supersandro2000 has quit [Disconnected by services]
supersandro2000 has joined #nixos-chat
<infinisil>
Aha!
<infinisil>
job control in bash is only enabled by default in an *interactive* shell!
<infinisil>
I've been trying to reproduce these failures from my script in an interactive shell
<infinisil>
I need to turn on job control in the script with `set -m`
<abathur>
ah yeah, those can bite
<elvishjerricco>
Ok I've got a bash variable containing a file name that I want to pass to `cp`. Problem is.... the file name that's failing is `system-systemd\x2dcryptsetup.slice`, so bash passes it as `system-systemdx2dcryptsetup.slice`
<elvishjerricco>
It drops the back slash
<elvishjerricco>
Obviously I can't fix this with single quotes because then my variable wouldn't get expanded
<elvishjerricco>
Or maybe it's `read` that's messing up.
<elvishjerricco>
I'm using `find . -type f | while read f; do ...` to iterate over the file names. Would `read` drop the slash?
<abathur>
mmm
<abathur>
without -r it'll treat it as an escape, but it doesn't sound like that's what it is doing here?
<abathur>
`-r do not allow backslashes to escape any characters`
<abathur>
${f@Q} or ${f@E} may also help? I have trouble keeping them straight
<elvishjerricco>
abathur: Oh, no that's exactly it
<elvishjerricco>
-r allows it to retain the backslash in the variable
<abathur>
if that's not all of it, @Q == "The expansion is a string that is the value of parameter quoted in a format that can be reused as input.", @E == "The expansion is a string that is the value of parameter with backslash escape sequences expanded as with the $'…' quoting mechanism."
<abathur>
I think it'd be the @Q
<gchristensen>
I didn't know Itanium had any useful outcomes
<gchristensen>
"The original motivation for EFI came during early development of the first Intel–HP Itanium systems in the mid-1990s."
<samueldr>
I'm sure there's more
<samueldr>
I *think* x86_64 somehow came from itanium
<samueldr>
>> The multi-language firmware of the HiSense A5 is already pre-installed by our supplier. For the reason that they are charging an extra fee to flash all devices with the international ROM, we were not yet able to get the firmware version with Google Play Store from them.
<samueldr>
(from cect-shop)
<samueldr>
so it really looks like they are... doing weird things... to the chinese A5C
kalbasit_ has joined #nixos-chat
bqv has quit [Quit: WeeChat 3.0]
bqv has joined #nixos-chat
lunc has quit [Ping timeout: 264 seconds]
omnd has joined #nixos-chat
<siraben>
Drumpf got kicked off twitter entirely, hm.
<infinisil>
:oo
<infinisil>
Nice, about time!
<siraben>
And FB, and Reddit!
spudly1 has joined #nixos-chat
<infinisil>
bqv: Hmm agenix does look very interesting..
<lovesegfault>
tazjin: is the virus lounge still going?
<infinisil>
Are there any use cases for a single machine having multiple public ip addresses?
<bbigras>
One time I used 2 ips at work to use 1 ip for data coming from the internet and the other ip for the stuff that should be served on the lan only.
<lukegb>
Routers might have multiple public IPs
<lukegb>
(one of my NixOS boxes has... four "public" IPv4 addresses, but only one of those is routable)
<infinisil>
bbigras: And the second one was a public ip too?
<lukegb>
oh, although I gave this other NixOS box 30 public IPs mostly to, err, avoid some IP-based ratelimiting
<infinisil>
I guess I should specify multiple public ip addresses that are all accessible to the public, because otherwise they aren't practically public :P
<bbigras>
infinisil: no I didn't use the external ip directly. I used 2 static internal ips and the network admin set the router/firewall to send me the stuff on the right ip
<lukegb>
(and so all those IPs are public)
<infinisil>
Hehe
<lukegb>
That has a bit of weird setup though; all the public IPs are actually on `lo`
<infinisil>
lukegb: So was that a whole ip prefix set?
<infinisil>
Like a /27 space?
<lukegb>
Well, practically they're individually specified as /32s
<lukegb>
but IP address allocations to an interface don't really work like that
<lukegb>
In terms of less esoteric reasons for doing it... sometimes people want to host multiple websites on one box and make them look like they're not being served from the same machine? :P
* lukegb
remembers when having lots of IPs was a requirement for serving different SSL certificates
<infinisil>
Ah!
