Build hangs on macos/darwin

imran-iq commented

2025-08-18 19:26:52 +00:00

Describe the bug

Just doing a regular nix flake update followed by a darwin-rebuild switch --flake ~/.config/nix-darwin --max-jobs 10

The build hangs on the last install check

[1/12/27 built, 0.0 MiB DL] building lix-2.94.0-dev-pre20250818-1f47ece (installCheckPhase): 145/146 lix:installcheck / functional-eval-store                                    OK             47.97s

it's been like that for a few hours now. Cancelling and rebuilding doesn't seem to fix

here is the diff of my flake.lock if it helps

diff --git i/flake.lock w/flake.lock
index 270f6f1..8e3486d 100644
--- i/flake.lock
+++ w/flake.lock
@@ -40,11 +40,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1755229570,
-        "narHash": "sha256-soZegto0xXzG2zYlu/zjknDHv0Z7tRS5EQs+Z/VRTBg=",
+        "lastModified": 1755538029,
+        "narHash": "sha256-XVsragfuN8A/tMiPToejH7RofH15toeIGhlXraX+yBo=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "11626a4383b458f8dc5ea3237eaa04e8ab1912f3",
+        "rev": "bf450a0844e80e6aa22652d3f3728f20cd974527",
         "type": "github"
       },
       "original": {
@@ -56,11 +56,11 @@
     "lix": {
       "flake": false,
       "locked": {
-        "lastModified": 1755264387,
-        "narHash": "sha256-8mMQ1E/769Zpdh/otiVXAtVX1IYss4QKP31x8EzfYGU=",
-        "rev": "c3bfb6fe17a9f768afc3d9c3fc24929d44570e72",
+        "lastModified": 1755522522,
+        "narHash": "sha256-OiIIM+cvFWCyAn7sFqZQJK1/94EQ522ktlnzakZqM+M=",
+        "rev": "1f47ecef4ef5f67b34653b9c61d6d99b2720eb44",
         "type": "tarball",
-        "url": "https://git.lix.systems/api/v1/repos/lix-project/lix/archive/c3bfb6fe17a9f768afc3d9c3fc24929d44570e72.tar.gz?rev=c3bfb6fe17a9f768afc3d9c3fc24929d44570e72"
+        "url": "https://git.lix.systems/api/v1/repos/lix-project/lix/archive/1f47ecef4ef5f67b34653b9c61d6d99b2720eb44.tar.gz?rev=1f47ecef4ef5f67b34653b9c61d6d99b2720eb44"
       },
       "original": {
         "type": "tarball",
@@ -97,11 +97,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1751313918,
-        "narHash": "sha256-HsJM3XLa43WpG+665aGEh8iS8AfEwOIQWk3Mke3e7nk=",
+        "lastModified": 1755275010,
+        "narHash": "sha256-lEApCoWUEWh0Ifc3k1JdVjpMtFFXeL2gG1qvBnoRc2I=",
         "owner": "LnL7",
         "repo": "nix-darwin",
-        "rev": "e04a388232d9a6ba56967ce5b53a8a6f713cdfcf",
+        "rev": "7220b01d679e93ede8d7b25d6f392855b81dd475",
         "type": "github"
       },
       "original": {
@@ -112,11 +112,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1755175540,
-        "narHash": "sha256-V0j2S1r25QnbqBLzN2Rg/dKKil789bI3P3id7bDPVc4=",
+        "lastModified": 1755268003,
+        "narHash": "sha256-nNaeJjo861wFR0tjHDyCnHs1rbRtrMgxAKMoig9Sj/w=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a595dde4d0d31606e19dcec73db02279db59d201",
+        "rev": "32f313e49e42f715491e1ea7b306a87c16fe0388",
         "type": "github"
       },
       "original": {

Steps To Reproduce

update inputs to rev 1f47ecef4ef5f67b34653b9c61d6d99b2720eb44
do a darwin-rebuild
Hang

Expected behavior

Build finished like normal and switches to new version

`nix --version` output

❯ nix --version
nix (Lix, like Nix) 2.94.0-dev-pre20250815-c3bfb6f
System type: aarch64-darwin
Additional system types: x86_64-darwin
Features: gc, signed-caches
System configuration file: /etc/nix/nix.conf
User configuration files: /Users/imran/.config/nix/nix.conf:/Users/imran/.nix-profile/etc/xdg/nix/nix.conf:/run/current-system/sw/etc/xdg/nix/nix.conf:/nix/var/nix/profiles/default/etc/xdg/nix/nix.conf
Store directory: /nix/store
State directory: /nix/var/nix
Data directory: /nix/store/g8idprfp7mlflilp89knn7y2lbz4pxwz-lix-2.94.0-dev-pre20250815-c3bfb6f/share

