samueldr changed the topic of #nixos-dev to: #nixos-dev NixOS Development (#nixos for questions) | NixOS 19.09 is released! https://discourse.nixos.org/t/nixos-19-09-release/4306 | https://hydra.nixos.org/jobset/nixos/trunk-combined https://channels.nix.gsc.io/graph.html | https://r13y.com | 19.09 RMs: disasm, sphalerite | https://logs.nix.samueldr.com/nixos-dev
drakonis_ has quit [Ping timeout: 240 seconds]
drakonis_ has joined #nixos-dev
drakonis_ has quit [Ping timeout: 250 seconds]
drakonis_ has joined #nixos-dev
justanotheruser has quit [Ping timeout: 240 seconds]
justanotheruser has joined #nixos-dev
drakonis_ has quit [Ping timeout: 240 seconds]
drakonis_ has joined #nixos-dev
liamdiprose has joined #nixos-dev
drakonis has joined #nixos-dev
drakonis_ has quit [Ping timeout: 246 seconds]
orivej has quit [Ping timeout: 265 seconds]
orivej has joined #nixos-dev
orivej has quit [Ping timeout: 268 seconds]
orivej has joined #nixos-dev
drakonis1 has joined #nixos-dev
drakonis has quit [Ping timeout: 265 seconds]
drakonis has joined #nixos-dev
orivej has quit [Ping timeout: 276 seconds]
orivej_ has joined #nixos-dev
ajs124 has quit [Quit: Gateway shutdown]
fuzen has quit [Quit: ZNC - https://znc.in]
fuzen has joined #nixos-dev
justanotheruser has quit [Ping timeout: 250 seconds]
justanotheruser has joined #nixos-dev
justanotheruser has quit [Read error: Connection reset by peer]
justanotheruser has joined #nixos-dev
cjpbirkbeck has joined #nixos-dev
tdeo has quit [Remote host closed the connection]
tdeo_ has joined #nixos-dev
tdeo_ is now known as tdeo
tdeo has quit [Changing host]
tdeo has joined #nixos-dev
mjsir911 has quit [Quit: Goodbye, World!]
orivej_ has quit [Ping timeout: 240 seconds]
drakonis1 has quit [Quit: WeeChat 2.6]
Cale has quit [Ping timeout: 264 seconds]
Cale has joined #nixos-dev
lopsided98 has quit [Ping timeout: 276 seconds]
lopsided98 has joined #nixos-dev
lopsided98 has quit [Ping timeout: 268 seconds]
mjsir911 has joined #nixos-dev
marek_ has quit [Changing host]
marek_ has joined #nixos-dev
marek_ is now known as marek
__Sander__ has joined #nixos-dev
<marek> how complicated it would be to add zip support into nix-env -f?
<marek> any idea why openjdk is not being indexed by programs.sqlite? https://gist.github.com/mmahut/263ad842ac07dbe162b7bec3ea64b4f3
<marek> when I enter javac, command not found is not proposing the right way becuase it is not indexed
<niksnut> it allows the evaluator to access files in a zip file directly so it doesn't need to be unpacked
<niksnut> but this is a lot less relevant in the SSD era
peti has joined #nixos-dev
ryantm has quit [Remote host closed the connection]
orivej has joined #nixos-dev
ryantm has joined #nixos-dev
xwvvvvwx- has quit [Quit: ZNC 1.7.5 - https://znc.in]
xwvvvvwx has joined #nixos-dev
<marek> niksnut: ah, but I'm thinking more of just adding support to unpack zip files (right now only tar.gz works)
xwvvvvwx has quit [Quit: ZNC 1.7.5 - https://znc.in]
xwvvvvwx has joined #nixos-dev
peti has quit [Quit: WeeChat 2.1]
xwvvvvwx has quit [Quit: ZNC 1.7.5 - https://znc.in]
xwvvvvwx has joined #nixos-dev
xwvvvvwx has quit [Quit: ZNC 1.7.5 - https://znc.in]
xwvvvvwx has joined #nixos-dev
psyanticy has joined #nixos-dev
xwvvvvwx has quit [Quit: ZNC 1.7.5 - https://znc.in]
xwvvvvwx has joined #nixos-dev
xwvvvvwx has quit [Quit: ZNC 1.7.5 - https://znc.in]
xwvvvvwx has joined #nixos-dev
xwvvvvwx has quit [Client Quit]
xwvvvvwx has joined #nixos-dev
<sphalerite> aarch64 bootstrap seems to be broken (nixos-arm.dezgeg.me is offline)…
<sphalerite> wait no
<gchristensen> we should move those to an "official" bucket
<gchristensen> and maybe consider regenerating them
<sphalerite> yes
<gchristensen> are they reproducible?
