derjohn_mob has quit [(Ping timeout: 256 seconds)]
Kingsquee has quit [(Ping timeout: 260 seconds)]
dustmote has joined #nixos
sellout- has joined #nixos
dustmote has quit [(Client Quit)]
elon_ has quit [(Ping timeout: 240 seconds)]
hexagoxel has quit [(Ping timeout: 260 seconds)]
hexagoxel has joined #nixos
derjohn_mob has joined #nixos
k0001 has quit [(Ping timeout: 260 seconds)]
ndowens08 has quit [(Ping timeout: 240 seconds)]
arcetera_temp has joined #nixos
<arcetera_temp>
so I'm trying to dual-boot NixOS and Windows 10 on a terrible Acer laptop and I'm facing issues with systemd-boot
<arcetera_temp>
namely: for some strange reason the UEFI firmware on the laptop only acknowledges the presence of a boot manager in /EFI/Microsoft/Boot/bootmgfw.efi
slyfox_ has joined #nixos
slyfox has quit [(Ping timeout: 240 seconds)]
<arcetera_temp>
when trying to copy systemd-boot to that location and copying the actual Windows bootmgfw.efi to bootmgfw2.efi, then creating a different systemd-boot entry, it works fine until bootmgfw2.efi is deleted; I don't know whether this is the fault of Windows or NixOS but it's probably Windows
<arcetera_temp>
tl;dr my laptop is terrible, please send help
spacekitteh has quit [(Remote host closed the connection)]
systemfault has joined #nixos
roconnor has quit [(Ping timeout: 268 seconds)]
roygbiv has joined #nixos
<NixOS_GitHub>
[nixpkgs] kristoff3r opened pull request #23427: Add extraConfig option to bluetooth module (master...feature/bluetooth-config) https://git.io/vynoP
fhoffmeyer has joined #nixos
mizu_no_oto has quit [(Quit: Computer has gone to sleep.)]
Kingsquee has joined #nixos
fhoffmeyer has quit [(Ping timeout: 260 seconds)]
DerGuteMoritz has quit [(Ping timeout: 276 seconds)]
<spacekitteh>
if i've run nix-channel --update but haven't nixos-rebuild switch to a newer version, how can i tell where the version of nixpkgs my system was build with?
<NixOS_GitHub>
[nixpkgs] FRidh pushed 1 new commit to staging: https://git.io/vyn9K
<NixOS_GitHub>
nixpkgs/staging a1f6b8b Frederik Rietdijk: Python 3.6 fixup expat and libffi, fixes #23406
<LnL>
but that should just work
takle has joined #nixos
phreedom has quit [(Ping timeout: 256 seconds)]
<LnL>
and with nix you generally don't want to install compilers, but rather use nix-build or nix-shell
fhoffmeyer has joined #nixos
pi3r has quit [(Ping timeout: 240 seconds)]
takle has quit [(Ping timeout: 258 seconds)]
devoid1 has quit [(Quit: Leaving.)]
fhoffmeyer has quit [(Ping timeout: 240 seconds)]
ryanartecona has quit [(Quit: ryanartecona)]
kthnnlg has quit [(Ping timeout: 240 seconds)]
takle has joined #nixos
hexagoxel has quit [(Ping timeout: 260 seconds)]
freusque has joined #nixos
hexagoxel has joined #nixos
Mercuria1Alchemi has joined #nixos
griff_ has joined #nixos
takle has quit [(Ping timeout: 260 seconds)]
griff_ has quit [(Ping timeout: 240 seconds)]
justbeingglad has joined #nixos
justbeingglad has left #nixos []
xeviox has joined #nixos
<xeviox>
hi guys, can I set a value (env variable) trough running a bash command in a nix expression?
takle has joined #nixos
<xeviox>
or is there an embedded function that returns the real path to the nix file that is currently executed. Using the path "./." it returns a path that points in the nix-store where the current folder is mapped read-only
ilyaigpetrov has joined #nixos
takle has quit [(Ping timeout: 240 seconds)]
takle has joined #nixos
<LnL>
the build directory? $sourceRoot
<xeviox>
the nix expression is in a directory like /home/user/someFolder
<xeviox>
now I want to set the location into an env variable when I use nix-shell to create a shell from the expression (like: "export SRC=/home/user/someFolder")
takle has quit [(Ping timeout: 256 seconds)]
kthnnlg has joined #nixos
<NixOS_GitHub>
[nixpkgs] vcunat pushed 3 new commits to master: https://git.io/vynQu
<NixOS_GitHub>
nixpkgs/master 5e267f6 Will Dietz: llvm4.0: rc2 -> rc3...
<NixOS_GitHub>
nixpkgs/master 6f6c06a Will Dietz: llvm4.0: Rename "4.0" (and _40) to "4" (and _4)....
<NixOS_GitHub>
[nixpkgs] cpages pushed 1 new commit to release-17.03: https://git.io/vyckm
<NixOS_GitHub>
nixpkgs/release-17.03 026cca4 Carles Pagès: hexen: mark as broken...
Seichi has quit [(Read error: Connection reset by peer)]
Seichi has joined #nixos
<samae>
How can I find what package requires the dependency `webkitgtk-2.4.11`, knowing that this package is prevented to be installed for security reasons
<samae>
I wonder what is depending on it
<samae>
(so of course nix-store -q --referrers won't work)
<clever>
samae: did --show-trace say anything?
