trcc has quit [Read error: Connection reset by peer]
trcc has joined #nix-darwin
trcc has quit [Remote host closed the connection]
trcc has joined #nix-darwin
trcc has quit [Ping timeout: 250 seconds]
trcc has joined #nix-darwin
trcc has quit []
periklis has joined #nix-darwin
philr has quit [Ping timeout: 250 seconds]
jacereda has joined #nix-darwin
<jacereda>
hi... looks like ruby is linking against Foundation from /System, is that right?
<jacereda>
this is what I get for `otool -L /nix/store/p1csyn7pmzga2kyrcl1yjli3b9hyl67d-ruby-2.5.3/bin/ruby`: `/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation (compatibility version 300.0.0, current version 1454.90.0)`
trcc has joined #nix-darwin
trcc has quit [Remote host closed the connection]
trcc has joined #nix-darwin
<LnL>
yeah, most frameworks are not opensource so we have to use the system versions
trcc has quit [Ping timeout: 246 seconds]
<jacereda>
LnL: ok, thanks... so, shouldn't the sandbox system whitelist those?
<jacereda>
or just have fake packages with links to the system frameworks...
<LnL>
that's exactly what we do
<LnL>
the sandbox gets opened up for specific paths if a framework is included as a dependency, however currently that's not transitive
<jacereda>
oh, then I don't know what happened... I had a system with useSandbox=true and got errors when using ruby as a build dependency, it was complaning about Foundation...
<jacereda>
so, should packages that use ruby as a buildDependency list Foundation as a buildDependency as well?
<jacereda>
sounds bad...
<LnL>
so for build time dependencies it works since nix tracks those, but if a binary links against it nix looses the dependency because it points to /System/Library instead of darwin.apple_sdk.frameworks.Foundation
<jacereda>
s/buildDependency/nativeBuildInputs
<LnL>
causing issues when it's loaded during a build that doesn't pull in the frameworks for some other reason
<jacereda>
this happened while building a package that isn't supported on darwin, I'll try to isolate the issue
<LnL>
this is one of the 2 main issues that have to be solved to fix sandboxing
<jacereda>
Lnl: I opened https://github.com/NixOS/nixpkgs/pull/52705 a couple of weeks ago and it's standing there without any rewiever... do you know what the process is to get it merged?
<{^_^}>
#52705 (by jacereda, 1 week ago, open): Fix sfml build on Darwin
<LnL>
ping somebody with commit access :)
<jacereda>
is that you by any chance? :)
<LnL>
I should look into fixing CF so we can get rid of those workarounds again, but it's fine in the meantime
<jacereda>
right
<LnL>
could you pass in cf-private as an input instead of referencing it indirectly, and a comment with the missing symbol like I've been doing would also be nice