystems) {
            nix-static = nixpkgsFor.${system}.static.nix;
            dockerImage =
              let
                pkgs = nixpkgsFor.${system}.native;
-            image = import ./docker.nix { inherit pkgs; tag = version; };
+                image = import ./docker.nix {
+                  inherit pkgs;
+                  tag = version;
+                };
              in
-          pkgs.runCommand
-            "docker-image-tarball-${version}"
+              pkgs.runCommand "docker-image-tarball-${version}"
                { meta.description = "Docker image with Nix for ${system}"; }
                ''
                  mkdir -p $out/nix-support
@ -318,21 +447,26 @@
                  ln -s ${image} $image
                  echo "file binary-dist $image" >> $out/nix-support/hydra-build-products
                '';
-      } // builtins.listToAttrs (map
-          (crossSystem: {
+          }
+          // builtins.listToAttrs (
+            map (crossSystem: {
              name = "nix-${crossSystem}";
              value = nixpkgsFor.${system}.cross.${crossSystem}.nix;
-          })
-          crossSystems)
-        // builtins.listToAttrs (map
-          (stdenvName: {
+            }) crossSystems
+          )
+          // builtins.listToAttrs (
+            map (stdenvName: {
              name = "nix-${stdenvName}";
              value = nixpkgsFor.${system}.stdenvs."${stdenvName}Packages".nix;
-          })
-          stdenvs)));
+            }) stdenvs
+          )
+        )
+      );

-      devShells = let
-        makeShell = pkgs: stdenv:
+      devShells =
+        let
+          makeShell =
+            pkgs: stdenv:
            let
              nix = pkgs.callPackage ./package.nix {
                inherit stdenv versionSuffix fileset;
@ -340,19 +474,37 @@
                busybox-sandbox-shell = pkgs.busybox-sandbox-shell or pkgs.default-busybox-sandbox;
                forDevShell = true;
              };
+              pre-commit = self.hydraJobs.pre-commit.${pkgs.system} or { };
            in
            (nix.override {
              buildUnreleasedNotes = true;
              officialRelease = false;
-            }).overrideAttrs (prev: {
+            }).overrideAttrs
+              (
+                prev:
+                {
                  # Required for clang-tidy checks
-              buildInputs = prev.buildInputs ++ lib.optionals (stdenv.cc.isClang) [ pkgs.llvmPackages.llvm pkgs.llvmPackages.clang-unwrapped.dev ];
-              nativeBuildInputs = prev.nativeBuildInputs
+                  buildInputs =
+                    prev.buildInputs
+                    ++ lib.optional (pre-commit ? enabledPackages) pre-commit.enabledPackages
+                    # Unfortunately `git-hooks.nix` can't propagate `treefmt`
+                    # formatters into `enabledPackages` correctly.
+                    ++ [ pkgs.nixfmt ]
+                    ++ lib.optionals (stdenv.cc.isClang) [
+                      pkgs.llvmPackages.llvm
+                      pkgs.llvmPackages.clang-unwrapped.dev
+                    ];
+                  nativeBuildInputs =
+                    prev.nativeBuildInputs
                    ++ lib.optional (stdenv.cc.isClang && !stdenv.buildPlatform.isDarwin) pkgs.buildPackages.bear
                    # Required for clang-tidy checks
-                ++ lib.optionals (stdenv.cc.isClang) [ pkgs.buildPackages.cmake pkgs.buildPackages.ninja pkgs.buildPackages.llvmPackages.llvm.dev ]
-                ++ lib.optional
-                  (stdenv.cc.isClang && stdenv.hostPlatform == stdenv.buildPlatform)
+                    ++ lib.optionals (stdenv.cc.isClang) [
+                      pkgs.buildPackages.cmake
+                      pkgs.buildPackages.ninja
+                      pkgs.buildPackages.llvmPackages.llvm.dev
+                    ]
+                    ++
+                      lib.optional (stdenv.cc.isClang && stdenv.hostPlatform == stdenv.buildPlatform)
                        # for some reason that seems accidental and was changed in
                        # NixOS 24.05-pre, clang-tools is pinned to LLVM 14 when
                        # default LLVM is newer.
@ -377,23 +529,35 @@

