gchristensen changed the topic of #nixos-chat to: NixOS but much less topical || https://logs.nix.samueldr.com/nixos-chat
<nh2> I've filed it as https://bugzilla.kernel.org/show_bug.cgi?id=203463, and reverting the commit in question is a workaround even for current 5.1 kernels
<pie_> random: I would love an --offline -like flag https://github.com/NixOS/nix/issues/1985#issuecomment-480296850 >.>
<gchristensen> nh2: a lesson I learned is lots of th kernel dev team doesn't use the tracker
<gchristensen> nh2: best sohuld find the relevant mailing lists and send your issue in full there, too
<clever> 2019-04-30 19:36:18 < pterp> I'm trying to get the initrd to load on multiboot2, but it complains with a kernel not found error, even though boot works. The module command is "module /boot/initrd initrd" and it is after the command to load the kernel. What's happening?
<clever> 2019-04-30 19:39:28 < zid> have you tried putting it... before?
<clever> 2019-04-30 19:40:24 < pterp> before? no. I'll try.
<clever> 2019-04-30 19:41:30 < pterp> Ah. I just realized I should use module2 when using the multiboot2 spec.
<clever> pie_: was it you doing efi and xen? maybe this is part of what you got mixed up?
<pie_> clever, definitely wasnt me
<clever> nh2: maybe it was you? heh
<pie_> was it in the past few days? sounds familiar though
<clever> yeah, very recently
<pie_> can probably find the guy in logs
<pie_> clever, didnt find anything on xen here or in main the past few days but i did find this? 12:59 <{^_^}> [nixpkgs] @Shados opened pull request #60485 → [WIP] Add support for booting as Xen dom0 on EFI systems → https://git.io/fjZvI
<{^_^}> https://github.com/NixOS/nixpkgs/pull/60485 (by Shados, 11 hours ago, open): [WIP] Add support for booting as Xen dom0 on EFI systems
<clever> does feel like the right guy
* pie_ just figured out theres a search feature on the left
<samueldr> oof, this PR shows hot the bootloader infra needs some work to harmonize things :/
<samueldr> (imo)
<pie_> the Nix Union harmonization funds
* pie_ was trying to make a bad reference at apparently https://en.wikipedia.org/wiki/Harmonisation_of_law
<clever> ah, shados is one window over, in #nixos-on-your-router
<pie_> clever, tfw not on the log bot :p
<pie_> oh i guess they just didnt use the word "xen" then
<samueldr> pie_: curious, how did you search?
<samueldr> the top search box searches through that day
<pie_> left sidebar
<samueldr> the one on the left through the channel only
<pie_> oh
<samueldr> yeah
<pie_> oops :p
<pie_> meanwhile, I spent 10 minutes staring at one line of code and found a way to simplify it
<pie_> not worth it lol
<samueldr> no "all channels" search in that lovely software that I'm so grateful whitequark made :)
<pie_> whitequark is OP >.>
<clever> didnt know he made that
<samueldr> she really made a good thing, not sure how many deployments of it there are, but it's been working flawlessly since I set it up... more than a year ago (?)
<nh2> gchristensen: good thing is that the author of that regression was super active helping out another person who found a regression with a similar commit of the same author (in the bug I linked from mine), so I hope I have good chances. He got auto-CCd by bugzilla so I think he's some maintainer
<gchristensen> okay
<gchristensen> (although last time I filed a bug, I CC'd relevant people and they disregarded it until I mailed the ML)
<nh2> clever: no, I didn't do efi and xen, I do only efi and kexec on Chromebook
<clever> nh2: yeah, i found the guy, it was shados
<colemickens> are people using not-os on routers? I see it linked frm the nixos wiki page
<gchristensen> not that I know of based on #nixos-on-your-router
<infinisil> Ughhh, I was trying for multiple hours to use the HUE api
<infinisil> But it just wouldn't work
<samueldr> vpn?
