<gchristensen>
hrm, for some reason my system seems to be hitting quota problems all of a sudden
<gchristensen>
cp: error writing '/nix/store/d31sm9m4z637hqn20dmyq2a5ih5i48y6-extra-utils/bin/zdb': Disk quota exceeded error: writing to file: Disk quota exceeded during a nix-build
<samueldr>
time to send a nastygram to the sysadmin
<gchristensen>
no kidding
<gchristensen>
what a jerk that person must be
<gchristensen>
but really, what a mystery -- I never turned on any quotas
<samueldr>
could it be zfs doing something that ends up being quotas?
<samueldr>
are you overprovisioned?
<gchristensen>
not even zfs, / and /nix/store are ext4 on an SSD
<samueldr>
oh
<samueldr>
and /tmp?
<gchristensen>
/tmp is just a directory on the disk
<gchristensen>
I suppose I'll reboot and see what happens :P
<gchristensen>
this system would be easier to admin if / was erased on each boot =)
<gchristensen>
wtf
<gchristensen>
d'oh
<gchristensen>
I found the problem
<iceypoi>
for the reference, what was your problem?
drakonis has quit [Ping timeout: 255 seconds]
<gchristensen>
the machine running the build (no obvious zfs or disk problem) was not the machine doing the building :)
<iceypoi>
fair enough, lol
<gchristensen>
the one doing the build had 0 bytes free on /nix
<iceypoi>
the 0 bytes free thing is probably somewhat sub-optimal for various things :P
<gchristensen>
:D
drakonis has joined #nixos-chat
wildtrees has quit [Quit: Leaving]
abathur has joined #nixos-chat
lovesegfault has joined #nixos-chat
drakonis has quit [Quit: WeeChat 2.7.1]
slack1256 has quit [Remote host closed the connection]
<gchristensen>
a nearby fire department is metaphorically on fire :x
<gchristensen>
apparently responding so terribly to a fire they didn't get water on it for an hour... and bad enough that every nearby town canceled their mutual aid agreement
<gchristensen>
which is a big deal since basically no fires here are handled exclusively by a single town's department
<cole-h>
lovesegfault: re my "enable lingering" question last night: apparently Arch enables it globally (by disabling KillUserProcesses in logind.conf), so my problem isn't actually a problem
<cole-h>
(as does NixOS)
<cole-h>
brb
cole-h has quit [Quit: WeeChat 2.7.1]
cole-h has joined #nixos-chat
das_j has quit [Quit: killed]
ajs124 has quit [Quit: killed]
das_j has joined #nixos-chat
ajs124 has joined #nixos-chat
cole-h has quit [Quit: WeeChat 2.7.1]
cole-h has joined #nixos-chat
cole-h has quit [Client Quit]
cole-h has joined #nixos-chat
cole-h has quit [Quit: WeeChat 2.7.1]
cole-h has joined #nixos-chat
waleee-cl has quit [Quit: Connection closed for inactivity]
endformationage has quit [Quit: WeeChat 2.6]
abathur has quit [Ping timeout: 240 seconds]
abathur has joined #nixos-chat
cole-h has quit [Quit: WeeChat 2.7.1]
cole-h has joined #nixos-chat
soju has joined #nixos-chat
lovesegfault has quit [Ping timeout: 240 seconds]
lovesegfault has joined #nixos-chat
abathur has quit [Quit: abathur]
veske has joined #nixos-chat
cole-h has quit [Ping timeout: 258 seconds]
Jackneill has joined #nixos-chat
<eyJhb>
I love how our IT department is regarding giving out equipment. Cables -> No questions asked, Hardware -> Written down
soju has quit [Quit: Connection closed for inactivity]
nckx has quit [*.net *.split]
gchristensen has quit [*.net *.split]
mog has quit [*.net *.split]
wirew0rm has quit [*.net *.split]
endgame has quit [*.net *.split]
dtz has quit [*.net *.split]
leons has quit [*.net *.split]
emilazy has quit [*.net *.split]
srhb has quit [*.net *.split]
nh2 has quit [*.net *.split]
zimbatm has quit [*.net *.split]
disasm has quit [*.net *.split]
ldlework has quit [*.net *.split]
etu has quit [*.net *.split]
ajs124 has quit [*.net *.split]
