Merge master into haskell-updates

# buildFHSUserEnv {#sec-fhs-environments}

# buildFHSEnv {#sec-fhs-environments}

`buildFHSUserEnv` provides a way to build and run FHS-compatible lightweight sandboxes. It creates an isolated root with bound `/nix/store`, so its footprint in terms of disk space needed is quite small. This allows one to run software which is hard or unfeasible to patch for NixOS -- 3rd-party source trees with FHS assumptions, games distributed as tarballs, software with integrity checking and/or external self-updated binaries. It uses Linux namespaces feature to create temporary lightweight environments which are destroyed after all child processes exit, without root user rights requirement. Accepted arguments are:

`buildFHSEnv` provides a way to build and run FHS-compatible lightweight sandboxes. It creates an isolated root with bound `/nix/store`, so its footprint in terms of disk space needed is quite small. This allows one to run software which is hard or unfeasible to patch for NixOS -- 3rd-party source trees with FHS assumptions, games distributed as tarballs, software with integrity checking and/or external self-updated binaries. It uses Linux namespaces feature to create temporary lightweight environments which are destroyed after all child processes exit, without root user rights requirement. Accepted arguments are:

- `name`

        Environment name.

```nix

{ pkgs ? import <nixpkgs> {} }:

(pkgs.buildFHSUserEnv {

(pkgs.buildFHSEnv {

  name = "simple-x11-env";

  targetPkgs = pkgs: (with pkgs;

    [ udev

    githubId = 3696783;

    name = "Leroy Hopson";

  };

  lillycham = {

    email = "lillycat332@gmail.com";

    github = "lillycat332";

    githubId = 54189319;

    name = "Lilly Cham";

  };

  lilyball = {

    email = "lily@sb.org";

    github = "lilyball";

    githubId = 14829269;

    name = "Ram Kromberg";

  };

  rampoina = {

    email = "rampoina@protonmail.com";

    matrix = "@rampoina:matrix.org";

    github = "Rampoina";

    githubId = 5653911;

    name = "Rampoina";

  };

  ranfdev = {

    email = "ranfdev@gmail.com";

    name = "Lorenzo Miglietta";

Then instead of running the AppImage "as-is", run `appimage-run foo.appimage`.

To make other pre-built executables work on NixOS, you need to package them

with Nix and special helpers like `autoPatchelfHook` or `buildFHSUserEnv`. See

with Nix and special helpers like `autoPatchelfHook` or `buildFHSEnv`. See

the [Nixpkgs manual](https://nixos.org/nixpkgs/manual) for details. This

is complex and often doing a source build is easier.

- The `bind` module now allows the per-zone `allow-query` setting to be configured (previously it was hard-coded to `any`; it still defaults to `any` to retain compatibility).

- `make-disk-image` handles `contents` arguments that are directories better, fixing a bug where it used to put them in a subdirectory of the intended `target`.

## Detailed migration information {#sec-release-23.05-migration}

### Pipewire configuration overrides {#sec-release-23.05-migration-pipewire}

        done

      else

        mkdir -p $root/$(dirname $target)

        if ! [ -e $root/$target ]; then

          rsync $rsync_flags $source $root/$target

        else

        if [ -e $root/$target ]; then

          echo "duplicate entry $target -> $source"

          exit 1

        elif [ -d $source ]; then

          # Append a slash to the end of source to get rsync to copy the

          # directory _to_ the target instead of _inside_ the target.

          # (See `man rsync`'s note on a trailing slash.)

          rsync $rsync_flags $source/ $root/$target

        else

          rsync $rsync_flags $source $root/$target

        fi

      fi

    done