<gchristensen>
nh2: a lesson I learned is lots of th kernel dev team doesn't use the tracker
<gchristensen>
nh2: best sohuld find the relevant mailing lists and send your issue in full there, too
<clever>
2019-04-30 19:36:18 < pterp> I'm trying to get the initrd to load on multiboot2, but it complains with a kernel not found error, even though boot works. The module command is "module /boot/initrd initrd" and it is after the command to load the kernel. What's happening?
<clever>
2019-04-30 19:39:28 < zid> have you tried putting it... before?
<clever>
2019-04-30 19:41:30 < pterp> Ah. I just realized I should use module2 when using the multiboot2 spec.
<clever>
pie_: was it you doing efi and xen? maybe this is part of what you got mixed up?
<pie_>
clever, definitely wasnt me
<clever>
nh2: maybe it was you? heh
<pie_>
was it in the past few days? sounds familiar though
<clever>
yeah, very recently
<pie_>
can probably find the guy in logs
<pie_>
clever, didnt find anything on xen here or in main the past few days but i did find this? 12:59 <{^_^}> [nixpkgs] @Shados opened pull request #60485 → [WIP] Add support for booting as Xen dom0 on EFI systems → https://git.io/fjZvI
<samueldr>
she really made a good thing, not sure how many deployments of it there are, but it's been working flawlessly since I set it up... more than a year ago (?)
<nh2>
gchristensen: good thing is that the author of that regression was super active helping out another person who found a regression with a similar commit of the same author (in the bug I linked from mine), so I hope I have good chances. He got auto-CCd by bugzilla so I think he's some maintainer
<gchristensen>
okay
<gchristensen>
(although last time I filed a bug, I CC'd relevant people and they disregarded it until I mailed the ML)
<nh2>
clever: no, I didn't do efi and xen, I do only efi and kexec on Chromebook
<clever>
nh2: yeah, i found the guy, it was shados
<colemickens>
are people using not-os on routers? I see it linked frm the nixos wiki page
<gchristensen>
not that I know of based on #nixos-on-your-router
<infinisil>
Ughhh, I was trying for multiple hours to use the HUE api
<infinisil>
But it just wouldn't work
<samueldr>
vpn?
<infinisil>
Nah I'm using hueadm, which can talk to the API just fine, but it doesn't have all commands available as a command, so I need to manually create json requests
<infinisil>
it doesn't have all *api methods* available as a command
<infinisil>
And I specifically wanted to create a timer that turns off the lights in after some amount of time
<infinisil>
But it just won't work, always just returns "invalid/missing parameter in body"
<infinisil>
Yes that's all of the error, it doesn't tell me which parameter is wrong
<infinisil>
And their docs are really untrustworthy. They once misspelt "status" as "staus" in the listing of keys you can pass
<infinisil>
And all around they leave a bad impression
<elvishjerricco>
I wonder how big companies like Apple store their secret root certificate files. It's the kind of thing that you want absolutely minimum access too, but simultaneously maximum redundancy.
<clever>
elvishjerricco: ive thought about how to do a DH type key-exchange, between multiple HSM's, so they can collectively generate a shared secret, that will never leave a given HSM, but they can all agree on it, and no external device knows what it is either
<clever>
then you have a hardware device for signing things, with backups, but no copy exists outside of any HSM
<clever>
and has never existed outside the HSM's
<elvishjerricco>
clever: Interesting. How do you handle the case where all but one of your HSMs has failed? You need to introduce new HSMs, but the point of stuff like DH is to agree on a new key, not to transmit an existing key. That would imply the key is theoretically accessible.
<clever>
sign a new certificate for the new key, and declare that your rolling over to the next one
<clever>
and start over with another set of HSM's
<elvishjerricco>
oh can you do that? Totally revoke an old master certificate in favor of a new one?
<clever>
maybe
<elvishjerricco>
er, I guess rollover doesn't imply revoke
<elvishjerricco>
but I think you'd want to revoke; since in case that old key was ever compromised, you'll have no ability to revoke it later.
lopsided98_ is now known as lopsided98
<pie_>
not my proudest nix line: envVars=(${opt (nonEmpty envVars') "env${lib.concatMapStrings (s: " ${s}") envVars'}"})
<pie_>
we have to go deeper
<sphalerite>
pie_: escapeShellArgs instead of the concatMapStrings maybe?
<pie_>
I made this withArgs = cmd: args: cmd + (lib.concatMapStrings (s: " ${s}") args);
<pie_>
i should be able to shadow lib like that in a let right?
<pie_>
Im getting attribute jdkWrapper missing :/
* pie_
scratches head
<pie_>
it works if i switch the first line to using a with
jackdk has quit [Ping timeout: 245 seconds]
<sphalerite>
pie_: let is recursive. It'll also work if you do let inherit (lib) jdkWrapper installPlugin unpackPlugin; in let inherit (pkgs) lib; in …
<pie_>
sphalerite, sure let is recursive but the inherit is first?
<pie_>
i kind of get what youre saying thogh
<sphalerite>
pie_: no, they're all semantically simultaneous
<sphalerite>
unless you nest lets
<pie_>
hm
<sphalerite>
and inherit (lib) jdkWrapper; is exactly equivalent to jdkWrapper = lib.jdkWrapper
drakonis_ has quit [Remote host closed the connection]
lassulus has joined #nixos-chat
makefu has quit [Ping timeout: 252 seconds]
jasongrossman has joined #nixos-chat
lassulus_ has joined #nixos-chat
lassulus has quit [Ping timeout: 245 seconds]
lassulus_ is now known as lassulus
<andi->
Not sure whom to blame but resizing firefox (on wayland) when a larger GitHub commit diff is open eats up 4 cores and only recovers after half a minute :/ Just one of those things that make using a browser less attractive. Wish there was a proper TUI for GitHub (or just a Mailinglist...)