                    # Make bash completion work.
                    XDG_DATA_DIRS+=:$out/share
+
+                    ${lib.optionalString (pre-commit ? shellHook) pre-commit.shellHook}
                  '';
-            } // lib.optionalAttrs (stdenv.buildPlatform.isLinux && pkgs.glibcLocales != null) {
+                }
+                // lib.optionalAttrs (stdenv.buildPlatform.isLinux && pkgs.glibcLocales != null) {
                  # Required to make non-NixOS Linux not complain about missing locale files during configure in a dev shell
                  LOCALE_ARCHIVE = "${lib.getLib pkgs.glibcLocales}/lib/locale/locale-archive";
-            });
+                }
+              );
        in
-        forAllSystems (system:
+        forAllSystems (
+          system:
          let
-            makeShells = prefix: pkgs:
-              lib.mapAttrs'
-              (k: v: lib.nameValuePair "${prefix}-${k}" v)
-              (forAllStdenvs (stdenvName: makeShell pkgs pkgs.${stdenvName}));
+            makeShells =
+              prefix: pkgs:
+              lib.mapAttrs' (k: v: lib.nameValuePair "${prefix}-${k}" v) (
+                forAllStdenvs (stdenvName: makeShell pkgs pkgs.${stdenvName})
+              );
          in
-            (makeShells "native" nixpkgsFor.${system}.native) //
-            (makeShells "static" nixpkgsFor.${system}.static) //
-            (forAllCrossSystems (crossSystem: let pkgs = nixpkgsFor.${system}.cross.${crossSystem}; in makeShell pkgs pkgs.stdenv)) //
-            {
+          (makeShells "native" nixpkgsFor.${system}.native)
+          // (makeShells "static" nixpkgsFor.${system}.static)
+          // (forAllCrossSystems (
+            crossSystem:
+            let
+              pkgs = nixpkgsFor.${system}.cross.${crossSystem};
+            in
+            makeShell pkgs pkgs.stdenv
+          ))
+          // {
            default = self.devShells.${system}.native-stdenvPackages;
          }
        );
--- a/maintainers/build-release-notes.nix
+++ b/maintainers/build-release-notes.nix
@ -1,5 +1,8 @@
-{ lib, python3, writeShellScriptBin }:
-
+{
+  lib,
+  python3,
+  writeShellScriptBin,
+}:
 writeShellScriptBin "build-release-notes" ''
  exec ${lib.getExe (python3.withPackages (p: [ p.python-frontmatter ]))} \
    ${./build-release-notes.py} "$@"
--- a/maintainers/build-release-notes.py
+++ b/maintainers/build-release-notes.py
--- a/maintainers/release-process.md
+++ b/maintainers/release-process.md
@ -193,4 +193,3 @@ release:
 ## Recovering from mistakes

 `upload-release.pl` should be idempotent. For instance a wrong `IS_LATEST` value can be fixed that way, by running the script on the actual latest release.
-
--- a/meson/run-test.py
+++ b/meson/run-test.py
@ -84,4 +84,3 @@ except Exception as e:
    print(f'{name}: INTERNAL ERROR running test ({sys.argv}): {e}', file=sys.stderr)
    print(f'this is a bug in {name}')
    sys.exit(99)
-
--- a/misc/clangbuildanalyzer.nix
+++ b/misc/clangbuildanalyzer.nix
@ -1,6 +1,11 @@
 # Upstreaming here, can be deleted once it's upstreamed:
 # https://github.com/NixOS/nixpkgs/pull/297102
-{ stdenv, lib, cmake, fetchFromGitHub }:
+{
+  stdenv,
+  lib,
+  cmake,
+  fetchFromGitHub,
+}:
 stdenv.mkDerivation (finalAttrs: {
  pname = "clangbuildanalyzer";
  version = "1.5.0";
@ -12,9 +17,7 @@ stdenv.mkDerivation (finalAttrs: {
    sha256 = "sha256-kmgdk634zM0W0OoRoP/RzepArSipa5bNqdVgdZO9gxo=";
  };

-  nativeBuildInputs = [
-    cmake
-  ];
+  nativeBuildInputs = [ cmake ];

  meta = {
    description = "Tool for analyzing Clang's -ftrace-time files";
--- a/nix-support/nixfmt.nix
+++ b/nix-support/nixfmt.nix
@ -0,0 +1,79 @@
+# Copy of `nixfmt-rfc-style` vendored from `nixpkgs` master:
+# https://github.com/NixOS/nixpkgs/blob/ab6071eb54cc9b66dda436111d4f569e4e56cbf4/pkgs/by-name/ni/nixfmt-rfc-style/package.nix
+{
+  haskell,
+  haskellPackages,
+  lib,
+  fetchpatch,
+}:
+let
+  inherit (haskell.lib.compose) overrideCabal justStaticExecutables;
+
+  overrides = {
+    version = "unstable-2024-03-01";
+
+    patches = [
+      (fetchpatch {
+        url = "https://github.com/serokell/nixfmt/commit/ca9c8975ed671112fdfce94f2e9e2ad3de480c9a.patch";
+        hash = "sha256-UOSAYahSKBsqPMVcQJ3H26Eg2xpPAsNOjYMI6g+WTYU=";
+      })
+    ];
+  };
+
+  raw-pkg = haskellPackages.callPackage (
+    {
+      mkDerivation,
+      base,
+      cmdargs,
+      directory,
+      fetchzip,
+      filepath,
+      lib,
+      megaparsec,
+      mtl,
+      parser-combinators,
+      safe-exceptions,
+      scientific,
+      text,
+      transformers,
+      unix,
+    }:
+    mkDerivation {
+      pname = "nixfmt";
+      version = "0.5.0";
+      src = fetchzip {
+        url = "https://github.com/piegamesde/nixfmt/archive/2b5ee820690bae64cb4003e46917ae43541e3e0b.tar.gz";
+        sha256 = "1i1jbc1q4gd7fpilwy6s3a583yl5l8d8rlmipygj61mpclg9ihqg";
+      };
+      isLibrary = true;
+      isExecutable = true;
+      libraryHaskellDepends = [
+        base
+        megaparsec
+        mtl
+        parser-combinators
+        scientific
+        text
+        transformers
+      ];
+      executableHaskellDepends = [
+        base
+        cmdargs
+        directory
+        filepath
+        safe-exceptions
+        text
+        unix
+      ];
+      jailbreak = true;
+      homepage = "https://github.com/serokell/nixfmt";
+      description = "An opinionated formatter for Nix";
+      license = lib.licenses.mpl20;
+      mainProgram = "nixfmt";
+    }
+  ) { };
+in
+lib.pipe raw-pkg [
+  (overrideCabal overrides)
+  justStaticExecutables
+]
--- a/package.nix
+++ b/package.nix
@ -40,9 +40,11 @@
  util-linuxMinimal ? utillinuxMinimal,
  utillinuxMinimal ? null,
  xz,
-
  busybox-sandbox-shell,