kgz has quit [*.net *.split]
pie_[bnc] has quit [*.net *.split]
kraem has quit [*.net *.split]
m1cr0m4n has quit [*.net *.split]
hl has quit [*.net *.split]
cransom has quit [*.net *.split]
monsieurp has quit [*.net *.split]
FireFly has quit [*.net *.split]
yorick has quit [*.net *.split]
viric has quit [*.net *.split]
adisbladis has quit [*.net *.split]
rycee has quit [*.net *.split]
qyliss has quit [*.net *.split]
pasukon has quit [*.net *.split]
ar has quit [*.net *.split]
sdier has quit [*.net *.split]
siers has quit [*.net *.split]
lovesegfault has quit [*.net *.split]
iceypoi has quit [*.net *.split]
clever has quit [*.net *.split]
aleph- has quit [*.net *.split]
makefu has quit [*.net *.split]
das_j has quit [*.net *.split]
vesper11 has quit [*.net *.split]
steveeJ has quit [*.net *.split]
maxdevjs has quit [*.net *.split]
Church- has quit [*.net *.split]
samueldr has quit [*.net *.split]
infinisil has quit [*.net *.split]
lassulus has quit [*.net *.split]
AluisioASG has quit [*.net *.split]
raboof has quit [*.net *.split]
johanot has quit [*.net *.split]
liszt has quit [*.net *.split]
savanni has quit [*.net *.split]
cocreature has quit [*.net *.split]
NinjaTrappeur has quit [*.net *.split]
lejonet has quit [*.net *.split]
evanjs has quit [*.net *.split]
tilpner has quit [*.net *.split]
obadz has quit [*.net *.split]
ravndal has quit [*.net *.split]
averell has quit [*.net *.split]
srk has quit [*.net *.split]
hyperfekt has quit [*.net *.split]
aanderse has quit [*.net *.split]
jtojnar has quit [*.net *.split]
emily has quit [*.net *.split]
jared-w has quit [*.net *.split]
manveru has quit [*.net *.split]
Taneb has quit [*.net *.split]
davidtwco has quit [*.net *.split]
hexa- has quit [*.net *.split]
peel has quit [*.net *.split]
kalbasit has quit [*.net *.split]
joepie91 has quit [*.net *.split]
fpletz has quit [*.net *.split]
flokli has quit [*.net *.split]
buckley3103 has quit [*.net *.split]
CRTified has quit [*.net *.split]
skrzyp has quit [*.net *.split]
mutantmell has quit [*.net *.split]
aminechikhaoui has quit [*.net *.split]
betawaffle has quit [*.net *.split]
spacekookie has quit [*.net *.split]
jD91mZM2 has quit [*.net *.split]
jackdk has quit [*.net *.split]
tazjin has quit [*.net *.split]
ashkitten has quit [*.net *.split]
thefloweringash has quit [*.net *.split]
vaibhavsagar has quit [*.net *.split]
lopsided98 has quit [*.net *.split]
Jackneill has quit [*.net *.split]
veske has quit [*.net *.split]
eyJhb has quit [*.net *.split]
kcalvinalvin has quit [*.net *.split]
LnL has quit [*.net *.split]
kini has quit [*.net *.split]
yegortimoshenko has quit [*.net *.split]
tokudan[m] has quit [*.net *.split]
colemickens has quit [*.net *.split]
sphalerite has quit [*.net *.split]
cbarrett has quit [*.net *.split]
rawkode has quit [*.net *.split]
rizary has quit [*.net *.split]
elvishjerricco has quit [*.net *.split]
mudri has quit [*.net *.split]
aria has quit [*.net *.split]
Peetz0r has quit [Max SendQ exceeded]
andi- has quit [Ping timeout: 240 seconds]
savanni has joined #nixos-chat
vesper11 has joined #nixos-chat
aleph- has joined #nixos-chat
thefloweringash has joined #nixos-chat
cbarrett has joined #nixos-chat
das_j has joined #nixos-chat
kalbasit has joined #nixos-chat
jD91mZM2 has joined #nixos-chat
makefu has joined #nixos-chat
hexa- has joined #nixos-chat
kini has joined #nixos-chat
__monty__ has joined #nixos-chat
andi- has joined #nixos-chat
<manveru>
time to build hardware out of cables :)
<dtz>
how many cables in a hardware? :)
noonien has quit [Quit: Connection closed for inactivity]
<andi->
eyJhb: that probably depends on the value of the item. Cables below some value are just deducted from taxes instantly (here) and some kind of equipment might take multiple years.