<sphalerite> I think so
<gchristensen> nice
<sphalerite> ok so I can download the bootstrap stuff from my browser but the aarch64 community box can't download it from nix
<sphalerite> nah, it's working now
<sphalerite> but yeah +1 for moving them to an official place
xwvvvvwx has quit [Quit: ZNC 1.7.5 - https://znc.in]
xwvvvvwx has joined #nixos-dev
xwvvvvwx has quit [Client Quit]
xwvvvvwx has joined #nixos-dev
xwvvvvwx has quit [Client Quit]
xwvvvvwx has joined #nixos-dev
<arianvp> niksnut: I'm trying to understand how the LocalStore is supposed to be used
<arianvp> e.g. I expected this to work: nix-store --store local --verify
<arianvp> but it gives me "Error opening lock file big-lock"
<arianvp> --store auto works though
<arianvp> it seems a bit underdocumented, so maybe holding it wrong
<gchristensen> does "local" go over the daemon?
<arianvp> no
<arianvp> I don't think so
<arianvp> "auto" goes over the daemon, and "local" doesn't from my understanding
<arianvp> does the daemon hold that lock?
<arianvp> because that would explain; given im running nix-daemon :P
<gchristensen> yeah it does
<arianvp> I see. thanks
<niksnut> the problem is not that the daemon is running but that you're not root
<arianvp> why would I have to be root?
<arianvp> aaah because normally the request goes through the daemon, and not now?
<arianvp> gotcha
<niksnut> because "local" accesses the store directly (not via the daemon)
<arianvp> and the "auto" store == RemoteStore ?
<arianvp> also, what does the ?trusted=1 parameter in the "auto" store mean?
<niksnut> "whether paths from this store can be used as substitutes even when they lack trusted signatures"
<niksnut> so for example, in the nixos installer, this allows nix to copy paths from the store on the installation CD
<arianvp> why aren't the paths from the store on the CD signed though? preferably everything that is in the closure of the ISO is also in the nixos cache no?
<arianvp> so they should have a signature from nixos.org
<gchristensen> the system is built locally
<arianvp> ah yes. you have the configuration.nix
<arianvp> i'll make a little PR to documented this trusted=1 parameter. Just out of interest, where in the nix code is this parsing done? Looking for the word "auto" in a C++ codebase isn't very enlightening :P
<niksnut> git grep '"auto"'
<niksnut> store-api.cc
<arianvp> I was using github search (which isnt so good at these things)
<arianvp> thanks!!
<arianvp> :D
<arianvp> this is very helpful.
<gchristensen> it has editor integration too :)
<arianvp> am i also right that ssh-ng subsumes ssh:// in every way?
<arianvp> as in it supports all the features of ssh:// + more ?
<gchristensen> I think it supports a mixed set of features. I just moved a client from ssh-ng:// to ssh://
<arianvp> was kinda cool that nix-store --gc --store ssh-ng://root@arianvp.me just worked
<arianvp> from the docs it claims it is just nix-daemon access over ssh
<arianvp> so I would expect it to be able to do 'everything'
<gchristensen> it doesn't forward all the settings you might set
<gchristensen> as it isn't clear if you intend to set them remotely or not
<niksnut> actually one of the problems with ssh-ng is that is forwards all kinds of settings that don't make sense for a remote system
<gchristensen> oh :)
<niksnut> like 'builders'
<gchristensen> so I guess my experience is it forwards too many and also perhaps too few?
