improve CI

Revert "Enable sandbox on darwin"

.github/workflows/test.yml

@@ -9,16 +9,13 @@ jobs:
         os: [ubuntu-18.04, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v2
     - run: yarn install --frozen-lockfile
     - run: yarn build
-    # TODO: just commit it using github
-    - run: git diff --exit-code
-    - run: yarn test
     - name: Install Nix
       uses: ./
     - run: nix-env -iA cachix -f https://github.com/NixOS/nixpkgs/tarball/ab5863afada3c1b50fc43bf774b75ea71b287cde
     - run: cat /etc/nix/nix.conf
     # cachix should be available and be able to configure a cache
     - run: cachix use cachix
-    - run: nix-build test.nix
+    - run: nix-build test.nix

README.md

@@ -17,8 +17,8 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v1
+    - uses: actions/checkout@v2
-    - uses: cachix/install-nix-action@v6
+    - uses: cachix/install-nix-action@v7
     - run: nix-build
 ```
 

lib/install-nix.sh

@@ -26,14 +26,11 @@ nixConf
 # Needed due to multi-user being too defensive
 export ALLOW_PREEXISTING_INSTALLATION=1
 
-sh <(curl https://nixos.org/nix/install) --daemon
+sh <(curl -L https://nixos.org/nix/install) --daemon
 
 # write nix.conf again as installation overwrites it
 nixConf
 
-# Enable sandbox on Darwin/Linux
-sudo sh -c 'echo sandbox = true >> /etc/nix/nix.conf'
-
 # macOS needs certificates hints
 if [[ $OSTYPE =~ darwin ]]; then
   cert_file=/nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt