| 26 Mar 2026 |
K900 | Might be some weird sandbox thing? | 12:45:46 |
emily | that seems highly unlikely | 12:46:45 |
K900 | That's https://github.com/NixOS/nixpkgs/pull/502680 rebased on master | 12:48:26 |
K900 | If someone that actually has a Mac and/or knows what they're doing can take a look, it will be very appreciated | 12:48:38 |
emily | have you tried just patching out the --remove-signature | 12:52:48 |
emily | if not then maybe rcodesign has a thing to do it instead. it's just a sigtool limitation | 12:54:55 |
K900 | You are saying words to me that I do not understand | 12:57:12 |
emily | it's literally right there in the command you pasted :P | 13:03:37 |
WeetHet | What derivation did you build? I'll have a look but I don't want to build everything | 14:26:39 |
K900 | python3Packages.pyside6 | 14:27:00 |
K900 | But the failure is in qt6.qtdeclarative | 14:27:08 |
K900 | Which is much earlier in the chain | 14:27:13 |
WeetHet | https://github.com/qt/qtdeclarative/commit/a7084abd9778b955d80e7419e82f6f7b92f7978d
I'm pretty sure you can just add the inverse of this patch | 15:23:18 |
WeetHet | Since darwin.sigtool doesn't support --remove-signature | 15:25:15 |
K900 | Ышпр | 15:35:11 |
K900 | * Sigh | 15:35:14 |
K900 | OK let's see if this works | 15:35:19 |
WeetHet | I'm building with sigtool replaced with rcodesign and my own patch | 15:36:18 |
WeetHet | But just reverting should be simpler | 15:36:28 |
K900 | Yeeeeeah | 15:36:53 |
emily | we just need someone to write a codesign(1)-compatible CLI over the rcodesign library ideally | 15:50:17 |
emily | only problem with that is Rust in bootstrap, but I have WIP patches getting rid of the sigtool uses in the Darwin bootstrap anyway | 15:50:36 |
emily | but yeah reverting that patch should do it | 15:50:46 |
K900 | Building with it reverted now | 15:51:03 |
WeetHet | I've built it with
postPatch = ''
substituteInPlace tools/qmltestrunner/CMakeLists.txt \
--replace-fail "codesign --remove-signature" "true" \
--replace-fail "codesign --sign -" "rcodesign sign" \
--replace-fail "--entitlements" "--entitlements-xml-path"
'';
And replacing darwin.sigtool with rcodesign
| 15:52:47 |
emily | well no point replacing if it's not even going to match the --remove-signature | 15:54:25 |
emily | does rcodesign(1) not have that functionality? | 15:54:29 |
WeetHet | I didn't find it | 15:55:06 |
WeetHet | qtdeclarative> setting entitlements XML for main signing target from path /nix/store/0rzzw62rkc2bga3spjs73g0km36i0lda-qtbase-6.11.0/lib/cmake/Qt6/macos/test.entitlements.plist
qtdeclarative> signing /nix/store/jwixains55b2r39m9p5qics6xv7nxi43-qtdeclarative-6.11.0/.build/qtdeclarative-everywhere-src-6.11.0/build/bin/qmltestrunner in place
qtdeclarative> signing /nix/store/jwixains55b2r39m9p5qics6xv7nxi43-qtdeclarative-6.11.0/.build/qtdeclarative-everywhere-src-6.11.0/build/bin/qmltestrunner as a Mach-O binary
qtdeclarative> setting binary identifier to qmltestrunner
qtdeclarative> parsing Mach-O
qtdeclarative> writing Mach-O to /nix/store/jwixains55b2r39m9p5qics6xv7nxi43-qtdeclarative-6.11.0/.build/qtdeclarative-everywhere-src-6.11.0/build/bin/qmltestrunner
| 15:55:40 |
WeetHet | I guess there's no replacing existing signature message with rcodesign which was the whole reason for the original patch | 15:56:26 |