supersandro2000 has quit [Disconnected by services]
supersandro2000 has joined #nix-darwin
andremedeiros has quit [Read error: Connection reset by peer]
andremedeiros has joined #nix-darwin
squidgy has quit [Quit: ZZZzzz…]
andremedeiros has quit [Read error: Connection reset by peer]
andremedeiros has joined #nix-darwin
<oliver85> abathur when you said 'CA bundle' you mean  NIX_SSL_CERT_FILE env in the plist?
<abathur> yes, sorry
<oliver85> all good, enabled the secure token, rebooting. then I will launch. I will post the current state of the plist on the issue
<abathur> ah
<abathur> I was assuming the PATH edit we did previously as well, don't see that there
<abathur> with /nix/var/nix/profiles/default/bin instead of /Users/buildkite-agent/.nix-profile/bin
<abathur> I also see what looks like a partially-removed comment end near the end on the line after NIX_PROFILES
andremedeiros has quit [Read error: Connection reset by peer]
andremedeiros has joined #nix-darwin
squidgy has joined #nix-darwin
<oliver85> fix and copy paste onto the issue as edit
<oliver85> nice eye
<abathur> :)
<abathur> I live a few lives, and ~spot-the-typo is in the middle of the venn diagram
<oliver85> hahaha
<oliver85> sadly launch with that plist still end with a dyld error (bin/bash) when running nix --version
<abathur> :/
<abathur> have you tried out either security exemption yet?
<oliver85> since these are ec2 instances in a private net work, I don't have access to a GUI.
<oliver85> I been searching on how to give FDA without GUI session but seems like that is the only way
<abathur> oof
<abathur> yeah
<oliver85> I love apple and the *extra* layer(Ssss) of securities
<abathur> as far as I know at least one person did it with VNC, and I think he was using EC2
<abathur> oh
<oliver85> with linux? or mac?
andremedeiros has quit [Read error: Connection reset by peer]
<abathur> well
<abathur> I think either will work? there's a "Screen Sharing" app in macOS, but afaik it uses VNC
<abathur> it's this one, though I see he doesn't mention VNC so I may be remembering something he said in IRC https://github.com/NixOS/nix/pull/4289#issuecomment-772423793
<abathur> or perhaps inventing it :)
andremedeiros has joined #nix-darwin
<abathur> so we might be able to ping him for help summarizing
<abathur> (but he didn't get me that ticket writeup :)
<abathur> there's one other thought I have
<abathur> I haven't used this yet, and I don't know if/how well it works with VMs
<abathur> but I've got trying it out on my to-do list..., let me go find the note
<abathur> but I recall it having a way to automate a few things that I don't think you can normally automate without proper MDM
<abathur> ah, there it is, man
<oliver85> ! oh :eye emoj:
<abathur> oh, lol, sorry
<abathur> I was looking for an option I remembered in a control command
<abathur> for enabling remote access
<abathur> thinking it was gui, but it's just ssh
<abathur> and it requires FDA anyways :)
<abathur> I would hope AWS enabled remote access for the VMs, though
<oliver85> I actually have a good relationship with the AWS architect here, let me poke him tomorrow to see if there is a way we can access VM
<oliver85> just so we know if FDA is the culprit thats worth chase down
<abathur> ah, I guess this is the process to enable screensharing/remote management if it isn't https://support.apple.com/en-us/HT209161
<abathur> oh, meh
<abathur> there's an asterisk that it's view only
<abathur> hehe
<abathur> want me to ping klardotsh in the thread as well?
<oliver85> heh I got excited lol
<oliver85> yah I wonder how klardotsh access System prefrence on his mac1.metal instance
<abathur> ok, mentioned him there
<oliver85> thank you :]
squidgy has quit [Quit: ZZZzzz…]
andremedeiros has quit [Read error: Connection reset by peer]
andremedeiros has joined #nix-darwin
Chiliparrot has joined #nix-darwin
supersandro2000 has quit [Quit: The Lounge - https://thelounge.chat]
supersandro2000 has joined #nix-darwin
__monty__ has joined #nix-darwin
domenkozar[m] has joined #nix-darwin
bpye has quit [Ping timeout: 260 seconds]
bpye has joined #nix-darwin
bpye has quit [Ping timeout: 265 seconds]
bpye has joined #nix-darwin
aminechikhaoui has quit [Quit: Ping timeout (120 seconds)]
squidgy has joined #nix-darwin
aminechikhaoui has joined #nix-darwin
__monty_1 has joined #nix-darwin
Chiliparrot has quit [Ping timeout: 260 seconds]
eraserhd2 has joined #nix-darwin
__monty__ has quit [*.net *.split]
eraserhd has quit [Ping timeout: 264 seconds]
Chiliparrot has joined #nix-darwin
__monty_1 is now known as __monty__
philr_ has quit [Ping timeout: 240 seconds]
<heywoodlh> Hey guys, what's the proper way to install nix/nix-darwin on the M1 Macbooks? Installing nix on my M1 Macbook always installs the x86_64 bit binary. Do I have to build it from source?
