!lheuhImcToQZYTQTuI:nixos.org

Nix on macOS

1202 Members
“There are still many issues with the Darwin platform but most of it is quite usable.” — http://yves.gnu-darwin.org200 Servers

Load older messages


SenderMessageTime
24 Apr 2026
@nor1nco:matrix.orgNorincoI found that after updating nixpkg, the permissions granted in the macOS settings will be invalid. Is there any good solution to this problem?08:54:22
@bestlem:matrix.orgbestlem

direnv is failing on nixpkgs-unstable https://github.com/NixOS/nixpkgs/issues/513019
I note from the isuue that

Can Hydra reproduce this build failure?

The last build job was manually cancelled.

Does this mean that failure on direnv builds for darwin can be ignored and we get a broken nikpkgs - or is this just a one off manual error?
The error looks like a timeout

10:06:02
@reckenrode:matrix.orgRandy EckenrodeUnfortunately, no. If the application is ad hoc signed, you’ll have to reauthorized every time it’s updated.11:54:00
@reckenrode:matrix.orgRandy EckenrodeIt’s the issue with Fish having an invalid signature.11:54:26
@reckenrode:matrix.orgRandy EckenrodeMy build environment is back to where it was before running out of disk space (except with ~265 GiB free). I’m working on wrapping Swift. It’s unfortunately necessary to use a binary bootstrap. The alternative is requiring builds to inform Swift of where to find libc++ and libc (on Linux), but that’s unreasonable to require of users using Swift in dev shells.11:58:41
@reckenrode:matrix.orgRandy EckenrodeI so really hate the wrapper-based model we have. Compilers understand sysroots. Building a sysroot on demand with all the dependencies would let them find their dependencies in the store without having to know anything about Nix. Darwin has an advantage over Linux thanks to install names, but it might be possible to emulate something rpaths and a linker script.11:59:47
@viraptor:tchncs.deviraptorOk, I've got an xcbuild update, but there seem to be unnecessarily many deps. I don't believe many of them actually use xcbuild. I'm just wondering if there's a better way to detect use than creating a fake xcbuild with all binaries screaming ERROR and exiting with 1, because that could actually pass by accident. I know I can adjust the sandbox in some package's build - there's no easy wait to enforce a custom sandbox for downstream packages, right?13:12:53
@insipx:matrix.orginsipx feels like i landed at a reasonable spot with https://github.com/NixOS/nixpkgs/pull/512100 so i opened it for review. i was able to remove the hackier patches for sqlcipher with flags found upstream/remove the hardcoded xcode path, as well as keep the original propagate-inputs.nix in the apple-sdk largely unchanged apart from a single ios-specific flag for tls. working on submitting a very small pr to gnulib to remove the patch for gnugrep. rerunning builds for darwin/ios platforms after rebasing on the latest staging, and also happy to wait for 'realLibiconv' to land so I can verify with that as well 14:22:02
@insipx:matrix.orginsipx *

feels like i landed at a reasonable spot with https://github.com/NixOS/nixpkgs/pull/512100 so i opened it for review. i was able to remove the hackier patches for sqlcipher with flags found upstream/remove the hardcoded xcode path, as well as keep the original propagate-inputs.nix in the apple-sdk largely unchanged apart from a single ios-specific flag for tls. working on submitting a very small pr to gnulib to remove the patch for gnugrep. rerunning builds for darwin/ios platforms after rebasing on the latest staging, and also happy to wait for 'realLibiconv' to land so I can verify with that as well.

after actually looking at gnulib, it seems can simplify the gnugrep package for iOS as well, since the libc/nlist headers weren't used and the stackvma stuff is actually available

15:17:49
@insipx:matrix.orginsipx *

feels like i landed at a reasonable spot with https://github.com/NixOS/nixpkgs/pull/512100 so i opened it for review. i was able to remove the hackier patches for sqlcipher with flags found upstream/remove the hardcoded xcode path, as well as keep the original propagate-inputs.nix in the apple-sdk largely unchanged apart from a single ios-specific flag for tls. working on submitting a very small pr to gnulib to remove the patch for gnugrep. rerunning builds for darwin/ios platforms after rebasing on the latest staging, and also happy to wait for 'realLibiconv' to land so I can verify with that as well.