<gchristensen>
you could fetch each .patch
<qyliss^work>
I've been thinking about configuring my mail client to do that and display it as part of the notification
<andi->
I usually checkout branches and use tig for "Reviewing" (just the viewing part).. Would need something to write comments from the terminal.
<gchristensen>
the API for that isn't so hard
<gchristensen>
(there would be work to do, but it isn't so hard)
<andi->
It just feels like one more detour to do what I wanted to do 20y ago when I started with computers... Whatever that was :D
<andi->
I have looked at the APis a few times already. It is tempting. Must get into curses or whatever gui is reasonable for the process.
<andi->
kdgrlfrhehnkdtvcdgvfttbbueuhlhcudel
<andi->
uarghs
<gchristensen>
how about an emacs mode? :P
<andi->
I was thinking more an ed like experience..
<andi->
line based reading and then you do `$c This isn't great please change foo bar baz...`
<gchristensen>
?
<gchristensen>
?
waleee has joined #nixos-chat
<manveru>
there's forge for emacs :)
<andi->
you skip through the diff line-by-line and at some point you just start marking and writing comments
* gchristensen
was making an ed joke
<andi->
m(
* andi-
makes some coffee
<qyliss^work>
ed, man!
<manveru>
qyliss^work: did you do anything on the bundix stuff?
<manveru>
otherwise i got a bit of time today to look into it :)
<qyliss^work>
not yet -- was busy last night after work
<MichaelRaskin>
Well, we all know that computers being used for actual information processing, as Engelbart (among others) outlined, would be a danger to law and order
<gchristensen>
qyliss^work: you going to ed(1)conf 2019?
<andi->
I usually try to have it packaged at least a week before and then just update the sources as soon as they appear on the FTP.. worked well for the last 6 months.
<gchristensen>
amazing!
<andi->
After running into multiple rebuild-the-world issue with updating NSS, NSPR, … I like to have a bit of a head start :D
<andi->
yep, firefox 67 will no longer have the font issue \o/ at least the latest beta resolved that for me
<gchristensen>
yay :)
<andi->
also mouse cursors change shape again \o/
<manveru>
andi-++
<{^_^}>
andi-'s karma got increased to 11
<MichaelRaskin>
Achievement unlocked: federation with matrix.org more or less works, federation-tester from matrix.org has huge problems reporting on the homeserver in question. (This lasts for days)
<gchristensen>
can't wait to get that running here :)
<MichaelRaskin>
Can't wait for (a list of problems) to get fixed upstream
drakonis_ has joined #nixos-chat
<MichaelRaskin>
Memory consumption, backlog refetching on _server_ restart, a client with complete logs in text files (you won't believe)…
drakonis_ has quit [Read error: Connection reset by peer]
drakonis_ has joined #nixos-chat
drakonis has quit [Ping timeout: 246 seconds]
<andi->
MichaelRaskin: you are working on a home server implementation?
<MichaelRaskin>
Nope
<MichaelRaskin>
Even a minimal _client_ is already a lot of annoying issues
<andi->
I know that is why I am asking :-)
<MichaelRaskin>
The achievement-unlocked is about a Synapse deployment
waleee has quit [Ping timeout: 246 seconds]
drakonis_ has quit [Read error: Connection reset by peer]
drakonis_ has joined #nixos-chat
drakonis has joined #nixos-chat
drakonis_ has quit [Ping timeout: 250 seconds]
drakonis_ has joined #nixos-chat
drakonis1 has joined #nixos-chat
drakonis has quit [Ping timeout: 258 seconds]
drakonis_ has quit [Ping timeout: 264 seconds]
Synthetica has quit [Quit: Connection closed for inactivity]
<pie_>
its always nice when you no-op something last night and then forget about it
drakonis has joined #nixos-chat
jasongrossman has quit [Read error: Connection reset by peer]
<colemickens>
ugh, does Matrix make notifications persistent somewhere/somehow?
<colemickens>
They all told me that someone pinged me in one of the nix channels I'm in but I can't find it skimming the scrollback. ugh
<drakonis>
look up on the logs
<drakonis>
check the channel topic
jasongrossman has quit [Read error: Connection reset by peer]
jasongrossman has joined #nixos-chat
lassulus has quit [Ping timeout: 245 seconds]
<infinisil>
I'll try to update my mac drive to mojave, just to be able to do darwin builds. I'll do a full clean install too, hopefully I don't mess up the nix installation again
<infinisil>
Hmm I wonder if it's possible to put /nix on a different partition
<infinisil>
Possibly, but my darwin knowledge is dwindling
<drakonis>
so, did we not sign up for GSOC or GSOD?
<infinisil>
Man, once you went Linux and go back to macOS, you start to realize how constrained everything is
<infinisil>
For some reason Apple doesn't allow you to download older macOS versions anymore
<infinisil>
Apparently there's no way to turn off an external display, ????
<samueldr>
infinisil: older installers won't even boot IIRC, their signature is expired
<samueldr>
(well, you could tweak the system clock)
<infinisil>
Another thing that annoys me: My mac's data is pretty much unreadable on Linux. For one, there's many proprietary formats, like calendars and stuff. Also some data was stored in icloud, which is almost impossible to access from linux, and it's buggy as hell in general
<infinisil>
Compare that to Linux, in which almost everything is a readable text file