| 9 Jun 2026 |
 alexfmpe | I never figured out why | 21:20:50 |
| alexfmpe | First time I set up linux-builder on mac I got the default one from cache | 21:21:16 |
 Austin Horstman | i've seen this happen numerous times over the last few days when doing nixpkgs-reviews | 21:59:04 |
|  Cobra Software joined the room. | 22:36:29 |
| 10 Jun 2026 |
|  Yushi joined the room. | 17:00:57 |
 Sarah Clark | nixpkgs-review is also skipping python 3.13 or 3.14 unpredictably. I'm trying to isolate it | 18:16:42 |
 hexa | https://lwn.net/Articles/1077209/ | 18:22:18 |
| hexa | oopsi | 18:22:19 |
| 11 Jun 2026 |
 eveeifyeve | Redacted or Malformed Event | 15:00:02 |
| eveeifyeve | * So I just ran a nix path-info on this It turns out it's not cached (this is from a local clone of master).
❯ nix path-info --store "https://cache.nixos.org" .#darwin.linux-builder
warning: unable to upload 'https://cache.nixos.org/nar/06zan3h9ahmsrwz58s0hibf65hkswr74hwmwdyzgz2xxqx6yb482.nar.xz': HTTP error 503
response body:
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<title>503 backend write error</title>
</head>
<body>
<h1>Error 503 backend write error</h1>
<p>backend write error</p>
<h3>Error 54113</h3>
<p>Details: cache-mel11225-MEL 1781189795 343003944</p>
<hr>
<p>Varnish cache server</p>
</body>
</html>; retrying in 295 ms (attempt 1/5)
warning: unable to upload 'https://cache.nixos.org/nar/06zan3h9ahmsrwz58s0hibf65hkswr74hwmwdyzgz2xxqx6yb482.nar.xz': HTTP error 503
| 15:00:29 |
| Yushi | Is anyone using doas on mac? Can it replace sudo? | 18:15:32 |
 K900 | macOS' sudo is not even the same sudo you see on Linux anyway | 18:17:58 |
| K900 | It's an entirely different implementation | 18:18:04 |
 Randy Eckenrode | It can, but it doesn’t support caching authentication, so you have to type your password every time. | 18:20:05 |
| Yushi | interesting | 18:23:44 |
| Yushi | it doesn't support touch ID either, right? | 18:24:11 |
| K900 | And "doas is more secure" is mostly bullshit too | 18:24:24 |
|  Ducky changed their profile picture. | 18:55:08 |
| Randy Eckenrode | I tried, but it couldn’t load the PAM module IIRC. | 20:46:10 |
| Randy Eckenrode | It is but with some patches. As far as their forks go, it seems pretty modest. We don’t build it because it requires entitlements.
https://github.com/apple-oss-distributions/sudo/tree/main/sudo
| 20:52:19 |
| 12 Jun 2026 |
 WeetHet | I still think nixpkgs should have a small binary subset of packages for macOS that are built and signed with NixOS entitlements and provided as binary packages | 11:48:01 |
| WeetHet | For stuff like debug server, etc | 11:48:25 |
 Ben Sparks | What's the difference to https://cache.nixos.org/? | 11:49:59 |
| WeetHet | You won't be able to rebuild these bit by bit | 11:50:24 |
| Randy Eckenrode | Signing has to be done with a developer certificate issued by Apple or one you trusted manually. | 11:50:27 |
| WeetHet | * You won't be able to rebuild these bit for bit | 11:50:44 |
| WeetHet | NixOS can get a certificate, or? | 11:50:58 |
| Ben Sparks | bit for bit reproducibility is an extremely high target | 11:51:05 |
| WeetHet | It's 100$? | 11:51:06 |
| Randy Eckenrode | We don’t have a way to do that safely, so it would have to be done separately and provided as binaries (which I think is what WeetHet is getting at). | 11:51:18 |
