supersandro2000 has quit [Disconnected by services]
supersandro2000 has joined #nix-darwin
mcint has joined #nix-darwin
squidgy has quit [Quit: ZZZzzz…]
squidgy has joined #nix-darwin
stephank1 has joined #nix-darwin
stephank has quit [Ping timeout: 245 seconds]
stephank1 is now known as stephank
squidgy has quit [Quit: ZZZzzz…]
philr_ has quit [Ping timeout: 246 seconds]
philr_ has joined #nix-darwin
Chiliparrot has joined #nix-darwin
Chiliparrot has quit [Ping timeout: 244 seconds]
oliver85 has quit [Quit: Connection closed]
Chiliparrot has joined #nix-darwin
squidgy has joined #nix-darwin
squidgy has quit [Quit: ZZZzzz…]
<LnL>
emily: the big sur changes have been on master for quite some time, it's only 3rd party things like python that might not have fixes backported to old versions yet
squidgy has joined #nix-darwin
johnw has joined #nix-darwin
andremedeiros has quit [Read error: Connection reset by peer]
andremedeiros has joined #nix-darwin
philr_ has quit [Ping timeout: 260 seconds]
Chiliparrot has quit [Ping timeout: 244 seconds]
EmoSpice has joined #nix-darwin
Chiliparrot has joined #nix-darwin
squidgy has quit [Quit: ZZZzzz…]
andremedeiros has quit [Read error: Connection reset by peer]
andremedeiros has joined #nix-darwin
EmoSpice has quit [Quit: Connection closed]
andremedeiros has quit [Read error: Connection reset by peer]
andremedeiros has joined #nix-darwin
Chiliparrot has quit [Quit: My iMac has gone to sleep. ZZZzzz…]
<oliver85>
I am not sure what you meant tho, can you elaborate a bit more?
<abathur>
oh, hey
<abathur>
basically just hoping to write all of the references to /Users/buildkite-agent out of the launchdaemon plist to see if it still throws the sandbox error
<abathur>
I think a few can be cut, and I think a few could be swapped for what nix-daemon's plist uses
<abathur>
so I think I meant: try cutting HOME, NIX_PATH, the 2nd of the 2 strings in NIX_PROFILES, and set the CA bundle to /nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt
<oliver85>
gotcha, let me try it out, Have to spin up a machine so it will take a bit (if you have to hop off we can resume next time. no worries)
<abathur>
thinking is roughly: I don't get why we're getting *sandbox* errors. I haven't found any clear documentation of a sandbox that would seem to match this context, but I know Apple's been trending towards requiring user consent for programs tofiddle with some kinds of files in the user's homedir, so I'm wondering if there's a sandbox to keep us from fiddling with ~user when ~user isn't logged in
<abathur>
to bug for consent
<abathur>
like, the launchd job specifies to run it as the user, but I'm not quite clear on whether that counts the same as having a live user session
<abathur>
no worries, I'm roughly around; I'll be in-and-out, but I'll comment if I think I'll be heading out
<abathur>
well, more like afk and not; I won't actually disconnect :)
<oliver85>
sounds good:)
<oliver85>
I am also wondering the same thing "like, the launchd job specifies to run it as the user, but I'm not quite clear on whether that counts the same as having a live user session"