Ericson2314 has quit [Read error: Connection reset by peer]
sphalerit has quit [Remote host closed the connection]
dtz has quit [Remote host closed the connection]
sphalerit has joined #nixos-chat
Ericson2314 has joined #nixos-chat
dtz has joined #nixos-chat
pie___ has joined #nixos-chat
pie__ has quit [Ping timeout: 264 seconds]
emily has quit [Quit: leaving]
sir_guy_carleton has joined #nixos-chat
sir_guy_carleton has quit [Client Quit]
sir_guy_carleton has joined #nixos-chat
<elvishjerricco>
Turns out it just has to be built with a windows targeting GCC for some reason. Apparently EFI images closely (exactly?) resemble DLLs. Luckily Nixpkgs nicely provides `pkgsCross.mingwW64`
drakonis has quit [Quit: WeeChat 2.2]
pie___ has quit [Remote host closed the connection]
<infinisil>
Hey, if anybody wants to also order a book on blurb.com I have a link you can use to get $20 off (and I get something too for it): https://share.blurb.com/x/eM2i3r
<ottidmes>
infinisil: I am always sceptical about those Category Theory books, I have yet to find any book that remains with the programmer mindset, as soon as things start to stack up (the amount of previous concepts you have to be familiar with to understand next concepts), I always find that I cannot leverage my programmers faculties to keep track of it all
<drakonis1>
ottidmes: they're theory books
<drakonis1>
it is much easier if you know how to apply it
<ottidmes>
drakonis1: of course, but my complains are more about how they present it
<drakonis1>
i'm not sure what's the mathematician stance on presentation
<drakonis1>
on whether it impacts passing the knowledge
<ottidmes>
drakonis1: I just looked at the preview, this book actually seems to do what is says on the cover, so I can scratch my previous remark (I have read other pieces with such titles, but they ended up being "for mathmatician" books at some point or another)
drakonis has joined #nixos-chat
drakonis1 has quit [Quit: WeeChat 2.2]
<ottidmes>
infinisil: I am thinking about buying the book as well, the coupon says "Valid for books made by you only." how does that work?
<infinisil>
ottidmes: Haha no idea
<infinisil>
Weird
<__monty__>
Yep, you can hack that, it was in the reddit thread. I think the book's available on github, so you can upload a copy of your own and have that printed with the coupon. I believe the author gave his okay in the thread.
<ottidmes>
infinisil: awesome, I have nice big e-reader, so I can just read it on that :)
<infinisil>
I don't buy many books, but this one seems worth it
<ottidmes>
__monty__: cool, I see the endorcement as well
<infinisil>
(also a great way to support the author (?) + creator)
hedning has quit [Quit: hedning]
<ottidmes>
infinisil: I really liked Semiotics of Programming
* infinisil
hasn't heard of that oen
drakonis_ has joined #nixos-chat
<__monty__>
infinisil: I actually think most of the money goes to blurb.
drakonis has quit [Ping timeout: 252 seconds]
<infinisil>
__monty__: Hmm darn
<infinisil>
Oh well
<infinisil>
Still more than nothing for the creators
<__monty__>
Yes, but the creator is the collector not the author in this case. (Not that their work isn't worth a little compensation, just clarifying that the author probably gets nothing.)
drakonis has joined #nixos-chat
<ottidmes>
I had this same dillema when I wanted to pay for a music album. That is what I like about some game developers, where you can buy it directly from their website, then you are sure they get the most out of it
drakonis_ has quit [Ping timeout: 250 seconds]
__Sander__ has quit [Quit: Konversation terminated!]
<{^_^}>
dominictarr/event-stream#116 (by FallingSnow, 5 days ago, open): I don't know what to say.
drakonis_ has joined #nixos-chat
drakonis1 has joined #nixos-chat
drakonis has quit [Read error: Connection reset by peer]
drakonis_ has quit [Ping timeout: 252 seconds]
dsx has quit [Quit: dsx]
dsx has joined #nixos-chat
<joepie91>
this seems unrelated to centralized package repositories
<simpson>
At first blush, yes, but consider the question: Who does a user trust for package definitions, and how much trust to they give to the package manager? Changing the first seems much easier than changing the second.
<infinisil>
ottidmes: I think bandcamp is pretty good though
<simpson>
It seems somewhat relevant, at least, that this particular package repository is heavily centralizing; this attack needed all of its packages to come from a single trusted source, right?