+  # Customization options
+  # =====================
+
  pname ? "nix",
  versionSuffix ? "",
  officialRelease ? true,
@ -61,19 +63,21 @@
  __forDefaults ? {
    canRunInstalled = stdenv.buildPlatform.canExecute stdenv.hostPlatform;
  },
-}: let
+}:
+let
  inherit (__forDefaults) canRunInstalled;

  version = lib.fileContents ./.version + versionSuffix;

  aws-sdk-cpp-nix = aws-sdk-cpp.override {
-    apis = [ "s3" "transfer" ];
+    apis = [
+      "s3"
+      "transfer"
+    ];
    customMemoryManagement = false;
  };

-  testConfigureFlags = [
-    "RAPIDCHECK_HEADERS=${lib.getDev rapidcheck}/extras/gtest/include"
-  ];
+  testConfigureFlags = [ "RAPIDCHECK_HEADERS=${lib.getDev rapidcheck}/extras/gtest/include" ];

  # The internal API docs need these for the build, but if we're not building
  # Nix itself, then these don't need to be propagated.
@ -95,34 +99,40 @@
    ./README.md
  ];

-  topLevelBuildFiles = fileset.unions ([
+  topLevelBuildFiles = fileset.unions (
+    [
      ./local.mk
      ./Makefile
      ./Makefile.config.in
      ./mk
-  ] ++ lib.optionals buildWithMeson [
+    ]
+    ++ lib.optionals buildWithMeson [
      ./meson.build
      ./meson.options
      ./meson
      ./scripts/meson.build
-  ]);
+    ]
+  );

  functionalTestFiles = fileset.unions [
    ./tests/functional
    ./tests/unit
    (fileset.fileFilter (f: lib.strings.hasPrefix "nix-profile" f.name) ./scripts)
  ];
-
-in stdenv.mkDerivation (finalAttrs: {
+in
+stdenv.mkDerivation (finalAttrs: {
  inherit pname version;

  src = fileset.toSource {
    root = ./.;
-    fileset = fileset.intersection baseFiles (fileset.unions ([
+    fileset = fileset.intersection baseFiles (
+      fileset.unions (
+        [
          configureFiles
          topLevelBuildFiles
          functionalTestFiles
-    ] ++ lib.optionals (!finalAttrs.dontBuild || internalApiDocs) [
+        ]
+        ++ lib.optionals (!finalAttrs.dontBuild || internalApiDocs) [
          ./boehmgc-coroutine-sp-fallback.diff
          ./doc
          ./misc
@ -130,13 +140,19 @@ in stdenv.mkDerivation (finalAttrs: {
          ./src
          ./COPYING
          ./scripts/local.mk
-    ]));
+        ]
+      )
+    );
  };

  VERSION_SUFFIX = versionSuffix;

-  outputs = [ "out" ]
-    ++ lib.optionals (!finalAttrs.dontBuild) [ "dev" "doc" ];
+  outputs =
+    [ "out" ]
+    ++ lib.optionals (!finalAttrs.dontBuild) [
+      "dev"
+      "doc"
+    ];

  dontBuild = false;

@ -148,15 +164,19 @@ in stdenv.mkDerivation (finalAttrs: {
  # We only include CMake so that Meson can locate toml11, which only ships CMake dependency metadata.
  dontUseCmakeConfigure = true;

-  nativeBuildInputs = [
+  nativeBuildInputs =
+    [
      bison
      flex
-  ] ++ [
+    ]
+    ++ [
      (lib.getBin lowdown)
      mdbook
      mdbook-linkcheck
      autoconf-archive
-  ] ++ lib.optional (!buildWithMeson) autoreconfHook ++ [
+    ]
+    ++ lib.optional (!buildWithMeson) autoreconfHook
+    ++ [
      pkg-config

      # Tests
@ -164,7 +184,8 @@ in stdenv.mkDerivation (finalAttrs: {
      mercurial
      jq
      lsof
-  ] ++ lib.optional stdenv.hostPlatform.isLinux util-linuxMinimal
+    ]
+    ++ lib.optional stdenv.hostPlatform.isLinux util-linuxMinimal
    ++ lib.optional (!officialRelease && buildUnreleasedNotes) build-release-notes
    ++ lib.optional internalApiDocs doxygen
    ++ lib.optionals buildWithMeson [
@ -173,7 +194,8 @@ in stdenv.mkDerivation (finalAttrs: {
      cmake
    ];

