gchristensen changed the topic of #nixos-dev to: NixOS Development (#nixos for questions) | https://hydra.nixos.org/jobset/nixos/trunk-combined https://channels.nix.gsc.io/graph.html | 18.03 release managers: fpletz and vcunat | https://logs.nix.samueldr.com/nixos-dev
Sonarpulse has quit [Ping timeout: 248 seconds]
Synthetica has quit [Quit: Connection closed for inactivity]
lassulus_ has joined #nixos-dev
lassulus has quit [Ping timeout: 256 seconds]
lassulus_ is now known as lassulus
aszlig has quit [*.net *.split]
flokli has quit [*.net *.split]
mbrock_ has quit [*.net *.split]
ghuntley has quit [*.net *.split]
aristid has quit [*.net *.split]
terrorjack has quit [*.net *.split]
thoughtpolice has quit [*.net *.split]
noefk has quit [*.net *.split]
layus has quit [Ping timeout: 240 seconds]
layus has joined #nixos-dev
orivej has joined #nixos-dev
MichaelRaskin has quit [Quit: MichaelRaskin]
aszlig has joined #nixos-dev
flokli has joined #nixos-dev
thoughtpolice has joined #nixos-dev
ghuntley has joined #nixos-dev
mbrock_ has joined #nixos-dev
aristid has joined #nixos-dev
noefk has joined #nixos-dev
terrorjack has joined #nixos-dev
terrorjack has quit [Max SendQ exceeded]
terrorjack has joined #nixos-dev
<LnL> does anybody here have experience with the native stdenv?
<domenkozar> after two months of work I'd like to announce https://cachix.org/ - Binary Cache as a Service
<LnL> whoa!
<LnL> so each cache has it's own namespace and is signed with the key of the owner?
andi- has quit [Ping timeout: 256 seconds]
<pierron> gchristensen: pkgs' = import pkgs.path { overlays = [ ./my-overlay.nix ]; }; ?
andi- has joined #nixos-dev
phreedom has quit [Write error: Connection reset by peer]
phreedom has joined #nixos-dev
andi- has quit [Excess Flood]
<aminechikhaoui> domenkozar: yaay \o/
<aminechikhaoui> domenkozar: wait is this for free ? :D
<domenkozar> yes
<aminechikhaoui> woot :o
<aminechikhaoui> how do you manage the costs/infra ?
<domenkozar> there will be some limit eventually, depending on how I'll find a way to fund costs
<aminechikhaoui> I see :)
<domenkozar> private cache, donations, etc
<domenkozar> LnL: correct :)
<LnL> domenkozar: that means having a 'different' narinfo for the same output can happen right?
<domenkozar> yeah, file will be stored under the sha internally
<domenkozar> but two narinfos will be served, one for each signature
<LnL> perfect, looks like a good approach then
andi- has joined #nixos-dev
<domenkozar> LnL: thanks :)
<LnL> domenkozar: fyi. the install instructions don't work if --option extra-substituters is set
<LnL> since the extra-substituters won't have trusted keys anymore
Synthetica has joined #nixos-dev
<domenkozar> LnL: ah trusted substituters don't get --trusted-public-keys?
<LnL> trusted-public-keys overwrites all of the keys
<domenkozar> yeah that's why it sets --substituters and --trusted-public-keys
<domenkozar> to get the full closure from cachix.cachix.org
<domenkozar> LnL: for example logic in cachix takes cache.nixos.org, any currently configured caches in /etc/nix/nix.conf
<domenkozar> and then mappends the new binary cache to ~/.config/nix/nix.conf
<domenkozar> at least until https://github.com/NixOS/nix/issues/2149 is resolved :)
<LnL> yeah, the context of that issue makes more sense now :)
andi- has quit [Ping timeout: 240 seconds]
<gchristensen> pierron: I think that requires IFD?
<pierron> gchristensen: IFD?
<gchristensen> import from derivation, no?
<gchristensen> hmm maybe not
<LnL> pkgs.path is just a path
<gchristensen> huh
<LnL> it could be IFD but that depends on whatever created pkgs in the first place
<gchristensen> what about taking my current nixpkgs, with all its overlays, plus a new overlay?
<pierron> gchristensen: no pkgs.path is just defined as path = ../../. from the top-level
<gchristensen> cool
<gchristensen> thanks!
<pierron> gchristensen: There is no option to add overlays … :(
<gchristensen> okay, it is okay :)
<gchristensen> that is not necessary
<pierron> gchristensen: I was wondering about maybe abusing NIX_PATH to do so.
<pierron> nix-cmd -I nixpkgs-overlay=… -I nixpkgs-overlay=… command ; and appending both by extracting them from the NIX_PATH.