<samae>
nothing I can parse : )
<samae>
I'll paste it to you
<NixOS_GitHub>
[nixpkgs] qknight opened pull request #23437: tlspool: init at 20170123 (master...tlspool_init) https://git.io/vycLv
<clever>
steveeJ: callPackage will find unspecified arguments in pkgs., and it adds .override
<clever>
steveeJ: i have 2 dns servers running with bind on nixos, no issues on them, though one is on 16.09, and another is an older copy of unstable
<clever>
spacekitteh: oops, wrong s name
<chakerbenhamed>
I have an application with nodejs modules with are defined in node-packages.nix. When I deploy it using nixops I can't access any module however they exist in the /nix/store
<steveeJ>
clever: specifically in the set "pkgs"?
<spacekitteh>
clever: hmm
<clever>
spacekitteh: i havent used dnscrypt, but i can help debug it more, what does /etc/resolv.conf contain?
<spacekitteh>
it was something in the last 2-3 weeks
<LnL>
steveeJ: let callPackage = lib.callPackageWith { foo = 1; }; in callPackage ({ foo }: foo) {}
<dannyg>
i ran into the problem that my nixos-rebuild switch keeps hanging, when i run it verbose it stops at "acquiring global GC lock ‘/nix/var/nix/gc.lock’" how can i figure out what is locking it, how do i get my switch working again?
<clever>
steveeJ: pkgs.callPackage will search pkgs for unspecified stuff, and "callPackage = pkgs.newScope self" will search self, then pkgs
dramforever has joined #nixos
<clever>
dannyg: what does this return? "ls -l /proc/*/fd/* | grep gc.lock"
<steveeJ>
clever: I don't even have self in my derivation :-)
<steveeJ>
LnL: thanks, I'll think my way through that
yenzenz has quit [(Quit: Leaving)]
<clever>
steveeJ: self and newScope are extra stuff, if you wanted to add another level to its search scope
<chakerbenhamed>
and when I execute `npm list` it prints 'empty'
jensens has joined #nixos
<steveeJ>
how can I give the current scope a name?
<LnL>
steveeJ: pkgs.callPackage does that but { foo = 1; } is the pkgs attrset, making it easy to access all the attributes
<spacekitteh>
clever: hmm, lemme figure out how to test this while still keeping connected to irc :P
<goibhniu>
cool, 15.03 hasn't been released yet, but you could consider using it or nixos-unstable ... you can also decide to just install particular packages from another channel
<goibhniu>
check in the github repo first though, to see if it has a newer atom
icetan has quit [(Disconnected by services)]
icetan has joined #nixos
icetan is now known as icetan1
<NixOS_GitHub>
[nixpkgs] vcunat pushed 3 new commits to staging: https://git.io/vycBq
<NixOS_GitHub>
nixpkgs/staging 5060f22 Vladimír Čunát: Merge branch 'master' into staging
<NixOS_GitHub>
nixpkgs/master 175a58d goibhniu: Merge pull request #23339 from magnetophon/yoshimi...
icetan1 is now known as icetan
<NixOS_GitHub>
[nixpkgs] domenkozar pushed 1 new commit to master: https://git.io/vycBP
<NixOS_GitHub>
nixpkgs/master fb40889 Domen Kožar: mk-python-derivation: remove me as maintainer...
jmeredith has joined #nixos
jophish_ has quit [(Ping timeout: 240 seconds)]
Seichi_ has joined #nixos
Seichi has quit [(Read error: Connection reset by peer)]
smw_ has joined #nixos
<smw_>
clever: you around?
<clever>
yes
<smw_>
clever: I am now able to load the nix repl, nix-repl /root/nixpkgs/nixos/ -I nixos-config=/root/nixpkgs/nixos/modules/installer/cd-dvd/sd-image-armv7l-multiplatform.nix
<smw_>
clever: welp. I am confused again. Let me recap what I have done: first I ran nix-repl in my tmux shell and everything worked fine but there was no easy way to copy the output. So I exitted tmux and tried again. Then I realized I never setup my env properly so I added .nix-profile/bin to my path. Then I ran nix-repl and got a different result:
<smw_>
nix-repl> :p config.system.build
<smw_>
{ binsh = «derivation /nix/store/a8ksg6dn4dhiahiqcj4jj0jri4l7fyi8-bash-4.4-p5.drv»; bootStage1 = «derivation /nix/store/byp2d25scm8wx7al8xhf0l9jy50spfmk-stage-1-init.sh.drv»; bootStage2 = error: infinite recursion encountered, at undefined position
fhoffmeyer has joined #nixos
<smw_>
clever: but this worked fine in my tmux session
<clever>
smw_: exactly what arguments did you run nix-repl with and what was the value of $NIX_PATH?
<smw_>
hm, in the good case I had NIX_LINK=/root/.nix-profile... I will add that
<clever>
i believe NIX_LINK has no effect on nix-repl
<smw_>
{ binsh = «derivation /nix/store/a8ksg6dn4dhiahiqcj4jj0jri4l7fyi8-bash-4.4-p5.drv»; bootStage1 = «derivation /nix/store/byp2d25scm8wx7al8xhf0l9jy50spfmk-stage-1-init.sh.drv»; bootStage2 = warning: dumping very large path (> 256 MiB); this may run out of memory
<clever>
smw_: thats interesting, how much ram and swap do you have?