<sphalerite>
Does anyone know of a USB device that acts as a 1-port hub that can be controlled by software? i.e. you plug it into a host device and plug $something into that, then turn $something on and off from the host?
<sphalerite>
I found http://smartusbhub.com/ which fulfils my requirements and then some, but it's significantly above my budget at US$325
KeiraT has joined #nixos-chat
tilpner_ has joined #nixos-chat
veske has joined #nixos-chat
__monty__ has quit [Quit: leaving]
<averell>
maybe a dumber usb-hub that needs external power with a wifi-power plug
<eyJhb>
andi-: most cables doesn't matter :p Like, 5+ meters HDMI? Take it. USB 3.0 HUB, take it :p Also, most arduinos as well
<eyJhb>
manveru: yay!
<eyJhb>
Considering the pros/cons of heading to the beach to view the sunset + some remote programming (just away from my desk)
veske has quit [Quit: This computer has gone to sleep]
<gchristensen>
ditch the laptop and go to the beach
<eyJhb>
That is also a possibility, I just enjoy sitting in the back of my car, sets moved forward and just enjoying the view + coding some little nifty things!
<eyJhb>
Also, coding in weird places is some kind of "hobby" now, even if IKEA didn't like it
<eyJhb>
gchristensen: how far away is the beach from you?
<gchristensen>
I used to live 30-45min away from Cape Canaveral's Playalinda beach, which spoiled me enough to say that the beach is however long it takes me to get there
<gchristensen>
but I could get to the ocean in like 3h
<eyJhb>
That sounds quite lovely! It is also a 30-45 min drive for me to the nearest beach/ocean.
<gchristensen>
nice
<eyJhb>
Previously it was 5-10 minutes or so. But there is something special about the west coast
<eyJhb>
Also, are there any good git cheat sheets? I keep forgetting commands all the time..
<eyJhb>
E.g. undoing a local commit
abathur has joined #nixos-chat
<etu>
eyJhb: git reset HEAD^
<etu>
eyJhb: With -- soft or hard depending if you want to keep the changes or not
waleee-cl has joined #nixos-chat
cole-h has joined #nixos-chat
<cole-h>
I almost had a heart attack last night. I was verifying my backup when dmcrypt deadlocked. When I went to `ls` my home directory, some files were straight-up missing (inlcuding my yet-to-be-committed `~/.config/nixpkgs`)
<cole-h>
But one REISUB later and we're all peachy. Files still there, backup still there...
<cole-h>
Probably cost me a good year or two
KeiraT has quit [Remote host closed the connection]
<pie_[bnc]>
cole-h: you now have two years of your life as a excuse to set them up
<cole-h>
They're already set up though :D
<cole-h>
`INFO: task dmcrypt_write/2:81210 blocked for more than 737 seconds.` 👀
<pie_[bnc]>
why the heart attack then? :P
<pie_[bnc]>
oh
<pie_[bnc]>
lol i cant read
<cole-h>
Haha
<pie_[bnc]>
> i was verifying my backup
<{^_^}>
undefined variable 'i' at (string):287:1
<cole-h>
I was honestly freaking out. Went to brush my teeth. Then remembered I could probably REISUB since backup finished and it was just verifying at that point
<lovesegfault>
cole-h: did it work?
<lovesegfault>
Are you moving to NixOS?
drakonis has quit [Read error: Connection reset by peer]
drakonis has joined #nixos-chat
lovesegfault has quit [Quit: WeeChat 2.7.1]
drakonis has quit [Ping timeout: 256 seconds]
wildtrees has joined #nixos-chat
lovesegfault has joined #nixos-chat
rardiol has joined #nixos-chat
<pie_[bnc]>
i should throw some money at scantailor...
rardiol has quit [Read error: Connection reset by peer]
rardiol has joined #nixos-chat
<cole-h>
lovesegfault: :D No this was just a monthly backup since I had forgotten to in February
<lovesegfault>
cole-h: Ah :D
<lovesegfault>
do you use ZFS snapshots?