<gchristensen>
npm install *ignores* will *many* definitely *previous* not *incidents* pwn me
<ottidmes>
infinisil: if you can find the band you are looking for on it
<joepie91>
simpson: no, not as far as I can tell
drakonis has joined #nixos-chat
hedning has joined #nixos-chat
drakonis1 has quit [Ping timeout: 252 seconds]
sir_guy_carleton has quit [Quit: WeeChat 2.2]
Lisanna has quit [Quit: Lisanna]
<mdash>
simpson: it's a problem for sure
<mdash>
simpson: what's a better idea
<infinisil>
ottidmes: A lot of musicians I follow use bandcamp luckily :)
<infinisil>
Well there aren't many, and they're decently niche, so that's not too much of a surprise
avn_ is now known as avn
<ottidmes>
infinisil: too bad they do not list my favourite subgenre
<ottidmes>
infinisil: apparantly I can use tags to work around that
hedning has quit [Remote host closed the connection]
<colemickens>
the HN thread about the backdoored NPM package are particularly dumpster-firey today.
<simpson>
mdash: I think that the nixpkgs style, where you only trust the ports tree at your fingertips, is better. But also it would be better if the language's platform were less amenable to exploits.
<mdash>
yeah, that.
<infinisil>
ottidmes: That genre being?
<joepie91>
simpson: package targeted copay-dash, a Bitcoin wallet
<drakonis>
colemickens: that implies there's a state that HN isnt a dumpster fire
<infinisil>
gchristensen: Touchdown \o/
<gchristensen>
:o
drakonis1 has joined #nixos-chat
<andi->
Since 5y or so it feels like space missions are gaining much moch traction and positive reaction in the general population... The 15y before that I barely noticed it.. might be me, the internet or alzheimer..
drakonis_ has joined #nixos-chat
<__monty__>
andi-: Most of the missions didn't speak to the imagination as "landing on Mars" though.
<gchristensen>
growing up 25min from Cape Canaveral, I was very in to it :)
<infinisil>
andi-: SpaceX definitely helped a lot
<andi->
probably
<ldlework>
fake
<gchristensen>
TODO: ship Nix on the next lander
<__monty__>
gchristensen: Is that like deafening roar distance?
<andi->
I am living <150m away from the ESA control center.. so I am also a bit into it :-)
<infinisil>
OHh nice
<__monty__>
I wish that was a goal. Might make my experience with 2G ram better : >
<ldlework>
burn
drakonis has quit [Ping timeout: 252 seconds]
<gchristensen>
nix wouldn't operate on it, but build results could
<gchristensen>
__monty__: nah, that in only like 1mi or so
<infinisil>
gchristensen: We should run NixOS on it lol
<andi->
Todays NPM issue and the space thingy reminds me of the NASA project where they did build dashboards for projects using javascript… I question the ability to properly run/maintain those things in the coming 10y... Usually they freeze everything as soon as the mission is planned and sent to orbit. Only some patching going on.
<__monty__>
Why would it be hard to run 10yo javascript in 10y?
<andi->
because some dependency required to do your tree shaking or whatever you might be doig today is gone?
<andi->
I mean they stop mowing the lawn and change the diary for people on the ground a few weeks for the mission here..
<ldlework>
"usually they freeze everything"
<ldlework>
like dependencies?
<andi->
software, configuration, hardware
<andi->
after the asteroid missions (forgot the name) they finally oculd get rid of two old buildings here..
<ldlework>
so you'd be able to run the js
<andi->
maybe
<andi->
but yeah if they use nix and their own source tarball archive it might work ;-)
<gchristensen>
andi-: I'm not joking at all about my TODO
<ldlework>
or a container of some sort
<andi->
gchristensen: what year? :-)
<ldlework>
gchristensen: nice photos
<gchristensen>
I dunno, like 2036 or something
<andi->
that only give you <10y to infect someone with the nix viruus to get it done :D
<infinisil>
Regarding the NPM thing: I'm just glad I can trust in the types in Haskell packages if I use SafeHaskell (I don't, but I could)
<andi->
because not everything can do side effects then (IO)?
<__monty__>
unsafe?