-  buildInputs = [
+  buildInputs =
+    [
      curl
      bzip2
      xz
@ -187,12 +209,14 @@ in stdenv.mkDerivation (finalAttrs: {
      libsodium
      toml11
    ]
-    ++ lib.optionals stdenv.hostPlatform.isLinux [ libseccomp busybox-sandbox-shell ]
+    ++ lib.optionals stdenv.hostPlatform.isLinux [
+      libseccomp
+      busybox-sandbox-shell
+    ]
    ++ lib.optional stdenv.hostPlatform.isx86_64 libcpuid
    # There have been issues building these dependencies
    ++ lib.optional (stdenv.hostPlatform == stdenv.buildPlatform) aws-sdk-cpp-nix
-    ++ lib.optionals (finalAttrs.dontBuild) maybePropagatedInputs
-  ;
+    ++ lib.optionals (finalAttrs.dontBuild) maybePropagatedInputs;

  checkInputs = [
    gtest
@ -201,9 +225,7 @@ in stdenv.mkDerivation (finalAttrs: {

  propagatedBuildInputs = lib.optionals (!finalAttrs.dontBuild) maybePropagatedInputs;

-  disallowedReferences = [
-    boost
-  ];
+  disallowedReferences = [ boost ];

  # Needed for Meson to find Boost.
  # https://github.com/NixOS/nixpkgs/issues/86131.
@ -212,23 +234,27 @@ in stdenv.mkDerivation (finalAttrs: {
    BOOST_LIBRARYDIR = "${lib.getLib boost}/lib";
  };

-  preConfigure = lib.optionalString (!finalAttrs.dontBuild && !stdenv.hostPlatform.isStatic) ''
+  preConfigure =
+    lib.optionalString (!finalAttrs.dontBuild && !stdenv.hostPlatform.isStatic) ''
      # Copy libboost_context so we don't get all of Boost in our closure.
      # https://github.com/NixOS/nixpkgs/issues/45462
      mkdir -p $out/lib
      cp -pd ${boost}/lib/{libboost_context*,libboost_thread*,libboost_system*} $out/lib
      rm -f $out/lib/*.a
-  '' + lib.optionalString (!finalAttrs.dontBuild && stdenv.hostPlatform.isLinux) ''
+    ''
+    + lib.optionalString (!finalAttrs.dontBuild && stdenv.hostPlatform.isLinux) ''
      chmod u+w $out/lib/*.so.*
      patchelf --set-rpath $out/lib:${stdenv.cc.cc.lib}/lib $out/lib/libboost_thread.so.*
-  '' + lib.optionalString (!finalAttrs.dontBuild && stdenv.hostPlatform.isDarwin) ''
+    ''
+    + lib.optionalString (!finalAttrs.dontBuild && stdenv.hostPlatform.isDarwin) ''
      for LIB in $out/lib/*.dylib; do
        chmod u+w $LIB
        install_name_tool -id $LIB $LIB
        install_name_tool -delete_rpath ${boost}/lib/ $LIB || true
      done
      install_name_tool -change ${boost}/lib/libboost_system.dylib $out/lib/libboost_system.dylib $out/lib/libboost_thread.dylib
-  '' + ''
+    ''
+    + ''
      # Workaround https://github.com/NixOS/nixpkgs/issues/294890.
      if [[ -n "''${doCheck:-}" ]]; then
        appendToVar configureFlags "--enable-tests"
@ -237,20 +263,20 @@ in stdenv.mkDerivation (finalAttrs: {
      fi
    '';

-  configureFlags = lib.optionals stdenv.isLinux [
+  configureFlags =
+    lib.optionals stdenv.isLinux [
      "--with-boost=${boost}/lib"
      "--with-sandbox-shell=${busybox-sandbox-shell}/bin/busybox"
-  ] ++ lib.optionals (stdenv.isLinux && !(stdenv.hostPlatform.isStatic && stdenv.system == "aarch64-linux")) [
-    "LDFLAGS=-fuse-ld=gold"
    ]
+    ++ lib.optionals (
+      stdenv.isLinux && !(stdenv.hostPlatform.isStatic && stdenv.system == "aarch64-linux")
+    ) [ "LDFLAGS=-fuse-ld=gold" ]
    ++ lib.optional stdenv.hostPlatform.isStatic "--enable-embedded-sandbox-shell"
    ++ lib.optionals (finalAttrs.doCheck || internalApiDocs) testConfigureFlags
    ++ lib.optional (!canRunInstalled) "--disable-doc-gen"
    ++ [ (lib.enableFeature internalApiDocs "internal-api-docs") ]
    ++ lib.optional (!forDevShell) "--sysconfdir=/etc"
-    ++ [
-      "TOML11_HEADERS=${lib.getDev toml11}/include"
-    ];
+    ++ [ "TOML11_HEADERS=${lib.getDev toml11}/include" ];

  mesonBuildType = lib.optional (buildWithMeson || forDevShell) "debugoptimized";

@ -262,26 +288,28 @@ in stdenv.mkDerivation (finalAttrs: {

  doCheck = true;

-  mesonCheckFlags = lib.optionals (buildWithMeson || forDevShell) [
-    "--suite=check"
-  ];
+  mesonCheckFlags = lib.optionals (buildWithMeson || forDevShell) [ "--suite=check" ];

  installFlags = "sysconfdir=$(out)/etc";