<infinisil>
Yeah that sounds like a neat usecase
<bbigras>
ssl before sni required multiple ips, right?
<infinisil>
I guess hosting providers (I guess at least AWS) lets you assign multiple public ips to the same machine
<lukegb>
I don't know what the relative timelines of SANs and SNI was
omnd has quit [Ping timeout: 272 seconds]
<bbigras>
oh, maybe I was confusing it with san
<bbigras>
"sometimes people want to host multiple websites on one box and make them look like they're not being served from the same machine". oh yeah if you want to hide your qanon or whatever web site.
<infinisil>
Btw I'm asking because I made a small NixOS module that just defines options for networking.public.ipv{4,6}, which are currently just a single string
<infinisil>
And this is really useful if you just need other modules to have a public ip, e.g. for VPN, for DNS records, etc.
<infinisil>
And now I'm wondering if it's worth making this a `listOf str` instead so you can have multiple
<bbigras>
just to be sure. you know we can have more than 1 ip per network card right? with ip aliases I think.
<infinisil>
I'm mainly interested in public ips for this
<infinisil>
But yeah I think supporting multiple ips for this option is fine. Modules that use it can just extract the first one if they only need one
<infinisil>
And modules that can support arbitrary number of ips (like DNS) can just use all of them
<infinisil>
Hmm, I'm thinking, to have a generic `networks.<name>` option, which can be configured e.g. with `networks.public.allowedIps = [ "0.0.0.0/0" ]`
<infinisil>
Then every module that needs some routable ip creates an option `services.foo.network` which can then be set to e.g. "public"
veleiro has quit [Read error: Connection reset by peer]
<lukegb>
Ah, reinventing firewalld? :P
<infinisil>
Then you can easily and modularily declare which service should be accessible by what
veleiro has joined #nixos-chat
<infinisil>
lukegb: Oh is that similar?
<lukegb>
firewalld has the concept of zones and services
<lukegb>
and you assign interfaces to zones, etc.
srk has quit [Ping timeout: 240 seconds]
<lukegb>
It's great, if you love configuring your firewall in XML :P
<infinisil>
Oof!
<infinisil>
But nice, taking a look..
srk has joined #nixos-chat
<lukegb>
It might be good for some inspiration since I think they put a relatively large amount of thought into their data model at least
<infinisil>
Oh and it doesn't even look that complicated
<infinisil>
I didn't implement secondary servers yet, but once implemented I could just add `secondaryNodes = [ "orakel" ]` below the `primaryNode = "protos"`, to have some redundancy
supersandro2000 has quit [Quit: Ping timeout (120 seconds)]
supersandro2000 has joined #nixos-chat
Jackneill has quit [Ping timeout: 240 seconds]
slack1256 has joined #nixos-chat
slack1256 has quit [Remote host closed the connection]
Jackneill has joined #nixos-chat
cole-h has joined #nixos-chat
kalbasit_ has quit [Ping timeout: 272 seconds]
waleee-cl has quit [Quit: Connection closed for inactivity]
veleiro has quit [Ping timeout: 264 seconds]
supersandro2000 has quit [Ping timeout: 246 seconds]
supersandro2000 has joined #nixos-chat
<samueldr>
I don't like poking in graphics drivers too much
<samueldr>
and yet here I am
<siraben>
random TIL: .copyWith(...) in Dart is like .overrideAttrs(_: ...) in Nix
supersandro2000 has quit [Ping timeout: 265 seconds]
supersandro2000 has joined #nixos-chat
cole-h has quit [Quit: Goodbye]
supersandro2000 has quit [Ping timeout: 265 seconds]
supersandro2000 has joined #nixos-chat
supersandro2000 has quit [Quit: Ping timeout (120 seconds)]
supersandro2000 has joined #nixos-chat
<lovesegfault>
infinisil: what are all these new nixus modules? :D
<tazjin>
lovesegfault: yes, our public channel is ##tvl-dev
<joepie91>
julm: I mean, after finally banning Trump, Twitter obviously had to quickly course-correct and also ban a high-profile legitimate user to compensate for it...
<eyJhb>
Did they finally ban Trump from Twitter?? :D
<eyJhb>
How will we now read his .. things? Banned from FB and Twitter... Is he on YouTube?
<sphalerite>
maybe he'll start streaming on twitch
<joepie91>
sphalerite: are you thinking of rubberized plastics?
