| 26 May 2021 |
 Finn Behrens | I would like to not use nix-env, but nix profile. Will try around a bit, thanks for the starting points | 16:18:02 |
 LnL | same with that, unless you can't pass direct store paths as installables anymore | 16:20:13 |
| Finn Behrens | In reply to @daiderd:matrix.org
same with that, unless you can't pass direct store paths as installables anymore It's a bit more tricky, but last time I checked it worked as well | 16:20:37 |
| Finn Behrens | Worked very well. Now have a dirty nix, and a ssl cert without remounting the store rw :-). | 16:31:19 |
| Finn Behrens | LnL: ++ (we need a bot xD) | 16:31:26 |
 ris_ | is the darwin sandbox enabled on hydra? | 19:23:27 |
 Sandro | Don't think so | 19:23:52 |
| ris_ | that would explain a few things | 19:24:02 |
| LnL | no it's not, nixpkgs still needs some cleanup for that to work properly and I'm aware of at least one thing that's missing in the profile that breaks lots of rust builds | 19:26:56 |
| Sandro | ris_: nixpkgs-review does not turn on the darwin sandbox anymore since https://github.com/Mic92/nixpkgs-review/commit/aa9cc2f5e9199736af5167f8c3f406018b6a14e7 | 19:36:34 |
| ris_ | i've been surprised at how many packages have built for me actually since i switched it on | 19:37:37 |
| LnL | if you're up for it I'd definitively recommend enabling it, means that sandboxing issues get some visibility and you can always --option sandbox false if something's broken that you can't or don't want to fix | 19:39:20 |
 mjlbach | I had to use the latest nix master (not nixUnstable) in order to avoid many sandboxing issues on catalina | 19:39:53 |
| ris_ | completely separate topic - openvpn is failing to build for me on catalina, configure: error: route utility is required but missing - where would i get this from? | 19:46:03 |
| ris_ | clearly hydra is managing to build it, which is fun | 19:46:35 |
| Sandro | In reply to @r_i_s:matrix.org
i've been surprised at how many packages have built for me actually since i switched it on In my experience it works good enough if you are building leaf packages. If you are doing more core work things tend to break | 19:46:38 |
| LnL | unixtools.route would be the generic attribute to use | 19:46:51 |
| LnL | I think this is once of those things that comes from different places depending on the platform | 19:47:28 |
| Finn Behrens | In reply to @daiderd:matrix.org
if you're up for it I'd definitively recommend enabling it, means that sandboxing issues get some visibility and you can always --option sandbox false if something's broken that you can't or don't want to fix Is it just sandbox = true, or do I have something else? | 19:47:38 |
| ris_ | In reply to @daiderd:matrix.org
unixtools.route would be the generic attribute to use of course this gives me Package ‘openssl-1.0.2u’ in ... is marked as insecure, refusing to evaluate. on master | 19:49:06 |
| LnL | I do have these extra things in my config | 19:49:14 |
| LnL | extra-sandbox-paths = /private/tmp /private/var/tmp /usr/bin/env | 19:49:17 |
| LnL | those are a few edgecases that occur more often but could be fixed so they're not in the default sandbox | 19:50:05 |
| Finn Behrens | Will try after my next exam. Still have to learn a bit more about Dylib and stuff though, as I’m from Linux. :-) | 19:51:02 |
| LnL | for older versions of nix you need a few extra paths but I'm pretty sure all of that is released already | 19:51:06 |
| LnL | check if there's /System stuff in nix show-config | grep sandbox | 19:51:22 |
| Finn Behrens | I’m using nix master from a few hours ago xD | 19:51:42 |
| LnL | In reply to @r_i_s:matrix.org
of course this gives me Package ‘openssl-1.0.2u’ in ... is marked as insecure, refusing to evaluate. on master sounds like it's probably coming from darwin.network_cmds then which does indeed not build anymore | 19:52:16 |
| ris_ | pretty sad state of affairs 😿 | 19:52:47 |
| LnL | yeah, the latest release from opensource.apple.com I a while back didn't work with a newer openssl either :/ | 19:54:01 |
