lix on non-linux does not clear xattrs when adding outputs to the store #1008

New issue

Open

opened 2025-10-10 16:10:25 +00:00 by pennae · 4 comments

pennae commented

2025-10-10 16:10:25 +00:00

Owner

❯ nix repl -L
Lix 2.94.0-dev-pre20250913-8981fb5
Type :? for help.
nix-repl> p = import <nixpkgs> { system = "aarch64-darwin"; }                                              
Added p.

nix-repl> src = p.runCommand "xattr-source" {} "touch $out; /usr/bin/xattr -w systems.lix.test value $out"
Added src.

nix-repl> :b p.runCommand "xattr-read" {} "/usr/bin/xattr -l ${src} >&2"
xattr-read> systems.lix.test: value

this does not happen on linux. can we forbid this inside the sandbox until we support xattrs everywhere?

``` ❯ nix repl -L Lix 2.94.0-dev-pre20250913-8981fb5 Type :? for help. nix-repl> p = import <nixpkgs> { system = "aarch64-darwin"; } Added p. nix-repl> src = p.runCommand "xattr-source" {} "touch $out; /usr/bin/xattr -w systems.lix.test value $out" Added src. nix-repl> :b p.runCommand "xattr-read" {} "/usr/bin/xattr -l ${src} >&2" xattr-read> systems.lix.test: value ``` this does not happen on linux. can we forbid this inside the sandbox until we support xattrs everywhere?

pennae added the

OS/macOS

bug

labels

2025-10-10 16:10:25 +00:00

pennae changed title from ~~lix on macos does not clear xattrs when adding outputs to the store~~ to lix on non-linux does not clear xattrs when adding outputs to the store

2025-10-10 16:16:23 +00:00

pennae added the

Area/store

label

2025-10-10 16:17:09 +00:00

pennae commented

2025-10-10 16:17:19 +00:00

Author

Owner

this should also affect freebsd and any other non-linux system. so, uh.

pennae referenced this issue

2026-01-02 19:33:44 +00:00

Support xattrs in the build sandbox #838

pennae added this to the 2.95 milestone

2026-01-02 19:34:00 +00:00

raito referenced this issue

2026-01-02 20:17:56 +00:00

macOS / BSDs do not perform adequate canonicalization #1090

lix-bot commented

2026-01-03 21:42:36 +00:00

Member

This issue was mentioned on Gerrit on the following CLs:

commit message in cl/4856 ("libstore/platform/linux: allow xattrs in the sandbox")
commit message in cl/4861 ("libstore/local-store: remove xattrs all the time")

This issue was mentioned on Gerrit on the following CLs: * commit message in [cl/4856](https://gerrit.lix.systems/c/lix/+/4856) ("libstore/platform/linux: allow xattrs in the sandbox") * commit message in [cl/4861](https://gerrit.lix.systems/c/lix/+/4861) ("libstore/local-store: remove xattrs all the time")

raito commented

2026-01-03 21:51:51 +00:00

Owner

Working on this, I realized that pyxattr is not available on Darwin, so this is also one requirement to fix to close this on the testing side. That is, adding support to Darwin to pyxattr (and probably pylibacl later on).