build/nix: Missing voice dependencies such as libwebrtc

Open 💬 6 comments Opened Apr 13, 2026 by lostmsu

💡 Likely answer: A maintainer (Philipp-M, contributor) responded on this thread — see the highlighted reply below.

What version of Codex CLI is running?

0.120.0

What subscription do you have?

Plus

Which model were you using?

_No response_

What platform is your computer?

Linux 6.18.21 x86_64 unknown

What terminal emulator and version are you using (if applicable)?

_No response_

What issue are you seeing?

error: No hash was found while vendoring the git dependency libwebrtc-0.3.26. You can add
a hash through the outputHashes argument of importCargoLock:

outputHashes = {
"libwebrtc-0.3.26" = "<hash>";
};

What steps can reproduce the bug?

nix --extra-experimental-features "nix-command flakes" run github:openai/codex/rust-v0.120.0#codex-rs

What is the expected behavior?

Should build and run

Additional information

_No response_

View original on GitHub ↗

6 Comments

ithinuel · 3 months ago

For what it’s worth, v0.119.0 is also affected but v0.118.0 is not.

Introduced in https://github.com/openai/codex/pull/17058

IIUC, because https://github.com/openai/codex/pull/17058/changes#diff-f9ce4d85a9da414b5c5356effc39e1ec46faf50eaece5174b8cb689546a61a2aR16 is there using git rather than crates.io, its hash needs to be added to this set: https://github.com/openai/codex/blob/2f6fc7c137bfa1b607b97bd932370022bea198eb/codex-rs/default.nix#L40

Philipp-M contributor · 3 months ago

For some reason, it's not possible for outside contributors to create PRs to fix this.

I've fixed it in: https://github.com/openai/codex/compare/main...Philipp-M:fix-nix-build?expand=1

Would be nice if we can upstream this.
And even better would be if the nix build can be enforced in the CI, because it happens rather often that nix build is breaking (and external contributors don't seem to have the permission to fix this...).

chandler-barlow · 2 months ago

bump on this

ithinuel · 2 months ago

For what it's worth I switched to numtide's llm-agents flake which has the necessary fixes.

IkeLyons · 1 month ago

+1 on CI should enforce nix build. Tried using this today on NixOS 25.11 + commit 51fc4b0 and the issue still exists...

Only takes nix build github:openai/codex to reproduce No hash was found while vendoring the git dependency libwebrtc-0.3.26. Or would also be great if the community had the ability to fix this ourselves

alsi-lawr · 10 days ago

I reproduced this on current main while consuming the Codex flake from Nix.

The missing hash is for the git dependency from codex-rs/Cargo.lock:

name = "libwebrtc"
version = "0.3.26"
source = "git+https://github.com/juberti-oai/rust-sdks.git?rev=e2d1d1d230c6fc9df171ccb181423f957bb3c1f0#e2d1d1d230c6fc9df171ccb181423f957bb3c1f0"

Using Nix's fake-hash workflow, the required output hash is:

"libwebrtc-0.3.26" = "sha256-0HPuwaGcqpuG+Pp6z79bCuDu/DyE858VZSYr3DKZD9o=";

While testing current main, Nix also exposed two stale existing git dependency hashes in codex-rs/default.nix:

"tokio-tungstenite-0.28.0" = "sha256-V1xmnrfRWOcZZogelZEA4vvyMj2awCfHVA5/glQ6KAI=";
"tungstenite-0.27.0" = "sha256-VVHhk7l9J/sEmG3q/UuV/sQ3f+fGsmq5vumSy8vbMvw=";

With those three hash changes, nix build .#default --no-link --print-out-paths gets past Cargo vendoring. It then fails later because the current flake toolchain provides rustc 1.93.0, while sqlx 0.9.0 requires rustc 1.94.0; that appears to be a separate Nix build issue.

I pushed a draft-fix branch here, but my current GitHub token cannot open the cross-repo PR from this environment:

https://github.com/alsi-lawr/codex/tree/codex/fix-cargo-output-hashes