<infinisil>
andi-: Yes
<infinisil>
__monty__: SafeHaskell doesn't allow unsafePerformIO and similar
<andi->
infinisil: not so much a haskell guy but couldn't that be hidden in any haskell package that does IO anyway?
<infinisil>
andi-: Yes, but in Haskell one tries to avoid IO whenever possible
<andi->
infinisil: I know but then the attacker would pick an crate that does IO anyway...
<infinisil>
Then I'll try to avoid using it
<andi->
if you know about it :-)
<infinisil>
I don't like libraries that do everything in IO
<infinisil>
andi-: And if one creates a package around a bunch of well-restricted interfaces, there's no need for IO at all even if you technically need IO
<infinisil>
Just gotta make sure the interfaces for it are proper
<infinisil>
Well their implementation really
<andi->
sure, but that doesn't solve the issue.. good engineering certainly help but it is not inherent for success (see npm)
<infinisil>
andi-: The thing I want to say is that in Haskell you have the *possibility* for such guarantees via the type system
<infinisil>
In javascript any old add() function could launch missiles
<ottidmes>
andi-: I was thinking the same, what happened in npm could very well have happened with other package managers (to some extent at least)
<__monty__>
I especially liked all the fingerpointing to the original author (re the NPM thing). "Bluh bluh, *your* carelessness is costing *my* company tons of money, this is all your fault." Isn't the fault for accepting the new publisher with npm, if anyone?
<gchristensen>
__monty__: the original author did pass over rights, I think?
<ottidmes>
gchristensen: he gave away all control, but it was still coupled to his github, because github did not allow him to move it because of fork already existing on the others account or some such
<gchristensen>
right
<__monty__>
Shouldn't npm prevent that is my point. Shouldn't they have a procedure in place for adding/altering publish capability?
<gchristensen>
simpson: ping
<colemickens>
How?
<colemickens>
How can npm prevent me from giving my api key to someone else?
<__monty__>
colemickens: Like how hackage requires someone to accept a transfer of maintainership.
* colemickens
googles hackage
<__monty__>
colemickens: api key could be just one of the factors required.
<colemickens>
And there's nothing to stop the author from giving over both factors, and nothing to imply that they wouldn't have done exactly that in this case.
<colemickens>
Same scenario as if "code signing" were required, the original author would've presumably(?) just handed over the signing key.
<gchristensen>
the thing missing here is the original author intentionally made this transfer. NOTHING can stop that.
<gchristensen>
colemickens++
<{^_^}>
colemickens's karma got increased to 5
<__monty__>
You can add mechanisms to discourage that though. Like the other details being enough to completely impersonate you.
<ottidmes>
maybe have npm give a clear warning when a package is modified by a new publisher, so that users will regard it with more scrunity
<colemickens>
ottidmes: right but the entire the problem is that there was no way npm could've known it was a new publisher...
<__monty__>
Sure, but if npm had a clear procedure for the transfer of ownership I'm sure the author would've just ditched his package into their lap, rather than provide details to someone over email.
<colemickens>
Heh, I'm not sure if making the footgun more dangerous is a wise way to go about solving it, but it is a sort of disincentive...
<colemickens>
That's covered too, it was because of a limitation on GitHub's side, not NPMs.
<__monty__>
That's BS.
<colemickens>
I mean, it's from the guy who instigated this's mouht, so...
<__monty__>
That's only because npm apparently equates github repo ownership to being responsible for a package.
<colemickens>
gchristensen: hey random question -- I saw something a while back about Nix + Kubernetes that involved mounting the store into the container for ultra-minimal containers. Do you have any idea what I'm talking about?
<__monty__>
There's no reason npm *has* to do it this way.
<colemickens>
gchristensen: I was pretty sure you'd written it or linked it on Twitter or something, but I've been unable to find it since then.
<colemickens>
__monty__: ah, I see. Thats sort of weird anyway, how do they handle non-GitHub, etc?
<gchristensen>
colemickens: have a totally empty container plus a "CMD" statement pointing to the /nix/store/.../path you want to run? :)
<gchristensen>
colemickens: shlevy wanted k8s to have a backend thing which would auto nix-store -r the paths froma binary cache
<colemickens>
I am trying to get my cluster on NixOS to where I want it, and then I'm interested in potentially building something like that.
<colemickens>
A controller that watches for objects that are Nix files that evaluate to an image + k8s manifest...
