如何适配nix-shell开发环境以支持非NixOS系统？

背景 #

我在NixOS上搭建了一个可用的nix-shell环境，能为Rust代码仓库提供所需依赖。现在要将这个环境适配到M1 Mac、Pop!_OS（Live环境）等其他机器，测试中遇到了链接错误。

当前shell.nix内容 #

{ pkgs ? import (fetchTarball "https://github.com/NixOS/nixpkgs/archive/nixos-22.11.tar.gz") {} }:

pkgs.mkShell {
  name = "vrrb-dev";

  nativeBuildInputs = with pkgs; [
    pkg-config
  ];

  buildInputs = with pkgs; [
    # dev tools
    which
    htop
    zlib

    # build dependencies
    clang
    libclang.lib
    rocksdb
    openssl.dev
    rustup
  ] ++ lib.optionals stdenv.isDarwin [
    libiconv
    darwin.apple_sdk.frameworks.Security
    ];

  RUSTC_VERSION = pkgs.lib.readFile ./rust-toolchain.toml;

  shellHook = ''
    export PATH=$PATH:''${CARGO_HOME:-~/.cargo}/bin
    export PATH=$PATH:''${RUSTUP_HOME:-~/.rustup}/toolchains/$RUSTC_VERSION-x86_64-unknown-linux-gnu/bin/
    export LIBCLANG_PATH="${pkgs.libclang.lib}/lib";
    export ROCKSDB_LIB_DIR="${pkgs.rocksdb}/lib";
  '';
}

遇到的错误 #

M1 Mac原错误（已解决） #

添加Darwin专属依赖后问题消失，原错误如下：

error: linking with `cc` failed: exit status: 1
  |
  = note: LC_ALL="C" PATH="/Users/eureka/.rustup/toolchains/1.69.0-aarch64-apple-darwin/lib/rustlib/aarch64-apple-darwin/bin:/nix/store/...

<为满足字符数限制已缩短，内容均为路径>

..."/Users/eureka/.rustup/toolchains/1.69.0-aarch64-apple-darwin/lib/rustlib/aarch64-apple-darwin/lib/libcompiler_builtins-90099c6af476d811.rlib" "-lrocksdb" "-lc++" "-framework" "Security" "-lssl" "-lcrypto" "-framework" "Security" "-framework" "Security" "-framework" "CoreFoundation" "-liconv" "-lSystem" "-lc" "-lm" "-L" "/Users/eureka/.rustup/toolchains/1.69.0-aarch64-apple-darwin/lib/rustlib/aarch64-apple-darwin/lib" "-o" "/Users/eureka/Code/vrrb/target/debug/deps/vrrb-cbf8e0f56f41c123" "-Wl,-dead_strip" "-nodefaultlibs" "-undefined" "dynamic_lookup"
  = note: ld: framework not found Security
          clang-11: error: linker command failed with exit code 1 (use -v to see invocation)

Pop!_OS错误（未解决） #

error: linking with `cc` failed: exit status: 1
  |
  = note: LC_ALL="C" PATH="/home/pop-os/.rustup/toolchains/1.69.0-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/bin:/nix/store...

<内容与上述类似>

..."/home/pop-os/.rustup/toolchains/1.69.0-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcompiler_builtins-957b4aff41f8cd46.rlib" "-Wl,-Bdynamic" "-lrocksdb" "-lstdc++" "-lssl" "-lcrypto" "-lgcc_s" "-lutil" "-lrt" "-lpthread" "-lm" "-ldl" "-lc" "-Wl,--eh-frame-hdr" "-Wl,-z,noexecstack" "-L" "/home/pop-os/.rustup/toolchains/1.69.0-x86_64-unknown-linux-gnu/lib/rustlib/x86_64-unknown-linux-gnu/lib" "-o" "/home/pop-os/vrrb/target/debug/deps/vrrb-b58fba9b599b43a6" "-Wl,--gc-sections" "-pie" "-Wl,-z,relro,-z,now" "-nodefaultlibs"

问题分析与修复方案 #

核心问题1：RUSTC_VERSION变量错误 #

原代码直接读取整个rust-toolchain.toml文件内容到RUSTC_VERSION，导致shellHook中拼接工具链路径时生成无效路径，Rust找不到正确的编译器工具链，进而引发链接错误。需要改用lib.fetchToml提取具体版本号。

核心问题2：Linux环境缺少标准库依赖 #

Pop!_OS的链接错误源于缺少系统标准库的显式依赖，需要在buildInputs中添加对应库。

优化后的完整shell.nix #

{ pkgs ? import (fetchTarball "https://github.com/NixOS/nixpkgs/archive/nixos-22.11.tar.gz") {} }:

let
  # 从rust-toolchain.toml中提取工具链版本号
  rustToolchain = (pkgs.lib.fetchToml ./rust-toolchain.toml).toolchain.channel;
in

pkgs.mkShell {
  name = "vrrb-dev";

  nativeBuildInputs = with pkgs; [
    pkg-config
  ];

  buildInputs = with pkgs; [
    # dev tools
    which
    htop
    zlib

    # build dependencies
    clang
    libclang.lib
    rocksdb
    openssl.dev
    rustup
    stdenv.cc.cc.lib  # 添加Linux标准库依赖，解决链接问题
  ] ++ lib.optionals stdenv.isDarwin [
    libiconv
    darwin.apple_sdk.frameworks.Security
  ];

  RUSTC_VERSION = rustToolchain;

  shellHook = ''
    # 自动安装指定版本的Rust工具链（如果未安装）
    rustup toolchain install ${rustToolchain} --profile minimal
    rustup default ${rustToolchain}

    export PATH=$PATH:''${CARGO_HOME:-~/.cargo}/bin
    # 自动适配目标平台，替换硬编码的平台标识
    export PATH=$PATH:''${RUSTUP_HOME:-~/.rustup}/toolchains/${rustToolchain}-${pkgs.stdenv.hostPlatform.config}/bin/
    export LIBCLANG_PATH="${pkgs.libclang.lib}/lib";
    export ROCKSDB_LIB_DIR="${pkgs.rocksdb}/lib";
  '';
}

修复说明 #

1. 版本号提取：用fetchToml解析配置文件，精准获取工具链版本，避免路径拼接错误
2. Linux标准库：添加stdenv.cc.cc.lib确保链接器能找到系统标准库
3. 跨平台适配：用pkgs.stdenv.hostPlatform.config自动识别目标平台，替换硬编码的平台字符串
4. 工具链初始化：在shellHook中添加rustup安装逻辑，确保目标机器上有正确版本的Rust工具链

内容的提问来源于stack exchange，提问作者Chris O'Brien