| 21 Sep 2025 |
 emily | because we throw away the bindists, right? | 14:53:12 |
| emily | so we don't really care what they contain | 14:53:17 |
| emily | ah they are specifically trying to clear the XProtect thing | 14:54:05 |
| emily | basically if you download something in a browser and extract it, it gets com.apple.provenance all over it | 14:54:35 |
| emily | which is used to determine whether to check notarization etc. on startup and cause prompts / failures for unsigned stuff | 14:55:01 |
| emily | so if you download ghc.tar.gz in a browser, unpack it, and try to install, it won't run OOTB | 14:55:15 |
| emily | this is not really relevant for the Nix case | 14:55:23 |
 sterni | alexfmpe: https://github.com/nixos/nixpkgs/blob/e7f97488c1800dd9ee4316cc1021b751c05ab8f2/pkgs/development/haskell-modules/configuration-ghcjs-9.x.nix?plain=1#L34 i think this should be resolved with 9.12?! | 20:00:28 |
| sterni | emily: https://github.com/NixOS/nixpkgs/pull/413450#issuecomment-2941845343 | 20:04:18 |
 alexfmpe | huh probably yeah | 20:05:41 |
| emily | right. I think it is still irrelevant/useless for the source builds though | 20:06:42 |
| emily | because all it can do is strip or fail to strip things that Nix will strip or fail to strip anyway | 20:07:02 |
| emily | in the case on that PR, xattr(1) was dutifully reporting that it failed to strip com.apple.provenance I suppose, and the installation procedure was unhappy | 20:07:21 |
| 22 Sep 2025 |
 Wolfgang Walther | sterni should we cherry-pick all the fixes we're not making to staging-next into haskell-updates? | 11:44:41 |