<__monty__>
Most hilarious part about this to me is practically all(?) companies being ok with people using npm but most of them being scared of "unproven" technology like haskell or nix. How does "Not yet proven to be shitty." make for a bigger risk than "Already proven to be shitty?"
<colemickens>
basically k8s + gitops + nix, which lots of lovely caching / small containers
<colemickens>
__monty__: I think that's because a lot of companies have those decisions made top-down for them by people that can't see past hype.
hedning has quit [Remote host closed the connection]
<colemickens>
I'm actually really disappointed to see the same wheel being re-invented over and over in k8s and still not getting anywhere near some of the niceties in Nix/nixpkgs.
<gchristensen>
:)
<drakonis1>
colemickens: kubernetes isn't tied to a specific distribution
<colemickens>
drakonis1: ? I know, I'm building a NUR-thing for kubernetes on nixos
<drakonis1>
a NUR-thing? you mean a repository?
hedning has joined #nixos-chat
<colemickens>
yeah, modules + packages + some opinions about how k8s should be run
<colemickens>
probably some scripts for booting it up on azure/packet via (krops | morph)
<drakonis1>
everyone's got opinions eh?
<drakonis1>
rather, everyone's opinionated on how to run something
<colemickens>
Well, there's about a billion ways to run k8s and I've seen the pain points from some of the most popular methods.
<colemickens>
Also, with every day that passes, I grow sicker of k8s and more annoyed with what it's turned into.
<colemickens>
But hey, that's a different set of opinions and a different rant that I ought not start into.
<drakonis1>
its what happens when everyone's in the same ship playing tug of war
<drakonis1>
trying to pull it at all directions conceivable
<drakonis1>
alternatively, there are replacements to k8s
<ottidmes>
I have had trouble with btrfs and sudden power outages (it got corrupted), is ZFS better resistant to this?
<gchristensen>
in my experience yes
<gchristensen>
but I thought btrfs was designed to not be a victim to that?
<ottidmes>
gchristensen: I thought so too :P
<ldlework>
__monty__: because someone built a poop-walkway over the hill of poop and while it stinks at least there is a known way over
<gchristensen>
at any rate, my experience in general with btrfs was extremely poor, and my experience with zfs has been very good
<ottidmes>
gchristensen: it was at least an incorrect shutdown of the system (was on a VPS), so I figured I better not use btrfs on my laptop, since I forget to put it in the plug sometime, running out of power, while with ext4 this never really was a problem, so I am using ext4 for now on my laptop
<ottidmes>
gchristensen: but I am planning on using ZFS on my newly bought VPSes
<gchristensen>
it should be fine ... zfs has a Lot Of Money And Years Behind It
kisik21 has joined #nixos-chat
<__monty__>
I've never had issues with btrfs and power cuts on my laptop.
<__monty__>
I know this is anecdotal but my experience with btrfs has been unremarkable to say the least. Completely at odds with all the negative experiences from others.
<__monty__>
I usually doubt whether they tried a recent btrfs.
<gchristensen>
my experience with btrfs was roughly 2014-2015 across a few thousand servers, several hundred of which died by filesystem corruption
<joepie91>
lol
<__monty__>
Well, I'm not recommending btrfs for that sort of systems. Desktop machines though it seems fine to me.
<__monty__>
Also, btrfs has come a long way since 2015.
<gchristensen>
I believe that :)
<ottidmes>
__monty__: this corrupting was a suprise for me too, I thought, a well, probably easily solved with its tooling, but none of the recovery steps worked, while I am writing this on a desktop using btrfs for 3 years or so, never had any issue at all
<gchristensen>
__monty__: it seemed like a bad sign when RedHat dropped it. was that less of an "event" than I interpreted it to be?
<colemickens>
I don't know enough about it, but I feel like a bad open source user when I think about trying out ZFS.
<drakonis1>
ZFS is currently ruled by linux
<__monty__>
Hey, I have a contributor who wants to pick up a PR from someone else. Is there a way to pass on my push privileges to the PR fork to this contributor? (on github)
<__monty__>
gchristensen: Again, I'm saying nothing about "industrial" use. ZFS is vastly more proven in that territory. I'm pretty sure btrfs isn't touted as ready for production use by the developers either.
<colemickens>
I see. I guess the issue is more about GPL compatibility than the CDDL being OSS or not.
