on macOS, installer fails to configure ca-certificates #78

New issue

Open

opened 2026-04-20 04:20:56 +00:00 by mcint · 2 comments

mcint commented

2026-04-20 04:20:56 +00:00

On first runs after install, lack of ca-certificate configured made initial fetch error.

$ nix run nixpkgs#hello
error:
       … while fetching the input 'github:NixOS/nixpkgs/nixpkgs-unstable'

       error: unable to download 'https://api.github.com/repos/NixOS/nixpkgs/commits/nixpkgs-unstable': error adding trust anchors
from file: /etc/ssl/certs/ca-certificates.crt (curl error code=77)

Fixed this issue by adding to etc/nix/nix.custom.conf:

ssl-cert-file = /etc/nix/[cert-file-copy].crt

On first runs after install, lack of ca-certificate configured made initial fetch error. ``` $ nix run nixpkgs#hello error: … while fetching the input 'github:NixOS/nixpkgs/nixpkgs-unstable' error: unable to download 'https://api.github.com/repos/NixOS/nixpkgs/commits/nixpkgs-unstable': error adding trust anchors from file: /etc/ssl/certs/ca-certificates.crt (curl error code=77) ``` Fixed this issue by adding to `etc/nix/nix.custom.conf`: ``` ssl-cert-file = /etc/nix/[cert-file-copy].crt ```

jade commented

2026-04-20 11:34:54 +00:00

Owner

That's very strange, I think we're installing cacert in /nix/var/nix/profiles/default and should be picking it up. I'm also kind of curious why you hit it in particular rather than there being more reports, so I'm curious what we might have messed up with the installer to cause this.