#nix-darwin on 2020-05-20

00:48 xcmw has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]

01:32 xcmw has joined #nix-darwin

01:54 xcmw has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]

01:58 xcmw has joined #nix-darwin

02:00 xcmw has quit [Client Quit]

04:15 mog has quit [Ping timeout: 256 seconds]

04:22 mog has joined #nix-darwin

06:54 hmpffff has joined #nix-darwin

06:59 hmpffff_ has joined #nix-darwin

07:01 hmpffff has quit [Ping timeout: 272 seconds]

07:02 hmpffff has joined #nix-darwin

07:04 hmpffff_ has quit [Ping timeout: 256 seconds]

07:23 hmpffff has quit [Ping timeout: 260 seconds]

07:24 hmpffff has joined #nix-darwin

07:38 hmpffff__ has joined #nix-darwin

07:39 hmpffff has quit [Ping timeout: 246 seconds]

07:41 hmpffff has joined #nix-darwin

07:44 hmpffff__ has quit [Ping timeout: 256 seconds]

07:53 hmpffff_ has joined #nix-darwin

07:56 hmpffff has quit [Ping timeout: 272 seconds]

07:57 hmpffff_ has quit [Ping timeout: 256 seconds]

07:59 hmpffff has joined #nix-darwin

08:07 __monty__ has joined #nix-darwin

10:05 hmpffff has quit [Ping timeout: 258 seconds]

10:06 hmpffff has joined #nix-darwin

10:28 hmpffff_ has joined #nix-darwin

10:31 hmpffff has quit [Ping timeout: 260 seconds]

10:59 hmpffff_ has quit [Ping timeout: 258 seconds]

11:33 hmpffff has joined #nix-darwin

11:33 hmpffff has quit [Client Quit]

12:41 philr has quit [Ping timeout: 256 seconds]

13:55 <eraserhd> So, using yabai and skhd, Mac OS asks every update for me to authorize a new binary. Yabai says that if I enable code signing, it won't keep asking. I don't think i've seen a nixpkgs or nix-darwin way to do this, is there?

13:55 <eraserhd> A function to wrap a package or something? I assume each user who did this would need their own key.

13:57 <LnL> there used to be an option to configure the allowed binaries but that broke with SIP

13:58 <LnL> I also played with an idea for codesigning at some point https://github.com/LnL7/nix-darwin/commit/a008b2e8fdbda6220a73ee6255aa9008a5604b9d

14:01 <eraserhd> Interesting... would that work? Codesigning a wrapper? It didn't occur to me that it could, but the fact that Mac OS keeps asking me if my terminal can have remote control permission suggests it could??

14:02 <eraserhd> That's nice in that it doesn't case rebuilds and the cache works, if so.

14:04 <LnL> this just copies tho

14:05 <LnL> ideally it would indeed just build and sign a tiny wrapper, just like the setuid stuff on nixos

14:06 <LnL> as well as being a bit smarter so it doesn't do this again for every rebuild

14:31 hmpffff has joined #nix-darwin

17:55 johnw has joined #nix-darwin

18:37 hmpffff has quit [Quit: nchrrrr…]

19:15 hmpffff has joined #nix-darwin

21:02 <LnL> hmm, there's still an instance of something missing?

21:02 <LnL> ah stats died I think

21:03 <LnL> whoops wrong channel

21:30 <abathur> heh

21:36 hmpffff has quit [Quit: Bye…]

21:47 xcmw has joined #nix-darwin

21:48 fuzen has joined #nix-darwin

21:59 xcmw has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]

22:14 __monty__ has quit [Quit: leaving]

22:42 philr has joined #nix-darwin

22:42 xcmw has joined #nix-darwin

23:48 mbrgm_ has joined #nix-darwin

23:50 mbrgm has quit [Ping timeout: 240 seconds]

23:50 mbrgm_ is now known as mbrgm