## Describe the bug Just doing a regular `nix flake update` followed by a `darwin-rebuild switch --flake ~/.config/nix-darwin --max-jobs 10` The build hangs on the last install check ``` [1/12/27 built, 0.0 MiB DL] building lix-2.94.0-dev-pre20250818-1f47ece (installCheckPhase): 145/146 lix:installcheck / functional-eval-store OK 47.97s ``` it's been like that for a few hours now. Cancelling and rebuilding doesn't seem to fix here is the diff of my flake.lock if it helps ```diff diff --git i/flake.lock w/flake.lock index 270f6f1..8e3486d 100644 --- i/flake.lock +++ w/flake.lock @@ -40,11 +40,11 @@ ] }, "locked": { - "lastModified": 1755229570, - "narHash": "sha256-soZegto0xXzG2zYlu/zjknDHv0Z7tRS5EQs+Z/VRTBg=", + "lastModified": 1755538029, + "narHash": "sha256-XVsragfuN8A/tMiPToejH7RofH15toeIGhlXraX+yBo=", "owner": "nix-community", "repo": "home-manager", - "rev": "11626a4383b458f8dc5ea3237eaa04e8ab1912f3", + "rev": "bf450a0844e80e6aa22652d3f3728f20cd974527", "type": "github" }, "original": { @@ -56,11 +56,11 @@ "lix": { "flake": false, "locked": { - "lastModified": 1755264387, - "narHash": "sha256-8mMQ1E/769Zpdh/otiVXAtVX1IYss4QKP31x8EzfYGU=", - "rev": "c3bfb6fe17a9f768afc3d9c3fc24929d44570e72", + "lastModified": 1755522522, + "narHash": "sha256-OiIIM+cvFWCyAn7sFqZQJK1/94EQ522ktlnzakZqM+M=", + "rev": "1f47ecef4ef5f67b34653b9c61d6d99b2720eb44", "type": "tarball", - "url": "https://git.lix.systems/api/v1/repos/lix-project/lix/archive/c3bfb6fe17a9f768afc3d9c3fc24929d44570e72.tar.gz?rev=c3bfb6fe17a9f768afc3d9c3fc24929d44570e72" + "url": "https://git.lix.systems/api/v1/repos/lix-project/lix/archive/1f47ecef4ef5f67b34653b9c61d6d99b2720eb44.tar.gz?rev=1f47ecef4ef5f67b34653b9c61d6d99b2720eb44" }, "original": { "type": "tarball", @@ -97,11 +97,11 @@ ] }, "locked": { - "lastModified": 1751313918, - "narHash": "sha256-HsJM3XLa43WpG+665aGEh8iS8AfEwOIQWk3Mke3e7nk=", + "lastModified": 1755275010, + "narHash": "sha256-lEApCoWUEWh0Ifc3k1JdVjpMtFFXeL2gG1qvBnoRc2I=", "owner": "LnL7", "repo": "nix-darwin", - "rev": "e04a388232d9a6ba56967ce5b53a8a6f713cdfcf", + "rev": "7220b01d679e93ede8d7b25d6f392855b81dd475", "type": "github" }, "original": { @@ -112,11 +112,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1755175540, - "narHash": "sha256-V0j2S1r25QnbqBLzN2Rg/dKKil789bI3P3id7bDPVc4=", + "lastModified": 1755268003, + "narHash": "sha256-nNaeJjo861wFR0tjHDyCnHs1rbRtrMgxAKMoig9Sj/w=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "a595dde4d0d31606e19dcec73db02279db59d201", + "rev": "32f313e49e42f715491e1ea7b306a87c16fe0388", "type": "github" }, "original": { ``` ## Steps To Reproduce 1. update inputs to rev `1f47ecef4ef5f67b34653b9c61d6d99b2720eb44` 2. do a darwin-rebuild 3. Hang ## Expected behavior Build finished like normal and switches to new version ## `nix --version` output ``` ❯ nix --version nix (Lix, like Nix) 2.94.0-dev-pre20250815-c3bfb6f System type: aarch64-darwin Additional system types: x86_64-darwin Features: gc, signed-caches System configuration file: /etc/nix/nix.conf User configuration files: /Users/imran/.config/nix/nix.conf:/Users/imran/.nix-profile/etc/xdg/nix/nix.conf:/run/current-system/sw/etc/xdg/nix/nix.conf:/nix/var/nix/profiles/default/etc/xdg/nix/nix.conf Store directory: /nix/store State directory: /nix/var/nix Data directory: /nix/store/g8idprfp7mlflilp89knn7y2lbz4pxwz-lix-2.94.0-dev-pre20250815-c3bfb6f/share ```