<arianvp> well maybe that makes sense :P hacky way to implement a bastion host
<niksnut> but we should really clean up ssh-ng and get rid of ssh
<niksnut> IIRC, there are also still some operations in the --serve protocol that ssh-ng doesn't handle (as efficiently)
evanjs has quit [Quit: ZNC 1.7.4 - https://znc.in]
cjpbirkbeck has quit [Ping timeout: 276 seconds]
evanjs has joined #nixos-dev
<gchristensen> "My attempt to build #UE4 on #FreeBSD has led me to this conclusion so far: with some tweaks, you can run software for #OSX in #FreeBSD. Just put symlinks for any *.dylib to your *.so"
<sphalerite> ooh
<sphalerite> do I hear BSD hydra builders for darwin?
<sphalerite> lol
<NinjaTrappeur> https://letsencrypt.status.io <= ACME v2 is now mandatory
<NinjaTrappeur> Looks like the simp_le version we have in nixpkgs is not compatible :(
<gchristensen> crap
<NinjaTrappeur> I'm on it :)
<arianvp> oh no :(
<lassulus> there was this PR, but stuff in the services needs to change https://github.com/NixOS/nixpkgs/pull/62283
<arianvp> can we bump simp_le ?
<{^_^}> #62283 (by dtzWill, 19 weeks ago, open): simp_le: 0.9.0 -> 0.14.0
__Sander__ has quit [Quit: Konversation terminated!]
<NinjaTrappeur> Right
<NinjaTrappeur> Latest simp_le is 0.16.0
<arianvp> I was the last one who touched the letsencrypt module. recently refactored it
<arianvp> so if there is stuff that needs to change, I can probably help
<arianvp> as I still have the code fresh in my head :P
<NinjaTrappeur> \0/
<arianvp> NinjaTrappeur: could you make a PR for the version bump, and run the acme tests? we'll go from there and see why they fail
<arianvp> we should also defenitely backport this to 19.09 even if it is a breaking change
<gchristensen> +1
<arianvp> because otherwise we're gonna get a lot of sad people ;)
<NinjaTrappeur> ack
<gchristensen> neat
<arianvp> https://github.com/NixOS/nixpkgs/issues/70966 is the tracking issue
<{^_^}> #70966 (by multun, 6 days ago, open): nginx's enableACME fails because of ACMEv1 EOL
<arianvp> Could we write an announcement on the discourse that people can expect some hiccups the coming days with their letsencrypt certs?
ixxie has joined #nixos-dev
<NinjaTrappeur> ACME upper/down bounds are broken again.
<NinjaTrappeur> :(
<simpson> I wonder how we could monitor that in a way that allows for more proactive handling.
<arianvp> have documents that explain maintainership of a package
<arianvp> "subscribe to this mailing lists, if you're interested in the status of this package"
<arianvp> so even if a package is rather unmaintained, someone else knows how to pick it up
<simpson> Yeah.
<simpson> I'm just gonna say an idea, just a few words, and then just let it hang there: Community SRE.
<arianvp> to give some context
<arianvp> I worked on the new acme module for the past few months on and off, probably the one mostly touching it
<arianvp> but I had no idea that ACMEv1 was being deprecated
<arianvp> and im trying to figure out: How should I have figured out?
Cale has quit [Ping timeout: 245 seconds]
* NinjaTrappeur shrugs
<NinjaTrappeur> Maybe a RSS feed if it fits your workflow
<{^_^}> #71291 (by NinjaTrappeur, 9 seconds ago, open): simp_le: 0.9.0 -> 0.16.0
drakonis_ has joined #nixos-dev
drakonis has quit [Ping timeout: 240 seconds]
drakonis_ has quit [Ping timeout: 276 seconds]
drakonis has joined #nixos-dev
drakonis has quit [Ping timeout: 265 seconds]
drakonis has joined #nixos-dev
orivej has quit [Ping timeout: 240 seconds]
justanotheruser has quit [Ping timeout: 268 seconds]
ajs124 has joined #nixos-dev
orivej has joined #nixos-dev
justanotheruser has joined #nixos-dev
<edef> hmm. i3blocks-gaps has merged back into i3blocks itself afaict
<edef> it seems worth removing the nixpkgs package for that?
