gchristensen changed the topic of #nixos-chat to: NixOS but much less topical || https://logs.nix.samueldr.com/nixos-chat
hexa- has joined #nixos-chat
cole-h has quit [Ping timeout: 260 seconds]
tilpner_ has joined #nixos-chat
tilpner has quit [Ping timeout: 272 seconds]
tilpner_ is now known as tilpner
Ashy has quit [Ping timeout: 260 seconds]
hexa- has quit [Quit: WeeChat 2.9]
hexa- has joined #nixos-chat
Ashy has joined #nixos-chat
<gchristensen> env -i $(which bwrap) --ro-bind /run/user/"$(id -u)"/pulse /run/user/"$(id -u)"/pulse --setenv XDG_RUNTIME_DIR /run/user/1000 --setenv WAYLAND_DISPLAY "$WAYLAND_DISPLAY" --setenv HOME /run/user/"$(id -u)" --dir /run/user/"$(id -u)" --ro-bind /run/user/"$(id -u)"/wayland-0 /run/user/"$(id -u)"/wayland-0 --setenv MOZ_ENABLE_WAYLAND 1 --unshare-all --share-net --dev-bind /dev/dri /dev/dri --dev
<gchristensen> /dev --proc /proc $(nix-store --query --requisites $(which firefox) | sed -e 's/^\(.*\)$/--ro-bind \1 \1/') $(which firefox)
<V> niiice
<V> should be `--ro-bind /run/user/"$(id -u)"/$WAYLAND_DISPLAY`, though
<gchristensen> ah nice
<V> id -u shouldn't print anything funky, so you arguably don't need to quote those
<gchristensen> yeah
<V> if id -u is giving you something that isn't a number you probably have bigger issues lol
<samueldr> always quote them, since it makes shellcheck happier
<gchristensen> I just cobbled that together in my command line, I'm making a prettier script now
<V> samueldr: I just use fish instead :p
<V> The more shells with sane variable expansion semantics, the better
<V> danke :)
<samueldr> /ru/?
<V> should maybe be /run/
<gchristensen> /run/user/ but ... lazy
<V> heh
<gchristensen> tbh I'm not sure I can use this very generically. it is risking too large of a argv
<samueldr> isn't the limit really big?
<V> argv limit is like 16k
<V> IIRC
<gchristensen> this one is 23kb
<V> 2097152
<V> v@february ~> getconf ARG_MAX
<V> >On Linux 2.6.23, it is 1/4th of stack size.
<samueldr> oh, storepaths business I see
<samueldr> I hadn't taken a good look
<V> I think you're plenty within limit
<gchristensen> yeah
<gchristensen> at least, until I get to a big perl program
<gchristensen> those sometimes have many-mb shebangs
<V> does bubblewrap reexec? or do you have that huge argv sitting in your process viewer for the duration of firefox's existence
<samueldr> isn't that shebang an ARGV anyway?
<gchristensen> V: https://gsc.io/content-addressed/e33a6af8b958f749aa7fe0e963c334a55cf74ab05d440cf20c5ae84c90501992.sh added a random machine ID, and a bogus hostname too for kicks. maybe later a downloads directory :). g'night
<V> nighty
<samueldr> 'night!
ajs124 has quit [Quit: killed]
das_j has quit [Quit: killed]
das_j has joined #nixos-chat
ajs124 has joined #nixos-chat
xd1le has quit [Read error: Connection reset by peer]
xd1le has joined #nixos-chat
waleee-cl has quit [Quit: Connection closed for inactivity]
<drakonis> wow okay, the nixos page redesign looks
<drakonis> *chef kiss*
<aleph-> Oh it is up?
<aleph-> is it*
<samueldr> no
<drakonis> you can preview it in the minutes
<drakonis> the currently live design is too crowded
<aleph-> Oh that's lovelyyy
<aleph-> Now, back to fighting mastodon. Sigh
<drakonis> it looks very respectable now
<aleph-> It does
xd1le has quit [Read error: Connection reset by peer]
<drakonis> wow big changes on nix repo
<aleph-> Oh?
<V> pah, bat
<drakonis> regnat does good work
<drakonis> 3.0 will be LOADED
xd1le has joined #nixos-chat
<drakonis> there's a new store hierarchy implementation
<drakonis> if i understand it correctly, you can now have multiple stores at once
<ashkitten> store... hierarchy?
<drakonis> there's a new command called nix describe-stores
<aleph-> Interesting.
<drakonis> i wonder if it can be used for secrets now
cjpbirkbeck has quit [Quit: Goodbye, take care]
<ashkitten> like, a separate nix store for secrets?