<colemickens>
Both interesting links... is it loaded as a module in NixOS then, and if not, are kernels with it included served via the binary cache?
<__monty__>
So RedHat dropping it does absolutely nothing for me and my use case while it may be crucial to yours.
<mdash>
i've been using zfs with nixos for a couple years now, it's very nice
<mdash>
btrfs had a head start but doesn't seem to have done much with it :(
<gchristensen>
colemickens: it is packaged as a separate derivation, and available in the cache
<__monty__>
Btw, I have nothing against ZFS, well except for a slight dislike of ZFS engineers, do they have to be so smug?
<__monty__>
mdash: Head start? ZFS is a much older project.
<gchristensen>
__monty__: heh, I don't know :) makes sense, though
<gchristensen>
(w.r.t. the use case)
<__monty__>
So, no way to allow another contributor to pick up the work on a PR?
<drakonis1>
__monty__: they resent that linux runs zfs now :V
<drakonis1>
the salt flows free
<__monty__>
drakonis1: Yep, overheard a solaris engineer at last fosdem.
<elvishjerricco>
Recent ZFS convert here: Many nice things have recently become possible for me because of it :P
<__monty__>
Convert from?
<elvishjerricco>
Not btrfs or anything fancy. ext4 on one system and I forget what on another
<colemickens>
__monty__: send them a GitHub token :P
<colemickens>
__monty__: tbh, I was wondering for a second if you were joking :)
<drakonis1>
those must be some salty tears that solaris failed
<elvishjerricco>
(sidenote: I very much dislike how not-granular GH tokens are)
<drakonis1>
linux will subsume all
<mdash>
__monty__: well, on linux i mean
<__monty__>
mdash: Even there I wouldn't say there was a head start.
<__monty__>
Also, headstart re "running on linux" is still negligible compared to the implementation of the FS head start.
<mdash>
drakonis1: remember when its nickname was "slowaris"? :)
<drakonis1>
i'm not old enough for that
<drakonis1>
but i know that was a thing
<drakonis1>
post factum you know
<elvishjerricco>
Is ZFS still slow?
<drakonis1>
no, its solaris
<drakonis1>
its still trash but its still touted as a linux killer for reasons unknown
<drakonis1>
solaris that is
<gchristensen>
elvishjerricco: like any performance topic, it depends on your workload and hardware
<__monty__>
colemickens: No, not joking. This is the first time another contributor wants to pick up a PR that the original author couldn't quite finish. I'm not sure what the best way to handle it is. Probably just have them open another PR? (Why does everything GH have to come with silly bookkeeping tasks?)
<elvishjerricco>
gchristensen: Yea. I'm guessing it's not perceptible for unremarkable systems like one or two SSDs?
<elvishjerricco>
But throw like 1000 vdevs in there and I'm guessing they'll all spend plenty of time idling while ZFS is at peak.
<__monty__>
What's the deal with xfs? Is it new or old? Why would you prefer it to say, ext4?
<mdash>
it's fast
<drakonis1>
its great.
<drakonis1>
zfs is too optimized for the "lots of hard drives and cores" use case
<drakonis1>
you throw anything outside of that case and it suffers
<__monty__>
I know it can't be shrank (shrunken?).
<elvishjerricco>
__monty__: ZFS or XFS?
<__monty__>
XFS.
<elvishjerricco>
zfsonlinux 8 will support shrinking
<elvishjerricco>
er, 0.8
<andi->
after I read into ZFS and almost bought into it you guys discuss how it is not the greatest think on earth?!? /o\ just kidding ofc, i know there is no silver bullet ;-)
<drakonis1>
you gotta see illumos and freebsd folks talk about it
<drakonis1>
like its the greatest filesystem there is
<drakonis1>
spooky, really.
<gchristensen>
drakonis1: they don't have nixos for rollbacks :)
<elvishjerricco>
infinisil: Yea. What do you mean "again"?
<infinisil>
elvishjerricco: Nice. Just as in "after I added it I can remove it *again*"
<jasongrossman>
ottidmes: I might need advice about power metal. I'm really into Marge Litch and Alhambra, but I'm having trouble finding anything else I like.
<elvishjerricco>
infinisil: I think they still don't have a way to shrink a vdev though, which is sad
<jasongrossman>
ottidmes: I like ZFS too, but that's not a band, unfortunately.