<infinisil> Nah I'm using hueadm, which can talk to the API just fine, but it doesn't have all commands available as a command, so I need to manually create json requests
<infinisil> it doesn't have all *api methods* available as a command
<infinisil> And I specifically wanted to create a timer that turns off the lights in after some amount of time
<infinisil> But it just won't work, always just returns "invalid/missing parameter in body"
<infinisil> Yes that's all of the error, it doesn't tell me which parameter is wrong
<infinisil> And their docs are really untrustworthy. They once misspelt "status" as "staus" in the listing of keys you can pass
<infinisil> And all around they leave a bad impression
<elvishjerricco> I wonder how big companies like Apple store their secret root certificate files. It's the kind of thing that you want absolutely minimum access too, but simultaneously maximum redundancy.
<clever> elvishjerricco: ive thought about how to do a DH type key-exchange, between multiple HSM's, so they can collectively generate a shared secret, that will never leave a given HSM, but they can all agree on it, and no external device knows what it is either
<clever> then you have a hardware device for signing things, with backups, but no copy exists outside of any HSM
<clever> and has never existed outside the HSM's
<elvishjerricco> clever: Interesting. How do you handle the case where all but one of your HSMs has failed? You need to introduce new HSMs, but the point of stuff like DH is to agree on a new key, not to transmit an existing key. That would imply the key is theoretically accessible.
<clever> sign a new certificate for the new key, and declare that your rolling over to the next one
<clever> and start over with another set of HSM's
<elvishjerricco> oh can you do that? Totally revoke an old master certificate in favor of a new one?
<clever> maybe
<elvishjerricco> er, I guess rollover doesn't imply revoke
<elvishjerricco> but I think you'd want to revoke; since in case that old key was ever compromised, you'll have no ability to revoke it later.
lopsided98_ is now known as lopsided98
<pie_> not my proudest nix line: envVars=(${opt (nonEmpty envVars') "env${lib.concatMapStrings (s: " ${s}") envVars'}"})
<pie_> we have to go deeper
<sphalerite> pie_: escapeShellArgs instead of the concatMapStrings maybe?
<pie_> I made this withArgs = cmd: args: cmd + (lib.concatMapStrings (s: " ${s}") args);
<pie_> envVars=(${opt (nonEmpty envVars') (withArgs "env" envVars') })
<sphalerite> probably replace concatMapStrings (s: " ${s}") with escapeShellArgs in there too
<sphalerite> unless you *want* the arguments to be expaned and split by the shell
<pie_> sphalerite, envvars is a list, the concatmapstrings is to add spaces before the args
<sphalerite> yes, I get that :)
<pie_> a'ight, so you mean in addition to?
<sphalerite> > escapeShellArgs ["$foo" "bar" "baz qux"]
<{^_^}> "'$foo' 'bar' 'baz qux'"
<sphalerite> no, instead of
<pie_> i do actually use that later and i was wondering if i should put it in the rest of my dode
<pie_> OH
<pie_> escapeshellarg*s*
<sphalerite> :)
<pie_> i only saw escapeshellarg
<pie_> ugh, bpastes highlighting is so much better than nanos
<sphalerite> you know you can use inherit within a let as well? :)
<pie_> uhhhhhhh
<pie_> no i dont think i did
<pie_> but now that you mention it the thought has been fidgeting in the back of my mind for a while
<pie_> lol now i have to go refactor all the code
<pie_> <3 review
<sphalerite> :D
<pie_> that removes the necessity for most of my uses of with
<pie_> which is going to be great for variable checking
<pie_> ohmygodthisisamazing feels less cluttered
<pie_> best thing since sliced lists
<pie_> (ok its actualy not _that_ great)
<pie_> the part where i have to decide what to escape and how and what not to is the part where i wish i had something that just compiles to bash
<pie_> i wonder if the consuming script is even going to be escaped as good as this lol
<sphalerite> why would you want something that compiles to bash? \:|
<pie_> so i can just say take this string and get it to its destination :p
<sphalerite> why do you need bash for that?
lassulus has quit [Read error: Connection reset by peer]
<pie_> i...nevermind right now :p
<pie_> woo, build runs, now i just have to see if i broke any semantics
drakonis has quit [Quit: WeeChat 2.4]
<pie_> inherit (lib) jdkWrapper installPlugin unpackPlugin;
<pie_> lib = pkgs.lib;
<pie_> i should be able to shadow lib like that in a let right?
