Remote code execution in Homebrew by compromising the official Cask repository

Re:Remote code execution in Homebrew by compromising the off... by xrisk on Saturday April 24, 2021 @10:25AM (#26925041)

Nix doesn’t even install on my Mac; for reasons I don’t understand.

> Creating a Nix Store volume... error: refusing to create Nix store volume because the boot volume is FileVault encrypted, but encryption-at-rest is not available. Manually create a volume for the store and re-run this script. See https://nixos.org/nix/manual/#sect-macos-installation

The provided link doesn’t really tell me what to do...? Why are there so many (complicated) ways to install this thing, and why can’t it do it automatically?

[ Parent | on HN ]

Re:Remote code execution in Homebrew by compromising the off... by tgv on Saturday April 24, 2021 @12:43PM (#26926238)

I managed to get it running, but what it does is create an extra volume and mount entry for it. If your boot volume can't be altered by the script, you have to do it by hand, and that probably requires booting in maintenance mode. The reason behind that is that they chose /nix as their store, and it's apparently hard-coded all over the place, and macOS 11 has locked /, so you can't have a simply directory anymore.

They do explain why they chose this option, and provide you with others (each with its own disadvantages). Nix seems to be the arch of package managers.

[ Parent | on HN ]