-  postInstall = lib.optionalString (!finalAttrs.dontBuild) ''
+  postInstall =
+    lib.optionalString (!finalAttrs.dontBuild) ''
      mkdir -p $doc/nix-support
      echo "doc manual $doc/share/doc/nix/manual" >> $doc/nix-support/hydra-build-products
-  '' + lib.optionalString stdenv.hostPlatform.isStatic ''
+    ''
+    + lib.optionalString stdenv.hostPlatform.isStatic ''
      mkdir -p $out/nix-support
      echo "file binary-dist $out/bin/nix" >> $out/nix-support/hydra-build-products
-  '' + lib.optionalString stdenv.isDarwin ''
+    ''
+    + lib.optionalString stdenv.isDarwin ''
      for lib in libnixutil.dylib libnixexpr.dylib; do
        install_name_tool \
          -change "${lib.getLib boost}/lib/libboost_context.dylib" \
          "$out/lib/libboost_context.dylib" \
          "$out/lib/$lib"
      done
-  '' + lib.optionalString internalApiDocs ''
+    ''
+    + lib.optionalString internalApiDocs ''
      mkdir -p $out/nix-support
      echo "doc internal-api-docs $out/share/doc/nix/internal-api/html" >> "$out/nix-support/hydra-build-products"
    '';
@ -290,9 +318,7 @@ in stdenv.mkDerivation (finalAttrs: {
  installCheckFlags = "sysconfdir=$(out)/etc";
  installCheckTarget = "installcheck"; # work around buggy detection in stdenv

-  mesonInstallCheckFlags = [
-    "--suite=installcheck"
-  ];
+  mesonInstallCheckFlags = [ "--suite=installcheck" ];

  preInstallCheck = lib.optionalString stdenv.hostPlatform.isDarwin ''
    export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES
@ -310,12 +336,9 @@ in stdenv.mkDerivation (finalAttrs: {
  strictDeps = true;

  # strictoverflow is disabled because we trap on signed overflow instead
-  hardeningDisable = [ "strictoverflow" ]
-    ++ lib.optional stdenv.hostPlatform.isStatic "pie";
+  hardeningDisable = [ "strictoverflow" ] ++ lib.optional stdenv.hostPlatform.isStatic "pie";

  meta.platforms = lib.platforms.unix;

-  passthru.perl-bindings = pkgs.callPackage ./perl {
-    inherit fileset stdenv;
-  };
+  passthru.perl-bindings = pkgs.callPackage ./perl { inherit fileset stdenv; };
 })
--- a/perl/default.nix
+++ b/perl/default.nix
@ -1,11 +1,22 @@
-{ lib, fileset
-, stdenv
-, perl, perlPackages
-, autoconf-archive, autoreconfHook, pkg-config
-, nix, curl, bzip2, xz, boost, libsodium, darwin
+{
+  lib,
+  fileset,
+  stdenv,
+  perl,
+  perlPackages,
+  autoconf-archive,
+  autoreconfHook,
+  pkg-config,
+  nix,
+  curl,
+  bzip2,
+  xz,
+  boost,
+  libsodium,
+  darwin,
 }:
-
-perl.pkgs.toPerlModule (stdenv.mkDerivation {
+perl.pkgs.toPerlModule (
+  stdenv.mkDerivation {
    name = "nix-perl-${nix.version}";

    src = fileset.toSource {
@ -23,14 +34,15 @@ perl.pkgs.toPerlModule (stdenv.mkDerivation {
      ];
    };

-  nativeBuildInputs =
-    [ autoconf-archive
+    nativeBuildInputs = [
+      autoconf-archive
      autoreconfHook
      pkg-config
    ];

    buildInputs =
-    [ nix
+      [
+        nix
        curl
        bzip2
        xz
@ -48,4 +60,5 @@ perl.pkgs.toPerlModule (stdenv.mkDerivation {
    enableParallelBuilding = true;

    postUnpack = "sourceRoot=$sourceRoot/perl";
-})
+  }
+)
--- a/src/libexpr/fetchurl.nix
+++ b/src/libexpr/fetchurl.nix
@ -1,27 +1,52 @@
-{ system ? "" # obsolete
-, url
-, hash ? "" # an SRI hash
-
-# Legacy hash specification
-, md5 ? "", sha1 ? "", sha256 ? "", sha512 ? ""
-, outputHash ?
-    if hash != "" then hash else if sha512 != "" then sha512 else if sha1 != "" then sha1 else if md5 != "" then md5 else sha256
-, outputHashAlgo ?
-    if hash != "" then "" else if sha512 != "" then "sha512" else if sha1 != "" then "sha1" else if md5 != "" then "md5" else "sha256"
-
-, executable ? false
-, unpack ? false
-, name ? baseNameOf (toString url)
-, impure ? false
+{
+  system ? "", # obsolete
+  url,
+  hash ? "", # an SRI hash
+  # Legacy hash specification
+  md5 ? "",
+  sha1 ? "",
+  sha256 ? "",
+  sha512 ? "",
+  outputHash ?
+    if hash != "" then
+      hash
+    else if sha512 != "" then
+      sha512
+    else if sha1 != "" then
+      sha1
+    else if md5 != "" then
+      md5
+    else
+      sha256,
+  outputHashAlgo ?
+    if hash != "" then
+      ""
+    else if sha512 != "" then
+      "sha512"
+    else if sha1 != "" then
+      "sha1"
+    else if md5 != "" then
+      "md5"
+    else
+      "sha256",
+  executable ? false,
+  unpack ? false,
+  name ? baseNameOf (toString url),
+  impure ? false,
 }:
-
-derivation ({
+derivation (
+  {
    builder = "builtin:fetchurl";

    # New-style output content requirements.
    outputHashMode = if unpack || executable then "recursive" else "flat";

-  inherit name url executable unpack;
+    inherit
+      name
+      url
+      executable
+      unpack
+      ;

    system = "builtin";

