samueldr changed the topic of #nixos-dev to: #nixos-dev NixOS Development (#nixos for questions) | NixOS 19.09 is released! | | | 19.09 RMs: disasm, sphalerite |
orivej has quit [Ping timeout: 240 seconds]
ris has quit [Ping timeout: 276 seconds]
v0|d has joined #nixos-dev
v0|d has quit [Remote host closed the connection]
<clever> sandboxing?
<drakonis> was following these steps
<drakonis> big oof because it is arch wiki and it is frequently usable, except for this.
<gchristensen> eh
<clever> was nix built by nix, or the host package manager?
<drakonis> i think was through the host
<drakonis> with aur?
<clever> that breaks a number of things with sandboxing
<drakonis> they patched ldflags lol
<clever> so you must turn the sandbox off
<drakonis> wht the fuck
<drakonis> excuse me
<drakonis> why.
<drakonis> the definition
<drakonis> this is some powerless complaining, but there we go
justan0theruser has joined #nixos-dev
justanotheruser has quit [Ping timeout: 252 seconds]
cptchaos83 has quit [Quit: - Chat comfortably. Anywhere.]
cptchaos83 has joined #nixos-dev
mmlb has joined #nixos-dev
drakonis has quit [Quit: WeeChat 2.6]
<yorick> should the security roundup that is only against nixos-18.09 (and maybe 19.03) be closed?
<yorick> basically, all duplicate roundups at this point
<{^_^}> #58270 (by ckauhaus, 35 weeks ago, open): Vulnerability roundup 64: python-2.7.15: 2 advisories
<yorick> I have some scripting to tell you which ones they are :)
orivej has joined #nixos-dev
jonringer has joined #nixos-dev
<jonringer> can anyone review it's to fix stable PRs and the linux_5_4 build
<{^_^}> #74823 (by jonringer, 5 minutes ago, open): [19.09] lib/versions: expose splitVersion
<yorick> ^merged by now, to save you a click
MichaelRaskin has quit [Quit: MichaelRaskin]
FRidh has joined #nixos-dev
orivej has quit [Ping timeout: 265 seconds]
__Sander__ has joined #nixos-dev
vcunat has joined #nixos-dev
vcunat has quit [Client Quit]
__monty__ has joined #nixos-dev
justan0theruser has quit [Quit: WeeChat 2.6]
justanotheruser has joined #nixos-dev
psyanticy has joined #nixos-dev
orivej has joined #nixos-dev
aanderse has quit [*.net *.split]
bennofs[m] has quit [*.net *.split]
dtz has quit [*.net *.split]
bennofs[m] has joined #nixos-dev
aanderse has joined #nixos-dev
dtz has joined #nixos-dev
cdepillabout has joined #nixos-dev
<disasm> what's needed to get 19.09 AMI's for a new region? sa-east-1?
<gchristensen> looks like we already have AMIs for sa-east-1
<gchristensen> ehh
v0|d has joined #nixos-dev
<xwvvvvwx> Does anyone know how to make a derivation that builds with a 32bit gcc on a 64bit system?
<clever> xwvvvvwx: pkgs.pkgsi686Linux.stdenv
<adisbladis> Or more generically: (import <nixpkgs> { system = "i686-linux"; }).hello
<clever> yep, both work
cdepillabout has quit [Quit: Leaving]
<xwvvvvwx> thanks :)
<gchristensen> maybe we should move a bunch of the nixos modules in to home-manager and adopt home-manager officially
<xwvvvvwx> why was home-manager not built into nixos in the first place?
<gchristensen> not every experiment can go in to core in the first place
<gchristensen> for every successful home-manager project there are probably dozens of experiments which don't go as well
<xwvvvvwx> I really like home-manager and would support adopting it officially fwiw
<simpson> xwvvvvwx: There is still a big warning about experimental status and stability on home-manager's page. Also, in terms of history, there have been several attempts to do this sort of thing (nixUP comes to mind) where intending for something to get into nixpkgs is not sufficient.
<infinisil> niksnut: Ping for the doodle for RFC 42:
<Ericson2314> nh2: there are some hacks for c++ includes in that subdirectory that I don't really like
<niksnut> infinisil: done
<Ericson2314> niksnut: Is the game plan merging more things because unstable feature blocks their usage basically?
<infinisil> Cool, so looks like everybody has time this thursday from 17:00 to 21:00 UTC
<infinisil> Let's make this 18:00 to 19:00 UTC then
__Sander__ has quit [Quit: Konversation terminated!]
mmlb has quit [Quit: The Lounge -]
mmlb has joined #nixos-dev
psyanticy has quit [Quit: Connection closed for inactivity]
drakonis has joined #nixos-dev
orivej has quit [Ping timeout: 268 seconds]
Jackneill has quit [Remote host closed the connection]
jonringer has quit [Ping timeout: 276 seconds]
orivej has joined #nixos-dev
orivej has quit [Ping timeout: 265 seconds]
<Profpatsch> Request for final Review: runCommandLocal
<{^_^}> #74642 (by Profpatsch, 3 days ago, open): pkgs/build-support/trivial-builders: add runCommandLocal
orivej has joined #nixos-dev
<samueldr> Profpatsch: running on a system A, building for another builder of system B, would this fail the build since it can't run locally?
<samueldr> e.g. x86_64-linux, building aarch64-linux with the appropriate machine configuration
<clever> samueldr: preferLocalBuild is ignored if the local isnt capable of building
<samueldr> and allowSubstitutes = false;, clever?
