Skip to content

Conversation

@mokagio
Copy link
Contributor

@mokagio mokagio commented Nov 21, 2025

Fails in Xcode with:

/usr/bin/sandbox-exec -p "(version 1)
(deny default)
(import \"system.sb\")
(allow file-read*)
(allow process*)
(allow mach-lookup (global-name \"com.apple.lsd.mapdb\"))
(allow mach-lookup (global-name \"com.apple.mobileassetd.v2\"))
(allow file-write*
    (subpath \"/private/tmp\")
    (subpath \"/private/var/tmp\")
    (subpath \"/private/var/folders/dq/cdqxvx3s5ps75564rpmb_dc00000gn/T\")
    (subpath \"/private/var/folders/dq/cdqxvx3s5ps75564rpmb_dc00000gn/C\")
)
(deny file-write*
    (subpath \"/Users/gio/Developer/a8c/tmp-workbench/GutenbergKit\")
)
(allow file-write*
    (subpath \"/Users/gio/Developer/a8c/tmp-workbench/GutenbergKit/DerivedData/GutenbergKit/Build/Intermediates.noindex/BuildToolPluginIntermediates/gutenbergkit.output/GutenbergKit/BuildToolPlugin\")
    (subpath \"/private/var/folders/dq/cdqxvx3s5ps75564rpmb_dc00000gn/T/TemporaryItems\")
)
" /Applications/Xcode.app/Contents/Developer/usr/bin/make -C /Users/gio/Developer/a8c/tmp-workbench/GutenbergKit build

--- :npm: Installing NPM Dependencies
/bin/sh: npm: command not found
make: *** [npm-dependencies] Error 127

Notice that, even if we could make it so the plugin run on a shell where npm is available, we'd still likely run into issues with the deny file-write* on the source folder.

Possibly related: swiftlang/swift-package-manager#7121

Cannot currently try to build outside of Xcode/xcodebuild because of the UIKit implicit dependency.

Fails in Xcode with:

```
/usr/bin/sandbox-exec -p "(version 1)
(deny default)
(import \"system.sb\")
(allow file-read*)
(allow process*)
(allow mach-lookup (global-name \"com.apple.lsd.mapdb\"))
(allow mach-lookup (global-name \"com.apple.mobileassetd.v2\"))
(allow file-write*
    (subpath \"/private/tmp\")
    (subpath \"/private/var/tmp\")
    (subpath \"/private/var/folders/dq/cdqxvx3s5ps75564rpmb_dc00000gn/T\")
    (subpath \"/private/var/folders/dq/cdqxvx3s5ps75564rpmb_dc00000gn/C\")
)
(deny file-write*
    (subpath \"/Users/gio/Developer/a8c/tmp-workbench/GutenbergKit\")
)
(allow file-write*
    (subpath \"/Users/gio/Developer/a8c/tmp-workbench/GutenbergKit/DerivedData/GutenbergKit/Build/Intermediates.noindex/BuildToolPluginIntermediates/gutenbergkit.output/GutenbergKit/BuildToolPlugin\")
    (subpath \"/private/var/folders/dq/cdqxvx3s5ps75564rpmb_dc00000gn/T/TemporaryItems\")
)
" /Applications/Xcode.app/Contents/Developer/usr/bin/make -C /Users/gio/Developer/a8c/tmp-workbench/GutenbergKit build

--- :npm: Installing NPM Dependencies
/bin/sh: npm: command not found
make: *** [npm-dependencies] Error 127
```

Notice that, even if we could make it so the plugin run on a shell where
npm is available, we'd still likely run into issues with the 'deny
file-write*' on the source folder.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants