| 8 Apr 2026 |
 ankarhem | anyone had issues with fish shell lately? Cannot enter fish after rebuilding. I think it’s the same as this: https://github.com/NixOS/nixpkgs/issues/507531 | 10:58:17 |
 Randy Eckenrode | Maybe related? https://github.com/NixOS/nixpkgs/issues/208951#issuecomment-4195559375 | 10:59:34 |
| Randy Eckenrode | https://github.com/NixOS/nix/issues/6065#issuecomment-4203079922 | 11:00:04 |
 emily | this seems confused. since nix-build --check clobbers signatures by itself. | 11:06:59 |
| ankarhem | Idk I know nothing about this but maybe?
ankarhem@mbp:~/ > codesign -vvv --verify $(which fish)
/etc/profiles/per-user/ankarhem/bin/fish: invalid signature (code or signature have been modified)
In architecture: arm64
| 11:07:40 |
| emily | and then the fix is a dreadful layering violation that probably has nothing to do with the fish thing. | 11:07:40 |
| emily | if it "fixes" the transient Hydra code signing issues then it's just going to fix them because rebuilds usually fix them | 11:08:11 |
| emily | left a comment on the PR for Claude to read 🙃 | 11:13:06 |
| ankarhem | So should i just disable fish -> clean store -> rebuild until it works? | 11:19:03 |
| emily | nah, you'll pick up the broken build from Hydra :/ | 11:28:25 |
| emily | what will probably work is making a trivial change to fish in Nixpkgs | 11:28:37 |
| emily | like adding an unused environment variable to force a rebuild | 11:28:49 |
| emily | it'll also get fixed by the upcoming staging cycle | 11:28:57 |
| emily | this can also be done as a local override | 11:29:08 |
| emily | we really need to fix that code signing bug but it's deeply mysterious :/ | 11:29:20 |
| Randy Eckenrode | I sudo codesign the broken binaries in the store and go about my business. 🫠 | 11:30:43 |
| ankarhem | Thanks for the help 👍 | 11:34:24 |
 viraptor | Has anyone gone through bootstrap successfully recently? I've got a really weird failure where ld64/objcimageinfo gets built and then... It's not there to install 😭 https://gist.github.com/viraptor/9d54036ed43fe23e80ff6966a204d7df | 16:26:43 |
| viraptor | Are there any samples uploaded? I've seen people running into this but no details. | 16:27:39 |
| Randy Eckenrode | I do this weekly. | 16:33:47 |
| Randy Eckenrode | That’s a weird error because the objcimageinfo binary is clearly linked earlier in the build process. | 16:35:28 |
| viraptor | Ok... I guess I'll rebase on latest and try again tomorrow before I start digging. | 16:37:09 |
| viraptor | Nope, same issue on master. | 16:47:46 |
| Randy Eckenrode | Do you happen to have running any kind of end point protection software? I once had that happen where it would delete files from the store, which would break things. | 23:47:58 |
| viraptor | Funny you mentioned it - I JUST got pinged by our security people. Crowdstrike messed it up 🤦♂️ | 23:57:38 |
| 9 Apr 2026 |
| emily | I believe Zhaofeng Li had a reproduction setup that you might be able to find if you search the history of this channel | 00:00:37 |
| emily | otherwise there are various store paths in the cache that exhibit it | 00:00:43 |
| emily | the bad outputs are just the same as the good outputs but with a different code signature though | 00:00:58 |
| Randy Eckenrode | I’ve got the source releases refactored out of the SDK and (most of) the source release packages building with updated (macOS 15.6) headers. I’ll split this up tonight into separate PRs, so the refactor can go against master (no rebuilds) and the update against staging. Going forward, the source releases will use all the same versions of things, and probably build against the latest SDK instead of the default. The Clang availability thing seems to work well. | 11:29:01 |
| viraptor | Ok, I've got a draft PR which I can't fully test due to some security software. Does anyone feel like rebuilding the bootstrap? https://github.com/NixOS/nixpkgs/pull/508307 To test if it worked properly, you can try building https://github.com/NixOS/nixpkgs/pull/500850 rebased on top of it. | 12:19:19 |