<pie_> Im getting attribute jdkWrapper missing :/
* pie_ scratches head
<pie_> it works if i switch the first line to using a with
jackdk has quit [Ping timeout: 245 seconds]
<sphalerite> pie_: let is recursive. It'll also work if you do let inherit (lib) jdkWrapper installPlugin unpackPlugin; in let inherit (pkgs) lib; in …
<pie_> sphalerite, sure let is recursive but the inherit is first?
<pie_> i kind of get what youre saying thogh
<sphalerite> pie_: no, they're all semantically simultaneous
<sphalerite> unless you nest lets
<pie_> hm
<sphalerite> and inherit (lib) jdkWrapper; is exactly equivalent to jdkWrapper = lib.jdkWrapper
drakonis_ has quit [Remote host closed the connection]
lassulus has joined #nixos-chat
makefu has quit [Ping timeout: 252 seconds]
jasongrossman has joined #nixos-chat
lassulus_ has joined #nixos-chat
lassulus has quit [Ping timeout: 245 seconds]
lassulus_ is now known as lassulus
<andi-> Not sure whom to blame but resizing firefox (on wayland) when a larger GitHub commit diff is open eats up 4 cores and only recovers after half a minute :/ Just one of those things that make using a browser less attractive. Wish there was a proper TUI for GitHub (or just a Mailinglist...)
<gchristensen> you could fetch each .patch
<qyliss^work> I've been thinking about configuring my mail client to do that and display it as part of the notification
<andi-> I usually checkout branches and use tig for "Reviewing" (just the viewing part).. Would need something to write comments from the terminal.
<gchristensen> the API for that isn't so hard
<gchristensen> (there would be work to do, but it isn't so hard)
<andi-> It just feels like one more detour to do what I wanted to do 20y ago when I started with computers... Whatever that was :D
<andi-> I have looked at the APis a few times already. It is tempting. Must get into curses or whatever gui is reasonable for the process.
<andi-> kdgrlfrhehnkdtvcdgvfttbbueuhlhcudel
<andi-> uarghs
<gchristensen> how about an emacs mode? :P
<andi-> I was thinking more an ed like experience..
<andi-> line based reading and then you do `$c This isn't great please change foo bar baz...`
<gchristensen> ?
<gchristensen> ?
waleee has joined #nixos-chat
<manveru> there's forge for emacs :)
<andi-> you skip through the diff line-by-line and at some point you just start marking and writing comments
* gchristensen was making an ed joke
<andi-> m(
* andi- makes some coffee
<qyliss^work> ed, man!
<manveru> qyliss^work: did you do anything on the bundix stuff?
<manveru> otherwise i got a bit of time today to look into it :)
<qyliss^work> not yet -- was busy last night after work
<MichaelRaskin> Well, we all know that computers being used for actual information processing, as Engelbart (among others) outlined, would be a danger to law and order
<gchristensen> qyliss^work: you going to ed(1)conf 2019?
<qyliss^work> If you have time for Bundix though, manveru, your input on https://github.com/manveru/bundix/issues/53 would be much appreciated :)
<{^_^}> manveru/bundix#53 (by smithtim, 1 week ago, open): bundix -l fails when path has spaces
<qyliss^work> hehe i wish
<manveru> hmm, people asking me for my decisions of 2 years ago...
<manveru> how the hell am i supposed to know :P
<qyliss^work> lol
<manveru> anw, there must be a way to use spaces in paths in nix, right?
<manveru> like just calling toPath might do it
lassulus has quit [Read error: Connection reset by peer]
<qyliss^work> > toPath "/path with space"
<{^_^}> /path with space
<qyliss^work> hmm
<gchristensen> toPath is deprecated
<MichaelRaskin> Is deprecation documented anywhere, though?
