search

fluidattacks / makes

A software supply chain framework powered by Nix.
https://makes.fluidattacks.tech/
MIT License
453 stars 43 forks source link

nix build sandbox on macOS #1354

Closed dacevedo12 closed 3 months ago

dacevedo12 commented 3 months ago

some large derivations (mainly the ones that build from node packages) exceed this limit when running on a sandbox https://github.com/NixOS/nix/issues/4119

even if the user disables sandbox mode at /etc/nix/nix.conf, the --option sandbox takes priority

https://github.com/fluidattacks/makes/blob/main/src/cli/main/cli.py#L291

current workaround is to export MAKES_K8S_COMPAT=1 before running the command through makes

dsalaza4 commented 3 months ago

I would rather getting rid of the sandbox option on the makes CLI and let users configure nix however they want on their nix.conf

dsalaza4 commented 3 months ago

Sandboxing configurations were removed. Using sandbox or not is up to the user's nix.conf