> I think there is a misunderstanding, the hash of the package
> derivation depends on the build output.
the $out hash for a given package is computed over the build command
that generates that store path. Build inputs required for the process
play into that hash because the build script is going to mention their
store paths somewhere (i.e. when setting up $PATH, etc.), but the
*contents* of any of those store paths don't affect the hash.
Unless, of course, when we're talking about fixed output derivations
like 'fetchurl', but these are somewhat special and suitable mostly for
downloading source code, not so much for building things.
nix-dev mailing list