imran-iq added the

bug

label

2025-08-18 19:26:52 +00:00

raito commented

2025-08-18 20:04:00 +00:00

Owner

could you share your /etc/nix/nix.conf ? cc @emilazy

could you share your `/etc/nix/nix.conf` ? cc @emilazy

imran-iq commented

2025-08-18 20:55:22 +00:00

Author

yeah here you go

❯ cat /etc/nix/nix.conf
# WARNING: this file is generated from the nix.* options in
# your nix-darwin configuration. Do not edit it!
allowed-users = *
auto-optimise-store = false
build-users-group = nixbld
builders =
cores = 0
experimental-features = nix-command flakes
max-jobs = auto
require-sigs = true
sandbox = false
sandbox-fallback = false
substituters = https://cache.nixos.org/
trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
trusted-substituters =
trusted-users = root
extra-sandbox-paths =

and here is my nix-darwin configuration file from the flake

{
  pkgs,
  inputs,
  ...
}: {
  nixpkgs.overlays = [(final: prev: {uptime_r = prev.callPackage ./uptime_r.nix {};})];

  # List packages installed in system profile. To search by name, run:
  # $ nix-env -qaP | grep wget
  environment.systemPackages = [
    pkgs.vim
    pkgs.uptime_r
    pkgs.go
    pkgs.jq
  ];

  # Necessary for using flakes on this system.
  nix.settings.experimental-features = "nix-command flakes";

  # Enable alternative shell support in nix-darwin.
  programs.zsh.enable = true;
  programs.fish.enable = true;

  system.primaryUser = "imran";
  # Set Git commit hash for darwin-version.
  system.configurationRevision = inputs.self.rev or inputs.self.dirtyRev or null;

  # Used for backwards compatibility, please read the changelog before changing.
  # $ darwin-rebuild changelog
  system.stateVersion = 5;

  # The platform the configuration will be used on.
  nixpkgs.hostPlatform = "aarch64-darwin";

  system.defaults = {
    finder = {
      # Path in title
      ShowPathbar = true;
      _FXShowPosixPathInTitle = true;
      # List view
      FXPreferredViewStyle = "Nlsv";
      AppleShowAllFiles = true;
      AppleShowAllExtensions = true;
      #      DisableAllAnimations = true;
      QuitMenuItem = true;
      # Search current folder first
      FXDefaultSearchScope = "SCcf";
      # Don't show warning when changing extension
      FXEnableExtensionChangeWarning = false;
    };

    dock = {
      mouse-over-hilite-stack = true;
      tilesize = 32;
      mineffect = "scale";
      enable-spring-load-actions-on-all-items = true;
      #      show-process-indicator = true;
      launchanim = false;
      # Mission control animation speed
      expose-animation-duration = 0.1;
      # Mission control group by app
      expose-group-apps = false;
      # Don't show dashboard as a space
      dashboard-in-overlay = true;
      # Don't rearrange spaces based on mru
      mru-spaces = false;
      autohide-delay = 0.0;
      autohide-time-modifier = 0.0;
      autohide = true;
    };

    screencapture = {
      disable-shadow = true;
      type = "png";
    };

    universalaccess = {
      reduceMotion = true;
      # Disable transparency in system menus
      reduceTransparency = true;
      # Zoom with scroll and ctrl
      closeViewScrollWheelToggle = true;
      # Zoom into keyboard focus
      closeViewZoomFollowsFocus = true;
    };