<drakonis> yes
<drakonis> the command's description is "show registered store types and their available options"
<drakonis> so
<drakonis> that'd be pretty sick, really.
<ashkitten> huh
<drakonis> huh
<drakonis> so it does that
<drakonis> here
<drakonis> a ssh store
<drakonis> wooo secrets store
<aleph-> Nifty
<aleph-> Really nifty
<drakonis> content addressed derivations got merged
<drakonis> extremely nifty
<drakonis> also relevant
<ashkitten> ssh store? as in sshfs?
<{^_^}> nix#3959 (by Ericson2314, 3 weeks ago, open): WIP: Derivations can output "text-hashed" data --- contains many other PRs
<drakonis> i'm going to bump my nix release
<drakonis> i think i'd be ssh keys?
<drakonis> i'm a happy camper because of those changes, as it lets me sell nix harder
<drakonis> that wip PR is straight up the best though
<drakonis> because it enables derivations to output derivations
<drakonis> yay recursion
<drakonis> i'm pleased at the evolution of nix
<drakonis> even though my opinion doesnt really matter
xd1le has quit [Remote host closed the connection]
xd1le has joined #nixos-chat
<drakonis> hmm
<drakonis> there's a list of available store types
<drakonis> it does have ssh remote store it seems
<drakonis> it isnt for keys
<drakonis> it does however provide the means to achieve an secrets store
<drakonis> can't wait for more CA derivations though
endformationage has quit [Quit: WeeChat 2.9]
<aleph-> CA derivation?
<abathur> content-addressed, I think
<aleph-> Ah
<aleph-> Was thinking cert authority
<abathur> yeah, I keep having to do that mental conversion too
<abathur> I think maybe this is the merge that kicked off the chatter today https://github.com/NixOS/nix/pull/3883
<{^_^}> nix#3883 (by Ericson2314, 6 weeks ago, merged): Can build single CA derivations
<drakonis> it is extremely nice.
<drakonis> anyways, i should go, night.
cole-h has joined #nixos-chat
maxdevjs has quit [Ping timeout: 265 seconds]
<ldlework> Crusader Kings 3 is a really good game.
parsley936 has joined #nixos-chat
<eyJhb> ldlework: only think I played 2
<eyJhb> ldlework: Got emacs + evil mode
<eyJhb> But not sure if I will continue on it!
ixxie has joined #nixos-chat
<cole-h> evil-mode is great
cole-h has quit [Quit: Goodbye]
<eyJhb> To buy or not to buy a AX200 for my x230. Currently I have a Intel® Centrino® Advanced-N 6205, which is not great, as my AP supports AC
<eyJhb> Also, does NixOS have mascot ?
<Taneb> Hmm, each release has an animal
<Taneb> But I don't think NixOS as a whole has a mascot
<sphalerite> eyJhb: was x230 before the restrictions on allowed PCI IDs?
<srk> I've flashed one x201 to fix that
<eyJhb> Taneb: would be nice of NixOS had one! :D
<eyJhb> sphalerite: Nope, I need to flash the bios. Considering coreboot while I am at it, but could as well just run stock
<eyJhb> srk: Which card did you add to it?
<Taneb> eyJhb: you could interpret the logo as a sort of eldritch snowflake creature mascot
<eyJhb> Taneb: Does not work as well for e.g. https://i.imgur.com/lev8d9d.jpeg :D
evalexpr has quit [Quit: Bye]
<srk> eyJhb: dunno, wasn't mine. I've just had an idea how to make it work :)
<eyJhb> Ahh :D
<srk> heh 'All known ThinkPads implement a BIOS mPCI Whitelist, which only allow certain Lenovo-approved mPCI Wifi cards to work. This makes it difficult to upgrade the wireless card to newer standards such as Wireless-N (Although it apparently allows all mSATA drives)'
xd1le has quit [Read error: Connection reset by peer]
xd1le has joined #nixos-chat
<Mic92> Oh man. before every release the acme module gets changed and breaks again
<gchristensen> it is tradition
xd1le has quit [Read error: Connection reset by peer]
xd1le has joined #nixos-chat
<infinisil> Mic92: Wasn't the intention to merge it *after* the release?
<infinisil> That's at least what I can remember hearing
<gchristensen> my last commit to my nixos config repo is from Sun Mar 15 22:00:27 2020 -0400. I should probably do my biannual commit.
<infinisil> Hehe
<gchristensen> (almost real... the previous commit is December, then the one before that is September 19, 2019)
<colemickens> git commit -m "eh, more changes"; git push
<V> git commit -m "do we even need changes" --allow-empty; git push
<Mic92> infinisil: yeah. I am on unstable.
