From f25e47cdeb61cfb7c4f1187aafd33add6d1c31a4 Mon Sep 17 00:00:00 2001
From: Mike O'Driscoll <mikeo@tailscale.com>
Date: Wed, 8 Oct 2025 10:01:25 -0400
Subject: [PATCH] flake.nix: use tailscale go fork (#17486)

Move our nix flake to use Tailscale's go toolchain instead
of upstream go.

Fixes #17494

Signed-off-by: Mike O'Driscoll <mikeo@tailscale.com>
---
 flake.nix | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/flake.nix b/flake.nix
index e8ef03853..7b97c8a13 100644
--- a/flake.nix
+++ b/flake.nix
@@ -46,8 +46,9 @@
     systems,
     flake-compat,
   }: let
-    go125Version = "1.25.1";
-    goHash = "sha256-0BDBCc7pTYDv5oHqtGvepJGskGv0ZYPDLp8NuwvRpZQ=";
+    goVersion = "1.25.1";
+    toolChainRev = nixpkgs.lib.fileContents ./go.toolchain.rev;
+    gitHash = "sha256-1OCmJ7sZL6G/6wO2+lnW4uYPCIdbXhscD5qSTIPoxDk=";
     eachSystem = f:
       nixpkgs.lib.genAttrs (import systems) (system:
         f (import nixpkgs {
@@ -55,10 +56,12 @@
           overlays = [
             (final: prev: {
               go_1_25 = prev.go_1_25.overrideAttrs {
-                version = go125Version;
-                src = prev.fetchurl {
-                  url = "https://go.dev/dl/go${go125Version}.src.tar.gz";
-                  hash = goHash;
+                version = goVersion;
+                src = prev.fetchFromGitHub {
+                  owner = "tailscale";
+                  repo = "go";
+                  rev = toolChainRev;
+                  hash = gitHash;
                 };
               };
             })