# nested sandboxing doesn't seem to work so lets disable the feature in the build
      lowdown = super.lowdown.overrideAttrs (_: {
        postConfigure = ''
          for file in *.c; do
                  sed -e s/HAVE_SANDBOX/HAVE_NO_SANDBOX_SHIT/g -i $file
          done
        '';
      });

In reply to @sternenseemann:systemli.org
also you could always downgrade to nix stable :p

In reply to @andi:kack.it

      # nested sandboxing doesn't seem to work so lets disable the feature in the build
      lowdown = super.lowdown.overrideAttrs (_: {
        postConfigure = ''
          for file in *.c; do
                  sed -e s/HAVE_SANDBOX/HAVE_NO_SANDBOX_SHIT/g -i $file
          done
        '';
      });

In reply to @andi:kack.it
I'd happily PR against nixpkgs but not against Nix. Those times are past..

In reply to @sternenseemann:systemli.org
aarch64-darwin builds are sandboxed?!

In reply to @kloenk:petabyte.dev
I think lowdown create a sandbox in an own way somehow

In reply to @sternenseemann:systemli.org
…that doesn't work on aarch64-darwin, but on x86_64-darwin?

In reply to @andi:kack.it
@sterni: Do we have a way to detect that without hardcoding yet another llvm version lookup everywhere?

In reply to @kloenk:petabyte.dev
nice, just have to get it into nix, as the use an own version of lowdown :-)

Sadly still seeing this:

    GEN    doc/manual/nix-build.1
  lowdown: sandbox_init: Operation not permitted
  lowdown: sandbox_init: Operation not permitted

In reply to @kloenk:petabyte.dev
Hope ghc has support for arm soon. Don't like that I can't compile exa without a great amount of work