| 3 Jul 2026 |
 Randy Eckenrode | 26.5 updated to LLVM 21.1.6. | 20:06:13 |
| Randy Eckenrode | Nothing in https://releases.llvm.org/21.1.0/projects/libcxx/docs/ReleaseNotes.html#potentially-breaking-changes really jumps out as causing this problem. | 20:07:20 |
 hexa | updating the macs to 26.5.2 since they're idle right now | 22:35:30 |
| 4 Jul 2026 |
 emily | did they get stuck on failures again? | 00:43:48 |
 Vladimír Čunát | Partially. 5k newly-failing aarch64-darwin jobs when comared against unstable: https://hydra.nixos.org/eval/1826823?filter=aarch64-darwin&compare=unstable#tabs-now-fail | 06:12:34 |
|  Diogo Correia joined the room. | 10:39:41 |
| hexa | # master
$ file --brief --mime --uncompress tests/data/t.tar.bz2
application/x-tar; charset=binary compressed-encoding=application/x-bzip2; charset=binary
/nix/store/dskcfwj7k3qwc95f843a9kzwbl0iq75m-source🔒 is 📦
# staging-next
$ /nix/store/5p2d3z74570j4mlwrfh35i9vqizb00w1-file-5.48/bin/file --brief --mime --uncompress tests/data/t.tar.bz2
application/x-decompression-error-bzip2-Cannot-posix-spawn--bzip2---Permission-denied compressed-encoding=application/x-bzip2; charset=binary
| 10:50:20 |
| hexa | Redacted or Malformed Event | 10:50:34 |
| hexa | is the file update botched? 🤔 | 10:50:57 |
 K900 | Is it just | 11:00:06 |
| K900 | Literally parsing bzip2 output | 11:00:12 |
| hexa | well, now I'm not sure I want to know | 11:01:25 |
| hexa | https://github.com/file/file/blob/7fdb7bf98852d2357b473bd6d786a2e77dba3e48/src/compress.c#L275-L290 | 11:02:47 |
 tom | if it helps, after reverting the file 48 bump (https://github.com/NixOS/nixpkgs/commit/d76fd9e7e88c3f5e4bb74c0f2d1f79edb5903cf6) on top of staging-next, i'm getting
$ /nix/store/hzq6fkah4gpzsfxp0ppfl9hbjssk739f-file-5.47/bin/file --brief --mime --uncompress t.tar.bz2
application/x-tar; charset=binary compressed-encoding=application/x-bzip2; charset=binary
| 11:22:38 |
| tom | * if it helps, after reverting the file 48 bump (https://github.com/NixOS/nixpkgs/commit/d76fd9e7e88c3f5e4bb74c0f2d1f79edb5903cf6) on top of staging-next, i'm getting
$ /nix/store/hzq6fkah4gpzsfxp0ppfl9hbjssk739f-file-5.47/bin/file --brief --mime --uncompress t.tar.bz2
application/x-tar; charset=binary compressed-encoding=application/x-bzip2; charset=binary
so it is the file update, apparently
| 11:23:21 |
| hexa | this is a stdenv rebuild iirc | 11:25:19 |
| hexa | permission denied smells like seccomp | 11:27:46 |
| hexa | https://github.com/file/file/commit/d1253f68dd075fe063117f2f15caedf835e01328 | 11:29:07 |
| hexa | or landlock | 11:29:38 |
| hexa | https://github.com/file/file/commit/c18098f7590027dccb8efac534d73650c7678362 | 11:29:38 |
| tom | FWIW, passing --no-sandbox also doesn't help / still outputs application/x-decompression-error-bzip2-Cannot-posix-spawn--bzip2---Permission-denied
-S, --no-sandbox disable system call sandboxing
| 11:38:52 |
| hexa | works after building with --disable-landlock | 12:01:26 |
| tom | can confirm | 12:02:33 |
| tom | * can confirm, I also had a build running | 12:02:58 |
| hexa | https://github.com/file/file/commit/c18098f7590027dccb8efac534d73650c7678362#diff-e6998db1fa15e1051e40b63c686f2f0c83b81a865694def06dc9ef111764cfc3R121-R123 | 12:06:43 |
| hexa | I think this smells | 12:06:46 |
| hexa |
/* Landlock sandbox: read anywhere, write only in $TMPDIR. */
| 12:07:37 |
| hexa | that's fair, but executee? | 12:07:45 |
| hexa | Redacted or Malformed Event | 12:07:47 |
| tom | yeah, I'm not seeing any LANDLOCK_ACCESS_FS_EXECUTE | 12:10:13 |
