bug: Docs fail to build on Darwin

[YorikSar]

Are you following the right branch?

• My Nixpkgs and Home Manager versions are in sync

Is there an existing issue for this?

• I have searched the existing issues

Issue description

After recent bump of nmd in #3608 manual doesn't build properly on Darwin with sandbox, probably because of NixOS/nix#5884. Reverting to commit just before that (7026e1a934abfa02623c9870378dbcdac3cd7f80) works fine.

error: builder for '/nix/store/z80844xks8nvld9f24d26zmc8k2g0vk3-options-db.xml.drv' failed with exit code 134;
       last 2 log lines:
       > libc++abi: terminating with uncaught exception of type nix::SysError: error: getting status of /nix/var/nix/profiles/per-user/root/channels/nixpkgs: Operation not permitted
       > /private/tmp/nix-build-options-db.xml.drv-2/.attr-0l2nkwhif96f51f4amnlf414lhl4rv9vh8iffyp431v6s28gsr90: line 6: 29337 Abort trap: 6           /nix/store/bphm5aivgbb7afrlwazqg63pwr0xhfz3-nix-2.12.0/bin/nix-instantiate --store dummy:// --eval --xml --strict --expr 
'{file}: builtins.fromJSON (builtins.readFile file)' --argstr file /nix/store/5x6hrcjkfamfzg1xfv0cwz198wggs653-options.json > options.xml
       For full logs, run 'nix log /nix/store/z80844xks8nvld9f24d26zmc8k2g0vk3-options-db.xml.drv'.

Maintainer CC

@rycee

System information

- system: `"aarch64-darwin"`
 - host os: `Darwin 22.2.0, macOS 13.1`
 - multi-user?: `yes`
 - sandbox: `yes`
 - version: `nix-env (Nix) 2.12.0`
 - channels(root): `"nixpkgs-22.05pre336690.f225322e3be"`
 - nixpkgs: `/Users/yorik/.nix-defexpr/channels_root/nixpkgs`

[ncfavier]

PR'd a fix: https://gitlab.com/rycee/nmd/-/merge_requests/11

Could you confirm this works? You'll need to clone home-manager locally (see https://nix-community.github.io/home-manager/index.html#sec-contrib-getting-started) and change

home-manager/docs/default.nix

Lines 8 to 12 in 275ab72

	nmdSrc = fetchTarball {
	url =
	"https://git.sr.ht/~rycee/nmd/archive/5129cc2a68837c223c0dfba9a37857e5c8d9891e.tar.gz";
	sha256 = "0z1gqwwnjrrz07w847xf0dqgzimclf4qvqvdm46scgqcbhnhwqk0";
	};

to point to https://gitlab.com/ncfavier/nmd/-/archive/options-restrict-eval/nmd-options-restrict-eval.tar.gz.

[YorikSar]

@ncfavier I've replaced those lines with:

  nmdSrc = fetchTarball {
    url = "https://gitlab.com/ncfavier/nmd/-/archive/options-restrict-eval/nmd-options-restrict-eval.tar.gz";
    sha256 = "0p30qj5iyc03104xlb07prcpqxv8k424p5w1764cadk5cciy1fp1";
  };

and got similar error with --restrict-eval from your code:

 % nix build --no-link .\#docs-manpages
error: builder for '/nix/store/866dpsv5n4rm4hiblkmjcjwfg97kr5br-options-db.xml.drv' failed with exit code 134;
       last 2 log lines:
       > libc++abi: terminating with uncaught exception of type nix::SysError: error: getting status of /nix/var/nix/profiles/per-user/root/channels/nixpkgs: Operation not permitted
       > /private/tmp/nix-build-options-db.xml.drv-1/.attr-0l2nkwhif96f51f4amnlf414lhl4rv9vh8iffyp431v6s28gsr90: line 6: 76843 Abort trap: 6           /nix/store/j5zrl15fzngbh39b56v0af4q2jdhh30k-nix-2.12.0/bin/nix-instantiate --store dummy:// --restrict-eval --eval --xml --strict --expr 'builtins.fromJSON (builtins.readFile <options>)' -I options=/nix/store/cczqs0qivdizsqhq2r7m0355zqdvyz9a-options.json > options.xml
       For full logs, run 'nix log /nix/store/866dpsv5n4rm4hiblkmjcjwfg97kr5br-options-db.xml.drv'.

[ncfavier]

...okay, setting restrict-eval doesn't actually affect anything because getDefaultNixPath is called when initialising the nixPath setting, long before CLI flags or config options are parsed. 🤦🤦🤦

Could you try https://gitlab.com/ncfavier/nmd/-/archive/options-tmpdir/nmd-options-tmpdir.tar.gz please? I've re-set NIX_STATE_DIR to point inside the sandbox, this should do it for now. (EDIT: We might need to set more variables: HOME, NIX_CONF_DIR, NIX_SSL_CERT_FILE)

[YorikSar]

That one works, nix build .#docs-manpages now fails in completely different spot, probably unrelated to this issue:

error: builder for '/nix/store/63ksbsi4md6m10h3x50k1bkz4lgnnh5f-manual-combined.drv' failed with exit code 3;
       last 10 log lines:
       > /nix/store/r0pd5g8mgx1l73i5ypb73zw4h498vjgf-manual-combined/manual-combined.xml:1402: element listitem: Relax-NG validity error : Did not expect element listitem there
       >   1398        not bound to an attribute.</simpara>
       >   1399    <simpara>Some arguments are already passed by default, of which the
       >   1400     following <emphasis>cannot</emphasis> be changed with this option:</simpara>
       >   1401    <itemizedlist>
       >   1402  <listitem><para><simpara><varname>lib</varname>: The nixpkgs library.</simpara>
       >   1403 </para></listitem>
       >   1404      <listitem><para><simpara><varname>config</varname>: The results of all options after merging the values from all modules together.</simpara>
       >
       > /nix/store/r0pd5g8mgx1l73i5ypb73zw4h498vjgf-manual-combined/manual-combined.xml fails to validate
       For full logs, run 'nix log /nix/store/63ksbsi4md6m10h3x50k1bkz4lgnnh5f-manual-combined.drv'.

but at least if I build home configurations from my flake overriding input with new nmd, it works now.

[ncfavier]

Oh yeah I've hit that one too, the locked nixpkgs just needs an update (EDIT: done). nix-build -A docs.html should work.

[rycee]

Merged the nmd update to master now. Give it a try, hopefully it'll work 🙂

[YorikSar]

It works just fine, thanks!