<gchristensen>
domenkozar: you done with python? now for real?
fhoffmeyer has quit [(Ping timeout: 268 seconds)]
rmeis_ has quit [(Ping timeout: 260 seconds)]
<smw_>
clever: 1GB ram, 4GB swap
<clever>
smw_: when the above finishes, does it show more?
<smw_>
I haven't let it finished before, it is running now
<gchristensen>
ndowens is a machine!
eacameron has joined #nixos
<smw_>
clever: it appears to be disk heavy
<clever>
smw_: yeah, it hash to hash tne entire copy of nixpkgs
<smw_>
very little CPU usage and ram usage is high, but not 1GB
<clever>
smw_: oh, and because its a git clone, that includes the .git dir and all history
<smw_>
crap
<clever>
smw_: moving the .git out of nixpkgs temporarily may
cfricke has joined #nixos
<gchristensen>
or filtersrc
<clever>
you can move it back after
<domenkozar>
gchristensen: yes
<clever>
gchristensen: its an internal reference within nixpkgs, would be more complex to find that
Kendos-Kenlen has joined #nixos
<dannyg>
clever: the hanging 'nixos-rebuild switch' turned out be an issue with sync hanging on a NFS backup mount (temporary fix environment var NIXOS_NO_SYNC=1)
<gchristensen>
domenkozar: congratulations :)
nckx has quit [(Quit: ☭ + 🐧 + GNU Guix)]
<clever>
dannyg: ah, yeah, nfs is often a pain like that
<domenkozar>
gchristensen: I haven't written much python in last 2 years
<smw_>
clever: it still works in my tmux session!
<smw_>
clever: wtf?
<xeviox>
goibhniu: thanks for the info :D, I'll read up on updating from a repository
<domenkozar>
gchristensen: well, 1.5y
rmeis has joined #nixos
eacameron has quit [(Ping timeout: 246 seconds)]
nckx has joined #nixos
<gchristensen>
hmmm yeah I haven't done much for about 6mo now, but instsead moved back to ruby ;)
derjohn_mob has joined #nixos
<clever>
smw_: try running "env > /tmp/a" in tmux, and then "env > /tmp/b" outside, then "diff -u /tmp/a /tmp/b"
<gchristensen>
only out of duress though, work made me
<clever>
smw_: yeah, that would explain everything
<clever>
smw_: if you switch over to setting nixos-config=/etc/nixos/configuration.nix in $NIX_PATH, then you can easily override it with -I nixos-config= at any time
<smw_>
meh, I just unset it
<smw_>
clever: ok, just told it to build the sd card image.
<NixOS_GitHub>
[nixpkgs] globin pushed 1 new commit to master: https://git.io/vycEh
<NixOS_GitHub>
nixpkgs/master fc57e63 Robin Gloster: scid: fix build
cpennington has joined #nixos
<smw_>
clever: nm, cancelling so I can move .git out of the dir
nckx has quit [(Quit: ☭ + 🐧 + GNU Guix)]
<NixOS_GitHub>
[nixpkgs] edanaher opened pull request #23445: init: pebble-sdk at 4.5 (master...pebblesdk) https://git.io/vycut
<smw_>
clever: thanks for being patient with me :-)
<clever>
yep :)
<gchristensen>
guh I would really like to turn off travis for nix
<gchristensen>
I get so much spam from travis about nixpkgs builds
nckx has joined #nixos
thetet has quit [(Remote host closed the connection)]
<smw_>
clever: well, I will probably ping you later today or tomorrow :-P. Running time nix-build nixos -I nixos-config=nixos/modules/installer/cd-dvd/sd-image-armv7l-multiplatform.nix -A config.system.build.sdImage
<clever>
yeah, that will probably take a while
<clever>
i have my hydra setup to pre-build a few base packages, and it can take a week to catch up after nixpkgs changes
<smw_>
gchristensen: not until you setup arm hydra! :-P
<gchristensen>
Dezgeg: if you happen to be available to help setup some ARM bootstrapping, I'm available to do that this morning for the next ~4 horus
hotfuzz_ has joined #nixos
<LnL>
just wondering what happend, apart from the diff it seemed to work pretty well
<clever>
gchristensen: i may also be able to answer some arm related questions
<gchristensen>
LnL: as you know it was quite expensive
<Dezgeg>
sure, in a hour or two... getting off a train and eating soon
hotfuzz has quit [(Ping timeout: 264 seconds)]
<gchristensen>
LnL: we started moving the code over to hydra.nixos.org, but decided additional controls would be important. ie: only let PRs build when approved by a trusted person. well then that gets more complicated
<gchristensen>
like we need to trigger a build for the particular sha at that time, not just "pull and build". It also means we need to verify the messages from GitHub, we can't trust just any input to be correct.
magnetophon has joined #nixos
<gchristensen>
I started to build that, but then I thought it'd be better to use NixBot, and then it was close, and just a few days of work, and here we are. :(
<magnetophon>
goibhniu: Do you by any chance have kdenlive installed? IIRC it used to work with jack. Could you check?
mogria has quit [(Ping timeout: 240 seconds)]
mkoenig has quit [(Ping timeout: 240 seconds)]
<gchristensen>
I need to relocate. back in a bit.
mkoenig has joined #nixos
Rizy has quit [(Quit: Rizy)]
<goibhniu>
hi magnetophon: unfortunately, I don't ... I have a feeling it worked with jack too though
<LnL>
gchristensen: right, just wondering. do you have that in a repo somewhere?