<gchristensen> yeah
<qyliss^work> But IIRC "${/home}/path with space" doesn't work
<manveru> turns out readFile doesn't care if it's a path
<manveru> so we can just give a string :)
<qyliss^work> oh, cool
<qyliss^work> well that works :)
<manveru> will fix it then
<MichaelRaskin> OK, I will keep that in mind if I need to drop a list of deprecation precedents…
lassulus has joined #nixos-chat
Synthetica has joined #nixos-chat
lassulus has quit [Ping timeout: 255 seconds]
jtojnar has quit [Read error: Connection reset by peer]
jtojnar has joined #nixos-chat
drakonis has joined #nixos-chat
<manveru> just found in a copyright notice on a website :P
<gchristensen> awesome.
<manveru> it'll be copyrighted even after the death of DNS
<Taneb> Extraordinarily forward thinking
<andi-> They should have user ipfs. Think about those people on Mars!
<andi-> *used
<gchristensen> shoulda gone serverless
<andi-> Not sure if that is still a thing in 200y
<infinisil> I was wondering why the site didn't load, but then I realized that tiny thing is the whole thing
<cransom> eh, 200y. we should be humanless by then.
<gchristensen> quite likely
<samueldr> 200y is at least 9 years in the past
<samueldr> oopd
<samueldr> oops* I thought it was a placeholder for 2000something
<samueldr> then it dawned on me, 200 years
<andi-> in 200y we will have the next planet. Market demand. Basic economics ;-)
lassulus has joined #nixos-chat
<andi-> gchristensen: I believe this is the url/titlebar issue you have (and I had) in firefox on wayland? https://bugzilla.mozilla.org/show_bug.cgi?id=1533654
<gchristensen> interesting!
<andi-> going through https://bugzilla.mozilla.org/buglist.cgi?f1=cf_tracking_firefox67&o1=equals&v1=%2B as I try to build the latest firefox beta on Nix... Only 14 days left to make it work :-)
<gchristensen> is that a release day?
<andi-> yes
<andi-> I usually try to have it packaged at least a week before and then just update the sources as soon as they appear on the FTP.. worked well for the last 6 months.
<gchristensen> amazing!
<andi-> After running into multiple rebuild-the-world issue with updating NSS, NSPR, … I like to have a bit of a head start :D
<andi-> yep, firefox 67 will no longer have the font issue \o/ at least the latest beta resolved that for me
<gchristensen> yay :)
<andi-> also mouse cursors change shape again \o/
<manveru> andi-++
<{^_^}> andi-'s karma got increased to 11
<MichaelRaskin> Achievement unlocked: federation with matrix.org more or less works, federation-tester from matrix.org has huge problems reporting on the homeserver in question. (This lasts for days)
<gchristensen> can't wait to get that running here :)
<MichaelRaskin> Can't wait for (a list of problems) to get fixed upstream
drakonis_ has joined #nixos-chat
<MichaelRaskin> Memory consumption, backlog refetching on _server_ restart, a client with complete logs in text files (you won't believe)…
drakonis_ has quit [Read error: Connection reset by peer]
drakonis_ has joined #nixos-chat
drakonis has quit [Ping timeout: 246 seconds]
<andi-> MichaelRaskin: you are working on a home server implementation?
