-
-
Notifications
You must be signed in to change notification settings - Fork 15k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
nncp: 8.8.0 -> 8.8.1 #198701
nncp: 8.8.0 -> 8.8.1 #198701
Conversation
On darwin/intel:
|
Changing the entry in
fixes the darwin build. |
@viraptor does 60d425b0a590cfcb8c974d79d13735b90ea97cb0 work for you? |
Nope. Same issue (https://github.com/NixOS/nixpkgs/pull/198701/checks?check_run_id=9193516054) It's not about the security framework itself, but rather weirdness with xpc which was fixed in the newer sdk. |
aa006e3
to
82d023f
Compare
Okay. I know nothing of such things. |
nncp = ( | ||
if stdenv.isDarwin | ||
then darwin.apple_sdk_11_0.callPackage | ||
else callPackage) ../tools/misc/nncp { }; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This works for all systems, but affects darwin only. It's safe to use unconditionally.
nncp = ( | |
if stdenv.isDarwin | |
then darwin.apple_sdk_11_0.callPackage | |
else callPackage) ../tools/misc/nncp { }; | |
nncp = darwin.apple_sdk_11_0.callPackage ../tools/misc/nncp { }; |
It's not the best solution ever 🤷 but it's necessary for some packages. (see others like _7zz
or mlterm
in this file)
The sdk comes from #176661 if you want the gory details.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A look at doc/stdenv/platform-notes.chapter.md
and the definition of even go itself in all-packages.nix
seems to confirm this. So if this fixes the darwin build and if the linux build is still fine, go for it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry to jump in, in #200033 I was looking at a different package with same error and this didn't help
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 51a52a44915..9d74ffcd8dd 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -16353,7 +16353,7 @@ with pkgs;
bazel-remote = callPackage ../development/tools/build-managers/bazel/bazel-remote { };
- bazel-watcher = callPackage ../development/tools/bazel-watcher {
+ bazel-watcher = (if stdenv.isDarwin then darwin.apple_sdk_11_0.callPackage else callPackage) ../development/tools/bazel-watcher {
go = go_1_18;
};
on x86_64-darwin it still gets
In file included from /nix/store/gvz6j31hm9hg44xiwb503rbv2gc1x0nw-apple-framework-Security-11.0.0/Library/Frameworks/Security.framework/Headers/Security.h:87:
/nix/store/gvz6j31hm9hg44xiwb503rbv2gc1x0nw-apple-framework-Security-11.0.0/Library/Frameworks/Security.framework/Headers/SecCode.h:35:10: fatal error: 'xpc/xpc.h' file not found
#include <xpc/xpc.h>
^~~~~~~~~~~
1 error generated.
compilepkg: error running subcommand external/go_sdk/pkg/tool/darwin_amd64/cgo: exit status 2
Target //ibazel:ibazel failed to build
any hints?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This shouldn't have been merged like this. darwin.apple_sdk_11_0.callPackage
is a noop for linux. Going to fix it up right now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No, I'm not using darwin and I don't want my packages fed through darwin functions.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Then the apple 11 sdk usage must be removed instead. Plotting conditionals around the callPackage use is not necessary and unnecessary.
nncp = ( | ||
if stdenv.isDarwin | ||
then darwin.apple_sdk_11_0.callPackage | ||
else callPackage) ../tools/misc/nncp { }; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A look at doc/stdenv/platform-notes.chapter.md
and the definition of even go itself in all-packages.nix
seems to confirm this. So if this fixes the darwin build and if the linux build is still fine, go for it.
Description of changes
The main improvements are:
enabled "-autotoss".
Things done
sandbox = true
set innix.conf
? (See Nix manual)nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD"
. Note: all changes have to be committed, also see nixpkgs-review usage./result/bin/
)nixos/doc/manual/md-to-db.sh
to update generated release notes