<goibhniu>
magnetophon: or maybe I'm confusing it with blender
<goibhniu>
magnetophon: it would probably be melt which enables support for jack
<goibhniu>
(MLT)
alx741 has joined #nixos
<goibhniu>
magnetophon: and mlt does include libjack2 as an input
<NixOS_GitHub>
[nixpkgs] ttuegel opened pull request #23446: Qt 5.8 and Plasma 5.9 (staging...plasma-5.9) https://git.io/vyc2v
<steveeJ>
clever: so I still have to manually define what I want in the newScope
<LnL>
steveeJ: another example would be callPackage = pkgs.newScope pkgs.pythonPackages; if you need a bunch of python dependencies
<clever>
steveeJ: yeah
<steveeJ>
got it. at least I don't have to repeat myself
<steveeJ>
thanks LnL and clever
<clever>
the main use i have for that, is when i'm making a dozen inter-connected derivations
<clever>
they can depend on eachother via callPackage as if they where all in nixpkgs
xadi has quit [(Quit: Leaving.)]
<magnetophon>
goibhniu: thanks, I also looked at mlt, and saw jack there. I also googled a bit and it was unclear to me whether it even works on other systems yet.
<magnetophon>
it being jack in kdenlive
jsgrant- has joined #nixos
dbmikus has quit [(Quit: WeeChat 1.7)]
<goibhniu>
magnetophon: that reminds me, synfig switched to mlt so that they could also have jack support ...
Rizy has joined #nixos
dbmikus has joined #nixos
elon_ has quit [(Ping timeout: 268 seconds)]
fhoffmeyer has joined #nixos
xeviox has quit [(Ping timeout: 268 seconds)]
<magnetophon>
goibhniu: hmm, at any rate, it's not showing up in my latest build...
<goibhniu>
magnetophon: does mlt mention it during the configuration?
<goibhniu>
maybe it also requires some config switch
<clever>
one of the json libraries ive used before, renamed the static and dynamic library flags, and silently ignored the old ones
<clever>
it causes the nix package to contain only static libraries
<clever>
and it still worked, so nobody noticed
k0001 has quit [(Ping timeout: 258 seconds)]
<magnetophon>
goibhniu: idk, I'm getting mlt from cache.
mkoenig has quit [(Ping timeout: 240 seconds)]
fhoffmeyer has quit [(Ping timeout: 256 seconds)]
<clever>
magnetophon: you can look that log up on hydra.nixos.org
<magnetophon>
clever: thanks, didn't think of that
<goibhniu>
BTW thanks for all the updates you've been doing magnetophon!
mkoenig has joined #nixos
<goibhniu>
(and fixes)
<clever>
magnetophon: and in the case of things you had built locally and didnt catch the log of, "nix-store -l /nix/store/foo"
jsgrant- has quit [(Remote host closed the connection)]
<magnetophon>
clever: that's magic! :D
gilligan_ has quit [(Ping timeout: 240 seconds)]
<magnetophon>
goibhniu: np, my pleasure.
<clever>
magnetophon: nix saves all logs to /nix/var/log/nix
<magnetophon>
Congrats everybody on having only 246 failing pkgs in 17.03!
<magnetophon>
I guess that can either mean it found jacklib or it's just not verry chatty...
<gchristensen>
magnetophon: hmmm nice! have those patches been ported to unstable?
sivteck has joined #nixos
<gchristensen>
globin, domenkozar: what if we did the ZHF _before_ branch-off next time? (or as I mentioned to domen privately, more than once every 6mo)
gilligan_ has joined #nixos
<domenkozar>
gchristensen: it's painful since usually we get most commits before branch-off
Rotaerk_ has quit [(Read error: Connection reset by peer)]
jcbrand has quit [(Ping timeout: 246 seconds)]
<gchristensen>
I see
<domenkozar>
and those are mostly breaking stuff
<domenkozar>
:D
<domenkozar>
so in other words, I don't see much benefit
<domenkozar>
but it would be useful to do it a month before branch-off
<domenkozar>
or every month
<domenkozar>
or something :)
<gchristensen>
yeah, makes sense
<clever>
or just never allow hydra failures, lol
<domenkozar>
well that would require some very substantial changes to our tooling and workflow
<domenkozar>
that being said, I'm all for it
<gchristensen>
+1
<magnetophon>
gchristensen: which patches?
wedens has quit [(Ping timeout: 260 seconds)]
<gchristensen>
magnetophon: the ones fixing all the broken packages :)
<magnetophon>
gchristensen: you mean have they been merged in 17.03?
<gchristensen>
no, I wan to be sure they are also fixed in unstable
<gchristensen>
as unstable still has over a thousand failures
<magnetophon>
gchristensen: they are all PRs to master, so will get put into unstable. I think I still don't get the question, sorry.
<gchristensen>
but `git checkout master; git merge release-17.03 --no-ff` seems to suggest it has
<gchristensen>
the root of the question is, how does 17.03 have only a couple hundred, and unstable has over a thousand?
<NixOS_GitHub>
[nixpkgs] vcunat pushed 2 new commits to release-17.03: https://git.io/vyc6x
<NixOS_GitHub>
nixpkgs/release-17.03 9e11df2 Frederik Rietdijk: Python 3.4: fixup expat and libffi, fixes #23325...
<NixOS_GitHub>
nixpkgs/release-17.03 c7808fd Frederik Rietdijk: Python 3.6 fixup expat and libffi, fixes #23406...