<joepie91>
also: IPA will remove most goos, it being a pretty good solvent, but note that it can also damage plastics
<sphalerite>
joepie91: I'm not sure. I think the plastic on this was originally hard
<sphalerite>
but I've also had it happen to the insulation on USB cables
<joepie91>
it will probably still be a net positive, but you need to be especially careful that you're using a soft, non-scratching cloth
<sphalerite>
IPA as in indian pale ale? :p
<joepie91>
the insulation is definitely rubberized
<joepie91>
IPA as in IsoPropyl Alcohol
<sphalerite>
aaah
<sphalerite>
the kind of IPA you don't want to drink
<joepie91>
but yeah, as a general rule of thumb: is it sticky? then IPA makes it go away
<joepie91>
it just also makes some plastics go away :)
<joepie91>
but I've recovered a rubberized USB card reader using IPA, with relatively minimal damage
sorki has joined #nixos-chat
<adisbladis>
joepie91: At least it's not acetone which in my experience is slightly better at de-gooing but also much better at eating plastics
<joepie91>
heh
<sphalerite>
hm ok, I'll give that a try once I can get my hands on some
<adisbladis>
And, fun fact, iirc if you drink isopropyl one of it's metabolites is acetone
<joepie91>
adisbladis: I am reminded of the knockoff Alklanet cleaning agent people at revspace made: https://revspace.nl/RevKlanet
<joepie91>
which uses 'eco-aceton' which is apparently nothing like actual aceton
<joepie91>
err, acetone*, in English
<adisbladis>
Lol
<adisbladis>
knockoff cleaning agent
<adisbladis>
Nice
<joepie91>
sphalerite: should be easy to find, modulo pandemic supply shortages, it's probably one of the most common solvents
<joepie91>
adisbladis: it works, too! and I believe it even smells similar to the real thing
<joepie91>
the original cleaning agent (that being Alklanet) is extremely nice to work with, but it'd be nice to have an open-source equivalent :P
srk has quit [Ping timeout: 240 seconds]
sorki is now known as srk
thibm has joined #nixos-chat
* joepie91
has more or less stopped buying other cleaning agents since learning about Alklanet...
<adisbladis>
Ohhh, it's that one
<joepie91>
I don't think there's anything I can't clean now, with alklanet + IPA + cleaning vinegar
<joepie91>
oh that's not true, I also have a bottle of generic degreaser
<joepie91>
alklanet takes care of organics, IPA of things that need a solvent, degreaser for seriously greasy surfaces, and cleaning vinegar for all limescale-y deposits and misc taints on sinks, etc.
<sphalerite>
I like the choice of picture at the top of the page :D
<joepie91>
:D
<adisbladis>
Mix some bleach in there to take care of mold
<adisbladis>
(ALSO: DONT MIX BLEACH AND VINEGAR)
<sphalerite>
mold is part of organics, no?
<sphalerite>
err I mean mould.
<sphalerite>
silly me, using American spelling. :>
<joepie91>
afaik most molds can't withstand vinegar
<joepie91>
and I guess I'm using bleach in the toilet still :P
<adisbladis>
Say that to all my old Hong Kong flats....
<joepie91>
lol
<adisbladis>
The only thing that worked well for mould removal was bleach
<joepie91>
I may be conflating "killing mould" and "removing mould"
<adisbladis>
There is also a huge difference with the amount of mould you see in a hot humid climate and europe
<adisbladis>
It's like mould but on meth
<joepie91>
I guess they might even be different moulds
<sphalerite>
OK, everyone take fungal samples from your living spaces and get our your microscopes!
<joepie91>
I only have a huge-ass magnifying glass
<joepie91>
does that work too?
<sphalerite>
I don't even have that, so go for it
<sphalerite>
I'm surprised though, I'd have thought you might have at least one of those USB webcam microscopes
<joepie91>
sphalerite: I have been contemplating getting a digital microscope, but I don't want to spend too much on it, so that's a research topic
<joepie91>
and I find the huge magnifying glass to work really well for eg. SMD soldering
<joepie91>
it's actually bigger than it looks on the picture :P
<joepie91>
sphalerite: my "lol whatever" budget caps out at about 50 EUR, but I'm not yet convinced that you can get a digital microscope of sufficient quality at that price point
<joepie91>
optical quality, especially
<sphalerite>
ah my grandma has a similar magnifying glass. Quite a powerful light, too, iirc
<joepie91>
very powerful
<joepie91>
not quite "light up the room" like my worklight, but not too far off either
<joepie91>
it will definitely comfortable light an entire desk like it's daylight
<joepie91>
comfortably*
<joepie91>
(I have one of those construction worklights too, which will legitimately light up a full room to near-daylight level)
<sphalerite>
I'm considering getting a 30-40EUR microscope from amazon now (since I have a voucher that I can't really use anywhere else AFAIK)
<joepie91>
honestly I'd spend such a voucher on something where you can get good quality at that price point
<sphalerite>
oh yeah those LED panels are impressive. My dad has some set up to light the garage.