<pierron> but I guess it would be better to have a dedicated environment variable and a dedicated command-line option too.
rsa has joined #nixos-dev
v0latil3_ has joined #nixos-dev
v0latil3 has quit [Read error: Connection reset by peer]
<gchristensen> niksnut, ikwildrpepper the NixOS cache is using an SSL certificate no longer trusted by Chrome (Symantec in the trust chain). while this isn't critical probably (the cache's contents are validated through signatures) it is causing users to falsely report the cache is broken
<gchristensen> also, it would be very nice if we could upload an index.html to the cache so people don't see the default browser 404 and assume "the server" is down
andi- has joined #nixos-dev
<samueldr> chrome makes it seem way worse than a 404
<gchristensen> what about https://cache.nixos.org samueldr ?
<samueldr> exact same
<gchristensen> you sure?
<samueldr> I realized when I shared the image, and checked both
<LnL> yeah, I think that's because of content-type: binary/octet-stream
<samueldr> though with curl I get a 404, and with firefox a firefox-branded file not found
<gchristensen> better than what I get
<gchristensen> our connection is not private Attackers might be trying to steal your information from cache.nixos.org (for example, passwords, messages, or credit cards). Learn more NET::ERR_CERT_SYMANTEC_LEGACY
<samueldr> oh
<samueldr> yes
<samueldr> I had that
<samueldr> but disregarded as you already said that
<samueldr> the invalid response error was as far as I remember always there
<gchristensen> ah
<samueldr> I'm sure that invalid response *is* the source of many previous reports of "the cache being down"
<LnL> it is
Sonarpulse has joined #nixos-dev
<thoughtpolice> Mmmmm. Dual kernel/userspace packages are annoying sometimes. :|
Sonarpulse has quit [Remote host closed the connection]
Lisanna has joined #nixos-dev
MichaelRaskin has joined #nixos-dev
<gchristensen> samueldr / LnL / niksnut / ikwildrpepper https://github.com/NixOS/nixos-homepage/issues/223
v0latil3 has joined #nixos-dev
v0latil3_ has quit [Read error: Connection reset by peer]
<MichaelRaskin> Maybe it would be even better if it redirected to nix-cache-info
<MichaelRaskin> … which would need to have text/plain filetype,though…
ixxie has joined #nixos-dev
<LnL> not sure if that's better, there's not really any useful information in there for humans
<dtz> omg what cachix might be free?! (for open-source things?!)
<dtz> haha I need to investigate this.....!
phreedom_ has joined #nixos-dev
phreedom has quit [Ping timeout: 250 seconds]
<ixxie> anybody into data science here?
xeji has joined #nixos-dev
Lisanna has quit [Quit: Lisanna]
<clever> ive noticed hydra no longer builds on the latest nixos-unstable, due to graphviz and darcs
<LnL> did it update after the staging merge?
<clever> it appears to be a ghc related issue
<clever> Ambiguous occurrence ‘<>’
<clever> imported from ‘Text.PrettyPrint.Leijen.Text.Monadic’ at Data/GraphViz/Printing.hs:(79,1)-(85,68)
<clever> imported from ‘Data.Semigroup’ at Data/GraphViz/Printing.hs:105:24-36
<clever> that breaks graphviz, so darcs cant build, so hydra cant build
<LnL> huh graphviz?
<clever> yep
<LnL> I'd expect graphviz -> darcs -> ghc not darcs -> graphviz -> ghc
<clever> i think the root problem, is that <> is in a new place on the newer ghc, which breaks graphviz and others
<LnL> I had no idea graphviz is written in haskell
ixxie has quit [Quit: Lost terminal]
<LnL> yeah, probably
<clever> testing this out now: nix-build '<nixpkgs>' --arg config '{ packageOverrides = pkgs: { darcs = null; }; }' --arg overlays '[]' -A hydra
<xeji> darcs and hydra were fixed in #41308
<{^_^}> https://github.com/NixOS/nixpkgs/pull/41308 (by srhb, closed): darcs: Allow newer graphviz
<clever> ah
<clever> and hydra has a testcase that tries to run darcs, so i cant just cheat like i tried above
ixxie has joined #nixos-dev
<LnL> sure you can, doCheck = false;
<clever> ah yeah, was thinking about a way to just disable one test, not all
<orivej> May someone cancel the current staging evaluations and launch a new one? They are expected to have almost no overlap with the current master or the current staging, and the current staging has a security fix that is missing from the evaluations (https://github.com/NixOS/nixpkgs/pull/41324).
xeji has quit [Quit: WeeChat 2.0]
<LnL> done
<orivej> LnL: thank you! i'm going to start a new eval
phreedom_ has quit [Remote host closed the connection]
phreedom has joined #nixos-dev
jtojnar has quit [Ping timeout: 256 seconds]
jtojnar has joined #nixos-dev
matthewbauer has joined #nixos-dev
<orivej> LnL: could you restart the aborted jobs in the eval that I started: https://hydra.nixos.org/eval/1460703
<andi-> reading through the code for buildRustCrate I fail to understand how I could potentially skip a crates main method.. I just pulled `pulldown_cmark` via some depenency but the src/main.rs fail doesn't build on a stable rust compiler.. I am only interest in the lib (which compiles just fine). Any ideas?
matthewbauer has quit [Ping timeout: 240 seconds]
matthewbauer has joined #nixos-dev
Synthetica has quit [Quit: Connection closed for inactivity]