diff options
| author | Alex James <git@alextjam.es> | 2024-03-30 15:30:44 -0500 |
|---|---|---|
| committer | Alex James <git@alextjam.es> | 2024-12-05 19:23:45 -0600 |
| commit | 153867a4e3e5ab4aa9706f214e3baae773caa47b (patch) | |
| tree | 49e16e32aa6ad5ec1a9200efce4babe8f00ae3df /pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch | |
| parent | feec4e94261a8d6441a29fbdd6bf42ac80fc3f38 (diff) | |
cargo: avoid using system curl on darwin
Modern versions of macOS link the system-provided curl library against
the system-provided libressl library. On recent versions of macOS, the
system libressl library reads from /private/etc/ssl/openssl.cnf. As this
path is not included in the default Nix sandbox profile, applications
that use the system curl library will report a permission error [1].
This issue affects the bootstrap version of cargo and can be seen while
building rustc for darwin with the sandbox enabled [2]. This change
works around the sandbox failure by using install_name_tool to patch the
cargo binary to use curl provided by Nix, which was the approach used in
oxalica/rust-overlay [3].
[1]: https://github.com/NixOS/nix/issues/9625
[2]: https://gist.github.com/al3xtjames/06bf71ceffd745eef20be8ce03b982c5
[3]: https://github.com/oxalica/rust-overlay/pull/149
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik/python-mapnik_std_optional.patch')
0 files changed, 0 insertions, 0 deletions