From 4059d5387c6d6d34b1cf8eb71fbe9c3d1e76d314 Mon Sep 17 00:00:00 2001
From: Michal Rus <michal.rus@iohk.io>
Date: Thu, 19 Oct 2023 12:50:53 +0200
Subject: [PATCH] fix: turn off `seccomp` which fails on some Apple Silicon
 machines

Context:
* <https://github.com/NixOS/nix/issues/5258>
* <https://nixos.org/manual/nix/stable/command-ref/conf-file#conf-filter-syscalls>
---
 Dockerfile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Dockerfile b/Dockerfile
index 954bd6e5..35c3eaac 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,6 +15,7 @@ RUN apt install curl git -y
 # Note: `sandbox = false` is for compatibility with Podman, Docker doesn’t require it.
 RUN curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix/tag/v0.11.0 | sh -s -- install linux \
   --extra-conf "sandbox = false" \
+  --extra-conf "filter-syscalls = false" \
   --init none --no-confirm
 # Note: if you don’t set USE_IOG_BINARY_CACHE=1, you will be rebuilding our Haskell world from source (including multiple GHC stages).
 ARG USE_IOG_BINARY_CACHE