worldofpeace changed the topic of #nixos-dev to: NixOS Development (#nixos for questions) | NixOS 20.09 Nightingale ✨ https://discourse.nixos.org/t/nixos-20-09-release/9668 | https://hydra.nixos.org/jobset/nixos/trunk-combined https://channels.nix.gsc.io/graph.html | https://r13y.com | 20.09 RMs: worldofpeace, jonringer | https://logs.nix.samueldr.com/nixos-dev
ris has quit []
ris has joined #nixos-dev
supersandro2000 has quit [Disconnected by services]
supersandro2000 has joined #nixos-dev
rmcgibbo has quit [Remote host closed the connection]
orivej has quit [Ping timeout: 246 seconds]
rajivr has joined #nixos-dev
cole-h has quit [Ping timeout: 260 seconds]
thibm has joined #nixos-dev
thibm_ has quit [Ping timeout: 264 seconds]
mkaito has quit [Quit: WeeChat 3.0]
kalbasit has joined #nixos-dev
justanotheruser has joined #nixos-dev
ris has quit []
ris has joined #nixos-dev
kalbasit has quit [Ping timeout: 240 seconds]
orivej has joined #nixos-dev
justanotheruser has quit [Ping timeout: 260 seconds]
cole-h has joined #nixos-dev
sreybastien_aw is now known as sreybastien
dongcarl has quit [Quit: Ping timeout (120 seconds)]
dongcarl has joined #nixos-dev
greaka has quit [Ping timeout: 240 seconds]
greaka has joined #nixos-dev
<supersandro2000> can someone please take a look at #108081?
<{^_^}> https://github.com/NixOS/nixpkgs/pull/108081 (by SuperSandro2000, 5 days ago, open): setup-hooks/strip: silence 'File format not recognized' errors again
<{^_^}> #108518 (by 4z3, 11 hours ago, open): stdenv: mute errors when failing to write env-vars
obadz has joined #nixos-dev
mkaito has joined #nixos-dev
mkaito has joined #nixos-dev
cole-h has quit [Ping timeout: 256 seconds]
jonge[m] has quit [Quit: authenticating]
jonge[m] has joined #nixos-dev
__monty__ has joined #nixos-dev
JJJollyjim has quit [Quit: Bridge terminating on SIGTERM]
Irenes[m] has quit [Quit: Bridge terminating on SIGTERM]
maralorn has quit [Quit: Bridge terminating on SIGTERM]
Ericson2314 has quit [Quit: Bridge terminating on SIGTERM]
nh2[m] has quit [Quit: Bridge terminating on SIGTERM]
domenkozar[m] has quit [Quit: Bridge terminating on SIGTERM]
jtojnar has quit [Quit: Bridge terminating on SIGTERM]
Dandellion has quit [Quit: Bridge terminating on SIGTERM]
worldofpeace has quit [Quit: Bridge terminating on SIGTERM]
colemickens has quit [Quit: Bridge terminating on SIGTERM]
thefloweringash has quit [Quit: Bridge terminating on SIGTERM]
bk1603[m] has quit [Quit: Bridge terminating on SIGTERM]
aterius has quit [Quit: Bridge terminating on SIGTERM]
timokau[m] has quit [Quit: Bridge terminating on SIGTERM]
arcnmx has quit [Quit: Bridge terminating on SIGTERM]
Valodim[m] has quit [Quit: Bridge terminating on SIGTERM]
bbigras has quit [Quit: Bridge terminating on SIGTERM]
rnhmjoj has quit [Quit: Bridge terminating on SIGTERM]
michaelpj has quit [Quit: Bridge terminating on SIGTERM]
zowoq[m] has quit [Quit: Bridge terminating on SIGTERM]
danielrf[m] has quit [Quit: Bridge terminating on SIGTERM]
symphorien[m] has quit [Quit: Bridge terminating on SIGTERM]
kraem has quit [Quit: Bridge terminating on SIGTERM]
emily has quit [Quit: Bridge terminating on SIGTERM]
jonge[m] has quit [Quit: Bridge terminating on SIGTERM]
puzzlewolf has quit [Quit: Bridge terminating on SIGTERM]
siraben has quit [Quit: Bridge terminating on SIGTERM]
roberth has quit [Quit: Bridge terminating on SIGTERM]
aanderse has quit [Quit: Bridge terminating on SIGTERM]
garbas[m] has quit [Quit: Bridge terminating on SIGTERM]
DamienCassou has quit [Quit: Bridge terminating on SIGTERM]
Ox4A6F has quit [Quit: Bridge terminating on SIGTERM]
ma27[m] has quit [Quit: Bridge terminating on SIGTERM]
regnat has quit [Quit: Bridge terminating on SIGTERM]
