guiwf/lix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make <nix/buildenv.nix> a builtin builder

Browse Source 
This avoids sandbox annoyances.
This commit is contained in:
Eelco Dolstra
2018-03-20 17:28:09 +01:00
parent 9d40787938
commit 668ac3ea2c
7 changed files with 69 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files
corepkgs/buildenv.nix
+2 -21
View File
@@ -1,11 +1,9 @@
with import <nix/config.nix>;
{ derivations, manifest }:
derivation {
name = "user-environment";
system = builtins.currentSystem;
builder = nixLibexecDir + "/nix/buildenv";
system = "builtin";
builder = "builtin:buildenv";
inherit manifest;
@@ -24,21 +22,4 @@ derivation {
# Also don't bother substituting.
allowSubstitutes = false;
__sandboxProfile = ''
(allow sysctl-read)
(allow file-read*
(literal "/usr/lib/libSystem.dylib")
(literal "/usr/lib/libSystem.B.dylib")
(literal "/usr/lib/libobjc.A.dylib")
(literal "/usr/lib/libobjc.dylib")
(literal "/usr/lib/libauto.dylib")
(literal "/usr/lib/libc++abi.dylib")
(literal "/usr/lib/libc++.1.dylib")
(literal "/usr/lib/libDiagnosticMessagesClient.dylib")
(subpath "/usr/lib/system")
(subpath "/dev"))
'';
inherit chrootDeps;
}