<gchristensen>
NixOS's local friendly license adherence stickler says we should just go ahead and ship zfs in the default install image
<srhb>
jasongrossman: DID SOMEONE NEED POWER METAL
<ottidmes>
jasongrossman: Hah, I know neither of them (by name that is, I listen to a lot of collections), but to name a few I like: Angra, Kamelot, Avantasia, Edguy, Heavenly, Freedom Call, Sonata Arctica, Serenity, Dark Moor, Derdian, Blind Guardian
<srhb>
Mmm Edguy
<jasongrossman>
ottidmes: Thanks. I'll look into some of those.
<jasongrossman>
srhb: Yes.
<srhb>
And Demons and Wizards is basically a Blind Guardian - Iced Earth power group
<jasongrossman>
srhb: Thanks.
<ottidmes>
srhb: Edguy and Sonata Arctica were actually the bands that made me have interest in power metal :)
<srhb>
They're great!
<jasongrossman>
gchristensen: IANAL but I very very much doubt that anyone's got any interest in taking ZFS issues to court these days, which is why Canonical isn't worried about packaging it.
<drakonis1>
oracle...
<ottidmes>
srhb: I especially liked the specials of Sonata Arctica
<gchristensen>
I have it on good authority Oracle doesn't care
* andi-
fetches all those music recommendations from srhb
<ottidmes>
jasongrossman: srhb: I am now of course checking out Marge Litch, Alhambra, and Demons and Wizards ;)
<jasongrossman>
gchristensen: Right. And the burden of proof is on the prosecution, and the issues are complicated, so it would cost them real money to care.
<srhb>
ottidmes: :D
<jasongrossman>
ottidmes: :-)
<srhb>
I'm more into extreme metal these days, but I still <3 poewr
<srhb>
Some of my friends are currently touring in Seven Thorns, which is pretty old school power metal, and they'd never forgive me if I didn't mention them.
<srhb>
If you're good with silly stuff, Twilight Force is basically what would happen if The Fellowship of the Ring were a power metal troupe...
<ottidmes>
srhb: extreme metal, is that a genre? there are so many subgenres, I am pretty selective with my music
<ottidmes>
srhb: also a bit silly, but done remarkely well, is Van Canto, they mimick most instruments with their voices
<srhb>
ottidmes: It's more like a supergenre.
<srhb>
And yes! I love Van Canto.
<srhb>
They have a very nice guest performance by Jokke from Sabaton in one of their covers :D
<srhb>
I was disappointed by their latest album though. Felt like the quality really went down.
<elvishjerricco>
gchristensen, jasongrossman: I am the furthest thing from a lawyer, but the case that CDDL is compatible with ZFS seems somewhat convincing to me; enough that I wouldn't surprised by a ruling either way. But yea, no one's going to bring it to court
<elvishjerricco>
It's obviously compatible with ZFS :)
<gchristensen>
:)
<jasongrossman>
elvishjerricco: Seems convincing to me too.
<jasongrossman>
ottidmes: Thank you.
<elvishjerricco>
I'm more of a prog person than a power metal person. BTBAM <3
<ottidmes>
srhb: unfortunately I feel like that for most of my favourite bands :( but I guess it good that they keep trying to reinvent themselves, trying new things
<ottidmes>
elvishjerricco: a friend of my is really into prog metal, sometimes the boundaries of subgenres are hard to determine, but every time I do not really love a band album he links, its too progressive for me, likewise with the power metal bands that have some progressive in them for him :P
<jasongrossman>
elvishjerricco: Oh well, that is the correct opinion. Prog is much better. I can't justify liking power metal at all.
<jasongrossman>
,BTBAM
<jasongrossman>
elvishjerricco: What does BTBAM mean please?
<elvishjerricco>
The Dear Hunter isn't really metal, and you could argue they're not even all that prog, but they're definitely my favorite. Acts I-V anyway; the other stuff is meh
<elvishjerricco>
BTBAM is Between the Buried and Me
<jasongrossman>
elvishjerricco: Oh! Right. They are almost perfect IMO, except that I don't like screamy vocals; but I'll put up with screamy vocals for them.