<NixOS_GitHub>
[nix] edolstra pushed 2 new commits to master: https://git.io/vyciZ
<clever>
nwspk: glib.h is in include/glib-2.0, but only include is in the include path
<nwspk>
symphorien: same problem
<clever>
nwspk: glib is trying to prevent the kind of collisions that nix is designed to avoid, but it also breaks the logic nix adds to help make things work nicely
<nwspk>
clever: how can I fix this/
sellout- has joined #nixos
<clever>
nwspk: you need to add -I${glib.dev}/include/glib-2.0 to the include path, -p pkgconfig and "pkg-config --cflags glib-2.0" will find it for you
<dannyg>
clever: haha, he might have had something to do with finding the issue as well ;)
<clever>
dannyg: and backup-tud is your only nfs mount?
<nwspk>
clever: oh… totally forgot that; shorter with `nix-shell -p pkgconfig glib.dev` and `pkg-config --cflags glib-2.0 gdk-pixbuf-2.0 --libs libnotify` (just for the record)
<dannyg>
clever: yes
<clever>
dannyg: not sure then, sounds like an issue within the nfs config
eacameron has quit [(Ping timeout: 260 seconds)]
Kendos-Kenlen has quit [(Quit: Konversation terminated!)]
chakerbenhamed has quit [(Ping timeout: 268 seconds)]
<dannyg>
one thing i also found in ps, is some hanging rsync backup commands
wedens has joined #nixos
pi3r has quit [(Ping timeout: 260 seconds)]
<clever>
dannyg: maybe it isnt actualy hanging, but rather, there is a large back-log from rsync, and the sync from nixos-rebuild is waiting for that backlog to clear
<clever>
dannyg: and when the backlog has gone thru fully, the sync will return, having done exactly what its meant to do
<clever>
dannyg: ive noticed similar when i ran nixos from a uSD card in a usb adapter, abnormaly low write speeds combined with 16gigs of ram, it can buffer pretty massive amounts of data in ram
<clever>
dannyg: that can be tracked in /proc/meminfo but i cant remember which field it is
<dannyg>
wouldn't that show up in iotop?
<clever>
not sure
mudri has quit [(Ping timeout: 256 seconds)]
<NixOS_GitHub>
[nixpkgs] bcdarwin opened pull request #23452: edward: init at 1.2.2 (master...edward) https://git.io/vyc93
<dannyg>
clever: we are suspecting it might be something related to trying to copy the permissions where the share actually doesn't allow that, at least we had a similar issue in the past
<NixOS_GitHub>
[nixpkgs] fpletz pushed 1 new commit to master: https://git.io/vyc98
<NixOS_GitHub>
nixpkgs/master 4ffa5fa Franz Pletz: urh: 1.3.3 -> 1.5.5
<steveeJ>
is there a string mode so I don't have to escape ${?
katyucha has quit [(Quit: leaving)]
<steveeJ>
mh, probably ".." instead of ''..''
<clever>
steveeJ: builtins.readFile is the first thing that comes to my mind
mkoenig_ has joined #nixos
<johnw>
I'm pretty sure '' will require escaping too
digitus has joined #nixos
mkoenig has quit [(Ping timeout: 258 seconds)]
<gchristensen>
I'd like something that prompts me if I'm pushing more than one commit at a time. is a pre-push hook the best thing for that? :)
loanatic has joined #nixos
stepcut has joined #nixos
<LnL>
gchristensen: 17.03 has no darwin builds
<LnL>
it's 200 on 17.03 vs 700 on unstable
<gchristensen>
ohh
<clever>
ah yeah, the channels never get darwin builds, only nixpkgs-unstable has darwin
<clever>
release channels*
<NixOS_GitHub>
[nixpkgs] joachifm pushed 1 new commit to master: https://git.io/vycQv
<clever>
tnks: will this be working under hydra or nix-build?
devoid has quit [(Ping timeout: 268 seconds)]
<qknight>
tnks: looks cool
<Kendos-Kenlen>
Hi (Hydra o/ )
mbrock_ has joined #nixos
rodarmor_ has joined #nixos
dhess`` has joined #nixos
<Kendos-Kenlen>
I have a little question : is hydra centered around building Nix packages or is it a general purpose CI ?
sivteck has quit [(Ping timeout: 260 seconds)]
michiel_l_ has joined #nixos
<qknight>
Kendos-Kenlen: CI came later
<qknight>
Kendos-Kenlen: but can be used for both very well
feepo_ has joined #nixos
<Kendos-Kenlen>
Okay, so mainly nix pkgs
ktosiek has joined #nixos
Sonarpulse has joined #nixos
<clever>
Kendos-Kenlen: any kind of test you can wrap into a nix package can also be handled by hydra
<tnks>
qknight: yeah, I've been excited about condensing into one project everything I've learned about Nix (and Nix+Haskell)
Shados_ has joined #nixos
Khetzal_ has joined #nixos
bjarki has joined #nixos
<clever>
Kendos-Kenlen: and the nixos testcases just run a full test as a qemu vm, and basicaly "compile" the test results when nix tries to "build" the test derivation
grenade_ has joined #nixos
armin_ has joined #nixos
WilliButz has joined #nixos
andreas303 has joined #nixos
<clever>
tnks: do you want to fetch the private github from a hydra based build, or via nix-build?