    NSGlobalDomain = {
      ApplePressAndHoldEnabled = false;
      # Sidebar icon size medium
      NSTableViewDefaultSizeMode = 2;
      # Increase window resize speed
      NSWindowResizeTime = 0.001;
      # Expand save dialogue
      NSNavPanelExpandedStateForSaveMode = true;
      NSNavPanelExpandedStateForSaveMode2 = true;
      # Expand print panel
      PMPrintingExpandedStateForPrint = true;
      PMPrintingExpandedStateForPrint2 = true;
      # Dont save docs to icloud by default
      NSDocumentSaveNewDocumentsToCloud = false;
      # Use caret notation in text files
      NSTextShowsControlCharacters = true;
      # Disable smart quotes
      NSAutomaticQuoteSubstitutionEnabled = false;
      # Disable smart dashes
      NSAutomaticDashSubstitutionEnabled = false;
      # Fuck "natural" scroll
      "com.apple.swipescrolldirection" = false;
      # Full keyboard control
      AppleKeyboardUIMode = 3;
      # Fast keyboard repeat rate
      KeyRepeat = 1;
      InitialKeyRepeat = 15;
      # Disable auto correct
      NSAutomaticSpellingCorrectionEnabled = false;
      # Enable spring loading for directories
      "com.apple.springing.enabled" = true;
      "com.apple.springing.delay" = 0.5;
    };
  };
}

yeah here you go ``` ❯ cat /etc/nix/nix.conf # WARNING: this file is generated from the nix.* options in # your nix-darwin configuration. Do not edit it! allowed-users = * auto-optimise-store = false build-users-group = nixbld builders = cores = 0 experimental-features = nix-command flakes max-jobs = auto require-sigs = true sandbox = false sandbox-fallback = false substituters = https://cache.nixos.org/ trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= trusted-substituters = trusted-users = root extra-sandbox-paths = ``` and here is my nix-darwin configuration file from the flake ```nix { pkgs, inputs, ... }: { nixpkgs.overlays = [(final: prev: {uptime_r = prev.callPackage ./uptime_r.nix {};})]; # List packages installed in system profile. To search by name, run: # $ nix-env -qaP | grep wget environment.systemPackages = [ pkgs.vim pkgs.uptime_r pkgs.go pkgs.jq ]; # Necessary for using flakes on this system. nix.settings.experimental-features = "nix-command flakes"; # Enable alternative shell support in nix-darwin. programs.zsh.enable = true; programs.fish.enable = true; system.primaryUser = "imran"; # Set Git commit hash for darwin-version. system.configurationRevision = inputs.self.rev or inputs.self.dirtyRev or null; # Used for backwards compatibility, please read the changelog before changing. # $ darwin-rebuild changelog system.stateVersion = 5; # The platform the configuration will be used on. nixpkgs.hostPlatform = "aarch64-darwin"; system.defaults = { finder = { # Path in title ShowPathbar = true; _FXShowPosixPathInTitle = true; # List view FXPreferredViewStyle = "Nlsv"; AppleShowAllFiles = true; AppleShowAllExtensions = true; # DisableAllAnimations = true; QuitMenuItem = true; # Search current folder first FXDefaultSearchScope = "SCcf"; # Don't show warning when changing extension FXEnableExtensionChangeWarning = false; }; dock = { mouse-over-hilite-stack = true; tilesize = 32; mineffect = "scale"; enable-spring-load-actions-on-all-items = true; # show-process-indicator = true; launchanim = false; # Mission control animation speed expose-animation-duration = 0.1; # Mission control group by app expose-group-apps = false; # Don't show dashboard as a space dashboard-in-overlay = true; # Don't rearrange spaces based on mru mru-spaces = false; autohide-delay = 0.0; autohide-time-modifier = 0.0; autohide = true; }; screencapture = { disable-shadow = true; type = "png"; }; universalaccess = { reduceMotion = true; # Disable transparency in system menus reduceTransparency = true; # Zoom with scroll and ctrl closeViewScrollWheelToggle = true; # Zoom into keyboard focus closeViewZoomFollowsFocus = true; }; NSGlobalDomain = { ApplePressAndHoldEnabled = false; # Sidebar icon size medium NSTableViewDefaultSizeMode = 2; # Increase window resize speed NSWindowResizeTime = 0.001; # Expand save dialogue NSNavPanelExpandedStateForSaveMode = true; NSNavPanelExpandedStateForSaveMode2 = true; # Expand print panel PMPrintingExpandedStateForPrint = true; PMPrintingExpandedStateForPrint2 = true; # Dont save docs to icloud by default NSDocumentSaveNewDocumentsToCloud = false; # Use caret notation in text files NSTextShowsControlCharacters = true; # Disable smart quotes NSAutomaticQuoteSubstitutionEnabled = false; # Disable smart dashes NSAutomaticDashSubstitutionEnabled = false; # Fuck "natural" scroll "com.apple.swipescrolldirection" = false; # Full keyboard control AppleKeyboardUIMode = 3; # Fast keyboard repeat rate KeyRepeat = 1; InitialKeyRepeat = 15; # Disable auto correct NSAutomaticSpellingCorrectionEnabled = false; # Enable spring loading for directories "com.apple.springing.enabled" = true; "com.apple.springing.delay" = 0.5; }; }; } ```

raito commented

2025-08-18 22:34:24 +00:00

Owner

Alright, no sandboxing so… our CI should catch your hangout… Urgh.

raito commented

2025-08-18 22:44:21 +00:00

Owner

@imran-iq could you perhaps provide a build with -L where we can see everything? thanks!

