diff --git a/pkgs/development/haskell-modules/configuration-arm.nix b/pkgs/development/haskell-modules/configuration-arm.nix index c124a4e5fc1f..faa5ce5d223d 100644 --- a/pkgs/development/haskell-modules/configuration-arm.nix +++ b/pkgs/development/haskell-modules/configuration-arm.nix @@ -124,3 +124,19 @@ self: super: # android is not currently allowed as 'supported-platforms' by hackage2nix android-activity = unmarkBroken super.android-activity; } +// lib.optionalAttrs (with pkgs.stdenv.hostPlatform; !isDarwin) { + # 2026-01-09: RNG tests that need rng-instruction support fail on NixOS's + # aarch64-linux build infrastructure + botan-low = overrideCabal (drv: { + testFlags = + drv.testFlags or [ ] + ++ (lib.concatMap (x: [ "--skip" ] ++ [ x ]) [ + # botan-low-rng-tests + "/rdrand/rngInit/" + "/rdrand/rngGet/" + "/rdrand/rngReseed/" + "/rdrand/rngReseedFromRNGCtx/" + "/rdrand/rngAddEntropy/" + ]); + }) super.botan-low; +} diff --git a/pkgs/development/haskell-modules/configuration-common.nix b/pkgs/development/haskell-modules/configuration-common.nix index dedbc842ebb3..6a020a153442 100644 --- a/pkgs/development/haskell-modules/configuration-common.nix +++ b/pkgs/development/haskell-modules/configuration-common.nix @@ -3376,146 +3376,6 @@ with haskellLib; stripe-concepts = doJailbreak super.stripe-concepts; stripe-signature = doJailbreak super.stripe-signature; stripe-wreq = doJailbreak super.stripe-wreq; - - # 2025-08-04: Disable failing testcases. It would feel bad to disable all the - # checks in a cryptography related package. - botan-low = overrideCabal (drv: { - testFlags = - drv.testFlags or [ ] - ++ (lib.concatMap (x: [ "--skip" ] ++ [ x ]) [ - # botan-low-cipher-tests - "/AES-128/SIV/can incrementally / online encipher a message/" - "/AES-128/SIV/can incrementally / online decipher a message/" - "/AES-128/SIV/has parity between online and offline/" - "/AES-192/SIV/can incrementally / online encipher a message/" - "/AES-192/SIV/can incrementally / online decipher a message/" - "/AES-192/SIV/has parity between online and offline/" - "/AES-256/SIV/can incrementally / online encipher a message/" - "/AES-256/SIV/can incrementally / online decipher a message/" - "/AES-256/SIV/has parity between online and offline/" - "/ARIA-128/SIV/can incrementally / online encipher a message/" - "/ARIA-128/SIV/can incrementally / online decipher a message/" - "/ARIA-128/SIV/has parity between online and offline/" - "/ARIA-192/SIV/can incrementally / online encipher a message/" - "/ARIA-192/SIV/can incrementally / online decipher a message/" - "/ARIA-192/SIV/has parity between online and offline/" - "/ARIA-256/SIV/can incrementally / online encipher a message/" - "/ARIA-256/SIV/can incrementally / online decipher a message/" - "/ARIA-256/SIV/has parity between online and offline/" - "/Camellia-128/SIV/can incrementally / online encipher a message/" - "/Camellia-128/SIV/can incrementally / online decipher a message/" - "/Camellia-128/SIV/has parity between online and offline/" - "/Camellia-192/SIV/can incrementally / online encipher a message/" - "/Camellia-192/SIV/can incrementally / online decipher a message/" - "/Camellia-192/SIV/has parity between online and offline/" - "/Camellia-256/SIV/can incrementally / online encipher a message/" - "/Camellia-256/SIV/can incrementally / online decipher a message/" - "/Camellia-256/SIV/has parity between online and offline/" - "/Noekeon/SIV/can incrementally / online encipher a message/" - "/Noekeon/SIV/can incrementally / online decipher a message/" - "/Noekeon/SIV/has parity between online and offline/" - "/SEED/SIV/can incrementally / online encipher a message/" - "/SEED/SIV/can incrementally / online decipher a message/" - "/SEED/SIV/has parity between online and offline/" - "/SM4/SIV/can incrementally / online encipher a message/" - "/SM4/SIV/can incrementally / online decipher a message/" - "/SM4/SIV/has parity between online and offline/" - "/Serpent/SIV/can incrementally / online encipher a message/" - "/Serpent/SIV/can incrementally / online decipher a message/" - "/Serpent/SIV/has parity between online and offline/" - "/Twofish/SIV/can incrementally / online encipher a message/" - "/Twofish/SIV/can incrementally / online decipher a message/" - "/Twofish/SIV/has parity between online and offline/" - "/AES-128/CCM/can incrementally / online encipher a message/" - "/AES-128/CCM/can incrementally / online decipher a message/" - "/AES-128/CCM/has parity between online and offline/" - "/AES-192/CCM/can incrementally / online encipher a message/" - "/AES-192/CCM/can incrementally / online decipher a message/" - "/AES-192/CCM/has parity between online and offline/" - "/AES-256/CCM/can incrementally / online encipher a message/" - "/AES-256/CCM/can incrementally / online decipher a message/" - "/AES-256/CCM/has parity between online and offline/" - "/ARIA-128/CCM/can incrementally / online encipher a message/" - "/ARIA-128/CCM/can incrementally / online decipher a message/" - "/ARIA-128/CCM/has parity between online and offline/" - "/ARIA-192/CCM/can incrementally / online encipher a message/" - "/ARIA-192/CCM/can incrementally / online decipher a message/" - "/ARIA-192/CCM/has parity between online and offline/" - "/ARIA-256/CCM/can incrementally / online encipher a message/" - "/ARIA-256/CCM/can incrementally / online decipher a message/" - "/ARIA-256/CCM/has parity between online and offline/" - "/Camellia-128/CCM/can incrementally / online encipher a message/" - "/Camellia-128/CCM/can incrementally / online decipher a message/" - "/Camellia-128/CCM/has parity between online and offline/" - "/Camellia-192/CCM/can incrementally / online encipher a message/" - "/Camellia-192/CCM/can incrementally / online decipher a message/" - "/Camellia-192/CCM/has parity between online and offline/" - "/Camellia-256/CCM/can incrementally / online encipher a message/" - "/Camellia-256/CCM/can incrementally / online decipher a message/" - "/Camellia-256/CCM/has parity between online and offline/" - "/Noekeon/CCM/can incrementally / online encipher a message/" - "/Noekeon/CCM/can incrementally / online decipher a message/" - "/Noekeon/CCM/has parity between online and offline/" - "/SEED/CCM/can incrementally / online encipher a message/" - "/SEED/CCM/can incrementally / online decipher a message/" - "/SEED/CCM/has parity between online and offline/" - "/SM4/CCM/can incrementally / online encipher a message/" - "/SM4/CCM/can incrementally / online decipher a message/" - "/SM4/CCM/has parity between online and offline/" - "/Serpent/CCM/can incrementally / online encipher a message/" - "/Serpent/CCM/can incrementally / online decipher a message/" - "/Serpent/CCM/has parity between online and offline/" - "/Twofish/CCM/can incrementally / online encipher a message/" - "/Twofish/CCM/can incrementally / online decipher a message/" - "/Twofish/CCM/has parity between online and offline/" - # botan-low-mpi-tests - "/can compute the modular inverse/" - # botan-low-pubkey-dsa-tests - "/modp/srp/1024/privKeyLoadDSA/" - "/modp/srp/1024/pubKeyLoadDSA/" - "/modp/srp/1536/privKeyLoadDSA/" - "/modp/srp/1536/pubKeyLoadDSA/" - "/modp/srp/2048/privKeyLoadDSA/" - "/modp/srp/2048/pubKeyLoadDSA/" - "/modp/srp/3072/privKeyLoadDSA/" - "/modp/srp/3072/pubKeyLoadDSA/" - "/modp/srp/4096/privKeyLoadDSA/" - "/modp/srp/4096/pubKeyLoadDSA/" - "/modp/srp/6144/privKeyLoadDSA/" - "/modp/srp/6144/pubKeyLoadDSA/" - "/modp/srp/8192/privKeyLoadDSA/" - "/modp/srp/8192/pubKeyLoadDSA/" - # botan-low-pubkey-decrypt-tests - "/SM2 sm2p256v1 SHA-256/decrypt/" - # botan-low-pubkey-encrypt-tests - "/SM2 sm2p256v1 SHA-256/encrypt/" - # botan-low-pwdhash-tests - "/Scrypt/pwdhashTimed/" - # botan-low-srp6-tests - "/ffdhe/ietf/2048/can negotiate a shared secret/" - "/ffdhe/ietf/3072/can negotiate a shared secret/" - "/ffdhe/ietf/4096/can negotiate a shared secret/" - "/ffdhe/ietf/6144/can negotiate a shared secret/" - "/ffdhe/ietf/8192/can negotiate a shared secret/" - "/modp/ietf/1024/can negotiate a shared secret/" - "/modp/ietf/1536/can negotiate a shared secret/" - "/modp/ietf/2048/can negotiate a shared secret/" - "/modp/ietf/3072/can negotiate a shared secret/" - "/modp/ietf/4096/can negotiate a shared secret/" - "/modp/ietf/6144/can negotiate a shared secret/" - "/modp/ietf/8192/can negotiate a shared secret/" - "/modp/srp/1024/can negotiate a shared secret/" - "/modp/srp/1536/can negotiate a shared secret/" - "/modp/srp/2048/can negotiate a shared secret/" - "/modp/srp/3072/can negotiate a shared secret/" - "/modp/srp/4096/can negotiate a shared secret/" - "/modp/srp/6144/can negotiate a shared secret/" - "/modp/srp/8192/can negotiate a shared secret/" - "/dsa/jce/1024/can negotiate a shared secret/" - "/dsa/botan/2048/can negotiate a shared secret/" - "/dsa/botan/3072/can negotiate a shared secret/" - ]); - }) super.botan-low; } // import ./configuration-tensorflow.nix { inherit pkgs haskellLib; } self super diff --git a/pkgs/development/haskell-modules/configuration-darwin.nix b/pkgs/development/haskell-modules/configuration-darwin.nix index ebf85f05fc22..0c6c30554097 100644 --- a/pkgs/development/haskell-modules/configuration-darwin.nix +++ b/pkgs/development/haskell-modules/configuration-darwin.nix @@ -356,20 +356,6 @@ self: super: network = super.network.overrideAttrs (drv: { __darwinAllowLocalNetworking = true; }); - - # 2025-08-04: Some RNG tests fail only on Darwin - botan-low = overrideCabal (drv: { - testFlags = - drv.testFlags or [ ] - ++ (lib.concatMap (x: [ "--skip" ] ++ [ x ]) [ - # botan-low-rng-tests - "/rdrand/rngInit/" - "/rdrand/rngGet/" - "/rdrand/rngReseed/" - "/rdrand/rngReseedFromRNGCtx/" - "/rdrand/rngAddEntropy/" - ]); - }) super.botan-low; } // lib.optionalAttrs pkgs.stdenv.hostPlatform.isAarch64 { # aarch64-darwin