<infinisil> git commit --allow-empty --allowe-empty-message
<V> haaaaaaaaands
<gchristensen> okay I did it
<gchristensen> hopefully there was nothing secret in there
<gchristensen> infinisil: did you have a trick to committing every time you nixos-rebuild?
<infinisil> I'm using a wrapper
<gchristensen> ah
<gchristensen> that vscode one is fun b/c it means vscode has almost nothing in its path, and has to use direnv
waleee-cl has joined #nixos-chat
<V> gchristensen: I assume guiduck is not open?
<gchristensen> oh it could be
xd1le has quit [Ping timeout: 240 seconds]
xd1le has joined #nixos-chat
arianvp has quit [Quit: WeeChat 2.7.1]
waleee-cl has quit [Quit: Connection closed for inactivity]
<aleph-> Okay I did an awful, awful thing at 4am :D
<aleph-> Is there anything better then expect driven vim sessions?
<aleph-> I saw no
<aleph-> say*
monsieurp has quit [Remote host closed the connection]
monsieurp has joined #nixos-chat
<gchristensen> oh wow
cole-h has joined #nixos-chat
<aleph-> Heh
<aleph-> gchristensen: Probably the most horrific script I've ever written. Barring some nixOPs code with pyexpect on a local branch. https://paste.rs/Dv7
<aleph-> All to update our IDS db after an upgrade run haha
<gchristensen> whew
<aleph-> Yep! But more importantly it works.
<aleph-> Now I can cut down on noise in my daily security report
<eyJhb> aleph-: `interact timeout 5 return` ? What does that do?
<ldlework> eyJhb: how's it treating you
<aleph-> eyJhb: Just sets the timeout to return on for the next run command
<ldlework> oops that was way long ago
<ldlework> eyJhb: evil-mode i mean
<eyJhb> aleph-: but the magic `interact`, where does that command come from?
<eyJhb> ldlework: looked at it, didn't know how buffers worked, had do to uni work..
<eyJhb> So maybe 2 min use :p
<aleph-> From expect?
<aleph-> Not sure I get what you're asking
<eyJhb> ,locate bin interact
<{^_^}> Found in packages: haskellPackages.interactive-plot, gitAndTools.git-interactive-rebase-tool
<eyJhb> aleph-: ^ I guess :p
<aleph-> eyJhb: If you notice I'm invoking the expect util by heredoc'ing a bunch of expect/tcl to it
<aleph-> That's where interact is coming from
xd1le has quit [Read error: Connection reset by peer]
xd1le has joined #nixos-chat
matina has joined #nixos-chat
matina has left #nixos-chat [#nixos-chat]
waleee-cl has joined #nixos-chat
ixxie has quit [Ping timeout: 272 seconds]
ixxie has joined #nixos-chat
immae_ has quit [Quit: WeeChat 2.9]
immae has joined #nixos-chat
rajivr has quit [Quit: Connection closed for inactivity]
ixxie has quit [Remote host closed the connection]
maxdevjs has joined #nixos-chat
maxdevjs has quit [Remote host closed the connection]
ixxie has joined #nixos-chat
tilcreator has joined #nixos-chat
<cole-h> Woo!
<worldofpeace> though nixcon 2020: animal crossing would've been cool
<cole-h> Agreed. However, I wouldn't be able to attend if that had happened, since my Switch has been homebrewed :eyes:
<cransom> animal crossing seems like a second job. that's part of the reason i decided to uninstall factorio.
<worldofpeace> cransom: right, and honestly it's totally also reasonable to take a intermission from opensource contributing to focus on animal crossing
<cransom> maybe it would be more productive though if there was git/ssh access inside animal crossing.
<worldofpeace> people claim "vacations" but I know that they're just spending more time in... that and taking care of the tomagotchi, had to nurse it off the deathbed
__monty__ has joined #nixos-chat
<colemickens> I might've bought a DS. NixOS on 3DS?
<cole-h> NixOS on Switch -- it has a Linux port as well :D
<samueldr> cole-h: I mean, someone tried a bit https://github.com/samueldr/HAC-overlay
<samueldr> but at the time I found out that the misc. projects didn't actually publish their linux source code trees :<
<samueldr> ooh, hadn't seen that fresh linux 3DS update
<samueldr> I was a bit curious about that too, but at the time I only had an original 3DS which is a really limited platform
<samueldr> the new 3DS is a bit more powerful with much more ram
<cole-h> samueldr: I feel you. O3DS :(
<samueldr> cole-h: for non-hacked stuff, it makes no difference except the few specific games
<samueldr> at some point I'll end up circling back to the HAC stuff and port Mobile NixOS to it
<samueldr> can you even believe that overlay is from before Mobile NixOS?