joachifm_ has joined #nixos
pi3r has joined #nixos
avn_nb_ has joined #nixos
siel_ has joined #nixos
<Kendos-Kenlen>
clever: i see
Ptival_ has joined #nixos
jaym_ has joined #nixos
siel_ has quit [(Changing host)]
siel_ has joined #nixos
derjohn_mob has quit [(Ping timeout: 260 seconds)]
bjarki has quit [(Client Quit)]
<Kendos-Kenlen>
But it's not a bad point, I was just wondering what was hydra main purpose. I think it's good if it's mainly centered around Nix
tinkyholloway has joined #nixos
__20h___ has joined #nixos
<tnks>
clever: I may not understand your question... mostly I want to replace my use of git submodules, but I use that mainly because it's an easy way to do authentication for multiple private repos in one step.
nwspk_ has joined #nixos
dtz1 has joined #nixos
philipp[m]1 has joined #nixos
<tnks>
clever: so not in Hydra... in a company-internal nix-build.
<tnks>
and we're not using Hydra internally.
lewo_ has joined #nixos
ThatDocsLady has quit [(Quit: Arma-geddin-outta-here!)]
<tnks>
clever: yeah, I can see how what I'm asking for is a compromise... it's just inside some companies (like the one's I work at), the Rube Goldberg machine is already large.
hotfuzz has joined #nixos
<clever>
tnks: the function in the gist will use an auth token made on github to grant curl access to private repos
<tnks>
clever: cool, that looks more like what I was expecting.
<tnks>
thanks.
<clever>
i believe you can then make a dedicated github account for that, and grant it read-only access to your projects
<clever>
even if somebody does manage to steal the token, its just read-only
<tnks>
right, and you can disable the token too.
<clever>
yep
<tnks>
that sounds like the best path forward for this company... let me try that.
<tnks>
Nix is awesome... long live Nix... but let's get a type system goddamnit.
sibi has joined #nixos
<clever>
tnks: the hydra case is a bit simpler for small numbers of things, you can define an input for hydra as "git@github.com:owner/project.git" and then just run ssh-keygen as the hydra user
<simpson>
Meh, type systems are overrated.
<clever>
tnks: and now hydra can fetch that input from a private repo, and no build will ever have access to the keys
<tnks>
clever: right, that makes good sense too, but people need to run all this stuff from their local machines.
<clever>
tnks: i am currently writing a testframework in lua, i feel i dont need types that badly :P
<clever>
tnks: in my project, there is only 1 private repo, so i can just "git pull" manualy, and run nix-build in its root dir
<clever>
so it never has to download private things at build-time
paperd has joined #nixos
fractal has joined #nixos
<tnks>
clever: but then who's managing the set of git commits?
<clever>
its just a small project, 2 people with push access on a private repo
<tnks>
okay, I get the idea that "master should always work"
<tnks>
but we need the ability to roll-back in a managed way.
<clever>
ah
<clever>
branches and tags to flag versions that are known-good
<tnks>
which is why I just started with submodules.
<tnks>
yeah, I'm fine with submodules for now... it does all that with less (or a different kind) of human err.
<tnks>
but if I can get Nix to do this, then I don't have to deal with teaching anyone anything about submodules.
<clever>
ah, having nix fetch a pinned version of dependency xyz, i see
<tnks>
although, one thing that submodules allows me to do is modify the code in place and see the changes relative to git's diff commands.
takle has quit [(Remote host closed the connection)]
<tnks>
hmm, that makes me want to do this Nix thing less.
<tnks>
I feel like I'm the only person in the world that actually appreciates git submodules.
<clever>
oh, and the curl method from dmj's gist doesnt support submodules
<tnks>
clever: that might be fine.
<tnks>
the whole point of this is to get off of submodules.
<clever>
yeah, just define every dependency in nix, and fetch each private one with code like that gist
<tnks>
also, returning to my complaint. I can use builtins.pathExists to allow us to use a pinned version, but optionally override it with a checked out version in a user-specified path.
<tnks>
I just need to make sure the hash calculation isn't borked with that strategy.
Kendos-Kenlen has quit [(Quit: Konversation terminated!)]
<clever>
tnks: it should be possible to conditionaly do that, one sec
<clever>
tnks: foo = if (builtins.pathExists ./foo) then (foo.overrideDerivation (old: { src = ./foo; })) else foo
<clever>
this will override the src if ./foo exists, and just leave foo un-altered if it doesnt
<clever>
and because of how nix works, it will re-check for ./foo each time you eval the nix expressions, and if it doesnt exist, it will always return the same foo with no changes to the hash
<clever>
another way of doing it:
armin_ is now known as armin
<clever>
foo = if (builtins.pathExists ./foo) then (callPackage ./foo {}) else (callPackage ./foo.nix {});
<clever>
tnks: now it will decide between ./foo/default.nix or ./foo.nix, allowing more complex changes to be made in foo's dir
fhoffmeyer has quit [(Ping timeout: 256 seconds)]
<clever>
but you need to copy ./foo/default.nix -> foo.nix, and update the src directive to re-pin a new version
<NixOS_GitHub>
nix/master d140c75 Eelco Dolstra: Pool: Don't hang if creating a connection fails
<NixOS_GitHub>
nix/master d3eb1cf Eelco Dolstra: build-remote: Don't use a SSH master...
acarrico has quit [(Ping timeout: 240 seconds)]
fre has joined #nixos
slyfox_ has quit [(Ping timeout: 268 seconds)]
acarrico has joined #nixos
<viric>
is lethalman here?
devoid1 is now known as devoid
gilligan_ has quit [(Ping timeout: 240 seconds)]
<zraexy>
Does nix evaluate a package with its original arguments before evaluating is overridden ones? I overrode a couple packages but they are still complaining about insecure and broken dependencies.