@imran-iq could you perhaps provide a build with `-L` where we can see everything? thanks!

imran-iq commented

2025-08-19 01:08:21 +00:00

Author

Sure thing, I am attaching as a file as the output is long, but basically at that last test it seems to just wait forever

build_log.txt

298 KiB

imran-iq commented

2025-08-19 20:52:06 +00:00

Author

Did a bisect to find where the build starts hanging for me and its this:

start: c3bfb6fe17
end: 1f47ecef4e

~/c/lix on  HEAD (ce6dcf1) (BISECTING)
❯ git bisect good
1f47ecef4ef5f67b34653b9c61d6d99b2720eb44 is the first bad commit
commit 1f47ecef4ef5f67b34653b9c61d6d99b2720eb44
Author: WeetHet <stas.ale66@gmail.com>
Date:   Sun Aug 3 13:33:58 2025 +0300

    libstore/build: adjust setupConfiguredCertificateAuthority

    Always use tmpDir on darwin. Call setupConfiguredCertificateAuthority even if useChroot = 1 on non-linux.
    Even though macOS builds are not executed in a chroot, enabling the sandbox
    sets `useChroot = 1`. Basically, useChroot is set when the sandbox is enabled,
    not really when a chroot build is executed

    Change-Id: I8d4c1e617abcc05dfabd998a8ce94bb11587f9d1

 lix/libstore/build/local-derivation-goal.cc | 23 +++++++++++++----------
 1 file changed, 13 insertions(+), 10 deletions(-)

Did a bisect to find where the build starts hanging for me and its this: start: c3bfb6fe17a9f768afc3d9c3fc24929d44570e72 end: 1f47ecef4ef5f67b34653b9c61d6d99b2720eb44 ``` ~/c/lix on  HEAD (ce6dcf1) (BISECTING) ❯ git bisect good 1f47ecef4ef5f67b34653b9c61d6d99b2720eb44 is the first bad commit commit 1f47ecef4ef5f67b34653b9c61d6d99b2720eb44 Author: WeetHet <stas.ale66@gmail.com> Date: Sun Aug 3 13:33:58 2025 +0300 libstore/build: adjust setupConfiguredCertificateAuthority Always use tmpDir on darwin. Call setupConfiguredCertificateAuthority even if useChroot = 1 on non-linux. Even though macOS builds are not executed in a chroot, enabling the sandbox sets `useChroot = 1`. Basically, useChroot is set when the sandbox is enabled, not really when a chroot build is executed Change-Id: I8d4c1e617abcc05dfabd998a8ce94bb11587f9d1 lix/libstore/build/local-derivation-goal.cc | 23 +++++++++++++---------- 1 file changed, 13 insertions(+), 10 deletions(-) ```

raito commented

2025-08-19 20:58:29 +00:00

Owner

Urgh, I will send a revert then I think and ping the developer for it.

lix-bot commented

2025-08-19 21:00:29 +00:00

Member

This issue was mentioned on Gerrit on the following CLs:

commit message in cl/4004 ("Revert "libstore/build: adjust setupConfiguredCertificateAuthority"")
commit message in cl/4029 ("Revert "tests: remove obsolete code to create custom build direc..."")
commit message in cl/4028 ("Revert "libstore: don’t include derivation names in build direct..."")
commit message in cl/4035 ("Revert "libstore: simplify makeTemp{,Sibling}Path callers"")
commit message in cl/4034 ("Revert "libstore: use makeTemp{,Sibling}Path more"")
commit message in cl/4033 ("Revert "libstore: simplify fallback build directory logic"")
commit message in cl/4032 ("Revert "libutil: use makeTempPath in createTempSubdir"")
commit message in cl/4031 ("Revert "libstore: simplify createTempDir interface"")
commit message in cl/4030 ("Revert "libstore: make temporary path prefixes optional"")
commit message in cl/4039 ("Revert "libutil: add makeTempSiblingPath helper"")
commit message in cl/4038 ("Revert "libstore: use makeTempSiblingPath in replaceValidPath"")
commit message in cl/4037 ("Revert "libutil: extract Base32 helpers from Hash"")
commit message in cl/4036 ("Revert "libutil: use OS‐provided entropy for temporary filenames"")