<cole-h> Wait, really?
<cole-h> That's pretty cool.
<samueldr> it still would have the same drawbacks as any other hacking on the HAC
<samueldr> you need to be "tethered" to boot anything
<samueldr> which means some kind of device to inject a payload do boot your thing
<joepie91> Nix3DS? :P
<samueldr> I'll probably end up looking at the 3DS around the same time
<samueldr> the main trouble is that it's ARMv6
<samueldr> so there will probably never be a native cache
<joepie91> because of it being an unusual architecture?
<samueldr> and it's limited to 128MB (old) or 256MB (new)
<samueldr> not unusual
<samueldr> raspberry pi are using ARMv6
<samueldr> lack of build "firepower"
<samueldr> there is no way to build native for ARMv6 in a speedy way
<samueldr> meanwhile the Switch is AArch64, using a Tegra
<joepie91> samueldr: oh as in, there's not enough powerful ARMv6 systems?
<joepie91> (or at all)
<colemickens> Nice thing about the 3DS is knowing that (likely) all units will be hackable. Versus the Switch, I sort of assume they might get closer to keeping it locked now in the next round of HW revisions
<ashkitten> how do i figure out what package in a system generation depends on another package?
<ashkitten> ooh
<ashkitten> nix why-depends /run/current-system nixpkgs.vlc
<ashkitten> sick
<samueldr> joepie91: yeah
<samueldr> colemickens: since they stopped producing them, and the latest designs are hackable, it is _known_
<samueldr> they announced it today
<samueldr> it's over for the 3DS
<ashkitten> colemickens: looks like vlc is broken with qt 5.15. nixpkgs has it pinned to 5.14, but it looks like for some reason obs-studio in nixpkgs-wayland isn't picking that up
<colemickens> ashkitten: I was hoping to ignore it until qt5.15 lands in nixos-unstable tbh, which should be soonish-ish nixos-unstable-small is fine.
<ashkitten> it has already
<ashkitten> i just updated my nixpkgs and it broke
<colemickens> oh, it's broken with 5.15.
<ashkitten> yes
<colemickens> Grumble, thanks for the heads up, I'll look at it more.
<ashkitten> np
<ashkitten> oh i think i know what happened
<ashkitten> you use libsForQt5.callPackage on obs-studio, which would use libsForQt5.vlc, i think
<ashkitten> so you could just add `vlc = prev.vlc` to the args there
<ashkitten> to use the nixpkgs pinned version
<colemickens> ashkitten: thank you! pushed!
<ashkitten> ty!
<ashkitten> rebuilding virtualbox again :D
<ashkitten> wasn't mesa 20.2 supposed to be out already?
<colemickens> lol for a second I thought "why does vbox take obs as an input"
<ashkitten> no, just from rebuilding whole system
<colemickens> that's what I thought :( I have been sending kind thoughts their way, I assume something came up.
<ashkitten> yeah it's rough when you have to delay a release
<joepie91> samueldr: I wonder if you could just have a rack of RPis
<samueldr> joepie91: sure, but they're slow, and lack RAM
<ashkitten> ugh i still havent gotten around to fixing & updating the glimpse pr
<joepie91> samueldr: well hence a rack! :P
<samueldr> the lack of ram though is a big issue
<samueldr> "big" packages won't compile... or rather won't link
<joepie91> hm
<joepie91> would it be possible to hack extra RAM onto an rpi?
<joepie91> frankenbuildfarm :P
<samueldr> IIRC the armv7l pis are limited to 1GiB of RAM by the SoC
<samueldr> so at best the pi1/0 are limited to 1GiB
<samueldr> but without checking I'm willing to bet they're limited to their 512MiB
<joepie91> boo :(
<ashkitten> would be really nice if wine-wow was built by hydra :/
__monty__ has quit [Quit: leaving]
xd1le has quit [Read error: Connection reset by peer]
xd1le has joined #nixos-chat
<joepie91> ,tofu
<{^_^}> To get a sha256 hash of a new source, you can use the Trust On First Use model: use probably-wrong hash (for example: 0000000000000000000000000000000000000000000000000000), then replace it with the correct hash Nix expected. For inserting 52 0's in vim: <esc>52i0<esc>
<joepie91> tilcreator: ^
<tilcreator> joepie91: thx
parsley936 has quit [Remote host closed the connection]
xd1le has quit [Read error: Connection reset by peer]
xd1le has joined #nixos-chat