hydra-unrestrict-eval.patch

diff --git a/src/hydra-eval-jobs/hydra-eval-jobs.cc b/src/hydra-eval-jobs/hydra-eval-jobs.cc
index dbaa971a..3f57673c 100644
--- a/src/hydra-eval-jobs/hydra-eval-jobs.cc
+++ b/src/hydra-eval-jobs/hydra-eval-jobs.cc
@@ -275,7 +275,7 @@ int main(int argc, char * * argv)
 
                 /* Prevent access to paths outside of the Nix search path and
                    to the environment. */
-                settings.restrictEval = true;
+                settings.restrictEval = false;
 
                 if (releaseExpr == "") throw UsageError("no expression specified");
 

patches.nix

{
  # https://github.com/NixOS/hydra/pull/501#discussion_r171888378
  secureGitHubPatch = fetchurl {
    url = "https://raw.githubusercontent.com/dhall-lang/dhall-lang/9cbfbfedbf7d93894d2d7c9ab0c648b35cd1dcc0/nixops/hydra.patch";
    sha256 = "1g3bsrs0xx7231phjgyna4n4x465ipx7sjd7k9wf8yrwdi7f0k3z";
  };
  # https://github.com/NixOS/hydra/pull/552
  submodulesPatch = fetchurl {
    url = "https://github.com/NixOS/hydra/compare/df27358e11ad09fe3516a4e41d9fe1fd49f911a7...33880503817774e383fee22c09762aa8020af8ab.patch";
    sha256 = "0dx0h9yx1y7hhdw0489anrwfs15zkpkfwjn3lvd6lglmm8z7gyql";
  };
  # https://github.com/NixOS/hydra/issues/537
  # https://github.com/NixOS/nix/issues/1888#issuecomment-370242344
  unrestrictEval = ./hydra-unrestrict-eval.patch;
}