This issue was mentioned on Gerrit on the following CLs: * commit message in [cl/4004](https://gerrit.lix.systems/c/lix/+/4004) ("Revert "libstore/build: adjust setupConfiguredCertificateAuthority"") * commit message in [cl/4029](https://gerrit.lix.systems/c/lix/+/4029) ("Revert "tests: remove obsolete code to create custom build direc..."") * commit message in [cl/4028](https://gerrit.lix.systems/c/lix/+/4028) ("Revert "libstore: don’t include derivation names in build direct..."") * commit message in [cl/4035](https://gerrit.lix.systems/c/lix/+/4035) ("Revert "libstore: simplify `makeTemp{,Sibling}Path` callers"") * commit message in [cl/4034](https://gerrit.lix.systems/c/lix/+/4034) ("Revert "libstore: use `makeTemp{,Sibling}Path` more"") * commit message in [cl/4033](https://gerrit.lix.systems/c/lix/+/4033) ("Revert "libstore: simplify fallback build directory logic"") * commit message in [cl/4032](https://gerrit.lix.systems/c/lix/+/4032) ("Revert "libutil: use `makeTempPath` in `createTempSubdir`"") * commit message in [cl/4031](https://gerrit.lix.systems/c/lix/+/4031) ("Revert "libstore: simplify `createTempDir` interface"") * commit message in [cl/4030](https://gerrit.lix.systems/c/lix/+/4030) ("Revert "libstore: make temporary path prefixes optional"") * commit message in [cl/4039](https://gerrit.lix.systems/c/lix/+/4039) ("Revert "libutil: add `makeTempSiblingPath` helper"") * commit message in [cl/4038](https://gerrit.lix.systems/c/lix/+/4038) ("Revert "libstore: use `makeTempSiblingPath` in `replaceValidPath`"") * commit message in [cl/4037](https://gerrit.lix.systems/c/lix/+/4037) ("Revert "libutil: extract Base32 helpers from `Hash`"") * commit message in [cl/4036](https://gerrit.lix.systems/c/lix/+/4036) ("Revert "libutil: use OS‐provided entropy for temporary filenames"")

imran-iq commented

2025-08-19 21:04:33 +00:00

Author

What's funny though is I can build past it eg: 001c70d2ba

❯ nix --version
nix (Lix, like Nix) 2.94.0-dev-pre20250819-001c70d
System type: aarch64-darwin
Additional system types: x86_64-darwin
Features: gc, signed-caches
System configuration file: /etc/nix/nix.conf
User configuration files: /Users/imran/.config/nix/nix.conf:/Users/imran/.nix-profile/etc/xdg/nix/nix.conf:/run/current-system/sw/etc/xdg/nix/nix.conf:/nix/var/nix/profiles/default/etc/xdg/nix/nix.conf
Store directory: /nix/store
State directory: /nix/var/nix
Data directory: /nix/store/5kfjl586a27m8ggw9d2dwrrdxc2myqi2-lix-2.94.0-dev-pre20250819-001c70d/share

so maybe non issue, just dont try to upgrade to the previously mentioned sha

What's funny though is I can build past it eg: 001c70d2bab8a06c648cbc456e59a271792fe99d ``` ❯ nix --version nix (Lix, like Nix) 2.94.0-dev-pre20250819-001c70d System type: aarch64-darwin Additional system types: x86_64-darwin Features: gc, signed-caches System configuration file: /etc/nix/nix.conf User configuration files: /Users/imran/.config/nix/nix.conf:/Users/imran/.nix-profile/etc/xdg/nix/nix.conf:/run/current-system/sw/etc/xdg/nix/nix.conf:/nix/var/nix/profiles/default/etc/xdg/nix/nix.conf Store directory: /nix/store State directory: /nix/var/nix Data directory: /nix/store/5kfjl586a27m8ggw9d2dwrrdxc2myqi2-lix-2.94.0-dev-pre20250819-001c70d/share ``` so maybe non issue, just dont try to upgrade to the previously mentioned sha

raito commented

2025-08-19 21:28:22 +00:00

Owner

@imran-iq wrote in #966 (comment):

