chore(nix): switch to standard nix pin

+ iohk nix was too slow in ci without caching

Author: rasheedja

.github/workflows/haskell-nix.yml

@@ -1,4 +1,4 @@
-name: Haskell CI with Nix
+name: Nix CI
 
 on:
   push:
@@ -10,8 +10,6 @@ permissions:
 jobs:
   nix-ci:
     runs-on: ubuntu-latest
-    env:
-      NIX_CONFIG: accept-flake-config = true
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -25,34 +23,11 @@ jobs:
       - name: Enable Nix cache
         uses: DeterminateSystems/magic-nix-cache-action@565684385bcd71bad329742eefe8d12f2e765b39 # v13
 
-      - name: Show toolchain versions from nix shell
-        shell: bash
+      - name: Build and test
         run: |
-          nix develop --command bash -lc 'ghc --numeric-version'
-          nix develop --command bash -lc 'cabal --numeric-version'
-          nix develop --command bash -lc 'stack --numeric-version || true'
-          nix develop --command bash -lc 'fourmolu --version'
-
-      - name: Check formatting
-        run: nix develop --command make format-check
-
-      - name: Check cabal file
-        run: nix develop --command make cabal-check
-
-      - name: Update cabal package index
-        run: nix develop --command make cabal-update
-
-      - name: Configure the build
-        run: nix develop --command make configure
-
-      - name: Build dependencies
-        run: nix develop --command make deps
-
-      - name: Build the package
-        run: nix develop --command make build
-
-      - name: Run tests
-        run: nix develop --command make test
-
-      - name: Build documentation
-        run: nix develop --command make docs
+          nix develop --command bash -c '
+            # hsc2hs-generated test binaries crash in nix shells on Linux
+            # ("stack smashing detected") due to hardening flags.
+            # --cross-compile avoids running those binaries entirely.
+            CABAL_CONFIGURE_FLAGS="--hsc2hs-option=--cross-compile" make ci
+          '

.github/workflows/update-flake.yml

@@ -13,8 +13,6 @@ permissions:
 jobs:
   update-flake:
     runs-on: ubuntu-latest
-    env:
-      NIX_CONFIG: accept-flake-config = true
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

Makefile

@@ -20,7 +20,7 @@ cabal-update:
 
 .PHONY: configure
 configure:
-	cabal configure --enable-tests --enable-benchmarks --disable-documentation
+	cabal configure --enable-tests --enable-benchmarks --disable-documentation $(CABAL_CONFIGURE_FLAGS)
 	cabal build --dry-run
 
 .PHONY: deps