| 1 May 2026 |
 alexfmpe | * can we improve the whole security_tool issue for mac builds?
https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/haskell-modules/configuration-darwin.nix is littered with
dontCheck that, well, makes us not run testssubstituteInPlace System/X509/MacOS.hs --replace-fail security /usr/bin/security that breaks sandbox builds
I also run into it for some packages on darwin pkgsStatic.haskellPackages builds somehow via iserv-proxy
statistics> [33 of 51] Compiling Statistics.Types ( Statistics/Types.hs, dist/build/Statistics/Types.o )
statistics> iserv-proxy: Uncaught exception ghc-internal:GHC.Internal.IO.Exception.IOException:
statistics>
statistics> /homeless-shelter/Library/Frameworks/Security.framework/Security: withBinaryFile: does not exist (No such file or directory)
statistics>
statistics> HasCallStack backtrace:
statistics> ioError, called at libraries/ghc-internal/src/GHC/Internal/Foreign/C/Error.hs:291:5 in ghc-internal:GHC.Internal.Foreign.C.Error
statistics>
statistics> <no location info>: error: External interpreter terminated (1)
| 16:45:47 |
| alexfmpe | huh, wait, maybe that's not the same "security" ? hard to tell with case insensitive system | 16:47:08 |
| 2 May 2026 |
 sterni (he/him) | In reply to @alexfmpe:matrix.org
can we improve the whole security_tool issue for mac builds?
https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/haskell-modules/configuration-darwin.nix is littered with
dontCheck that, well, makes us not run testssubstituteInPlace System/X509/MacOS.hs --replace-fail security /usr/bin/security that breaks sandbox builds
I also run into it for some packages on darwin pkgsStatic builds somehow due to the iserv-proxy thing
statistics> [33 of 51] Compiling Statistics.Types ( Statistics/Types.hs, dist/build/Statistics/Types.o )
statistics> iserv-proxy: Uncaught exception ghc-internal:GHC.Internal.IO.Exception.IOException:
statistics>
statistics> /homeless-shelter/Library/Frameworks/Security.framework/Security: withBinaryFile: does not exist (No such file or directory)
statistics>
statistics> HasCallStack backtrace:
statistics> ioError, called at libraries/ghc-internal/src/GHC/Internal/Foreign/C/Error.hs:291:5 in ghc-internal:GHC.Internal.Foreign.C.Error
statistics>
statistics> <no location info>: error: External interpreter terminated (1)
that looks like the internal linker trying to load the Security framework, but I don’t think that’s available as a static archive, so won’t work at all in pkgsStatic?! | 07:30:00 |
 tks_123 | Hi all | 16:39:50 |
| tks_123 | Redacted or Malformed Event | 16:40:28 |
| tks_123 | I have this flake.nix: https://pastebox.io/api/paste/3WT3DwMK6KZz | 16:41:56 |
| tks_123 | After doing "nix develop" from top-level dir (same dir as flake.nix dir), I can successfully "cd" into each of the subdirectories, to run "cabal build" on those two individual Haskell projects. | 16:42:58 |
| tks_123 | * After doing "nix develop" from top-level dir (same dir as flake.nix dir), I can - if the second project doesn't try to depend on the first project - successfully "cd" into each of the subdirectories, to run "cabal build" on those two individual Haskell projects. | 16:43:36 |
| tks_123 | However, if I add "my-haskell-library" (the first project) into the build-depends of the second project, doing "cabal build" on the second project fails, complaining that "my-haskell-library" is not found. | 16:44:27 |
| tks_123 | What am I doing wrong? | 16:44:29 |
| tks_123 | * However, if I add "my-haskell-library" (the first project) into the build-depends of the second project ("my-haskell-executable"), doing "cabal build" on the second project ("my-haskell-executable") fails, complaining that "my-haskell-library" is not found. | 16:45:03 |
| tks_123 | Hmm after putting this into cabal.project of the second project
packages:
.
../my-haskell-library
everything seems to work. | 16:55:44 |
| tks_123 | Why? | 16:55:49 |
| tks_123 | I thought... the haskellPkgs in Nix was supposed to tell cabal about all known Haskell packages? | 16:56:16 |
| tks_123 | So why was a cabal.project needed to make this work? | 16:56:23 |
 ijouw | I would assume you need two flakes if you want to package them individually, but i am neither very proficient in flakes nor nix so i might be mistaken. | 17:54:03 |
| alexfmpe | I think shellFor won't add `packages` to `ghc-pkg list` since you're asking for a shell for iterating on them | 19:18:29 |
| alexfmpe | So you need cabal.project to tell cabal about the other project | 19:18:56 |
| alexfmpe | You could also just have the library and the executable in the same package and not worry about this | 19:19:35 |
| 3 May 2026 |
 maralorn | Also if nix would compile your library and provide it to the other package it would be that snapshot and not live. | 07:17:57 |
| tks_123 | Great insights, thank you | 07:18:57 |
| tks_123 | So technically cabal.project is "orthogonal" (unrelated, separate) concept entirely from what packages haskellPkgs will end up available for Haskell? | 07:20:07 |
| tks_123 | I'm not sure where I got the idea those were somehow related | 07:20:28 |
|  andremesquitap joined the room. | 22:52:58 |
| 4 May 2026 |
 srk ⚡️ | what's the deal with staging being stuck in staging for weeks? branchoff? | 05:25:51 |
| srk ⚡️ | ye https://github.com/NixOS/nixpkgs/issues/503391 | 05:28:52 |
|  innocentzer0 joined the room. | 12:44:17 |
| 5 May 2026 |
|  Sand Witch changed their profile picture. | 18:28:45 |
| innocentzer0 set a profile picture. | 20:34:46 |
| alexfmpe | huh, our friends down the aisle seem to be doing just this | 21:06:43 |
