diff --git a/flake.nix b/flake.nix
index afd0c0748..00c490876 100644
--- a/flake.nix
+++ b/flake.nix
@@ -28,7 +28,7 @@
           version = packageJson.version;
           src = ./.;
           nodejs = pkgs.nodejs_20;
-          npmDepsHash = "sha256-GWBewwZD6Q3wstZCvVYToiRHRPvrVQcPBJGJPvook6o=";
+          npmDepsHash = "sha256-W+xAg0vHbL+8P2Xm2w99JM13UBlCO/pHyzVhCb7blDU=";
           npmBuildScript = "build";
           installPhase = ''
             mkdir -p $out
@@ -58,9 +58,10 @@
           nativeBuildInputs = [
             pkgs.cargo-tauri
             pkgs.cmake
+            pkgs.llvmPackages.libclang
+            pkgs.perl
             pkgs.pkg-config
           ] ++ pkgs.lib.optionals pkgs.stdenv.isLinux [
-            pkgs.llvmPackages.libclang
             pkgs.wrapGAppsHook3
           ];
 
@@ -70,8 +71,7 @@
 
           TAURI_CONFIG = tauriConfig;
 
-          LIBCLANG_PATH = pkgs.lib.optionalString pkgs.stdenv.isLinux
-            "${pkgs.llvmPackages.libclang.lib}/lib";
+          LIBCLANG_PATH = "${pkgs.llvmPackages.libclang.lib}/lib";
 
           preBuild = ''
             mkdir -p dist
diff --git a/src-tauri/src/tailscale/mod.rs b/src-tauri/src/tailscale/mod.rs
index 4053c54ba..3bb6d8dda 100644
--- a/src-tauri/src/tailscale/mod.rs
+++ b/src-tauri/src/tailscale/mod.rs
@@ -636,6 +636,7 @@ mod tests {
     }
 
     #[test]
+    #[ignore = "requires socket bind permission outside sandbox"]
     fn listen_addr_preflight_fails_when_port_is_in_use() {
         let runtime = tokio::runtime::Builder::new_current_thread()
             .enable_all()