<cole-h>
Not on ZFS yet :P That'll come when I /do/ switch to NixOS
<cole-h>
For now I just have a veracrypt'd external + borg
<cole-h>
(veracrypt because it was originally my Windows backup drive)
aleph- has quit [Quit: WeeChat 1.9.1]
<lovesegfault>
I see
<lovesegfault>
I'm so close to fully reproducible builds on my system configs
<lovesegfault>
I just need to fix my ci drv
<pie_[bnc]>
nice
noonien has joined #nixos-chat
<cole-h>
lovesegfault: Was just looking at your nix config again and was wondering what you were doing for secrets. Is the submodule a private GH repo?
<lovesegfault>
cole-h: correct
<lovesegfault>
mind you my solution is not good
<lovesegfault>
b/c it shoves them in the nix store which is unsafe
<lovesegfault>
alas for now that's all the effort I can put on this
<cole-h>
Just curious since I had just run into the same thing. I decided to use `git-crypt` for files with secrets and am committing them for now
<cole-h>
Maybe it would be better to do both: private GH repo + `git-crypt` for secrets
Jackneill has joined #nixos-chat
<eyJhb>
cole-h: I have started having everything private, as to not reveal my setup to anyone...
<eyJhb>
Easier to attack someone, when you know everything they run and how
<lovesegfault>
cole-h: is git-crypt gpg-based?
<cole-h>
Appears to be
<cole-h>
I don't think it's bespoke GPG though -- you can't gpg --decrypt the files, I don't think
<lovesegfault>
My problem with that is my gpg keys are more restricted than the secrets I have there
<lovesegfault>
i.e. there are boxes I want secrets in but don't want my gpg keys in
<lovesegfault>
only one machine has my keys
<cole-h>
For now, I don't have that problem because I only use 1 system
<cole-h>
Which doesn't address the problem of having secrets in a git repo that you may or may not trust
<eyJhb>
Well, if it is the git repo!
<eyJhb>
Then don't :p I just have mine offline, and put them in place on the systems as needed
<eyJhb>
But my setup is.. Hideous, I hate manging multiple systems using my current setup
<eyJhb>
Especially when you have to "quickly"fix something ,and push it back to the repo
<cole-h>
I think my current solution is pretty good: git-crypt the secrets files, with a plan to move them to a private GH submodule/subrepo like lovesegfault has
<infinisil>
Above PR doesn't add any secret support to NixOS really, it just prevents people from accidentally importing secrets into the store
<infinisil>
Well that's the intention anyways, but in the most recent comment I mention that it's blocked by a Nix issue..
<cole-h>
Yeah, which is why I quoted "in-progress" :P
Jackneill has quit [Remote host closed the connection]
<lopsided98>
This is my solution: https://github.com/lopsided98/nixos-secrets . There is no documentation, but every machine gets its own PGP key, and there is a config file that specifies which keys should be used on which files.
<eyJhb>
lopsided98: where is the readme! :D
<lopsided98>
eyJhb: I should add one; so far I only really designed it for my personal use. Some of the Nix code needed to make it work had to be placed in my configuration repository.
<eyJhb>
I know lopsided98 , just teasing you :p I always just put some readme.md, even if it doesn't help anything or is outdated. Which is bad...
<samueldr>
welp, confirmed that netflix is facing credential stuffing attack
<samueldr>
attacks*
<eyJhb>
samueldr: how?
<samueldr>
I got stuff again, but on a catch-all domain
<samueldr>
it only makes sense in a credential stuffing kind of attack
<samueldr>
so right now netflix is simply spamming e-mails trying to help you
<samueldr>
looks like I'll have to write a filter
<eyJhb>
Another reason not to have NF?
<samueldr>
hm?