<joepie91>
I can recommend soft wheels for desk chairs, if you don't have those yet :P
<sphalerite>
oh the panel built in to one of those yellow stand thingies?
<sphalerite>
oh
<joepie91>
(I got it at a significant discount, paid about 40 EUR for it I think)
<joepie91>
it produces an absolutely ridiculous amount of light :P
<sphalerite>
I think I need to get a new chair before I get new wheels though, I'm currently still borrowing one from work
<sphalerite>
s/need/want/
<joepie91>
most office chairs (not IKEA ones, notably) have interchangeable wheels
<joepie91>
well IKEA ones do too, but only interchangeable among IKEA chairs
<joepie91>
they use a nonstandard pin size
<sphalerite>
but yeah, since we're here, I have that amazon voucher, and you always seem to know random cool products, do you have any other suggestions?
<sphalerite>
(also: I did indeed buy a toilet seat that's easy to remove for cleaning :p)
<Peetz0r>
FAQ. Does it work? Yeah. Does it feel terrible? Yeah. Does it work with all the connector types? I guess. Does your neighbors cat die when you use this? Definitely.
<Peetz0r>
though I'm still unhappy with the physical design of those meters
<joepie91>
it's nice to see the "dump information somewhere on a wiki and someone will do the rest of the work" model still working, lol
<Peetz0r>
You can't have two female type C plugs on a meter and have it work properly allof the time
<joepie91>
Peetz0r: well, the nice thing about this implementation is that it should now be possible to implement other meters easily too
<joepie91>
IIRC the main hurdle back when I brought this up was "we just don't have a category or framework for these type of meters at all"
<joepie91>
that is now, presumably, sorted
<Peetz0r>
yeah, sigrok was working on that for a while
<gchristensen>
immae[m]: https://github.com/hashicorp/terraform/issues/27456*shrug* a bunch of people have opened issues like it and they keep getting closed because there is an issue talking about a different thing
<{^_^}>
hashicorp/terraform#27456 (by grahamc, 27 seconds ago, open): lifecycle: specify fields which force new
<eyJhb>
Hopefully Hashicorp are better at responding to issues than some of the other "big ones".
<gchristensen>
lmao no
<eyJhb>
Hopefully you have someone to pull then gchristensen ! :D
<gchristensen>
I don't, unfortunately
<eyJhb>
But sounds like a fundamental thing, that it should support.
<eyJhb>
The worst part with such things is, even if you made a PR for it, there is a change that would be overlooked as well
<gchristensen>
I guess I haven't opened many issues on terraform itself but
<{^_^}>
hashicorp/terraform-provider-aws#16818 (by grahamc, 3 weeks ago, open): aws_iam_access_key keys created with `state = "Inactive"` are in fact Active
<{^_^}>
hashicorp/terraform-provider-aws#16820 (by grahamc, 3 weeks ago, open): aws_iam_role fails to modify-in-place if an added user is very new
<siraben>
lol nice their first build step is to install Nix
<joepie91>
gchristensen: if you're looking for blog fodder - IIRC there's a bunch of tools for turning Nix expressions into various packaging outputs like deb / rpm / container images / etc.... I suspect that a post on "how to escape distro packaging hell with Nix" would garner a LOT of interest
<joepie91>
like, a complete one that tells you where all the pieces are and how they fit together
<sphalerite>
gchristensen: making what nix?
<__monty__>
sphalerite: I assume it's a capitalization nitpick : )
<sphalerite>
oooh right
<gchristensen>
Nix being Nix is basically our only differentiator from *nix
cole-h has quit [Ping timeout: 246 seconds]
<eyJhb>
sphalerite: !!!
<eyJhb>
Is that for a supermicro casing?
