{"id":13837835,"url":"https://github.com/nix-community/darwin-build-box","last_synced_at":"2025-07-10T19:30:55.271Z","repository":{"id":112501442,"uuid":"574287747","full_name":"nix-community/darwin-build-box","owner":"nix-community","description":"Darwin build box for Nix community members","archived":true,"fork":false,"pushed_at":"2023-11-06T03:50:52.000Z","size":11,"stargazers_count":25,"open_issues_count":0,"forks_count":17,"subscribers_count":5,"default_branch":"main","last_synced_at":"2024-10-29T16:03:42.483Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Nix","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nix-community.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null},"funding":{"open_collective":"nix-community"}},"created_at":"2022-12-05T00:59:08.000Z","updated_at":"2024-05-16T05:39:22.000Z","dependencies_parsed_at":"2023-05-15T10:00:25.911Z","dependency_job_id":"54cb0f13-dbc4-45f7-a6a0-757dfd0cc42a","html_url":"https://github.com/nix-community/darwin-build-box","commit_stats":{"total_commits":22,"total_committers":16,"mean_commits":1.375,"dds":0.8636363636363636,"last_synced_commit":"e5708c4afd0f4362ee0ab63771431251fc571ec8"},"previous_names":["nix-community/darwin-build-box"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nix-community%2Fdarwin-build-box","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nix-community%2Fdarwin-build-box/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nix-community%2Fdarwin-build-box/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nix-community%2Fdarwin-build-box/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nix-community","download_url":"https://codeload.github.com/nix-community/darwin-build-box/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225653891,"owners_count":17502939,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T15:01:27.797Z","updated_at":"2024-11-21T00:31:17.076Z","avatar_url":"https://github.com/nix-community.png","language":"Nix","funding_links":["https://opencollective.com/nix-community","https://opencollective.com/nix-macos"],"categories":["Nix"],"sub_categories":[],"readme":"# Deprecated\n\nThe Nix Community organisation now provides a new machine as darwin build box that is managed in [nix-community/infra](https://github.com/nix-community/infra), see https://nix-community.org/community-builder for details.\n\n\u003cdetails\u003e\u003csummary\u003ePrevious README:\u003c/summary\u003e\n# Want access?\n\n1. You must read literally this entire README. It is critically\n   important that you do so.\n2. Open a PR adding yourself to `users.nix`.\n\nI'll grant access to well known members of the community, and people\nwell known members in the community trust.\n\n## Notes on Security and Safety\n\n***TLDR:*** a trusted but malicious actor could hack your system through\nthis builder. Do not use this builder for secret builds. Be careful\nwhat you use this system for. Do not trust the results. For a more\nnuanced understanding, read on.\n\nFor someone to use a server as a remote builder, they must be a\n`trusted-user` on the remote builder. `man nix.conf` has this to say\nabout Trusted Users:\n\n\u003e User that have additional rights when connecting to the Nix daemon,\n\u003e such as the ability to specify additional binary caches, or to\n\u003e import unsigned NARs.\n\u003e\n\u003e Warning: The users listed here have the ability to compromise the\n\u003e security of a multi-user Nix store. For instance, they could install\n\u003e Trojan horses subsequently executed by other users. So you should\n\u003e consider carefully whether to add users to this list.\n\nNix's model of remote builders requires users to be able to directly\nimport files in to the Nix store, and there is no guarantee what they\nimport hasn't been maliciously modified.\n\nThe following is written as me, @winterqt:\n\nI trust everyone who has access, but with limits:\n\n1. ***DO NOT*** trust this builder for systems that contain private\n   data or tools.\n\n2. ***DO NOT*** trust this builder to make binary bootstrap tools,\n   because we have to trust those bootstrap tools for a long time to\n   not be compromised.\n\n3. ***DO NOT*** trust this builder to make tools used to make binary\n   bootstrap tools, because we have to trust those bootstrap tools for\n   a long time to not be compromised.\n\nIF YOU ARE: making binary bootstrap tools, please only use tools\nbuilt by Hydra on a system which have never been exposed to things\nbuilt from this server.\n\n# Configuring your computer for remote builds\n\nFirst, put this in your `configuration.nix`:\n\n```nix\n{\n  programs.ssh.knownHosts.\"darwin-build-box.winter.cafe\".publicKey =\n    \"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB0io9E0eXiDIEHvsibXOxOPveSjUPIr1RnNKbUkw3fD\";\n\n  nix = {\n    distributedBuilds = true;\n    buildMachines = [\n      {\n        hostName = \"darwin-build-box.winter.cafe\";\n        maxJobs = 4;\n        sshKey = \"/root/a-private-key\";\n        sshUser = \"your-user-name\";\n        systems = [ \"aarch64-darwin\" \"x86_64-darwin\" ];\n      }\n    ];\n  };\n}\n```\n\n**Note:** Make sure the SSH key specified above does *not* have a\npassword, otherwise `nix-build` will give an error along the lines of:\n\n\u003e unable to open SSH connection to\n\u003e 'ssh://your-user-name@darwin-build-box.winter.cafe': cannot connect to\n\u003e 'your-user-name@darwin-build-box.winter.cafe'; trying other available\n\u003e machines...\n\nThen run an initial SSH connection as root to setup the trust\nfingerprint:\n\n```\n$ sudo su\n# ssh your-user-name@darwin-build-box.winter.cafe -i /root/a-private-key\n```\n\nThe fingerprint should always be:\n\n```\nssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB0io9E0eXiDIEHvsibXOxOPveSjUPIr1RnNKbUkw3fD\n```\n\n***If it is not, please open an issue!***\n\nFinally, `nix-build . -A hello --argstr system aarch64-darwin`.\n\nIf this doesn't work, reach out and I can help debug.\n\n# Want to support this?\n\nThe hosting costs for this machine are paid for by the [Nix 🖤 macOS Collective](https://opencollective.com/nix-macos). If you'd like to support not only this machine but also toonn's work on the SDK bump, consider contributing.\n\n# Acknowledgements\n\n- [Domen Kožar](https://github.com/domenkozar), for running the [Nix 🖤 macOS Collective](https://opencollective.com/nix-macos).\n- [Graham Christensen](https://github.com/grahamc), for running the [aarch64 build box](https://github.com/nix-community/aarch64-build-box), where I took the structure of this README from.\n\u003c/details\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnix-community%2Fdarwin-build-box","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnix-community%2Fdarwin-build-box","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnix-community%2Fdarwin-build-box/lists"}