| 16 Nov 2025 |
 WeetHet | Realistically we should probably make bootstrap work with sandbox = true at one point | 19:57:03 |
| WeetHet | I would really like if hydra was running with sandbox = true | 19:57:14 |
 samasaur | oh yeah i def agree | 19:57:23 |
| samasaur | unfortunately there are many goals like that and only so much time | 19:57:36 |
| WeetHet | 26.05 maybe? | 19:57:44 |
| WeetHet | I mean this is kinda fundamental | 19:57:52 |
| WeetHet | Maybe we can even add a way to wrap packages to run in their own sandboxes so we can deliver pre-sandboxed executables | 20:01:03 |
| WeetHet | Why am I building fish... | 20:04:07 |
| WeetHet | You know what, I'll pass on updating nixpkgs rn let's wait a bit for this stuff to be fixed | 20:04:26 |
| samasaur | yeah fish is broken rn | 20:24:28 |
| samasaur | keeping me from updating as well :( | 20:24:35 |
| samasaur | and it's some transitive issues from python not resolving argv0? i believe it was posted in this room | 20:25:10 |
 Randy Eckenrode | My PR only addressed the link-local issue. I didn’t look at other issues. The question I’d have is if there’s anything unusual about the DNS config. It’s also possible using private APIs to get the system’s DNS server needs a sandbox exemption. | 20:42:37 |
| Randy Eckenrode | c-ares uses private APIs because iOS doesn’t have /etc/resolv.conf, and they want to use the same code path on both platforms. How that gets past App Store review, I have no idea. | 20:44:35 |
| WeetHet | I'm not using anything different from the default macOS DNS settings | 20:44:38 |
| WeetHet | And it worked before on unstable | 20:44:52 |
| WeetHet | And if I rollback to the 25.11pre889916.ffcdcf99d65c it works fine | 20:45:17 |
| Randy Eckenrode | It’s almost certainly https://github.com/NixOS/nixpkgs/pull/451579. | 20:45:42 |
| WeetHet | Damn. Any ideas on why and how to fix this? | 20:47:39 |
| Randy Eckenrode | Not sure. Is there a way to log sandbox failures on Darwin? | 21:14:56 |
| Randy Eckenrode | It appears the coreutils and gnugrep issues building on macOS 26 haven’t been worked around …. | 21:15:15 |
| Randy Eckenrode | Hmm. I think I forgot to update the libc++ version when I bumped the SDK to 15.5. | 21:28:46 |
| Randy Eckenrode | Or is 19.1.2 right? | 21:28:57 |
| samasaur | how would you check? | 21:38:39 |
| Randy Eckenrode | Build darwin.libcxx^dev and check the version header. | 21:44:15 |
| samasaur | that's the version it's set to in nixpkgs, right? how do you know the correct version? | 21:46:03 |
| Randy Eckenrode | It’s in the header. The version in the derivation has to be set manually based on that. Actually, it should be using the 26.x SDK now. | 21:47:41 |
| Randy Eckenrode | Probably a post 25.11 thing since libc++ updates can be annoyingly breaking at times. | 21:48:11 |
| samasaur | okay cool i think i am understanding now | 22:00:08 |
| samasaur | in that case 15.5 is correct to remain on 19.1.2 and 26.0 should be 20.1.0 | 22:00:30 |
