The Gradle client could not connect to its single-use daemon: the
daemon binds to 127.0.0.1, but the Nix darwin sandbox denies connect()
to 127.0.0.1 on hosts where "localhost" resolves to ::1 first. Since
Nix replaced the interface-based loopback filters
`(allow network* (local ip) (local tcp) (local udp))` with
`(allow network* (remote ip "localhost:*"))`, the only permitted
loopback address in that filter is ::1, and literal IPs like
"127.0.0.1:*" are rejected by the sandbox compiler with "host must be
* or localhost in network address".
The extension is affected because its mitmCache causes the Gradle
setup hook to pass JVM system properties on the command line, which
makes Gradle fork a single-use daemon that the client must reach over
loopback TCP.
Fix it by appending an interface-based loopback allowance to the
sandbox profile on Darwin via the sandboxProfile derivation attribute:
(allow network* (local ip))
Linux builds are unaffected and keep an empty sandbox profile.
Assisted-by: OpenCode (GLM-5.3-Flash)
Having the older ABI version as the default seems odd and the different
gcr packages appear to be fundamentally incompatible, so drop the
unsuffixed version similar to webkitgtk and as discussed in [1].
[1] https://github.com/NixOS/nixpkgs/pull/543345#issuecomment-5199018730
ReVa (Reverse Engineering Assistant) is a Ghidra MCP server that enables
AI language models to interact with Ghidra's powerful reverse
engineering capabilities. ReVa uses state of the art techniques to limit
context rot and enable long form reverse engineering tasks.
https://github.com/cyberkaida/reverse-engineering-assistant
Signed-off-by: Brian McGillion <bmg.avoin@gmail.com>
This updates the keybase-gui derivation to follow current Nixpkgs
conventions:
- Replace `rec` with a `finalAttrs: { ... }` lambda.
- Use `finalAttrs.version` when constructing the .deb URL.
- Enable `strictDeps` and `__structuredAttrs` for cleaner dependency
boundaries and improved evaluation consistency.
- No functional changes to the resulting keybase-gui package; this is a
structural modernization consistent with the refactor applied to
keybase itself.
This refactors the keybase derivation to follow current Nixpkgs
conventions:
- Replace `rec` with a `finalAttrs: { ... }` lambda.
- Use `tag = "v${finalAttrs.version}"` instead of `rev = "v${version}"`.
- Enable `strictDeps` and `structuredAttrs` for cleaner dependency
boundaries and improved evaluation consistency.
- No functional changes to the resulting keybase package; this is a
structural modernization aligned with buildGoModule best practices.
