philr has quit [Ping timeout: 246 seconds]
abathur has quit [Ping timeout: 246 seconds]
philr has joined #nix-darwin
trcc has joined #nix-darwin
trcc has quit [Read error: Connection reset by peer]
trcc has joined #nix-darwin
trcc has quit [Remote host closed the connection]
trcc has joined #nix-darwin
trcc has quit [Ping timeout: 250 seconds]
trcc has joined #nix-darwin
trcc has quit []
periklis has joined #nix-darwin
philr has quit [Ping timeout: 250 seconds]
jacereda has joined #nix-darwin
<jacereda> hi... looks like ruby is linking against Foundation from /System, is that right?
<jacereda> this is what I get for `otool -L /nix/store/p1csyn7pmzga2kyrcl1yjli3b9hyl67d-ruby-2.5.3/bin/ruby`: `/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation (compatibility version 300.0.0, current version 1454.90.0)`
trcc has joined #nix-darwin
trcc has quit [Remote host closed the connection]
trcc has joined #nix-darwin
<LnL> yeah, most frameworks are not opensource so we have to use the system versions
trcc has quit [Ping timeout: 246 seconds]
<jacereda> LnL: ok, thanks... so, shouldn't the sandbox system whitelist those?
<jacereda> or just have fake packages with links to the system frameworks...
<LnL> that's exactly what we do
<LnL> the sandbox gets opened up for specific paths if a framework is included as a dependency, however currently that's not transitive
<jacereda> oh, then I don't know what happened... I had a system with useSandbox=true and got errors when using ruby as a build dependency, it was complaning about Foundation...
<jacereda> so, should packages that use ruby as a buildDependency list Foundation as a buildDependency as well?
<jacereda> sounds bad...
<LnL> so for build time dependencies it works since nix tracks those, but if a binary links against it nix looses the dependency because it points to /System/Library instead of darwin.apple_sdk.frameworks.Foundation
<jacereda> s/buildDependency/nativeBuildInputs
<LnL> causing issues when it's loaded during a build that doesn't pull in the frameworks for some other reason
<jacereda> this happened while building a package that isn't supported on darwin, I'll try to isolate the issue
<LnL> this is one of the 2 main issues that have to be solved to fix sandboxing
<jacereda> Lnl: I opened https://github.com/NixOS/nixpkgs/pull/52705 a couple of weeks ago and it's standing there without any rewiever... do you know what the process is to get it merged?
<{^_^}> #52705 (by jacereda, 1 week ago, open): Fix sfml build on Darwin
<LnL> ping somebody with commit access :)
<jacereda> is that you by any chance? :)
<LnL> I should look into fixing CF so we can get rid of those workarounds again, but it's fine in the meantime
<jacereda> right
<LnL> could you pass in cf-private as an input instead of referencing it indirectly, and a comment with the missing symbol like I've been doing would also be nice
<jacereda> sure
<LnL> I was a bit afk the last week, but I'll try to test and merge after work
<jacereda> ok thanks. It should be ready now.
periklis has quit [Ping timeout: 244 seconds]
philr has joined #nix-darwin
trcc has joined #nix-darwin
jacereda has quit [Ping timeout: 245 seconds]
trcc has quit [Remote host closed the connection]
trcc has joined #nix-darwin
trcc has quit [Ping timeout: 246 seconds]
philr has quit [Ping timeout: 258 seconds]