···

       
28
       
 
       
  runtimeShell,

     

       
29
       
 
       
  gnupg,

     

       
30
       
 
       
  installShellFiles,

     

       
0
       
 
       

     

       
31
       
 
       
}:

     

       
32
       
 
       


     

       
33
       
 
       
{

     
···

       
298
       
 
       


     

       
299
       
 
       
      inherit patches;

     

       
300
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
301
       
 
       
      __darwinAllowLocalNetworking = true; # for tests

     

       
302
       
 
       


     

       
303
       
 
       
      doCheck = canExecute;

     
···

       
391
       
 
       
            ]

     

       
392
       
 
       
            ++ lib.optionals stdenv.buildPlatform.isDarwin [

     

       
393
       
 
       
              # Disable tests that don’t work under macOS sandbox.

     

       
394
       
-
       
              "test-macos-app-sandbox"

     

       
395
       
 
       
              "test-os"

     

       
396
       
 
       
              "test-os-process-priority"

     

       
397
       
 
       


     

···

       
28
       
 
       
  runtimeShell,

     

       
29
       
 
       
  gnupg,

     

       
30
       
 
       
  installShellFiles,

     

       
31
       
+
       
  darwin,

     

       
32
       
 
       
}:

     

       
33
       
 
       


     

       
34
       
 
       
{

     
···

       
299
       
 
       


     

       
300
       
 
       
      inherit patches;

     

       
301
       
 
       


     

       
302
       
+
       
      postPatch = lib.optionalString stdenv.hostPlatform.isDarwin ''

     

       
303
       
+
       
        substituteInPlace test/parallel/test-macos-app-sandbox.js \

     

       
304
       
+
       
          --subst-var-by codesign '${darwin.sigtool}/bin/codesign'

     

       
305
       
+
       
      '';

     

       
306
       
+
       


     

       
307
       
 
       
      __darwinAllowLocalNetworking = true; # for tests

     

       
308
       
 
       


     

       
309
       
 
       
      doCheck = canExecute;

     
···

       
397
       
 
       
            ]

     

       
398
       
 
       
            ++ lib.optionals stdenv.buildPlatform.isDarwin [

     

       
399
       
 
       
              # Disable tests that don’t work under macOS sandbox.

     

       
400
       
+
       
              # uv_os_setpriority returned EPERM (operation not permitted)

     

       
401
       
 
       
              "test-os"

     

       
402
       
 
       
              "test-os-process-priority"

     

       
403
       
 
       


     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
+
       
diff --git a/test/parallel/test-macos-app-sandbox.js b/test/parallel/test-macos-app-sandbox.js

     

       
2
       
+
       
index 60ad67b3db..b6ac0dcef4 100644

     

       
3
       
+
       
--- a/test/parallel/test-macos-app-sandbox.js

     

       
4
       
+
       
+++ b/test/parallel/test-macos-app-sandbox.js

     

       
5
       
+
       
@@ -45,11 +45,11 @@ fs.copyFileSync(

     

       
6
       
+
       
 

     

       
7
       
+
       
 // Sign the app bundle with sandbox entitlements:

     

       
8
       
+
       
 assert.strictEqual(

     

       
9
       
+
       
-  child_process.spawnSync('/usr/bin/codesign', [

     

       
10
       
+
       
+  child_process.spawnSync('@codesign@', [

     

       
11
       
+
       
     '--entitlements', fixtures.path(

     

       
12
       
+
       
       'macos-app-sandbox', 'node_sandboxed.entitlements'),

     

       
13
       
+
       
     '--force', '-s', '-',

     

       
14
       
+
       
-    appBundlePath,

     

       
15
       
+
       
+    appExecutablePath,

     

       
16
       
+
       
   ]).status,

     

       
17
       
+
       
   0);

     

       
18
       
+
       
 

     

···

       
42
       
 
       
    ./configure-armv6-vfpv2.patch

     

       
43
       
 
       
    ./node-npm-build-npm-package-logic.patch

     

       
44
       
 
       
    ./use-correct-env-in-tests.patch

     

       
0
       
 
       

     

       
45
       
 
       


     

       
46
       
 
       
    # TODO: remove when included in a release

     

       
47
       
 
       
    (fetchpatch2 {

     

···

       
42
       
 
       
    ./configure-armv6-vfpv2.patch

     

       
43
       
 
       
    ./node-npm-build-npm-package-logic.patch

     

       
44
       
 
       
    ./use-correct-env-in-tests.patch

     

       
45
       
+
       
    ./use-nix-codesign.patch

     

       
46
       
 
       


     

       
47
       
 
       
    # TODO: remove when included in a release

     

       
48
       
 
       
    (fetchpatch2 {

     

···

       
59
       
 
       
      ./node-npm-build-npm-package-logic.patch

     

       
60
       
 
       
      ./use-correct-env-in-tests.patch

     

       
61
       
 
       
      ./bin-sh-node-run-v22.patch

     

       
0
       
 
       

     

       
62
       
 
       


     

       
63
       
 
       
      # TODO: remove when included in a release

     

       
64
       
 
       
      (fetchpatch2 {

     

···

       
59
       
 
       
      ./node-npm-build-npm-package-logic.patch

     

       
60
       
 
       
      ./use-correct-env-in-tests.patch

     

       
61
       
 
       
      ./bin-sh-node-run-v22.patch

     

       
62
       
+
       
      ./use-nix-codesign.patch

     

       
63
       
 
       


     

       
64
       
 
       
      # TODO: remove when included in a release

     

       
65
       
 
       
      (fetchpatch2 {

     

···

       
58
       
 
       
      ./node-npm-build-npm-package-logic.patch

     

       
59
       
 
       
      ./use-correct-env-in-tests.patch

     

       
60
       
 
       
      ./bin-sh-node-run-v22.patch

     

       
0
       
 
       

     

       
61
       
 
       
    ]

     

       
62
       
 
       
    ++ gypPatches

     

       
63
       
 
       
    ++ lib.optionals (!stdenv.buildPlatform.isDarwin) [

     

···

       
58
       
 
       
      ./node-npm-build-npm-package-logic.patch

     

       
59
       
 
       
      ./use-correct-env-in-tests.patch

     

       
60
       
 
       
      ./bin-sh-node-run-v22.patch

     

       
61
       
+
       
      ./use-nix-codesign.patch

     

       
62
       
 
       
    ]

     

       
63
       
 
       
    ++ gypPatches

     

       
64
       
 
       
    ++ lib.optionals (!stdenv.buildPlatform.isDarwin) [