-
-
Notifications
You must be signed in to change notification settings - Fork 15.5k
Fix Darwin stdenv to work on 10.13 (backport to 17.03) #27630
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix Darwin stdenv to work on 10.13 (backport to 17.03) #27630
Conversation
The main changes are in libSystem, which lost the coretls component in 10.13 and some hardening changes that quietly crash any program that uses %n in a non-constant format string, so we've needed to patch a lot of programs that use gnulib. (cherry picked from commit 0419452)
I suggest we merge this, wait for Nix maintenance branch to build and test before next Nix release. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm but as I noted in chat, I don't feel very qualified to review it :D
This is probably safe to merge now that most of trunk has built. |
We might also have to backport the bootstrap fix. |
Good point. That seems like a separate PR though |
Yeah, that's fine. |
This causes a build failure on older OS X:
|
I think that's fixed by the bootstrap tools I was referring to #27645 |
Note that this has been a disaster on Hydra, due to libc++abi failing to build: https://hydra.nixos.org/eval/1378816 |
Fix Darwin stdenv to work on 10.13 (backport to 17.03)
The main changes are in libSystem, which lost the coretls component in 10.13 and some hardening changes that quietly crash any program that uses %n in a non-constant format string, so we've needed to patch a lot of programs that use gnulib.
This was tested fairly significantly before the cherry-pick but I haven't done much or solicited much testing for this version against 17.03. Testing welcome!
(cherry picked from commit 0419452)
Motivation for this change
Nix (the tool) builds against 17.03 so if we want to get a Nix build and installer that works on 10.13 and that isn't built and hosted by me, we need to get this change backported to 17.03 😄
Things done
Please check what applies. Note that these are not hard requirements but mereley serve as information for reviewers.
(nix.useSandbox on NixOS,
or option
build-use-sandbox
innix.conf
on non-NixOS)
nix-shell -p nox --run "nox-review wip"
./result/bin/
)