In reply to @andi:kack.it
hah, my system is similar :D I have an overlay that pulls in all haskell related stuff from the x86_64-darwin equivalent as otherwise pandoc etc.. would not work.

      # nested sandboxing doesn't seem to work so lets disable the feature in the build
      lowdown = super.lowdown.overrideAttrs (_: {
        postConfigure = ''
          for file in *.c; do
                  sed -e s/HAVE_SANDBOX/HAVE_NO_SANDBOX_SHIT/g -i $file
          done
        '';
      });

In reply to @sternenseemann:systemli.org
also you could always downgrade to nix stable :p

In reply to @andi:kack.it

      # nested sandboxing doesn't seem to work so lets disable the feature in the build
      lowdown = super.lowdown.overrideAttrs (_: {
        postConfigure = ''
          for file in *.c; do
                  sed -e s/HAVE_SANDBOX/HAVE_NO_SANDBOX_SHIT/g -i $file
          done
        '';
      });

In reply to @andi:kack.it
I'd happily PR against nixpkgs but not against Nix. Those times are past..

In reply to @sternenseemann:systemli.org
aarch64-darwin builds are sandboxed?!

In reply to @kloenk:petabyte.dev
I think lowdown create a sandbox in an own way somehow

In reply to @sternenseemann:systemli.org
…that doesn't work on aarch64-darwin, but on x86_64-darwin?

In reply to @andi:kack.it
@sterni: Do we have a way to detect that without hardcoding yet another llvm version lookup everywhere?