<samueldr>
I don't have a netflix account
<samueldr>
if someone tries to login to an account that doesn't exist, it will "helpfully" create an account at the same time
<eyJhb>
Ahh, that seems idiotic
<samueldr>
so if you're using credential stuffing to find active accounts, you'll end up creating accounts
<samueldr>
it's actually a great UX to do so, except the world is not made for that nice UX
<eyJhb>
Makes more sense now, I should have read that last sentence on my Google search
<eyJhb>
I love sites that has a API for checking active accounts
<eyJhb>
I love sites even more, who gives me name+email address based on phone numbers, especially when they are only 8 digits in DK
<samueldr>
they almost all kind of have, the only way not to is to always reply "we will e-mail the associated account if it exists" after a password reset
<samueldr>
so the user cannot know if they input their e-mail right either
<samueldr>
which is another UX issue :(
abathur has quit [Ping timeout: 240 seconds]
<samueldr>
is it because I mistyped the account or because I don't have an account, that I cannot reset?
<eyJhb>
Yeah, but it provides better security
<eyJhb>
We should use that for a challenge, just for fun :p It is always fun
wildtrees has quit [Ping timeout: 265 seconds]
<jtojnar>
This is weird? Maybe they are fishing for keys that are also used in other places and I forget to revoke them?
<lovesegfault>
honestly my biggest gripe with nix is that so much of the out-of-tree tooling is written in Haskell
<lovesegfault>
Which makes supporting AArch64 a PITA
<gchristensen>
I've changed a bunch of stuff and `git add`'d it. is there a way I can do a `sed` operation on my diff before I commit, or do I need to like, commit, format-patch, reset, am?
<lovesegfault>
gchristensen: you can just git restore --staged and then sed normally?
<gchristensen>
I need to do my sed on exactly the lines I changed
<lovesegfault>
samueldr: in nix-top what does the number before the arrows mean ` 10 → /tmp/nix-build-gcc-9.2.0.drv-0`
<samueldr>
yes, and it didn't make sense that it changed
<samueldr>
especially useful when you have enough jobs running that fill your display
<lovesegfault>
my case right now
abathur has quit [Read error: Connection reset by peer]
abathur has joined #nixos-chat
abathur has quit [Read error: Connection reset by peer]
<cole-h>
gchristensen: I would `git diff --cached | [sed stuff] > diff && reset && apply diff`
<gchristensen>
ooh cool
<cole-h>
can't remember if sed has something that outputs to a file for you rather than needing to redirect
<lovesegfault>
Actually, scratch what I said, my biggest gripe with Nix is that stuff is written with `s` instead of `z`. OPTIMISE?!
<cole-h>
lol
abathur has joined #nixos-chat
<eyJhb>
lovesegfault: british english.. :p
<gchristensen>
lovesegfault: you must live a charmed life then :P
<cole-h>
Look at what gchristensen said in -dev... He used both, the heathen
<samueldr>
that's an americentrist view if I've ever seen one :)
abathur has quit [Read error: Connection reset by peer]
<samueldr>
now you're gonna tell me there is no U in colour?
<gchristensen>
cole-h: my `sed` was 's/pecialized/pecialised/g' =)
<lovesegfault>
samueldr: I'm brazillian :P
<cole-h>
ROFL
<cole-h>
gchristensen++
<{^_^}>
gchristensen's karma got increased to 222
<lovesegfault>
FWIW: Most non-native english speakers learn american, not british, english
<lovesegfault>
so the choice of using the less-common dialect(?) damages accessibility IMO
<eyJhb>
Still love how in the US of AMERICA you have to pay up (for getting checked etc.) if you have corona virus. Way to help not spreading it around
<cole-h>
I prefer colour over color, and specialization over specialisation
<samueldr>
sounds canadian
* cole-h
coughs on eyJhb
abathur has joined #nixos-chat
<ashkitten>
cole-h: please don't joke about that
<eyJhb>
lovesegfault: in DK we mostly learn British, but are exposed a lot more to American
<ashkitten>
eyJhb: whether you think it's fine is immaterial really. it's highly upsetting to a lot of people that may not in fact be you
<lovesegfault>
nothing promising here
<Irenes[m]>
I hadn't quite realized, until today, that having auto-upgrade for my system, combined with having a cross-compiler in my development environment, means I'll be rebuilding the cross-compiler locally every day
<Irenes[m]>
(I'm using lorri, so at least that's as automated as it can be within those constraints)
<eyJhb>
ashkitten: well, no one in my circles so far seems to lack the ability to joke with it so far, except this case :)
<Irenes[m]>
I'm assuming the official Hydra categorically doesn't build cross-compilers, since there are so many combinations, but does anybody know for sure?
<Irenes[m]>
the case I'm building is with a target that's not a supported platform anyway, so I know it definitely will never be cached heh
abathur has quit [Read error: Connection reset by peer]
<Irenes[m]>
ah!
<samueldr>
Irenes[m]: you're awfully on-topic for the off-topic channel ;)
<cole-h>
lol
<Irenes[m]>
lol
<gchristensen>
lol
<Irenes[m]>
I find it more pleasant to talk in spaces that are primarily social rather than task-oriented, heh
<cole-h>
Broke the chain :-(
<pie_[bnc]>
what off topic channel? ;P
<pie_[bnc]>
i mean uhh...
<pie_[bnc]>
lol?
<gchristensen>
that is okay, this isn't #emacs cole-h :)
abathur has joined #nixos-chat
<cole-h>
👀
<Irenes[m]>
ah yeah I see, it's building stuff with x86-64 hosts
<cole-h>
To bring this channel back to its roots: I'm so glad I figured out how to get my weechat notification plugin working. I can multitask without fear now
<Irenes[m]>
that's good
<cole-h>
I originally had it running as a system service which didn't have DBUS_SESSION_ADDRESS available
<Irenes[m]>
I'm doing ARM bootloader development so I've been using an aarch64 host because that's more likely to work smoothly in my experience. so that's why it isn't hitting the cases I need, but I know I'm a fringe case.
<cole-h>
Now it's a user service so I can see when people are talking about me behind my back 👀
<Irenes[m]>
is there a good way in general to see the configuration that determines which combinations this jobset builds? I can get a sense by looking at the outputs but I'd like to understand more of it
<Irenes[m]>
oh hey grats on the weechat stuff cole-h :)
<gchristensen>
Irenes[m]: click the Configuration tab :)
<jtojnar>
lovesegfault I was mostly questioning what variant of English people learn, I have no doubt that American is steamrolling through everything in the cultural space
<Irenes[m]>
ah! lol
<Irenes[m]>
thanks!
<gchristensen>
yep!
<infinisil>
AHhhh my system config is a mess!
<Irenes[m]>
isn't everybody's
<gchristensen>
aren't they all!
<infinisil>
Perhaps!
<Taneb>
(I know I definitely learnt British English at school, but I went to school in Britain, so that would make sense)
drakonis has joined #nixos-chat
drakonis has quit [Client Quit]
<lovesegfault>
jtojnar: Ah, yeah, to that I can only provide anecdotes
<eyJhb>
I think (maybe not correct), that British English is used more formally. E.g. when writing papers/reports/etc. for the University we all tend to use British English
abathur has quit [Read error: Connection reset by peer]
abathur has joined #nixos-chat
<infinisil>
I recently wrote this pretty hacky module for starting a minecraft server on-demand. When a tcp connection is made to a port, a digitalocean droplet is created, the volume with the data attached, and after startup the tcp connection is forwarded to the created droplet
<infinisil>
(Many manual steps are still involved as of now though)
abathur has quit [Read error: Connection reset by peer]
<infinisil>
Oh and part of it isn't published yet, the NixOS configuration of the created droplet. It has a systemd service that self-destructs itself after 15 minutes of no connections to the minecraft port :)
abathur has joined #nixos-chat
wildtrees has joined #nixos-chat
<infinisil>
Automating all these steps would be possible, but really painful, and probably not reliable unless I add testing infra too..
abathur has quit [Read error: Connection reset by peer]
abathur has joined #nixos-chat
<infinisil>
Soooo, probably not worth the effort :)
wildtrees has quit [Max SendQ exceeded]
wildtrees has joined #nixos-chat
<lovesegfault>
infinisil: that's pretty cool
<cole-h>
Continuing my backup saga from earlier: integrity check just finished (5h long lol) and borg reported all clear. Safe!