What's funny though is I can build past it eg: 001c70d2ba

❯ nix --version
nix (Lix, like Nix) 2.94.0-dev-pre20250819-001c70d
System type: aarch64-darwin
Additional system types: x86_64-darwin
Features: gc, signed-caches
System configuration file: /etc/nix/nix.conf
User configuration files: /Users/imran/.config/nix/nix.conf:/Users/imran/.nix-profile/etc/xdg/nix/nix.conf:/run/current-system/sw/etc/xdg/nix/nix.conf:/nix/var/nix/profiles/default/etc/xdg/nix/nix.conf
Store directory: /nix/store
State directory: /nix/var/nix
Data directory: /nix/store/5kfjl586a27m8ggw9d2dwrrdxc2myqi2-lix-2.94.0-dev-pre20250819-001c70d/share

so maybe non issue, just dont try to upgrade to the previously mentioned sha

It clearly doesn't spark joy, I wonder if there's a fix somewhere after that commit SHA1

@imran-iq wrote in https://git.lix.systems/lix-project/lix/issues/966#issuecomment-14128: > What's funny though is I can build past it eg: [`001c70d2ba`](/lix-project/lix/commit/001c70d2bab8a06c648cbc456e59a271792fe99d) > > ```text > ❯ nix --version > nix (Lix, like Nix) 2.94.0-dev-pre20250819-001c70d > System type: aarch64-darwin > Additional system types: x86_64-darwin > Features: gc, signed-caches > System configuration file: /etc/nix/nix.conf > User configuration files: /Users/imran/.config/nix/nix.conf:/Users/imran/.nix-profile/etc/xdg/nix/nix.conf:/run/current-system/sw/etc/xdg/nix/nix.conf:/nix/var/nix/profiles/default/etc/xdg/nix/nix.conf > Store directory: /nix/store > State directory: /nix/var/nix > Data directory: /nix/store/5kfjl586a27m8ggw9d2dwrrdxc2myqi2-lix-2.94.0-dev-pre20250819-001c70d/share > ``` > > so maybe non issue, just dont try to upgrade to the previously mentioned sha It clearly doesn't spark joy, I wonder if there's a fix somewhere after that commit SHA1

imran-iq commented

2025-08-20 00:12:28 +00:00

Author

Ok so the plot thickens.

With 001c70d2ba I am unable to run the following (followed by a darwin-rebuild build, how I was bisecting )

~/.c/nix-darwin on  master
❯ nix flake lock --override-input lix git+https://git.lix.systems/lix-project/lix?rev=20f84eb6bfa874a1c4f45b38b949335f580ea0d7
error:
       … while fetching the input 'git+file:///Users/imran/.config/nix-darwin'

       error: failed to extract archive (Cannot extract through symlink /tmp/nix-6qdsk1v5l602z7z0365abkwgwg/Makefile)

how ever if I rollback to an earlier version I can

~/.c/nix-darwin on  master
❯ nix --version
nix (Lix, like Nix) 2.94.0-dev-pre20250817-3de996f
System type: aarch64-darwin
Additional system types: x86_64-darwin
Features: gc, signed-caches
System configuration file: /etc/nix/nix.conf
User configuration files: /Users/imran/.config/nix/nix.conf:/Users/imran/.nix-profile/etc/xdg/nix/nix.conf:/run/current-system/sw/etc/xdg/nix/nix.conf:/nix/var/nix/profiles/default/etc/xdg/nix/nix.conf
Store directory: /nix/store
State directory: /nix/var/nix
Data directory: /nix/store/qn2kzgga2hynys1zwwfki14q1rv1vbq8-lix-2.94.0-dev-pre20250817-3de996f/share

❯ nix flake lock --override-input lix git+https://git.lix.systems/lix-project/lix?rev=20f84eb6bfa874a1c4f45b38b949335f580ea0d7
warning: updating lock file '/Users/imran/.config/nix-darwin/flake.lock':
• Updated input 'lix':
    'https://git.lix.systems/api/v1/repos/lix-project/lix/archive/001c70d2bab8a06c648cbc456e59a271792fe99d.tar.gz?narHash=sha256-1iSxO09S7MXC5ovHHEiugBcUHAesVfKivS/fm6KA5AQ%3D&rev=001c70d2bab8a06c648cbc456e59a271792fe99d' (2025-08-19)
  → 'git+https://git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=20f84eb6bfa874a1c4f45b38b949335f580ea0d7' (2025-08-19)
warning: Git tree '/Users/imran/.config/nix-darwin' is dirty