@ -33,11 +58,15 @@ derivation ({
      # easy proxy configuration.  This is impure, but a fixed-output
      # derivation like fetchurl is allowed to do so since its result is
      # by definition pure.
-    "http_proxy" "https_proxy" "ftp_proxy" "all_proxy" "no_proxy"
+      "http_proxy"
+      "https_proxy"
+      "ftp_proxy"
+      "all_proxy"
+      "no_proxy"
    ];

    # To make "nix-prefetch-url" work.
    urls = [ url ];
-} // (if impure
-      then { __impure = true; }
-      else { inherit outputHashAlgo outputHash; }))
+  }
+  // (if impure then { __impure = true; } else { inherit outputHashAlgo outputHash; })
+)
--- a/src/libexpr/flake/call-flake.nix
+++ b/src/libexpr/flake/call-flake.nix
@ -1,18 +1,15 @@
 lockFileStr: rootSrc: rootSubdir:
-
 let
-
  lockFile = builtins.fromJSON lockFileStr;

-  allNodes =
-    builtins.mapAttrs
-      (key: node:
+  allNodes = builtins.mapAttrs (
+    key: node:
    let
-
      sourceInfo =
-            if key == lockFile.root
-            then rootSrc
-            else fetchTree (node.info or {} // removeAttrs node.locked ["dir"]);
+        if key == lockFile.root then
+          rootSrc
+        else
+          fetchTree (node.info or { } // removeAttrs node.locked [ "dir" ]);

      subdir = if key == lockFile.root then rootSubdir else node.locked.dir or "";

@ -20,23 +17,22 @@ let

      flake = import (outPath + "/flake.nix");

-          inputs = builtins.mapAttrs
-            (inputName: inputSpec: allNodes.${resolveInput inputSpec})
-            (node.inputs or {});
+      inputs = builtins.mapAttrs (inputName: inputSpec: allNodes.${resolveInput inputSpec}) (
+        node.inputs or { }
+      );

      # Resolve a input spec into a node name. An input spec is
      # either a node name, or a 'follows' path from the root
      # node.
-          resolveInput = inputSpec:
-              if builtins.isList inputSpec
-              then getInputByPath lockFile.root inputSpec
-              else inputSpec;
+      resolveInput =
+        inputSpec: if builtins.isList inputSpec then getInputByPath lockFile.root inputSpec else inputSpec;

      # Follow an input path (e.g. ["dwarffs" "nixpkgs"]) from the
      # root node, returning the final node.
-          getInputByPath = nodeName: path:
-            if path == []
-            then nodeName
+      getInputByPath =
+        nodeName: path:
+        if path == [ ] then
+          nodeName
        else
          getInputByPath
            # Since this could be a 'follows' input, call resolveInput.
@ -57,16 +53,17 @@ let
          # This shadows the sourceInfo.outPath
          inherit outPath;

-              inherit inputs; inherit outputs; inherit sourceInfo; _type = "flake";
+          inherit inputs;
+          inherit outputs;
+          inherit sourceInfo;
+          _type = "flake";
        };
-
    in
    if node.flake or true then
      assert builtins.isFunction flake.outputs;
      result
    else
      sourceInfo
-      )
-      lockFile.nodes;
-
-in allNodes.${lockFile.root}
+  ) lockFile.nodes;
+in
+allNodes.${lockFile.root}
--- a/src/libexpr/imported-drv-to-derivation.nix
+++ b/src/libexpr/imported-drv-to-derivation.nix
@ -1,15 +1,18 @@
-attrs @ { drvPath, outputs, name, ... }:
-
+attrs@{
+  drvPath,
+  outputs,
+  name,
+  ...
+}:
 let
-
-  commonAttrs = (builtins.listToAttrs outputsList) //
-    { all = map (x: x.value) outputsList;
+  commonAttrs = (builtins.listToAttrs outputsList) // {
+    all = map (x: x.value) outputsList;
    inherit drvPath name;
    type = "derivation";
  };

-  outputToAttrListElement = outputName:
-    { name = outputName;
+  outputToAttrListElement = outputName: {
+    name = outputName;
    value = commonAttrs // {
      outPath = builtins.getAttr outputName attrs;
      inherit outputName;
@ -17,5 +20,5 @@ let
  };

  outputsList = map outputToAttrListElement outputs;
-    
-in (builtins.head outputsList).value
+in
+(builtins.head outputsList).value
--- a/src/libexpr/primops/derivation.nix
+++ b/src/libexpr/primops/derivation.nix
@ -1,19 +1,24 @@
-/* This is the implementation of the ‘derivation’ builtin function.
-   It's actually a wrapper around the ‘derivationStrict’ primop. */
-
-drvAttrs @ { outputs ? [ "out" ], ... }:
-
+/*
+  This is the implementation of the ‘derivation’ builtin function.
+  It's actually a wrapper around the ‘derivationStrict’ primop.
+*/
+drvAttrs@{
+  outputs ? [ "out" ],
+  ...
+}:
 let
-
  strict = derivationStrict drvAttrs;

-  commonAttrs = drvAttrs // (builtins.listToAttrs outputsList) //
-    { all = map (x: x.value) outputsList;
+  commonAttrs =
+    drvAttrs
+    // (builtins.listToAttrs outputsList)
+    // {
+      all = map (x: x.value) outputsList;
      inherit drvAttrs;
    };