<jasongrossman>
elvishjerricco: So much musical structure. <3
<srhb>
elvishjerricco: Haken? Pineapple Thief? :)
<jasongrossman>
,BTAM = Between The Buried And Me
<{^_^}>
BTAM defined
<jasongrossman>
,BTAM =
<{^_^}>
Undefined BTAM, was defined as: Between The Buried And Me
<srhb>
elvishjerricco: Pineapple Thief is basically just Porcupine Tree reincarnated these days..
<jasongrossman>
(Better not pollute the namespace.)
<elvishjerricco>
Yea screams can be good when used tastefully, but I find they almost never are, and BTBAM is only sometimes good about this
<ottidmes>
jasongrossman: I guess Angra is the most prog of those I listed
<jasongrossman>
elvishjerricco: Exactly. We are soul mates.
<elvishjerricco>
srhb: Porcupine Tree is so good. I'll have to look into that
<jasongrossman>
ottidmes: Thank you.
<srhb>
elvishjerricco: <3 I miss them so much.
<elvishjerricco>
srhb: check out Hand. Cannot. Erase. by Steven Wilson. Porcupine Tree basically lives on in his solo work
<srhb>
I must say his solo work never really caught me, but I haven't heard that specifically, will do :)
<elvishjerricco>
Wait Pineapple Thief isn't what Destiny Potato got renamed to, is it?
<elvishjerricco>
Ah, no that's Sordid Pink
<elvishjerricco>
The food oriented names seemed related to me :P
<srhb>
Haha!
<ottidmes>
elvishjerricco: the problem with prog for me is that it does not affect me as much as power metal does, e.g. with power metal my feet start moving of their own accord sometimes ;)
<srhb>
I just find it funny that Pineapple Thief sounds so much like Porcupine Tree (same initials too) and now their new albums feature Gavin Harrison on drums, who's basically the best prog drummer everrrr
<elvishjerricco>
ottidmes: I have the exact opposite feeling. Prog has an ability to get itself seated deep in my head and elicit a lot of mental reactions.
<elvishjerricco>
srhb: Portnoy 4 lyfe
<elvishjerricco>
Say what you will about Dream Theater, but Mike Portnoy is a god
<srhb>
Granted.
<srhb>
And I'll refrain from saying what I will about Dream Theater, though I appreciate the offer. xD
<ottidmes>
elvishjerricco: like, I mostly find the prog metal music beautiful, but I miss the sheer emotion behind some metal numbers, and with power metal I really can get it a trance if I let myself, but of course music is a very personal experience
<elvishjerricco>
ottidmes: Listen to Pain of Salvation. My other favorite. The dude can get very emotional at times, especially in their most recent album
<elvishjerricco>
Except for a few songs that I think are crap, that new album (The Passing Light of Day) is one of my favorites.
<colemickens>
Does anyone have a NUR handy that has a module that references a package also provided by the NUR?
<colemickens>
I have something that ought to work but I'm getting a rather opaque error: "error: value is a path while a set was expected, at /etc/nix/overlays/nixpkgs-kubernetes/modules/containerd.nix:103:28"
<ottidmes>
elvishjerricco: I tried it just now, but it simply is not for me, pure progressive metal that is
<ottidmes>
elvishjerricco: for example: https://www.youtube.com/watch?v=i_qZpLgvdOI the instrumentals just feel off to me, but that is clearly on me, I have that with a most progressive metal
<elvishjerricco>
ottidmes: Oh that's one of the songs on that album that I think are crap :P
<elvishjerricco>
That one and Tongue of God I just hit skip
<__monty__>
Since we're talking about metal. How does HammerFS stack up nowadays? Is it still interesting, more/less than zfs? High hopes for Hammer2?
<drakonis1>
hammer2 is out
<drakonis1>
even more tied up to dragonflybsd
qyliss_ has joined #nixos-chat
qyliss has quit [Ping timeout: 260 seconds]
qyliss_ is now known as qyliss
<infinisil>
I finally learned how to set default applications for xdg-open lol, only took me like 1.5 years of linux
<__monty__>
Hammer2 isn't done yet though.
<drakonis1>
it is the default right now
<drakonis1>
but it seems to be unportable to linux?
<drakonis1>
ie: needs a shim just like zfs
<__monty__>
Unportable without kernel patches or outright?
<drakonis1>
it demands some very substantial changes to the target system to be able to use it
<__monty__>
I'm talking from a theoretical pov, not a practical "I want to run it on linux, now." pov.
