Wrappers won't build with unfree packages, even when the provided pkgs has config.allowUnfree = true.

[SkettiSouls]

I'm trying to include discord in my niri wrapper, as I want discord to open on startup. This results in the following error:

error: Refusing to evaluate package 'discord-0.0.134' in /nix/store/l61vfkyy0qrnz9bmgx84fa7z3bjzhyp4-source/pkgs/applications/networking/instant-messengers/discord/default.nix:70 because it has an unfree license (‘unfree’)

I'm using withSystem from flake-parts to pass pkgs using perSystem, which I configured like so:

  perSystem = { pkgs, system, inputs', ... }: {
    _module.args.pkgs = (import inputs.nixpkgs {
      inherit system;
      config.allowUnfree = true;
      overlays = [
        (final: prev: {
          unstable = inputs'.nixpkgs-unstable.legacyPackages;
        })
      ];
    });

Using pkgs.unstable does work, so I'm unsure why I'm still getting unfree errors. Is there something I'm missing?

[SkettiSouls]

Upon further testing, I have found that permittedInsecurePackages also works properly, and the wrapper evaluates properly if I get pkgs from config.flake.nixosConfigurations.<machine>.pkgs.

I checked the config of pkgs from both nixosConfigurations and withSystem and found no difference. Maybe this is a bug in withSystem somehow? I'm at a loss honestly.

[SkettiSouls]

Solved. Since I'm using withSystem, the unstable overlay has its own config that needs to allow unfree packages. nixosConfigurations applies nixpkgs.config.allowUnfree to overlaid package sets, so I didn't even think of overlays having different configs until just now 😅.