-  outputToAttrListElement = outputName:
-    { name = outputName;
+  outputToAttrListElement = outputName: {
+    name = outputName;
    value = commonAttrs // {
      outPath = builtins.getAttr outputName strict;
      drvPath = strict.drvPath;
@ -23,5 +28,5 @@ let
  };

  outputsList = map outputToAttrListElement outputs;
-
-in (builtins.head outputsList).value
+in
+(builtins.head outputsList).value
--- a/src/libstore/build/personality.hh
+++ b/src/libstore/build/personality.hh
@ -8,5 +8,3 @@ namespace nix {
 void setPersonality(std::string_view system);

 }
-
-
--- a/src/libutil/thread-pool.cc
+++ b/src/libutil/thread-pool.cc
@ -152,5 +152,3 @@ void ThreadPool::doWork(bool mainThread)
 }

 }
-
-
--- a/src/nix-channel/unpack-channel.nix
+++ b/src/nix-channel/unpack-channel.nix
@ -1,5 +1,8 @@
-{ name, channelName, src }:
-
+{
+  name,
+  channelName,
+  src,
+}:
 derivation {
  builder = "builtin:unpack-channel";

--- a/src/nix-env/buildenv.nix
+++ b/src/nix-env/buildenv.nix
@ -1,5 +1,4 @@
 { derivations, manifest }:
-
 derivation {
  name = "user-environment";
  system = "builtin";
@ -8,13 +7,15 @@ derivation {
  inherit manifest;

  # !!! grmbl, need structured data for passing this in a clean way.
-  derivations =
-    map (d:
-      [ (d.meta.active or "true")
+  derivations = map (
+    d:
+    [
+      (d.meta.active or "true")
      (d.meta.priority or 5)
      (builtins.length d.outputs)
-      ] ++ map (output: builtins.getAttr output d) d.outputs)
-      derivations;
+    ]
+    ++ map (output: builtins.getAttr output d) d.outputs
+  ) derivations;

  # Building user environments remotely just causes huge amounts of
  # network traffic, so don't do that.
--- a/tests/functional/ca/build-cache.sh
+++ b/tests/functional/ca/build-cache.sh
--- a/tests/functional/ca/build-dry.sh
+++ b/tests/functional/ca/build-dry.sh
@ -3,4 +3,3 @@ source common.sh
 export NIX_TESTS_CA_BY_DEFAULT=1

 cd .. && source build-dry.sh
-
--- a/tests/functional/ca/build.sh
+++ b/tests/functional/ca/build.sh
--- a/tests/functional/ca/eval-store.sh
+++ b/tests/functional/ca/eval-store.sh
--- a/tests/functional/ca/import-derivation.sh
+++ b/tests/functional/ca/import-derivation.sh
@ -3,4 +3,3 @@ source common.sh
 export NIX_TESTS_CA_BY_DEFAULT=1

 cd .. && source import-derivation.sh
-
--- a/tests/functional/ca/nix-shell.sh
+++ b/tests/functional/ca/nix-shell.sh
@ -5,4 +5,3 @@ source common.sh
 CONTENT_ADDRESSED=true
 cd ..
 source ./nix-shell.sh
-
--- a/tests/functional/ca/nondeterministic.nix
+++ b/tests/functional/ca/nondeterministic.nix
@ -32,4 +32,3 @@ rec {
    '';
  };
 }
-
--- a/tests/functional/ca/post-hook.sh
+++ b/tests/functional/ca/post-hook.sh
@ -7,5 +7,3 @@ requireDaemonNewerThan "2.4pre20210626"
 export NIX_TESTS_CA_BY_DEFAULT=1
 cd ..
 source ./post-hook.sh
-
-
--- a/tests/functional/ca/substitute.sh
+++ b/tests/functional/ca/substitute.sh
--- a/tests/functional/dyn-drv/build-built-drv.sh
+++ b/tests/functional/dyn-drv/build-built-drv.sh
--- a/tests/functional/dyn-drv/dep-built-drv.sh
+++ b/tests/functional/dyn-drv/dep-built-drv.sh
--- a/tests/functional/dyn-drv/eval-outputOf.sh
+++ b/tests/functional/dyn-drv/eval-outputOf.sh
--- a/tests/functional/dyn-drv/text-hashed-output.sh
+++ b/tests/functional/dyn-drv/text-hashed-output.sh
--- a/tests/functional/fetchClosure.sh
+++ b/tests/functional/fetchClosure.sh
@ -147,4 +147,3 @@ expectStderr 1 nix eval -v --raw --expr "
    inputAddressed = true;
  }
 " | grepQuiet 'error.*The store object referred to by.*fromPath.* at .* is not input-addressed, but .*inputAddressed.* is set to .*true.*'
-
--- a/tests/functional/flakes/circular.sh
+++ b/tests/functional/flakes/circular.sh
@ -47,4 +47,3 @@ nix flake update b --flake $flakeA

 # Test list-inputs with circular dependencies
 nix flake metadata $flakeA
-
--- a/tests/functional/flakes/run.sh
+++ b/tests/functional/flakes/run.sh
@ -26,4 +26,3 @@ nix run --no-write-lock-file .#pkgAsPkg
 ! nix run --no-write-lock-file .#appAsPkg || fail "elements of 'apps' should be of type 'app'"

 clearStore
-
--- a/tests/functional/fmt.simple.sh
+++ b/tests/functional/fmt.simple.sh
@ -1 +1,3 @@
+#!/usr/bin/env bash
+
 echo Formatting: "${@}"
--- a/tests/functional/function-trace.sh
+++ b/tests/functional/function-trace.sh
@ -1,3 +1,5 @@
+#!/usr/bin/env bash
+
 source common.sh

 set +x
--- a/tests/functional/init.sh
+++ b/tests/functional/init.sh
@ -1,3 +1,5 @@
+#!/usr/bin/env bash
+
 # Don't start the daemon
 source common/vars-and-functions.sh