<MichaelRaskin> Nope
<MichaelRaskin> Even a minimal _client_ is already a lot of annoying issues
<andi-> I know that is why I am asking :-)
<MichaelRaskin> The achievement-unlocked is about a Synapse deployment
waleee has quit [Ping timeout: 246 seconds]
drakonis_ has quit [Read error: Connection reset by peer]
drakonis_ has joined #nixos-chat
drakonis has joined #nixos-chat
drakonis_ has quit [Ping timeout: 250 seconds]
drakonis_ has joined #nixos-chat
drakonis1 has joined #nixos-chat
drakonis has quit [Ping timeout: 258 seconds]
drakonis_ has quit [Ping timeout: 264 seconds]
Synthetica has quit [Quit: Connection closed for inactivity]
<pie_> its always nice when you no-op something last night and then forget about it
drakonis has joined #nixos-chat
jasongrossman has quit [Read error: Connection reset by peer]
jasongrossman has joined #nixos-chat
lassulus has quit [Ping timeout: 246 seconds]
lassulus has joined #nixos-chat
__monty__ has joined #nixos-chat
drakonis1 has quit [Quit: WeeChat 2.3]
<joepie91> pie_: I'm pretty much unavailable for anything requiring braincycles until may 14, unfortunately :P
<joepie91> (slightly stressful deadline)
<pie_> all good
makefu has joined #nixos-chat
<gchristensen> interesting
<samueldr> yeah, that that apple shoe
<samueldr> ;)
<pie_> samueldr, took me like 3 tries to get it
<pie_> "there has to be a reason they put an apple ad a shoe on this picture"
<samueldr> the shoe gave it away for me, but I almost missed the apple
<pie_> apple core apple core why is there a boot on the table -og
<pie_> oh
MichaelRaskin has quit [Quit: MichaelRaskin]
__monty__ has quit [Quit: leaving]
<gchristensen> oh. core boot.
<qyliss> whoa
<qyliss> this could finally be a replacement for xpra
<pie_> huh, qubes has a GSoC project for implementing a firewall with a unikernel
<pie_> does qubes actually document all the security design stuff it has somewhere
<qyliss> usually the docs on their website are pretty great
<pie_> like, something that would be useful if one wanted to say, reimplement qubes with nix :p
<pie_> (im just fantasizing)
<qyliss> you might be fantisizing, i'm actively seeking funding :P
<qyliss> but sshhhh
<pie_> oh
<pie_> hit me up if youre up for some shitty college student help in a few months
<gchristensen> NGI?
<samueldr> qyliss: got in touch with NGI?
<pie_> NGI?
<qyliss> indeed
<samueldr> 🎉
<gchristensen> yay!
<pie_> (whats ngi)
<pie_> ah that
<pie_> coool
<pie_> man maybe i really should switch to computer science
<qyliss> I dropped out of CS lol
<pie_> Im going back to continue my physics degree in september but i just keep getting distracted by computers
<pie_> i want to do research but im constantly distracted by engineering
<samueldr> drop-out too
<pie_> that reminds me I keep forgetting to drop an email to some dresden people I'd like to visit in august
<pie_> anyone in dresden?
<colemickens> ugh, does Matrix make notifications persistent somewhere/somehow?
<colemickens> They all told me that someone pinged me in one of the nix channels I'm in but I can't find it skimming the scrollback. ugh
<drakonis> look up on the logs
<drakonis> check the channel topic
jasongrossman has quit [Read error: Connection reset by peer]
jasongrossman has joined #nixos-chat
lassulus has quit [Ping timeout: 245 seconds]
<infinisil> I'll try to update my mac drive to mojave, just to be able to do darwin builds. I'll do a full clean install too, hopefully I don't mess up the nix installation again
<infinisil> Hmm I wonder if it's possible to put /nix on a different partition
<infinisil> Possibly, but my darwin knowledge is dwindling
<drakonis> so, did we not sign up for GSOC or GSOD?
lassulus has joined #nixos-chat
jtojnar has quit [Quit: jtojnar]
jackdk has joined #nixos-chat
jasonrm has quit [Quit: ZNC 1.7.2 - https://znc.in]
jasonrm has joined #nixos-chat
jasonrm has quit [Client Quit]
jasonrm has joined #nixos-chat
<infinisil> Man, once you went Linux and go back to macOS, you start to realize how constrained everything is
<infinisil> For some reason Apple doesn't allow you to download older macOS versions anymore
<infinisil> Apparently there's no way to turn off an external display, ????
<samueldr> infinisil: older installers won't even boot IIRC, their signature is expired
<samueldr> (well, you could tweak the system clock)
<infinisil> Another thing that annoys me: My mac's data is pretty much unreadable on Linux. For one, there's many proprietary formats, like calendars and stuff. Also some data was stored in icloud, which is almost impossible to access from linux, and it's buggy as hell in general
<infinisil> Compare that to Linux, in which almost everything is a readable text file