<qknight>
viric: not seen for a long time
<qknight>
zraexy: override should go first i guess
<viric>
qknight: ok
<viric>
qknight: I have troubles with vlock
<qknight>
zraexy: so your override is probably not correct
<viric>
Crazy, this vlock. I found a likely original tree (http://repo.or.cz/vlock.git) which has a 2.2.3-alpha1 at most, with many changes wrt 2.2.2. But I have seen a 2.2.3 tarball in other places that has only 5-lines changed from 2.2.2
ilyaigpetrov has quit [(Quit: Connection closed for inactivity)]
roconnor has quit [(Ping timeout: 264 seconds)]
fre has quit [(Ping timeout: 258 seconds)]
<NixOS_GitHub>
[nixpkgs] fpletz pushed 1 new commit to master: https://git.io/vyCGJ
<NixOS_GitHub>
nixpkgs/master 0297fdc Bart Brouns: beast: mark as broken
<NixOS_GitHub>
[nixpkgs] fpletz pushed 1 new commit to release-17.03: https://git.io/vyCGR
<NixOS_GitHub>
nixpkgs/release-17.03 1b52b27 Bart Brouns: beast: mark as broken...
sivan has joined #nixos
<c0bw3b>
If I manually download a release from GitHub and compute the sha256sum of the archive I don't get the same hash as Nix expect through fetchFromGitHub
<henrytill>
LnL: oh no sweat - i take it the reservations about the `with` weren't really a showstopper for you...
devoid1 has quit [(Ping timeout: 258 seconds)]
devoid has joined #nixos
<LnL>
no, I just didn't merge it in immediately and then lost track of it
<steveeJ>
can someone confirm that when nix-shell is used as an #! interpreter it can't handle URLs as derivation? it throws error: not an absolute path: ‘./https://github....'
<tnks>
for an impureEnvVars, is there any way to programmatically set it differently for different Nix expressions without changing the hash (defeating the whole point of an impure env var)?
<shlevy>
And *now* bitten by the us-east-1 issue :D
<MichaelRaskin>
Is it the second series or is it just a fallout from the original one?
<clever>
tnks: the $out hash of a fixed-output derivation ignores its build-time dependencies
<clever>
tnks: the hash in $out is based purely on the outputHash attribute, which must use the algo in outputHashAlgo
loanatic has joined #nixos
LER0ever has joined #nixos
wedens has joined #nixos
<NixOS_GitHub>
[nixpkgs] fpletz pushed 1 new commit to master: https://git.io/vyC4U
<NixOS_GitHub>
nixpkgs/master 3d2e118 Franz Pletz: xca: fix build...
LER0ever has quit [(Client Quit)]
fhoffmeyer has joined #nixos
<NixOS_GitHub>
[nixpkgs] fpletz pushed 1 new commit to release-17.03: https://git.io/vyC4E
<NixOS_GitHub>
nixpkgs/release-17.03 ed26f00 Franz Pletz: xca: fix build...
<NixOS_GitHub>
[nixpkgs] rycee pushed 1 new commit to master: https://git.io/vyC4V
<NixOS_GitHub>
[nixpkgs] 7c6f434c pushed 1 new commit to master: https://git.io/vyCBT
<NixOS_GitHub>
nixpkgs/master 8eccd34 Michael Raskin: vim_configurable: enable ximSupport by default
MP2E has joined #nixos
keith_analog has joined #nixos
LER0ever has joined #nixos
xadi has joined #nixos
<keith_analog>
Hi All, I would like to create a new systemd service such that the service is always loaded after an existing service named `systemd.services.mount-usb-drives` in my configuration.nix. What do I put in after = [ ... ] to get this effect? thanks
<gchristensen>
"mount-usb-drives.service"
derjohn_mob has joined #nixos
<keith_analog>
super thanks :)
<NixOS_GitHub>
[nixpkgs] viric pushed 1 new commit to master: https://git.io/vyCBj
<NixOS_GitHub>
[nixpkgs] rycee pushed 1 new commit to master: https://git.io/vyCRU
<NixOS_GitHub>
nixpkgs/master d093c11 Robert Helgesson: josm: 11526 -> 11639
xadi has quit [(Client Quit)]
<keith_analog>
also, is there a way to specify that the service be started on demand rather than at boot time?
ryanartecona has quit [(Quit: ryanartecona)]
elon_ has quit [(Ping timeout: 264 seconds)]
xadi has joined #nixos
<clever>
keith_analog: it only runs on bootup if you make it part of the multi-user.target
<keith_analog>
super, thx
jcbrand has quit [(Ping timeout: 240 seconds)]
<keith_analog>
am i correct to assume that `wantedBy = [ "default.target" ];` has the effect of making it part of multi-user.target?
<gchristensen>
you'd probably want to make it wantedBy = [ "multi-user.target" ];
<clever>
havent looked into what default.target covers
<keith_analog>
my current config starts the service at boot time
<keith_analog>
and that's the only part of the config that looks like it'd have that effect
AllanEspinosa has joined #nixos
<jophish>
peti: I wonder if it'd be faster to interpret Setup.hs instead of compiling it and running the binary
<keith_analog>
maybe the `after = ...` could have this effect...
