| 21 Dec 2025 |
 crushing-smite | I tried once again - it disappears from allow-list exactly the moment darwin-rebuild hits the log line for copying apps 🤦♂️ | 19:17:30 |
 samasaur | I don't remember how to work around it in HM | 19:17:56 |
| samasaur | nix-darwin works fine | 19:18:02 |
| samasaur | I think maybe you need to use sudo? | 19:18:11 |
| crushing-smite | I do | 19:18:51 |
| samasaur | Is your HM configuration used as a module as part of your nix-darwin configuration | 19:19:39 |
| crushing-smite | as a module | 19:19:52 |
| samasaur | bc they sudo isn't passed down to HM | 19:19:58 |
| samasaur | * bc that sudo isn't passed down to HM | 19:20:04 |
| crushing-smite | what do I do then? | 19:20:38 |
| crushing-smite | sudo su? | 19:20:40 |
| crushing-smite | this did not help either 😠😠😠 | 19:24:17 |
| samasaur | no, because nix-darwin activation explicitly drops to user-level permissions before running HM activation | 19:26:14 |
| crushing-smite | I mean, that option is part of home-manager, not nix-darwin module system - so how the hell should it be related? | 19:27:19 |
| crushing-smite | And why the lack of sudo should drop (!) an app from allow-list? | 19:27:47 |
| crushing-smite | When home-manager is used as nix-darwin module, would it be possible/make sense to trigger it separately? | 19:28:12 |
| crushing-smite | https://github.com/nix-community/home-manager/issues/8079 | 19:30:52 |
| crushing-smite | what are the drawbacks of targets.darwin.copyApps.enableChecks = false? | 19:31:30 |
| crushing-smite | Removing the Home Manager Apps helped | 19:34:02 |
| crushing-smite | Okay, it now works | 19:34:20 |
| crushing-smite | Worth adding this info about dir cleanup (and maybe copyApps.enableChecks) to the error message | 19:35:02 |
| crushing-smite | well, no, shit | 19:35:43 |
| crushing-smite | it added only firefox | 19:35:46 |
| crushing-smite | and did not do it for vscode, alacritty 🤦♂️ | 19:36:02 |
| crushing-smite | let me try rebooting | 19:36:24 |
| crushing-smite | nope, still not there | 19:37:36 |
| crushing-smite | this process is still VERY brittle, are there any thoughts on further improving it, now that you've given up on all but copying the apps? | 19:38:03 |
| samasaur | unfortunately as someone said on that issue it's very difficult to try and debug this kind of thing on macOS | 21:18:10 |
| samasaur | We did some fairly thorough testing before merging the new approach into nix-darwin and AFAIK nobody has run into any issues there | 21:19:00 |
| samasaur | which to me implies that the most likely cause is a lack of permissions, since the script runs as root when part of a nix-darwin config but as your user when part of a HM config | 21:20:05 |