--- a/tests/functional/lang.sh
+++ b/tests/functional/lang.sh
@ -1,3 +1,5 @@
+#!/usr/bin/env bash
+
 source common.sh

 set -o pipefail
--- a/tests/functional/lang/parse-fail-eol-1.err.exp
+++ b/tests/functional/lang/parse-fail-eol-1.err.exp
@ -1,5 +1,5 @@
 error: undefined variable 'invalid'
-       at /pwd/lang/eval-fail-eol-1.nix:2:1:
+       at «stdin»:2:1:
            1| # foo
            2| invalid
             | ^
--- a/tests/functional/lang/parse-fail-eol-1.nix
+++ b/tests/functional/lang/parse-fail-eol-1.nix
--- a/tests/functional/lang/parse-fail-eol-2.err.exp
+++ b/tests/functional/lang/parse-fail-eol-2.err.exp
@ -1,5 +1,5 @@
 error: undefined variable 'invalid'
-       at /pwd/lang/eval-fail-eol-2.nix:2:1:
+       at «stdin»:2:1:
            1| # foo
            2| invalid
             | ^
--- a/tests/functional/lang/parse-fail-eol-2.nix
+++ b/tests/functional/lang/parse-fail-eol-2.nix
--- a/tests/functional/lang/parse-fail-eol-3.err.exp
+++ b/tests/functional/lang/parse-fail-eol-3.err.exp
@ -1,5 +1,5 @@
 error: undefined variable 'invalid'
-       at /pwd/lang/eval-fail-eol-3.nix:2:1:
+       at «stdin»:2:1:
            1| # foo
            2| invalid
             | ^
--- a/tests/functional/lang/parse-fail-eol-3.nix
+++ b/tests/functional/lang/parse-fail-eol-3.nix
--- a/tests/functional/lang/parse-fail-path-slash.err.exp
+++ b/tests/functional/lang/parse-fail-path-slash.err.exp
@ -1,5 +1,5 @@
 error: path has a trailing slash
-       at /pwd/lang/eval-fail-path-slash.nix:6:12:
+       at «stdin»:6:12:
            5| # and https://nixos.org/nix-dev/2016-June/020829.html
            6| /nix/store/
             |            ^
--- a/tests/functional/lang/parse-fail-path-slash.nix
+++ b/tests/functional/lang/parse-fail-path-slash.nix
--- a/tests/functional/lang/parse-fail-set.err.exp
+++ b/tests/functional/lang/parse-fail-set.err.exp
@ -1,5 +1,5 @@
 error: undefined variable 'x'
-       at /pwd/lang/eval-fail-set.nix:1:3:
+       at «stdin»:1:3:
            1| 8.x
             |   ^
            2|
--- a/tests/functional/lang/parse-fail-set.nix
+++ b/tests/functional/lang/parse-fail-set.nix
--- a/tests/functional/linux-sandbox-cert-test.nix
+++ b/tests/functional/linux-sandbox-cert-test.nix
@ -27,4 +27,3 @@ mkDerivation (
    normal = { };
  }.${mode}
 )
-
--- a/tests/functional/nix-channel.sh
+++ b/tests/functional/nix-channel.sh
@ -63,4 +63,3 @@ grepQuiet 'item.*attrPath="foo".*name="dependencies-top"' $TEST_ROOT/meta.xml
 # Do an install.
 nix-env -i dependencies-top
 [ -e $TEST_HOME/.nix-profile/foobar ]
-
--- a/tests/functional/repl_characterization/data/basic.ast
+++ b/tests/functional/repl_characterization/data/basic.ast
@ -14,4 +14,3 @@ Commentary "the blank below should be chomped"
 Command "command three"
 Commentary ""
 Output "meow output"
-Output ""
--- a/tests/functional/repl_characterization/data/basic.test
+++ b/tests/functional/repl_characterization/data/basic.test
@ -14,4 +14,3 @@ the blank below should be chomped
  nix-repl> command three

  meow output
-
--- a/tests/functional/shell.shebang.rb
+++ b/tests/functional/shell.shebang.rb
--- a/tests/unit/libutil/chunked-vector.cc
+++ b/tests/unit/libutil/chunked-vector.cc
@ -51,4 +51,3 @@ namespace nix {
    }

 }
-
--- a/tests/unit/libutil/git.cc
+++ b/tests/unit/libutil/git.cc
@ -30,4 +30,3 @@ namespace nix {
        ASSERT_EQ(res->reference, "refs/head/main");
    }
 }
-
--- a/tests/unit/libutil/references.cc
+++ b/tests/unit/libutil/references.cc
@ -43,4 +43,3 @@ INSTANTIATE_TEST_CASE_P(
 );

 }
-
--- a/treefmt.toml
+++ b/treefmt.toml
@ -0,0 +1,4 @@
+[formatter.nix]
+command = "nixfmt"
+includes = ["*.nix"]
+excludes = ["tests/**"]