<heywoodlh> Oh, looking at the manual it looks like x86_64 is the only supported architecture for MacOS.
<__monty__> I think so yes. Work is actively ongoing though, https://github.com/NixOS/nixpkgs/pull/105026
<{^_^}> #105026 (by thefloweringash, 16 weeks ago, open): Native support for Apple Silicon
<__monty__> Not sure whether native nix would take more effort than simply compiling it for arm64 though.
<heywoodlh> __monty__: to be honest, I really don't care if the nix binary itself is an arm64 executable or not. But is there a way for me to configure nix to install arm64 bit versions of packages when available?
<heywoodlh> This seems to be relevant, I'm just too much of a noob to understand how to implement it in my setup: https://github.com/NixOS/nix/pull/4310
<{^_^}> nix#4310 (by matthewbauer, 15 weeks ago, merged): Add x86_64-darwin and aarch64 to "extra-platforms" automatically when Rosetta2 is detected
<__monty__> heywoodlh: Not yet, afaik, that PR is all about supporting that.
<heywoodlh> I see
<__monty__> heywoodlh: Any urgent motivations or just because you'd rather run native software?
squidgy has quit [Ping timeout: 246 seconds]
<heywoodlh> __monty__: Just rather run native software. Nothing crazy.
<oliver85> trying it out, i will also link on the ticket
<abathur> ah, should've thought to look for a gist
<heywoodlh> Does anyone have a module to turn on the option to "Use your Apple Watch to unlock apps and your Mac"?
oliver85 has quit [Ping timeout: 240 seconds]
oliver85 has joined #nix-darwin
<oliver85> @abathur still got dyld after enabling FDA, using the same plist on the issue.
<oliver85> oh wait, maybe I should addd BUILDKITE_SHELL = /bin/sh on the plist
<abathur> and that
<abathur> ah
<abathur> was going to ask if that was enabling it for the shell or for buildkite-agent, but yeah
<oliver85> hmm happened before, when I set BUILDKITE_SHELL = /bin/sh
<oliver85>       <key>BUILDKITE_SHELL</key>
<oliver85>       <string>/bin/sh</string>
<oliver85> the bootstrap shell seems to loose all the context
<oliver85> "/bin/sh: trap 'kill -- $$' INT TERM QUIT; echo $SHELL: No such file or directory"
<oliver85> "/bin/sh: trap 'kill -- $$' INT TERM QUIT; nix --version: No such file or directory"
<oliver85> wait
<oliver85> worked
<oliver85> :]
<oliver85> removed the BUILDKITE_SHELL setting, using bash, but have to grant buildkite-agent binary FDA as well
<oliver85> i don't think it even neccessary to grant FDA to sh if buildkite-agent have FDA. I am guessing when bk runs nix, nix inherit FDA access from the bootstrap shell
<oliver85> ya, tested it. removed FDA for sh and ran nix --version from launchd buildkite-agent with FDA, works just find
<abathur> oliver85: yeah, I was guessing it might be able to propagate from the agent
flokli is now known as FLOKLI
<oliver85> still tho, nix not wanting to mount on new machines, have to ssh in to enable security token.
<oliver85> thats the only piece of the puzzle we need to get this fully automated.
<oliver85> do you have script/link that has the logic of checking if /nix is mounted, if not then mount? I suspect thats probably written somewhere already.
philr_ has joined #nix-darwin
<abathur> oliver85: I know in at least one place I've used `/usr/sbin/diskutil info /nix &>/dev/null` to detect it, but I'm not sure that's ideal here
<abathur> I wonder if manually running the system/org.nixos.darwin-store launchdaemon will do it
<abathur> if not, the launchdaemon plist at /Library/LaunchDaemons/org.nixos.darwin-store.plist will show how it "should" get mounted
eraserhd3 has joined #nix-darwin
jhuizy9 has joined #nix-darwin
bpye9 has joined #nix-darwin
jhuizy has quit [Read error: Connection reset by peer]
abathur has quit [Read error: Connection reset by peer]
jhuizy9 is now known as jhuizy
hedgie has quit []
bpye has quit [Read error: Connection reset by peer]
bpye9 is now known as bpye
eraserhd2 has quit [Ping timeout: 264 seconds]
hedgie has joined #nix-darwin
philr_ has quit [Ping timeout: 264 seconds]
__monty__ has quit [Quit: leaving]
eraserhd has joined #nix-darwin
eraserhd3 has quit [Ping timeout: 256 seconds]
philr_ has joined #nix-darwin