<__monty__>
It looks interesting, to me, as a filesystem noob.
<__monty__>
Is it the future of filesystems?
<drakonis1>
theoretically, the system receiving hammer would need dragonflybsd's thread model
<drakonis1>
theoretically the future is NOVA
<simpson>
gchristensen: Pong. You pinged right at the start of my lunch. What's up?
<gchristensen>
I asked in #monte :)
<drakonis1>
the featureset is admitedly quite nice
<__monty__>
drakonis1: RAID4 in "the future filesystem?"
<drakonis1>
its built for nvdimm storage
<drakonis1>
if nvdimm becomes a commodity storage, it'll become relevant
__monty__ has quit [Quit: leaving]
srk has quit [Quit: gitter]
srk has joined #nixos-chat
<jasongrossman>
elvishjerricco: I was thinking about Mike Portnoy only yesterday. If you like his work with Derek Sherinian then you HAVE to hear Derek Sherinian playing with Virgil Donati.
Ralith has joined #nixos-chat
<jasongrossman>
elvishjerricco: BTW, I don't think progressive metal is progressive. I thought you meant progressive rock, which is quite different. (Not to say that they can't both be good.)
<elvishjerricco>
Yea I view the term "progressive" as meaning "the song / album itself progresses over time, developing on itself", which applies nicely to prog metal and prog rock
<jasongrossman>
elvishjerricco: AH. OK. Yes, I like that idea.
<jasongrossman>
infinisil: How DO you set default applications for xdg?
<infinisil>
jasongrossman: Ah, I wrote it, but didn't want to send it just yet because of the ongoing discussion
<infinisil>
Shortest tutorial for setting application defaults you'll ever see: Use `xdg-mime query filetype <file>` to figure out the mimetype of <file> and `xdg-mime default <programname>.desktop <mimetype>` to set the default application for this type, e.g. `xdg-mime default evince.desktop application/pdf`
<jasongrossman>
infinisil: Thank you.
jackdk has joined #nixos-chat
<infinisil>
Np, thanks for reminding me :)
<ottidmes>
jasongrossman: lol, its just not for me, I started playing it, checked whether I was not playing 2 things at the same time, nope, thats how its supposed to sound, ok, not for me :P (but I have made my point about that, so I will shut up about it)
<jasongrossman>
ottidmes: :-)
<infinisil>
That sure is a special song..
jackdk has quit [Remote host closed the connection]
<ottidmes>
jasongrossman: I said I would shut up about it, but I just remembered another album, Art of Life by X Japan, its symphonic power metal (yay!) and progressive metal, pretty decent song, and then he start going insane on the piano, what sounds like random playing stuff, for which I blame the progressive metal aspect! this bit: https://youtu.be/0eqmkgSeYjI?t=1020
<colemickens>
why was anyone doing crypto stuff with javascript?
<colemickens>
reminds me of the person wanting to package the proprietary electron based multi-coin wallet software. sounds like a fast way to make a buck...
<simpson>
Sure, but if we can't figure out what went wrong, then it's gonna keep happening, and I think it's worth pointing out exactly which misfeatures of JS were on display here. (In particular, so much authority is granted to packages upon import, without much limitation.)
jackdk has joined #nixos-chat
<gchristensen>
probably, the package should have been forked instead of handed over -- then it is up to the attacker to do a much harder job of getting people to switch
<jasongrossman>
ottidmes: Great, thanks.
<joepie91>
simpson: this was fundamentally a social attack, to be clear, that could have occurred on pretty much any of the current language registries - likely even on vetted ones like Debian repos etc.
<colemickens>
(sorry, yeah, my thoughts there were unrelated to today's incident, just a random musing.)
<joepie91>
(given how well-hidden it was)
<colemickens>
I mean, depending on when someone updated the node packages, presumably a bad copy could've wound up in nixpkgs, somewhere, right?
jackdk has quit [Remote host closed the connection]
<joepie91>
quite possibly, yes
<gchristensen>
and indeed did
<gchristensen>
17:42 <delroth> looks like a9efcc85cbfc0a8ebf5ab8dbfa914e9447018923..03bcca7a457e60bbfd80272347a2a85ff821b832 had the backdoored flatmap-stream package in nixpkgs.