philipp[m] has quit [Quit: Bridge terminating on SIGTERM]
ryantm has quit [Quit: Bridge terminating on SIGTERM]
bennofs[m] has quit [Quit: Bridge terminating on SIGTERM]
timokau[m] has joined #nixos-dev
etu has quit [Quit: WeeChat 3.0]
etu has joined #nixos-dev
ryantm has joined #nixos-dev
siraben has joined #nixos-dev
JJJollyjim has joined #nixos-dev
worldofpeace has joined #nixos-dev
danielrf[m] has joined #nixos-dev
kraem has joined #nixos-dev
puzzlewolf has joined #nixos-dev
philipp[m] has joined #nixos-dev
Irenes[m] has joined #nixos-dev
rnhmjoj has joined #nixos-dev
maralorn has joined #nixos-dev
bk1603[m] has joined #nixos-dev
nh2[m] has joined #nixos-dev
garbas[m] has joined #nixos-dev
roberth has joined #nixos-dev
symphorien[m] has joined #nixos-dev
emily has joined #nixos-dev
colemickens has joined #nixos-dev
michaelpj has joined #nixos-dev
jtojnar has joined #nixos-dev
aterius has joined #nixos-dev
bbigras has joined #nixos-dev
DamienCassou has joined #nixos-dev
Ericson2314 has joined #nixos-dev
Dandellion has joined #nixos-dev
Ox4A6F has joined #nixos-dev
Valodim[m] has joined #nixos-dev
thefloweringash has joined #nixos-dev
domenkozar[m] has joined #nixos-dev
ma27[m] has joined #nixos-dev
jonge[m] has joined #nixos-dev
bennofs[m] has joined #nixos-dev
zowoq[m] has joined #nixos-dev
regnat has joined #nixos-dev
aanderse has joined #nixos-dev
talyz has quit [Quit: WeeChat 3.0]
talyz has joined #nixos-dev
mkaito has quit [Quit: WeeChat 3.0]
pmy has quit [Quit: WeeChat 3.0]
<primeos> https://github.com/NixOS/nixpkgs/issues/108568 - Does anyone know why the NixOS release tags (e.g. refs/tags/20.09) are suddenly gone?
<{^_^}> #108568 (by tim2CF, 4 hours ago, open): nixpkgs 20.09 release is gone
janneke has quit [Quit: janneke quits Mes'sing]
janneke has joined #nixos-dev
<qyliss> primeos: do you think we should just... put them back?
<qyliss> I've got to assume this was an accident.
<qyliss> gchristensen (or another org owners): does the GitHub audit log show what happened to the Nixpkgs tags?
<qyliss> docs imply it won't :(
<qyliss> Oh, but there should have been a webhook event
<qyliss> andi-: are we recording webhooks?
<andi-> qyliss: I am
<qyliss> andi-: Could you have a look for tag delete events?
<andi-> which time frame are you looking for? (accepting RFC3339 timestamps)
<qyliss> andi-: 2021-01-04T00:00:00Z - 2021-01-06T08:38:52Z
<qyliss> but I'd hope tag deletes are so rare there won't be many outside that period.
<andi-> qyliss: https://gist.github.com/andir/b6263e0df21a3f76631625b726f2bfb4 these are all the label events I got so foar
<andi-> *so far
<andi-> for whatever reason the dt filtering wasn't working as expected and I couldn't be bothered to investigate that now..
<andi-> ah release tags /o\
<andi-> I understood labels as in issues
<qyliss> ohh
<qyliss> no all the release tags have rather scarily disappeared
<andi-> doesn't seem to contain release tags..
<qyliss> hmm yeah only branches
<andi-> don't most of us have a local copy of the tags?
<qyliss> andi-: yes, but I'd like to know what happened to them
<qyliss> can you go back in time further? If you have text search you could just look for any "ref_type":"tag", since I doubt there'll be many.
<qyliss> (I'm assuming "tag" is the other ref_type, but since we haven't seen any I don't know for sure...)
<andi-> I have it in a postgresql JSON typed column.. let me see if I can search for strings in there...
<qyliss> If it's jsonb I don't think you can.
<qyliss> If it's literally the "json" type I think you can.
<andi-> it should be jsonb
<andi-> ok, what event types might also be the right ones?
<qyliss> I think it'll definitely be a "delete" event, unless the docs are just lying.