after actually looking at gnulib, it seems can simplify the gnugrep package for iOS as well, since the libc/nlist headers weren't used and the stackvma stuff is actually available on ios

15:17:53
@insipx:matrix.orginsipx *

feels like i landed at a reasonable spot with https://github.com/NixOS/nixpkgs/pull/512100 so i opened it for review. i was able to remove the hackier patches for sqlcipher with flags found upstream/remove the hardcoded xcode path, as well as keep the original propagate-inputs.nix in the apple-sdk largely unchanged apart from a single ios-specific flag for tls. working on submitting a very small pr to gnulib to remove the patch for gnugrep. rerunning builds for darwin/ios platforms after rebasing on the latest staging, and also happy to wait for 'realLibiconv' to land so I can verify with that as well.

edit: after actually looking at gnulib, it seems can simplify the gnugrep package for iOS as well, since the libc/nlist headers weren't used and the stackvma stuff is actually available on ios

15:18:04
@insipx:matrix.orginsipx * feels like i landed at a reasonable spot with https://github.com/NixOS/nixpkgs/pull/512100 so i opened it for review. i was able to remove the hackier patches for sqlcipher with flags found upstream/remove the hardcoded xcode path, as well as keep the original propagate-inputs.nix in the apple-sdk largely unchanged apart from a single ios-specific flag for tls. working on submitting a very small pr to gnulib to remove the patch for gnugrep. rerunning builds for darwin/ios platforms after rebasing on the latest staging, and also happy to wait for 'realLibiconv' to land so I can verify with that as well. 15:19:06
@sandro:supersandro.deSandro left the room.18:08:54
25 Apr 2026
@xored:xored.lolxored

how do i patch this perl snippet to behave on nix?

my $script_path =
  File::Spec->catfile($FindBin::Bin, '..', 'lib', 'media-control',
  'mediaremote-adapter.pl');
my $framework_path = File::Spec->rel2abs(
  File::Spec->catdir(
    $FindBin::Bin, '..', 'Frameworks', 'MediaRemoteAdapter.framework'
  )
);
my $test_client_path = File::Spec->rel2abs(
  File::Spec->catdir(
    $FindBin::Bin, '..', 'lib', 'media-control', 'MediaRemoteAdapterTestClient'
  )
);
09:26:54
@xored:xored.lolxored it works if i nix run it, but not when installed 09:27:32
@kirillrdy:matrix.orgkirillrdyhi, can someone have a look at ffmpeg-headless sign issue on darwin https://github.com/NixOS/nixpkgs/pull/51322510:09:47
@toonn:matrix.orgtoonn Does restarting the build not fix it? I think the transient code signing failure still happens. 10:21:26
@kirillrdy:matrix.orgkirillrdy toonn: which thread are you replying to ? 10:22:14
@toonn:matrix.orgtoonn Your question about ffmpeg-headless. 10:23:34
@kirillrdy:matrix.orgkirillrdythanks, i am new to this issue, so that means there is a known transient build issue, and it was cached ?10:25:16
@kirillrdy:matrix.orgkirillrdyeg maybe a better fix is not my PR but re trigger build ?10:26:02
@reckenrode:matrix.orgRandy EckenrodeOne of the dylibs has a bad signature.10:32:10
@reckenrode:matrix.orgRandy EckenrodeDarwin needs a hook to fail the build if there are any bad signatures. It won’t fix the underlying problem, but it will at least (hopefully) prevent another mess like this.10:33:41
@reckenrode:matrix.orgRandy Eckenrode * 10:33:56
@kirillrdy:matrix.orgkirillrdyhow come ffmpeg full doenst have this issue but headless does ?10:35:05
@k900:0upti.meK900Random coincidence10:38:28
@kirillrdy:matrix.orgkirillrdyfair enough...10:39:50
@reckenrode:matrix.orgRandy EckenrodeUnfortunately, I ran into it when bringing my system back up, so I don’t have my shell history anymore where I fixed it locally.10:45:07
@kirillrdy:matrix.orgkirillrdyas for fixing issue on master, what is the best approach ?10:50:52
@reckenrode:matrix.orgRandy EckenrodeI’m not sure. How far off is the staging-next merge?10:51:41

Show newer messages


Back to Room ListRoom Version: 6