CalvinBackup/apple-internals
1
0
Fork 0
mirror of https://github.com/mroi/apple-internals.git synced 2026-02-12 09:02:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

flake: fix sandboxed builds

Browse Source 
disable sandboxing when we symlink the platform Xcode
This commit is contained in:
Michael Roitzsch
2023-04-29 16:02:22 +02:00
parent af5c420f43
commit 9db223a1dc
1 changed files with 10 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
flake.nix
View File

@@ -23,16 +23,18 @@
};
};
outputs = { self, nixpkgs, acextract, command-line, dsc-extractor, snapshot-header, snap-util }: {
packages.x86_64-darwin = {
packages.x86_64-darwin = let
xcode = (nixpkgs.legacyPackages.x86_64-darwin.xcodeenv.composeXcodeWrapper {
version = "14.3";
}).overrideAttrs (attrs: { __noChroot = true; });
in {
acextract =
with import nixpkgs { system = "x86_64-darwin"; };
let xcode = makeSetupHook {
deps = [ (xcodeenv.composeXcodeWrapper { version = "14.3"; }) ];
} "${xcbuildHook}/nix-support/setup-hook";
let xcodeHook = makeSetupHook { deps = [ xcode ]; } "${xcbuildHook}/nix-support/setup-hook";
in stdenv.mkDerivation {
name = "acextract-${lib.substring 0 8 self.inputs.acextract.lastModifiedDate}";
src = acextract;
nativeBuildInputs = [ xcode ];
nativeBuildInputs = [ xcodeHook ];
preBuild = "LD=$CC";
# FIXME: want to have submodule support for Nix flakes, workaround by explicit instantiation
postUnpack = "rmdir source/CommandLine ; ln -s ${command-line} source/CommandLine";
@@ -75,6 +77,7 @@
cp Products/Release/acextract $out/bin/
'';
dontStrip = true;
__noChroot = true;
};
dsc-extractor =
with import nixpkgs { system = "x86_64-darwin"; };
@@ -88,7 +91,7 @@
stdenv.mkDerivation {
name = "snap-util-${lib.substring 0 8 self.inputs.snap-util.lastModifiedDate}";
src = snap-util;
nativeBuildInputs = [ (xcodeenv.composeXcodeWrapper { version = "14.3"; }) ];
nativeBuildInputs = [ xcode ];
preBuild = "NIX_CFLAGS_COMPILE='-idirafter ${snapshot-header}/bsd'";
installPhase = ''
mkdir -p $out/bin
@@ -122,6 +125,7 @@
EOF
codesign -s - --entitlement snapUtil.entitlements $out/bin/.snapUtil-wrapped
'';
__noChroot = true;
};
};
};