<qyliss> And I'm fairly sure it'll have data.ref_type != "branch"
<andi-> there are the types that I've received so far: issues, fork, commit_comment, create, status, pull_request_review, milestone, pull_request, pull_request_review_comment, ping, project_card, check_suite, repository_vulnerability_alert, label, project, check_run, push, delete, project_column, watch, star, issue_comment
<andi-> and yeah delete sound like the most promising one
<qyliss> If there are no events for this that would make me wonder whether GitHub just lost our tags...
<andi-> or if they do not send deletes for tags..
<qyliss> They say they do in their documentation.
<qyliss> Oh wait I'm looking at the actions documentation
<qyliss> I hope that's not different
<qyliss> their webhook documentation 503s...
<andi-> A Git branch or tag is deleted. For more information, see the "Git data" REST API.
<andi-> Note: You will not receive a webhook for this event when you delete more than three tags at once.
<qyliss> yeah I just saw
<qyliss> hmm
<qyliss> would still be good to check earlier just in case, but I'm assuming they were all deleted at once.
<andi-> I only started in december and didn't add any date restrictions in the last exports
<qyliss> oh :(
<qyliss> then I guess we're not going to find out what happened, unless anybody can think of anything else we could check.
pmy has joined #nixos-dev
<ekleog> Anyone knows whether we have CI builders with nvidia GPUs? I know someone who did nvidia changes and would like to check things work not-on-their-machine, but I'm far from sure we actually have such hardware?
<qyliss> Okay, I think we should just put the tags back
<qyliss> Can I get a +1 from somebody to restore the tags from a local copy?
<qyliss> cc primeos
pmy has quit [Quit: WeeChat 3.0]
<primeos> qyliss: Sorry, I missed the initial notification. I have no idea what happened and why but I guess it can't/shouldn't hurt to restore them from a local clone.
pmy has joined #nixos-dev
<qyliss> primeos: could you run git tag | while read tag; do echo "$(git rev-parse "$tag") $tag"; done and diff your output with https://paste.rs/Cwj?
<qyliss> just to make sure I have the hashes right
<primeos> The hashes match but some release tags are missing in your paste (e.g. 20.03 and all three tags for 20.09)
<qyliss> oh hmm
<andi-> FWIW here are the tags I've in my repo mirror thing: https://gist.github.com/andir/cbaea649ffef8293bbc969295f176077
<qyliss> primeos: try https://paste.rs/im9 ?
<qyliss> andi-: hmm, you're missing v1.* v2.*
<qyliss> oh wait no those are my mistake
<qyliss> they're coming from some other thing I've fetched
<qyliss> ugh, this is why I wanted to check
<primeos> qyliss: The second paste LGTM (all of the release tags and their revisions match) some of the other tags are missing on my clone or your paste but that's to be expected I guess
<primeos> I guess only the release tags really matter anyway
<qyliss> hmm, I'd like to restore them all
<qyliss> but I can check against andi-'s repo and judge based on that
<primeos> ok, andi's output should be enough but just in case I've also uploaded mine: https://gist.github.com/primeos/e14511502818c0b199400c4cca37a2ae
asbachb has joined #nixos-dev
<qyliss> okay, I'm going to fill in everything from andi-'s. I've checked all the release tags matched other things, for other I was missing I'm just going to trust andi-. It doesn't really matter since any of us can overwrite the tags at any time.
<asbachb> Hi I try to introduce a new folder `thumbnailers` in `/run/current-system/sw/share/` to create a thumbnailer for raw files. Any suggestions where to start?
<qyliss> It's weird that some other tags are still here
<qyliss> but the release tags are all gone
<gchristensen> wtf
<gchristensen> uh qyliss I have suspicion
<gchristensen> who pushed all these backups/ tags?
<andi-> I think they are old. SVNish?
<gchristensen> ah they've always been there?
<qyliss> yeah
<gchristensen> ah
<qyliss> done https://paste.rs/465
<gchristensen> I thought {^_^} would report tag pushes and stuff
<qyliss> gchristensen: it usually does
<qyliss> gchristensen: I think it's been missing some events recently
<gchristensen> hum
<andi-> I also haven't received any new "create" event..
<gchristensen> maybe it is github who is missing events :)
<qyliss> because I've expected highlights for issue opens and stuff and haven't got them
<qyliss> maybe!
<primeos> If I compare my local tags with the ones in NixOS/nixpkgs this is the diff btw: https://gist.github.com/primeos/f1f4e99e96503388c64a109578640206
thibm has quit [Ping timeout: 264 seconds]
<primeos> (this is before qyliss restored them, just to document it)
<primeos> > If there are no events for this that would make me wonder whether GitHub just lost our tags...
