la_putin has joined #nixos-dev
pbogdan has quit [Quit: ZNC 1.6.5 - http://znc.in]
pbogdan has joined #nixos-dev
<copumpkin> is there a good command to go from a .drv to a list of output paths?
<copumpkin> nix parse-derivation and then jq'ing could be one of them
<simpson> Wow, low bar for "good" today~
<simpson> But honestly, that sounds like a better idea than anything I've got. I didn't know about parse-derivation.
<copumpkin> yeah, I'm hoping there's something better :)
orivej has quit [Ping timeout: 276 seconds]
el_putin has joined #nixos-dev
la_putin has quit [Read error: Connection reset by peer]
mbrgm has quit [Ping timeout: 248 seconds]
mbrgm has joined #nixos-dev
yegortimoshenko has quit [Ping timeout: 272 seconds]
yegortimoshenko has joined #nixos-dev
ma27 has joined #nixos-dev
ma27 has quit [Quit: WeeChat 2.0]
pie_ has quit [Ping timeout: 256 seconds]
<MichaelRaskin> copumpkin: simpson: nix-store -q --outputs
<MichaelRaskin> Or is it not yet ported to new single-command nix?
pie_ has joined #nixos-dev
simpson has quit [Ping timeout: 255 seconds]
pie_ has quit [Ping timeout: 268 seconds]
MichaelRaskin has quit [Quit: MichaelRaskin]
ma27 has joined #nixos-dev
ma27 has quit [Client Quit]
ma27 has joined #nixos-dev
orivej has joined #nixos-dev
yegortimoshenko has quit [Quit: WeeChat 2.0]
yegortimoshenko has joined #nixos-dev
ma27 has quit [Ping timeout: 248 seconds]
pie_ has joined #nixos-dev
pie_ has quit [Quit: Leaving]
pie_ has joined #nixos-dev
pbogdan has quit [Quit: ZNC 1.6.5 - http://znc.in]
pbogdan has joined #nixos-dev
ckauhaus has joined #nixos-dev
yegortimoshenko has quit [Remote host closed the connection]
yegortimoshenko has joined #nixos-dev
pie_ has quit [Ping timeout: 240 seconds]
ckauhaus has quit [Remote host closed the connection]
ckauhaus has joined #nixos-dev
ckauhaus has quit [Remote host closed the connection]
ckauhaus has joined #nixos-dev
<copumpkin> MichaelRaskin: awesome, that works
ma27 has joined #nixos-dev
orivej has quit [Ping timeout: 255 seconds]
ckauhaus has quit []
orivej has joined #nixos-dev
<Profpatsch> Does anybody here have experience with post-build-hooks on Hydra?
<Profpatsch> Or have any info whether such hooks exist?
<Profpatsch> Or could be made to work?
<Profpatsch> Or any way to push some info from Hydra after a build, instead of having to poll? e.g. via webhooks?
ckauhaus has joined #nixos-dev
JosW has joined #nixos-dev
simpson has joined #nixos-dev
ckauhaus has quit [Ping timeout: 276 seconds]
yegortimoshenko has quit [Ping timeout: 272 seconds]
ckauhaus has joined #nixos-dev
yegortimoshenko has joined #nixos-dev
ckauhaus has quit [Remote host closed the connection]
yegortimoshenko has quit [Remote host closed the connection]
ma27 has quit [Ping timeout: 276 seconds]
yegortimoshenko has joined #nixos-dev
yegortimoshenko has quit [Remote host closed the connection]
yegortimoshenko has joined #nixos-dev
ckauhaus has joined #nixos-dev
ckauhaus has quit [Ping timeout: 265 seconds]
jtojnar has quit [Remote host closed the connection]
<srhb> Profpatsch: Hmm, buildFinished looks relevant, but I'm not sure how to use it.
<Profpatsch> srhb: There seems to be a plugin system, yeah.
<Profpatsch> There’s also plugins for some systems, like CircleCI
<Profpatsch> Nothing general though, I’m afraid.
<srhb> Right, I'm guessing you have to actually add a plugin.
<Profpatsch> There’s a few magic files possible in /nix-support/ which build-result.cc reads.
<Profpatsch> For example a metrics file that is used to fill a simple BuildMetrics struct.
<Profpatsch> Here’s a quick writeup of the options Hydra supports for such post-build-hooks: http://lpaste.net/361736
<Profpatsch> cc globin
ma27 has joined #nixos-dev
<gchristensen> copumpkin, may I request this get fixed in time for 18.03?
<copumpkin> is cutoff soon for that? I'm swamped for next couple of weeks
<copumpkin> niksnut: noticing an interesting bug (I think) with --check and concurrent jobs
<copumpkin> I think I have 9 build users on this machine, but it complains even with -j4 that my build users are all in use
<copumpkin> during a bunch of hash rewriting
ma27 has quit [Quit: WeeChat 2.0]
ma27 has joined #nixos-dev
JosW has quit [Quit: Konversation terminated!]
