diff --git a/nix/nix.conf b/nix/nix.conf
index db5ecee04c..2cf0d6ad7a 100644
--- a/nix/nix.conf
+++ b/nix/nix.conf
@@ -9,3 +9,5 @@ max-jobs = auto
 # Helps avoid removing currently used dependencies via garbage collection
 keep-derivations = true
 keep-outputs = true
+# Extra isolation for network and filesystem, doesn't work on MacOS
+build-use-sandbox = false
diff --git a/scripts/release-android.sh b/scripts/release-android.sh
index 76961f2ae1..28e747294b 100755
--- a/scripts/release-android.sh
+++ b/scripts/release-android.sh
@@ -63,6 +63,7 @@ if [[ "$(uname -s)" =~ Darwin ]]; then
   )
 else
   nixOpts+=(
+    "--option" "build-use-sandbox" "true"
     "--option" "extra-sandbox-paths" "${KEYSTORE_PATH} ${SECRETS_FILE_PATH}"
   )
 fi