<{^_^}> error: syntax error, unexpected ELLIPSIS, expecting ')', at (string):460:92
<primeos> qyliss: I was also wondering about this btw
thibm has joined #nixos-dev
<qyliss> turns out they don't emit events for mass tag deletions anyway so I now think that less likely
<primeos> Either that or something with the events is wrong
<gchristensen> they do?
<primeos> gchristensen: Does the audit log reveal anything?
<gchristensen> the ydon't*?
<qyliss> gchristensen: 13:45 <andi-> Note: You will not receive a webhook for this event when you delete more than three tags at once.
<gchristensen> huh.
<qyliss> bizarre, right?
<qyliss> why specifically tags?
<primeos> Yeah... :o
<andi-> probably $implementationDetail
<gchristensen> the audit log seems ... uh, lacking: https://gsc.io/snaps/dcd55324-fc6e-4743-b77a-b6f02d3b51ac.png
<qyliss> yeah it seems to mostly be about org-level stuff rahter than repo-level
<qyliss> and apparently comment edits I guess??
<andi-> it is only comments there..
<qyliss> probably not much org stuff happening day-to-day
<andi-> So, do we have a contact at GitHub to raise that issue?
qyliss has quit [Quit: bye]
qyliss has joined #nixos-dev
<qyliss> I think everybody I knew at GitHub either left after Microsoft or left after ICE....
<{^_^}> isaacs/github#1091 (by alecbz, 3 years ago, open): Locking/auditing for tags
<gchristensen> lol.
<lukegb> "maybe at some point eh"
<andi-> I wonder *why* that is such a different beast..
<asbachb> Are you sure nobody with commit rights removed them by accident?
<qyliss> asbachb: that's the most likely explanation
<gchristensen> pretty sure somebody did
<gchristensen> it'd be nice to know who and when, though!
<qyliss> what we're wondering is why GitHub didn't tell us
<asbachb> I see.
<tilpner> This is a good example for the next time someone claims granular git permissions (see gitolite) are unnecessary
srk has quit [Ping timeout: 240 seconds]
<gchristensen> this could be a nice thing for github to do actually as a extra service on top of git: github providing attesting to a tag never being manipulated
<qyliss> we should sign our tags
<tilpner> But that doesn't prevent them from being removed
<qyliss> it does make sure the right ones get put back though
<gchristensen> well, yeah, that only makes sense if they also prevent removal :P
<gchristensen> I'm assuming competent product leadership there, which I know isn't a reasonable expectation anymore
<qyliss> tilpner: chmod -w refs/tags :P
<tilpner> I see no reason (other than product segmentation or perhaps UI design) to keep the permissions system as coarse as it is right now
<tilpner> Even restricting people to only be able to push to specific subtrees is obiously useful to many projects, and... supported only by gitolite?
srk has joined #nixos-dev
<tilpner> qyliss: Hah, but you know I meant an ACL that wasn't universal :)
<qyliss> chgrp refs/tags taggers then :)
<qyliss> oh, other way around
<qyliss> you can even ban tag deletion: chown +s refs/tags
<qyliss> oh but that would let you delete tags you created
<qyliss> I need to think about this longer :P
<qyliss> probably have to get chattr involved
<lukegb> asbachb: heh, I linked that above :o)
<asbachb> I'm so slow...
thibm has quit [Ping timeout: 272 seconds]
thibm has joined #nixos-dev
<gchristensen> no worries, asbachb, I appreciate your being here
<lukegb> ^
<lukegb> Wasn't really meant as a slight on you :p
<lukegb> (I was expecting people to miss it anyway because putting two links one after the other is usually basically invisible)
<qyliss> gchristensen: {^_^} just reported some tag deletions in #nixos
<gchristensen> iiinteresting
<andi-> qyliss: ref_type is indeed 'tag' for these
<andi-> Where those three tags deleted via the website?
<gchristensen> I doubt it: exact same timestamp, and immediately prior to a PR opening
<andi-> a PR from the very same person
<gchristensen> exactly
<andi-> So I wonder how much we can trust the events then.
<qyliss> i'm now repeatedly anxiously checking that the release tags haven't disappeared again.
<andi-> I really feels like some git client going mad.
<qyliss> I had assumed those three tag deletions were just that person deleting tags they thought were no longer necessary (which tbf it does look like they are)
<qyliss> will be interesting to see what they say
<qyliss> The GitHub docs don't mention the 3 tag limit on the GH actions workflow for "delete"
<qyliss> Maybe we should set one of those up
edwtjo has quit [Read error: Connection reset by peer]
thibm has quit [Quit: WeeChat 2.6]
edwtjo has joined #nixos-dev
edwtjo has quit [Changing host]
edwtjo has joined #nixos-dev
obadz has quit [Quit: WeeChat 3.0]
<lukegb> Set up a GH action that just puts the tag back if you delete it :p
<gchristensen> "useless machine" github actions edition
<asbachb> lukegb: haha
<qyliss> lukegb: ngl i'm kind of into that
qyliss has quit [Quit: bye]
qyliss has joined #nixos-dev
<gchristensen> ah ha!