<copumpkin> would appreciate any advice on https://github.com/NixOS/nix/issues/1803
<copumpkin> going to file another related issue soon as soon as I have a consistent repro
zarel has joined #nixos-dev
<Profpatsch> Fun-fact: The Hydra API has a special endpoint for Github https://github.com/NixOS/hydra/commit/f501648cd2c24e940b564861524c21b3b14fc15c
pie_ has joined #nixos-dev
pie_ has quit [Ping timeout: 255 seconds]
zarel has quit [Quit: Leaving]
MichaelRaskin has joined #nixos-dev
<Mic92> Profpatsch: but we without authentication
pie_ has joined #nixos-dev
<Sonarpulse> peti: how does the right llvmPackages get routed to haskell builds today?
<Profpatsch> Mic92: You mean there is no authentication when there should be?
<Profpatsch> Haven’t thought about that, might be.
<Profpatsch> I like the database query in that endpoint.
<Mic92> Profpatsch: you can set a secret on the github page
<Profpatsch> „like“
<Profpatsch> Ah, you mean there is no support for that?
<Mic92> Profpatsch: github supports that, but hydra just accept any put requests
<Profpatsch> Yeah, smells like a security issue.
<niksnut> iirc, the only thing you can do is trigger an eval check
<Profpatsch> Sure, it’s a minor issue.
<Profpatsch> niksnut: Do you have any plans on implementing more push-based stuff in Hydra?
<niksnut> no
<Profpatsch> I’d like to push stuff after the build.
<Mic92> echo '{"repository": {"owner": {"name":"NixOS"}, "name": "nix"}}' | http PUT https://hydra.nixos.org/api/push-github
<Profpatsch> What I could do right now is init the build from Gitlab once a commit is pushed (so I skip the pull time) and then reintroduce that pull time with a Gitlab scheduler that pulls for the latest evaluation.
<Profpatsch> Mic92: That means a non-logged-in user can init a rebuild, yeah.
<Profpatsch> Or reeval
<Profpatsch> Definitely the possibility of an easy DDOS.
yegortimoshenko has quit [Ping timeout: 272 seconds]
yegortimoshenko has joined #nixos-dev
<Profpatsch> Mic92: Not POST?
<Mic92> Profpatsch: post triggers different code
<Profpatsch> Mic92: Huh, where is that implemented?
<Profpatsch> I can’t see any mention of HTTP parameters in the code.
<Mic92> Profpatsch: I don't know the web framework. This was trial and error. And I saw the `die` statement, when I used PUT instead
<Profpatsch> Could be that any verbs work.
<Profpatsch> The frontend does a GET
<Mic92> GET works too, but GET has no body
<Mic92> at leas in the framework
<Profpatsch> Hm, does the api/push endpoint need a valid session id?
<niksnut> to DoS hydra, you just do *any* HTTP request rapidly ;-)
<Profpatsch> niksnut: It looks like the push endpoint doesn’t check user credentials as well?
<Profpatsch> I can remove the session Cookie from the request (devtools copy as curl) and it still starts an evaluation.
<niksnut> probably
<Profpatsch> But yeah, that’s probably not an attack vector.
<Profpatsch> As long as nix properly sandboxes stuff and hydra doesn’t execute anything that is not input by authorized users.
<Mic92> otherwise there is an http header one can test with Digest::HMAC
<Profpatsch> Mic92: Which one? Apart from the session cookie?
<Mic92> Profpatsch: X-Hub-Signature
<Profpatsch> Mic92: Ah, you mean the webhook request coming from GH
<copumpkin> another fun bug: https://github.com/NixOS/nix/issues/1804
<LnL> heh
<shlevy> Anyone know if abbradar goes by some other name on here?
ma27 has quit [Ping timeout: 256 seconds]
orivej has quit [Ping timeout: 268 seconds]
<Sonarpulse> shlevy: good question
<gchristensen> they go by abbradar but I haven't seen them on IRC since 2017-10-30 18:59:20
<Mic92> gchristensen: he was not in good health condition
pie_ has quit [Read error: Connection reset by peer]
pie_ has joined #nixos-dev
pie__ has joined #nixos-dev
pie_ has quit [Ping timeout: 240 seconds]
<copumpkin> shlevy: do you have a good sense for how --check does its job?
<copumpkin> build.cc is quite hard to follow
<shlevy> copumpkin: haven't looked in a while, sorry
<copumpkin> ah okay
pie__ has quit [Ping timeout: 256 seconds]
ckauhaus has joined #nixos-dev
<copumpkin> niksnut: you're not still up are you?
pie_ has joined #nixos-dev
<LnL> it's pretty late here
<copumpkin> :)
<LnL> are those check issues on nixos?
ckauhaus has quit [Ping timeout: 256 seconds]
<copumpkin> yeah, but I think on macOS too
<LnL> yes, thought only noticed it there
<copumpkin> hmm, part of my issue might be that buildMode is either bmCheck or bmHash
<copumpkin> whereas I'm doing both, hmm
<copumpkin> oh I see, bmHash isn't what I want
yegortimoshenko has quit [Remote host closed the connection]
yegortimoshenko has joined #nixos-dev
<copumpkin> LnL: got it to fail on darwin too :P
<copumpkin> so it's builtin:fetchurl
<copumpkin> now sorting out how that works in build.cc is proving to be a bit of a pain
<LnL> yeah, it's a ... large file
jtojnar has joined #nixos-dev