<eyJhb>
Also, LinuxHackerman
<sphalerite>
eyJhb: yes, it connects the power and reset buttons and some LEDs, from the front panel
<eyJhb>
I really want to show you my solution now. but I really do not want to take the casing off my router
cloud has joined #nixos-chat
<eyJhb>
*which includes powering down my server that is on top of it* but I had the same issue ...
<eyJhb>
Had to place a ASRock board in a Supermicro casing.
<eyJhb>
I ended up going out to my old Gymnasium and talked with my robotics teacher, so I got some flat cable and some clips to make my own connector :D But honestly, I don't really see the lights... And I don't really use the power button because, IPMI
<sphalerite>
oh that does sound good… I could also sacrifice that cable, but I'm scared to
<sphalerite>
and this board doesn't have IPMI, so I need the power button :(
<eyJhb>
I am not even 100% sure how I connected it however...
rajivr has quit [Quit: Connection closed for inactivity]
endformationage has joined #nixos-chat
<sphalerite>
ah, cool, thanks srk
veleiro has joined #nixos-chat
<viric>
why ssh takes 100% of cpu (1 core) for 100MB/s if its cipher, in "openssl speed-evp", says 1.8GB/s? (aes-256-gcm, chacha20-poly1305)
<__monty__>
I guess it technically doesn't say it'll use less cpu if the rate isn't as high?
<viric>
mh
<viric>
I don't see any sense in that
<viric>
now I get 900MB/s in the same test. Maybe the benchmark is just wrong?
<sphalerite>
yeah how are you benchmarking it?
<infinisil>
lovesegfault: eyJhb: Some modules I recently wrote, very abstract :D
<sphalerite>
hm, it would be nice if the nixos bootloader modules weren't mutually exclusive.
veleiro has quit [Read error: Connection reset by peer]
veleiro has joined #nixos-chat
<__monty__>
infinisil: Maybe you know how to override h-m modules?
<infinisil>
Gotta be a bit more specific :)
<__monty__>
infinisil: I want to test a patch for a h-m module.
<__monty__>
In nixos I'd disable the module and then add the patched one to imports but h-m doesn't seem to have such options.
<infinisil>
That should work the same with h-m
<infinisil>
__monty__: You probably have to make it a function like this: `home-manager.users.monty = { ... }: { disabledModules = [ ... ]; imports = [ ... ]; }`
<__monty__>
infinisil: Hmm, h-m doesn't have a disabledModules attribute. So I put that in configuration.nix. But the import isn't adding the "programs.fish" module back. I suppose h-m modules are written differently from nixos modules : /
<infinisil>
They're not
<infinisil>
Anyways this is something for #nixos, but if you post your code I could help
veleiro has quit [Remote host closed the connection]
veleiro has joined #nixos-chat
srk has quit [Ping timeout: 240 seconds]
<eyJhb>
I must admit, I still haven't used many of the modules in nixus yet. I really should however... Manually ssh-copy-id does not seem like the best thing to do :p
srk has joined #nixos-chat
cloud has quit [Quit: WeeChat 3.0]
thibm has quit [Ping timeout: 264 seconds]
thibm has joined #nixos-chat
srk has quit [Remote host closed the connection]
srk has joined #nixos-chat
cole-h has joined #nixos-chat
thibm has quit [Quit: WeeChat 2.9]
<infinisil>
eyJhb: ssh-copy-id?
<infinisil>
Ah
<infinisil>
Wait what does that do
<samueldr>
It IDs the ssh-copy
<infinisil>
Ah yes!
<infinisil>
eyJhb: Ah but yeah, the ssh module could take care of that :)
<__monty__>
You must be mistaken. "ssh" must be short for super-self-human aka super-ego, copy is shorthand for a repetition of what immediately preceded but everyone knows copies are never perfect so it's not super but still ego, and then you have the id. This is clearly just a shallowly concealed reference to Freud's model of the psyche.
<infinisil>
Lol nice
<__monty__>
infinisil: Btw, even rycee had trouble figuring out how to override a module for home-manager. It's complicated by the fact that I use the nixos/nix-darwin module for home-manager. Somehow that prevents the disabledModules+imports from working. I don't understand the details.
__monty__ has quit [Quit: leaving]
<infinisil>
Well I can't help if I don't get the code and the error :)
<veleiro>
are there any wayland tiling managers that do save/reload of layouts?