<lukegb> magit-- :p
<gchristensen> magit once erased my home directory
<qyliss> o_O
<gchristensen> and it was before I had my current thoughts of "that'd be good actually"
<qyliss> lol
<gchristensen> what happened is I accidentally opened magit then typed the sequence to git clean -dfx, but I was in my home directory and had at some point accidentally run `git init` in ~
* andi- checks for a git repo in ~
<qyliss> can't do that with a read-only home directory ;D
<andi-> I'd love to at least have ~ r/o with only a few exceptions exiting...
<qyliss> you can manually create the exceptions
<etu> I believe a tmpfs home would save you as well since it could only remove symlinks and should ignore other filesystems such as bind mounts?
<qyliss> or let tmpfiles.d do it
<etu> Unless git recurses into symlinks and mounts and remove files...
<andi-> The important bit is that my user shouldn't own the directory. No tmpfs hacks tha tremove files on reboot. They should simply never be allowed there.
<qyliss> my user owns my home directory but its permissions are 0555
<qyliss> which means I can temporarily chmod it if I want to create something in there without needing to sudo, which is quite convenient.
<gchristensen> neat
rajivr has quit [Quit: Connection closed for inactivity]
asbachb has quit [Remote host closed the connection]
ris has quit [Read error: Connection reset by peer]
ris has joined #nixos-dev
asbachb has joined #nixos-dev
<asbachb> Is anyone aware how the symlinks of `/var/run/current-system/sw/share/applications` are beeing created?
<symphorien[m]> with pathsToLink = [ "/share/applications" ];
<symphorien[m]> something in environment.systemPackages has $out/share/applications
<asbachb> symphorien[m]: So every derivation which writes to $out/share/application is symlinked there?
<symphorien[m]> only those in environment.systemPackages
<asbachb> symphorien[m]: Thanks!
justanotheruser has joined #nixos-dev
cole-h has joined #nixos-dev
<sreybastien> @marek hi, i see that you commit on the luksroot nix source code in the last past month, perhaps you could help me to find the bug or give me some hint to solve this issue ? I'm trying desperatly to use gpg-smartcard functionality from remote ssh connection at startup to unlock LUKS lvm
<sreybastien> @marek, the issue is here : https://github.com/NixOS/nixpkgs/issues/106563
<{^_^}> #106563 (by reyman, 3 weeks ago, open): Failed to authenticate with gpg on ssh session with initrd gpgcard option activated
evanjs has quit [Read error: Connection reset by peer]
leungbk has joined #nixos-dev
evanjs has joined #nixos-dev
leungbk has quit [Quit: ERC (IRC client for Emacs 28.0.50)]
evanjs has quit [Read error: Connection reset by peer]
evanjs has joined #nixos-dev
mkaito has joined #nixos-dev
mkaito has joined #nixos-dev
mkaito has quit [Client Quit]
evanjs has quit [Ping timeout: 256 seconds]
evanjs has joined #nixos-dev
mkaito has joined #nixos-dev
mkaito has joined #nixos-dev
mkaito has quit [Changing host]
Mic92 has quit [Quit: WeeChat 3.0]
justan0theruser has joined #nixos-dev
justanotheruser has quit [Ping timeout: 264 seconds]
Jackneilll has quit [Ping timeout: 240 seconds]
tokudan has quit [Remote host closed the connection]
tokudan has joined #nixos-dev
tokudan has quit [Remote host closed the connection]
Jackneilll has joined #nixos-dev
srk has quit [Ping timeout: 240 seconds]
srk has joined #nixos-dev
asbachb has quit [Ping timeout: 245 seconds]
tokudan has joined #nixos-dev
<{^_^}> firing: RootPartitionLowInodes: https://monitoring.nixos.org/prometheus/alerts
pmy has quit [Ping timeout: 256 seconds]
pmy has joined #nixos-dev
tilpner has quit [Remote host closed the connection]
tilpner has joined #nixos-dev
teto has quit [Ping timeout: 256 seconds]
<andi-> gchristensen: looks like 72bc9f32-cf8b-4619-813d-26828bb7bfd0 isn't doing the daily reboot ^
teto has joined #nixos-dev