<clever> samueldr: it will never try to look on the binary cache, and always use the aarch64 builder to make a new copy
<Profpatsch> That disallows substitutes, so you need a builder configured to build it.
<samueldr> alright then, no issues then
<Profpatsch> Which means that if you want to set a different `system` for one runCommandLocal drv, you could not substitute it. Which is rather esoteric if you ask me.
<samueldr> unless it starts being (mis?)used inside of nixpkgs
<samueldr> but I agree that for leafy packages, especially personal use, the issue is unlikely to be a problem
<Profpatsch> If you rely on only having a substituter, that’s a problem I guess. But as you say, leafy packages.
<clever> Profpatsch: ive seen problems before when people wanted to go gentoo on nixos, and just turn off the binary cache
<Profpatsch> (this is nothing that you couldn’t already have when you do `allowSubstitutes = false`
<clever> for example, /bin/sh (which is leaked into the sandbox) depends on glibc.lib
<clever> but glibc.doc can be GC'd
<clever> and then something needs glibc.doc, so nix builds it
<clever> and glibc.lib cant be in the sandbox, because its building
<Profpatsch> lol
<clever> so, the libc used by /bin/sh is omited from the sandbox
<clever> and the build fails
<Profpatsch> nixpkgs is what I call “theoretically reproducible” :P
<samueldr> sure it's nothing you couldn't already have been doing, though my concern is if it starts being peppered inside of Nixpkgs, then I _don't know_ how problematic it could become
<clever> you can fully reproduce it, if /bin/sh doesnt depend on the nixpkgs your building
<samueldr> it might get used since it's low friction to add "Local" to your runCommand to go faster
<Profpatsch> samueldr: I’m fairly certain nobody’s gonna know it’s there in the first place. :P
<Profpatsch> samueldr: do you think we should add a disclaimer to the docstring?
<Profpatsch> Maybe we should add the disclaimer to the `allowSubstitutes` docstring insead
<samueldr> probably both, since someone reading the doc for *Local probably won't look at allowSubstitutes
<Profpatsch> Sure
<samueldr> though, only if my concerns of this being used in Nixpkgs are grounded in truth
<clever> i only discovered runCommandCC because nix-shell broke everywhere
<Profpatsch> If somebody notices, it’s easy to revert to `runCommand`, though the note in the manual should be there.
<samueldr> yeah, if there's no note, there's no way the final user could have known
ris has joined #nixos-dev
garbas has joined #nixos-dev
aminechikhaoui6 has joined #nixos-dev
xwvvvvwx- has joined #nixos-dev
atriq has joined #nixos-dev
cbarrett_ has joined #nixos-dev
dmj`_ has joined #nixos-dev
orivej_ has joined #nixos-dev
globin_ has joined #nixos-dev
stears_ has joined #nixos-dev
sphalerite_ has joined #nixos-dev
ashkitte1 has joined #nixos-dev
grahamc has joined #nixos-dev
orivej has quit [*.net *.split]
dmj` has quit [*.net *.split]
Cale has quit [*.net *.split]
das_j has quit [*.net *.split]
rycee has quit [*.net *.split]
Ericson2314 has quit [*.net *.split]
domenkozar[m] has quit [*.net *.split]
stears has quit [*.net *.split]
globin has quit [*.net *.split]
cbarrett has quit [*.net *.split]
xwvvvvwx has quit [*.net *.split]
aminechikhaoui has quit [*.net *.split]
Taneb has quit [*.net *.split]
{^_^} has quit [*.net *.split]
sphalerite has quit [*.net *.split]
simpson has quit [*.net *.split]
gchristensen has quit [*.net *.split]
ashkitten has quit [*.net *.split]
flokli has quit [*.net *.split]
xwvvvvwx- is now known as xwvvvvwx
dmj`_ is now known as dmj`
das_j has joined #nixos-dev
cbarrett_ is now known as cbarrett
flokli has joined #nixos-dev
Cale has joined #nixos-dev
simpson has joined #nixos-dev
{^_^} has joined #nixos-dev
ajs124 has quit [Quit: Gateway shutdown]
ajs124 has joined #nixos-dev
ajs124 has quit [Client Quit]
ajs124 has joined #nixos-dev
Haskellfant has joined #nixos-dev
cocreature has quit [Ping timeout: 240 seconds]
yegortimoshenko has quit [Ping timeout: 240 seconds]
layus[m] has quit [Ping timeout: 240 seconds]
vaibhavsagar has quit [Ping timeout: 240 seconds]
Haskellfant is now known as cocreature
aminechikhaoui6 is now known as aminechikhaoui
ajs124 has quit [Quit: Gateway shutdown]
Jackneill has joined #nixos-dev
drakonis has quit [Ping timeout: 268 seconds]
drakonis has joined #nixos-dev
Jackneill has quit [Remote host closed the connection]
Scriptkiddi has quit [Remote host closed the connection]
das_j has quit [Remote host closed the connection]
das_j has joined #nixos-dev
Scriptkiddi has joined #nixos-dev
Scriptkiddi has quit [Remote host closed the connection]
das_j has quit [Remote host closed the connection]
Scriptkiddi has joined #nixos-dev
das_j has joined #nixos-dev
grahamc is now known as gchristensen
pie__ has joined #nixos-dev
pie_ has quit [Ping timeout: 268 seconds]
__monty__ has quit [Quit: leaving]
pie__ has quit [Ping timeout: 250 seconds]
pie_ has joined #nixos-dev
drakonis has quit [Ping timeout: 250 seconds]