<edef> i'm not sure if configuration is actually compatible, and i don't use i3 myself
WilliButz has quit [Quit: WeeChat 2.6]
ris has joined #nixos-dev
WilliButz has joined #nixos-dev
drakonis has quit [Quit: Leaving]
misuzu has quit [Remote host closed the connection]
alienpirate5 has quit [Changing host]
alienpirate5 has joined #nixos-dev
alienpirate5 has joined #nixos-dev
drakonis has joined #nixos-dev
<disasm> we're testing https://github.com/NixOS/nixpkgs/pull/71291 currently. if everything goes well, I'm backporting to 19.09
<{^_^}> #71291 (by NinjaTrappeur, 3 hours ago, open): simp_le: 0.9.0 -> 0.16.0
<disasm> no go on it yet
psyanticy has quit [Quit: Connection closed for inactivity]
misuzu has joined #nixos-dev
drakonis has quit [Ping timeout: 240 seconds]
misuzu has quit [Remote host closed the connection]
drakonis_ has joined #nixos-dev
ixxie has quit [Ping timeout: 240 seconds]
drakonis has joined #nixos-dev
WilliButz has quit [Remote host closed the connection]
WilliButz has joined #nixos-dev
drakonis has quit [Ping timeout: 240 seconds]
aminechikhaoui has quit [Quit: The Lounge - https://thelounge.github.io]
aminechikhaoui has joined #nixos-dev
misuzu has joined #nixos-dev
Jackneill has joined #nixos-dev
Jackneill has quit [Read error: Connection reset by peer]
drakonis has joined #nixos-dev
<worldofpeace> gchristensen: I've noticed the checks on prs have been... kinda weird lately
<gchristensen> which PR is this on?
<gchristensen> is this on multiple PRs?
<{^_^}> #71298 (by symphorien, 26 minutes ago, open): nm-fortisslvpn: create the local state directory
<worldofpeace> no. they're always weird and different
<worldofpeace> oh this one has the same message https://github.com/NixOS/nixpkgs/pull/71281. not sure if something is wrong with the pr though
<{^_^}> #71281 (by tobim, 10 hours ago, open): suricata: 4.1.5 -> 5.0.0
<worldofpeace> the other ones seem to have gone away, so I can't link them. but I know when it's triggered really frequently it starts to happen
<gchristensen> hrm
tilpner_ has joined #nixos-dev
<gchristensen> too many SSH identities breaks nixops :(
<worldofpeace> another example was https://github.com/NixOS/nixpkgs/pull/71222, jonringer pushed to it frequently and eval errors occured that couldn't be reproduced. I saw them on one of my prs as well
<{^_^}> #71222 (by FRidh, 1 day ago, open): Python: package set updates primarily for Python 3.8 support
<samueldr> in my experience too many ssh identities breaks ssh itself, might not be nixops specific
<gchristensen> I think it is nixops specific, since nixops specifies the exact SSH key to use but doesn't say "only use this one please"
<samueldr> ah
tilpner has quit [Ping timeout: 268 seconds]
<jtojnar> it would be nice to have a pipeline operator in Nix
<gchristensen> [16056956.195538] Out of memory: Kill process 20888 (nix-env) score 901 or sacrifice child
<worldofpeace> !!!!
<gchristensen> [16056956.197757] Killed process 20888 (nix-env) total-vm:14518952kB, anon-rss:14437512kB, file-rss:0kB, shmem-rss:0kB
<gchristensen> that is why, can't evaluatue on a 16gb instance anymore
<worldofpeace> I love it in elixir jtojnar and f#
drakonis has quit [Ping timeout: 265 seconds]
drakonis has joined #nixos-dev
drakonis_ has quit [Read error: Connection reset by peer]
drakonis_ has joined #nixos-dev