ekleog changed the topic of #nixos-dev to: NixOS Development (#nixos for questions) | https://hydra.nixos.org/jobset/nixos/trunk-combined https://channels.nix.gsc.io/graph.html https://r13y.com | 18.09 release managers: vcunat and samueldr | https://logs.nix.samueldr.com/nixos-dev
jtojnar has quit [Remote host closed the connection]
<gchristensen> oh I see
<gchristensen> channel would go back in time from nixos-19.03.170684.07e2b59812d to nixos-19.03beta170789.58e31b2692
<gchristensen> it is failing on this error. I'll look in the morning
drakonis_ has joined #nixos-dev
drakonis has quit [Ping timeout: 240 seconds]
<infinisil> This is very odd, bendlas seems to have not updated the sha256 of a chromium update, meaning we're still vulnerable to that recent 0day https://github.com/NixOS/nixpkgs/issues/56998#issuecomment-470315370
<infinisil> The file is even autogenerated, and all previous updates didn't have this problem
<gchristensen> huh
<gchristensen> I wonder if bendlas didn't use the auto-updater
drakonis has joined #nixos-dev
drakonis1 has joined #nixos-dev
drakonis2 has joined #nixos-dev
drakonis_ has quit [Ping timeout: 252 seconds]
drakonis2 has quit [Client Quit]
drakonis has quit [Ping timeout: 252 seconds]
<ivan> maybe google had it mistagged briefly?
pie__ has quit [Remote host closed the connection]
pie__ has joined #nixos-dev
pie__ has quit [Remote host closed the connection]
pie__ has joined #nixos-dev
Jackneill has quit [*.net *.split]
avn has quit [*.net *.split]
arianvp has quit [*.net *.split]
ekleog has quit [*.net *.split]
srk has quit [*.net *.split]
globin has quit [*.net *.split]
<infinisil> ivan: Thanks for the issue and PR!
<infinisil> I sure would like to have an explanation by bendlas though
drakonis1 has quit [Quit: WeeChat 2.3]
pie___ has joined #nixos-dev
drakonis has joined #nixos-dev
pie__ has quit [Ping timeout: 245 seconds]
arianvp has joined #nixos-dev
ekleog has joined #nixos-dev
Jackneill has joined #nixos-dev
avn has joined #nixos-dev
globin has joined #nixos-dev
srk has joined #nixos-dev
phreedom has quit [Remote host closed the connection]
phreedom has joined #nixos-dev
MichaelRaskin has quit [Quit: MichaelRaskin]
etu has quit [Remote host closed the connection]
etu has joined #nixos-dev
etu has quit [Client Quit]
etu has joined #nixos-dev
orivej has joined #nixos-dev
<ekleog> I wonder whether it wouldn't be better to embed the parameters to a FO derivation in its hash
<ekleog> would avoid this kind of errors
<ekleog> at the cost of potentially more rebuilds, but… is it so big a deal?
<ekleog> I mean, it's actually a security issue (in addition to it meaning that when reviewing it's necessary to always manually download the sources for fear of the sha256 being a downgrade attack while the version is bumped)
<ekleog> while on the other hand… do we have figures on the number of rebuilds this feature has avoided us?
<ekleog> big issue would be the migration process, but I guess introducing a fullSha256 in addition to the sha256 would be enough to be backwards-compatible, and after some time force it being there, and after some time drop the requirement for sha256
<teto> gchristensen: I've resumed some work on lua infrastructure and would like to trigger some mac builds. Could you authorize me please ? https://github.com/NixOS/ofborg/pull/320
<{^_^}> ofborg#320 (by teto, 3 weeks ago, open): add teto to trusted maintainers
FRidh has joined #nixos-dev
johanot has joined #nixos-dev
orivej has quit [Ping timeout: 250 seconds]
orivej has joined #nixos-dev
orivej has quit [Ping timeout: 255 seconds]
orivej has joined #nixos-dev
orivej has quit [Ping timeout: 246 seconds]
<gchristensen> oh yeah
<gchristensen> I'll do a deploy shortly teto
tilpner has quit [Quit: WeeChat 2.4]
tilpner has joined #nixos-dev
orivej has joined #nixos-dev
FRidh has quit [Ping timeout: 245 seconds]
orivej has quit [Ping timeout: 245 seconds]
orivej has joined #nixos-dev
asymmetric has joined #nixos-dev
johanot has quit [Quit: WeeChat 2.2]
orivej has quit [Ping timeout: 244 seconds]
orivej has joined #nixos-dev
orivej has quit [Remote host closed the connection]
orivej has joined #nixos-dev
johanot has joined #nixos-dev
orivej has quit [Ping timeout: 240 seconds]
johanot has quit [Quit: WeeChat 2.2]
drakonis1 has joined #nixos-dev
<gchristensen> https://hydra.nixos.org/jobset/nixos/release-19.03#tabs-errors 19.03 is failing to evaluate for some reason
<samueldr> nixpkgs.python27Packages.pysc2.x86_64-linux ?
<samueldr> though it's not new
<samueldr> nixos.tests.osquery.aarch64-linux
<gchristensen> oh
<samueldr> hm, not sure either, other aarch64 software are failing too
<gchristensen> nvm :P
<samueldr> hm?
<samueldr> ah, it eval'd
<gchristensen> yea
* samueldr still thinks that evaluation errors that aren't errors is bad ux
<gchristensen> +1
<samueldr> no one checks the diffs between the output; and the output isn't visibly made available between evals
asymmetric has quit [Ping timeout: 250 seconds]
drakonis1 has quit [Quit: WeeChat 2.3]
<ma27> in case anybody wants to review (would love to see this merged as the current behavior is probably fairly confusing to newcomers screwing up the passwd in nixos-install): https://github.com/NixOS/nixpkgs/pull/56790
<{^_^}> #56790 (by Ma27, 3 days ago, open): nixos-install: tell the user what to do if setting a root password failed
ckauhaus has quit [Quit: WeeChat 2.2]
drakonis_ has joined #nixos-dev
drakonis1 has joined #nixos-dev
drakonis_ has quit [Read error: Connection reset by peer]
drakonis has quit [Ping timeout: 250 seconds]
JosW has joined #nixos-dev
ixxie has joined #nixos-dev
JosW has quit [Quit: KVIrc 4.2.0 Equilibrium http://www.kvirc.net/]
drakonis has joined #nixos-dev
drakonis1 has quit [Ping timeout: 252 seconds]
jtojnar has joined #nixos-dev
drakonis has quit [Ping timeout: 252 seconds]
drakonis has joined #nixos-dev
orivej has joined #nixos-dev
genesis has quit [Remote host closed the connection]
ixxie has quit [Ping timeout: 252 seconds]
drakonis_ has joined #nixos-dev
drakonis has quit [Ping timeout: 240 seconds]
drakonis has joined #nixos-dev
drakonis_ has quit [Read error: Connection reset by peer]
genesis has joined #nixos-dev
drakonis1 has joined #nixos-dev
jtojnar has quit [Ping timeout: 245 seconds]
jtojnar has joined #nixos-dev