| 19 Nov 2025 |
WeetHet | The other option still is
# Prevent SSL libraries from using certificates in /etc/ssl, unless set explicitly.
# Leave it in impure shells for convenience.
if [[ -z "${NIX_SSL_CERT_FILE:-}" && "${IN_NIX_SHELL:-}" != "impure" ]]; then
export NIX_SSL_CERT_FILE=/no-cert-file.crt
fi
# Another variant left for compatibility.
if [[ -z "${SSL_CERT_FILE:-}" && "${IN_NIX_SHELL:-}" != "impure" ]]; then
export SSL_CERT_FILE=$NIX_SSL_CERT_FILE
fi
| 11:00:46 |
WeetHet | Which is still better than the current one | 11:00:55 |
toonn | For FODs I agree, if the hash matches there's no purity problem. But that shell excerpt has nothing to do with FODs, no? | 11:31:28 |
Randy Eckenrode | How would that break using Keychain? Do some libraries not try to use it if you set SSL_CERT_FILE? | 11:34:06 |
Randy Eckenrode | (Even if it doesn’t exist.) | 11:35:09 |
WeetHet | As far as I can tell this just uses the bundle of the variable is set | 11:35:19 |
WeetHet | Given that unseting it fixes there run | 11:35:50 |
WeetHet | * | 11:35:59 |
WeetHet | * | 11:41:35 |
WeetHet | * | 11:41:52 |
thblt | darwin-rebuild fails with "error: permission denied when trying to update apps, aborting activation. home-manager requires permission to update your apps, please accept the notification
and grant the permission for your terminal emulator in System Settings.
If you did not get a notification, you can navigate to System Settings > Privacy & Security > App Management.".
I didn’t get a notification so I tried adding both wezterm and terminal to "app management", but as soon as I restart the darwin-rebuild they get removed from the list | 16:04:58 |
thblt | Found the issue https://github.com/nix-community/home-manager/issues/8174 | 16:10:30 |
samasaur | yeah it seems like a 26.1–specific bug that only affects home-manager and not nix-darwin, which implies that sudo avoids the issue | 16:18:26 |
samasaur | did removing the directory work for you? | 16:18:34 |
samasaur | also are you actually in 26.1 or is this wider-spread than I thought | 16:18:48 |
samasaur | * also are you actually on 26.1 or is this wider-spread than I thought | 16:18:54 |
Randy Eckenrode |
/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/build/src/compiler/clc/mesa_clc -o src/kosmickrisp/vulkan/kkcl.spv --depfile src/kosmickrisp/vulkan/libkk_shaders.h.d ../src/kosmickrisp/vulkan/cl/kk_query.cl ../src/kosmickrisp/vulkan/cl/kk_triangle_fan.cl -- -I/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/src/compiler/libcl -I/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/src/kosmickrisp/vulkan/. -I/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/src -fmacro-prefix-map=../= -fmacro-prefix-map=/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/= -fmacro-prefix-map=/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/build/= -cl-std=cl2.0 -D__OPENCL_VERSION__=200 -DHAVE___BUILTIN_FFS -DHAVE___BUILTIN_CLZ
LLVM ERROR: Option 'greedy' already exists!
| 18:43:18 |
Randy Eckenrode | * /private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/build/src/compiler/clc/mesa_clc -o src/kosmickrisp/vulkan/kkcl.spv --depfile src/kosmickrisp/vulkan/libkk_shaders.h.d ../src/kosmickrisp/vulkan/cl/kk_query.cl ../src/kosmickrisp/vulkan/cl/kk_triangle_fan.cl -- -I/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/src/compiler/libcl -I/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/src/kosmickrisp/vulkan/. -I/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/src -fmacro-prefix-map=../= -fmacro-prefix-map=/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/= -fmacro-prefix-map=/private/var/folders/yf/1c0ncp6s14n1sb_87_640lsm0000gn/T/nix-shell.WPcGoT/source/build/= -cl-std=cl2.0 -D__OPENCL_VERSION__=200 -DHAVE___BUILTIN_FFS -DHAVE___BUILTIN_CLZ
LLVM ERROR: Option 'greedy' already exists!
| 18:43:27 |
Randy Eckenrode | So is Debug LLVM just different from regular LLVM? That is so annoying. | 18:43:38 |
Lun | that tracks, remember there being a lot release builds didn't check so if a project doesn't run with debug llvm during their dev you can't use debug llvm to find issues because it'll be full of failing asserts | 18:45:13 |
Lun | had some trouble playing with https://sr.ht/~duangle/scopes/ a few years back because they only ever used it against no assertion llvm builds and it was doing all sorts of invalid things | 18:45:42 |
Randy Eckenrode | If I build against release LLVM, mesa_clc crashes instead. | 18:55:43 |
Lun | RelWithDebug LLVM and a debugger might be a better starting point with things like https://github.com/llvm/llvm-project/issues/71174 lying around to hit in debug builds | 19:06:10 |
Lun | * relwithdebinfo LLVM and a debugger might be a better starting point with things like https://github.com/llvm/llvm-project/issues/71174 lying around to hit in debug builds | 19:06:20 |
Lun | actually that error sounds familiar from fuckups with multiple different llvm versions linked into the same process | 19:08:23 |
Randy Eckenrode | I got overrideScope working correctly, so everything should have a consistent LLVM. | 19:10:30 |
Lun | iirc rocMLIR + rocm-comgr in the same process would trigger LLVM ERROR: Option 'default' already exists! followed by an abort if the llvm versions they linked against weren't matching | 19:10:35 |
Randy Eckenrode | mesa_clc links against SPIRV-LLVM-Translator, which is linked against the debug build of libLLVM.dylib. | 19:11:50 |
| captain_love joined the room. | 19:14:23 |
Randy Eckenrode | Redacted or Malformed Event | 20:23:19 |