so something is up this week with macos and tmp dirs

Ok so the plot thickens. With 001c70d2ba I am unable to run the following (followed by a darwin-rebuild build, how I was bisecting ) ``` ~/.c/nix-darwin on  master ❯ nix flake lock --override-input lix git+https://git.lix.systems/lix-project/lix?rev=20f84eb6bfa874a1c4f45b38b949335f580ea0d7 error: … while fetching the input 'git+file:///Users/imran/.config/nix-darwin' error: failed to extract archive (Cannot extract through symlink /tmp/nix-6qdsk1v5l602z7z0365abkwgwg/Makefile) ``` how ever if I rollback to an earlier version I can ``` ~/.c/nix-darwin on  master ❯ nix --version nix (Lix, like Nix) 2.94.0-dev-pre20250817-3de996f System type: aarch64-darwin Additional system types: x86_64-darwin Features: gc, signed-caches System configuration file: /etc/nix/nix.conf User configuration files: /Users/imran/.config/nix/nix.conf:/Users/imran/.nix-profile/etc/xdg/nix/nix.conf:/run/current-system/sw/etc/xdg/nix/nix.conf:/nix/var/nix/profiles/default/etc/xdg/nix/nix.conf Store directory: /nix/store State directory: /nix/var/nix Data directory: /nix/store/qn2kzgga2hynys1zwwfki14q1rv1vbq8-lix-2.94.0-dev-pre20250817-3de996f/share ❯ nix flake lock --override-input lix git+https://git.lix.systems/lix-project/lix?rev=20f84eb6bfa874a1c4f45b38b949335f580ea0d7 warning: updating lock file '/Users/imran/.config/nix-darwin/flake.lock': • Updated input 'lix': 'https://git.lix.systems/api/v1/repos/lix-project/lix/archive/001c70d2bab8a06c648cbc456e59a271792fe99d.tar.gz?narHash=sha256-1iSxO09S7MXC5ovHHEiugBcUHAesVfKivS/fm6KA5AQ%3D&rev=001c70d2bab8a06c648cbc456e59a271792fe99d' (2025-08-19) → 'git+https://git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=20f84eb6bfa874a1c4f45b38b949335f580ea0d7' (2025-08-19) warning: Git tree '/Users/imran/.config/nix-darwin' is dirty ``` so _something_ is up this week with macos and tmp dirs

imran-iq commented

2025-08-20 00:47:06 +00:00

Author

so:
1f47ecef4e hangs on the final test
d8b1fb7799 (next commit) does not hang on the test, i have no idea why

but anything newer than 1f47ecef4e causes stuff like nix flake update to fail with Cannot extract through symlink

looks like /tmp is a symlink

❯ ls -lh /tmp
lrwxr-xr-x@ 1 root  wheel    11B May  4 00:39 /tmp@ -> private/tmp

which reminds me that there was some create volume thing needed to make /nix work on macos, maybe something changed in macos 15.5 (not an apple person, this is a work computer).

so maybe might need that revert after all? (i.e cant extract to /tmp cuz of symlink issues)

so: 1f47ecef4ef5f67b34653b9c61d6d99b2720eb44 hangs on the final test d8b1fb77995d819aac4b990fe9d960a68e751fbc (next commit) does not hang on the test, i have no idea why but anything newer than 1f47ecef4ef5f67b34653b9c61d6d99b2720eb44 causes stuff like `nix flake update` to fail with `Cannot extract through symlink` looks like `/tmp` is a symlink ``` ❯ ls -lh /tmp lrwxr-xr-x@ 1 root wheel 11B May 4 00:39 /tmp@ -> private/tmp ``` which reminds me that there was some create volume thing needed to make /nix work on macos, maybe something changed in macos 15.5 (not an apple person, this is a work computer). so maybe might need that revert after all? (i.e cant extract to /tmp cuz of symlink issues)

raito commented

2025-08-20 01:13:10 +00:00

Owner

Thanks for the debugging, I will try to take a look tomorrow and see how we can push the needle. If you can try to revert the 1f47ecef4 and run with it, I believe you will have the same "cannot extract through symlink" though which might be related to another series pertaining to macOS fixes.

cc @emilazy

Thanks for the debugging, I will try to take a look tomorrow and see how we can push the needle. If you can try to revert the 1f47ecef4 and run with it, I believe you will have the same "cannot extract through symlink" though which might be related to another series pertaining to macOS fixes. cc @emilazy

jade added the

OS/macOS

label

2025-08-20 18:37:47 +00:00