<jophish>
(for main = defaultMain)
<LER0ever>
Hi, anyone using nixos unstable, sddm+plasma5+i3? My sddm keeps starting kde no matter what session I choose.
devoid1 has joined #nixos
devoid has quit [(Ping timeout: 246 seconds)]
<tnks>
clever: I might not understand something, can you sanity check with me? So for NIX_CURL_FLAGS, can I change them for different invocations easily?
<tnks>
without changing the hash?
<clever>
tnks: for NIX_CURL_FLAGS, it bypasses all hashing entirely, but there is a single value for the entire nix-build call, covering all derivations
<tnks>
clever: yeah, that's the part that bums me out.
<tnks>
it's global.
<clever>
tnks: for attributes within a fixed-output derivation, you can change them all you want without impacting the hash, but those attributes are readable in /nix/store/
keith_analog has quit [(Remote host closed the connection)]
<tnks>
clever: ah yeah, that's the other part that's important... I don't want to do that.
<dtzWill>
hmm so I imagine I really shouldn't be doing this to begin with, but .... are NixOS builder sandboxes executed in different network namespaces? O:)
gilligan_ has quit [(Ping timeout: 264 seconds)]
<clever>
dtzWill: normal derivations are, but fixed-output derivations are not
<tnks>
clever: but I can just use the snippet you gave me.
<tnks>
it reproduces some of the stuff that already in build-support, but not too much.
<dtzWill>
I know they can't connect to external things, but I've been wrapping a db server in a derivation: load-from-dump, start, $OPERATION, stop, save-to-dump -- and it works great other than they seem to conflict with one another if run concurrently
<dtzWill>
clever: different from host's network namespace, or different from each other?
<dtzWill>
they could have some locking or something that's shared that I haven't tracked but first thought was just port allocation
<clever>
dtzWill: every build goes into its own private network namespace, with only an lo interface
<dtzWill>
hmm that's what I thought/expected! okay :/
<clever>
dtzWill: and the other instances of privateNetwork in the same file
<dtzWill>
wonderful, tyvm
<peti>
jophish: It might be. Probably not much, though.
<NixOS_GitHub>
[nixpkgs] vcunat pushed 1 new commit to release-17.03: https://git.io/vyCE3
<NixOS_GitHub>
nixpkgs/release-17.03 2051238 Michael Raskin: vim_configurable: enable ximSupport by default...
LER0ever has quit [(Quit: Konversation terminated!)]
Ptival_ is now known as Ptival
wedens has quit [(Ping timeout: 240 seconds)]
eacameron has joined #nixos
gilligan_ has joined #nixos
eacameron has quit [(Ping timeout: 246 seconds)]
fre has joined #nixos
freusque has quit [(Ping timeout: 240 seconds)]
fre has quit [(Ping timeout: 256 seconds)]
fre has joined #nixos
fre has quit [(Client Quit)]
sivan has quit [(Quit: Leaving)]
sellout- has quit [(Read error: Connection reset by peer)]
sellout- has joined #nixos
LER0ever has joined #nixos
ndowens08 has joined #nixos
xadi has quit [(Ping timeout: 240 seconds)]
fhoffmeyer has joined #nixos
DutchWolfie has quit [(Quit: Konversation terminated!)]
LER0ever has quit [(Remote host closed the connection)]
loanatic has quit [(Quit: loanatic)]
fhoffmeyer has quit [(Ping timeout: 240 seconds)]
LER0ever has joined #nixos
LER0ever has quit [(Client Quit)]
<greymalkin>
Is there a way to give VirtualBox instances created by nixops a satic IP? I'm getting a bit exhausted constantly tracking down which IP has the machine I want to talk to has in this generation.
<NixOS_GitHub>
[nix] shlevy opened pull request #1258: Add aws-region param to S3 store URLs (master...configurable-aws-region) https://git.io/vyCwv
<tnks>
okay, I think I remember what was happening.
<clever>
otherwise, the source code fetched by fetchurl will change its path every time curl updates
<clever>
which would trigger mass-rebuilds
<tnks>
yeah, I was trying to side-step putting it in nix-store.
<tnks>
sorry, I'm just treating you like a rubber duck.
<tnks>
it's all coming back to me.
<clever>
not a problem
devoid1 has quit [(Quit: Leaving.)]
<LnL>
clever: curl doesn't influence the paths of fetchurl, does it?
<clever>
LnL: because fetchurl is fixed-output, it ignores the paths of all of its inputs
<clever>
which prevents that issue
<LnL>
I misread your message
<tnks>
clever: can I programmatically set the strings for impureEnvVars? So people can parameterize the GITHUB_TOKEN for different repos?
<tnks>
in my mind, it seems like that should be possible.
<clever>
tnks: sure
hiratara has quit [(Ping timeout: 246 seconds)]
<dtz>
the fixed-output including the name (which if not given, as clever says, is based off of the URL) has caused me confusion in the past. Make sure to change the name if you are trying to change the version or something! xD
<clever>
tnks: you could also do impureEnvVars = [ ("GITHUB_TOKEN_" + foo) ];
cpennington has quit [(Remote host closed the connection)]
<clever>
dtz: i always increment a random number near the end of the hash
<tnks>
clever: calling eval from a shell script.
<clever>
the problem there, is that if the hash and name match something you already have downloaded, but the url points to a newer file, it wont try to re-download
<dtz>
haha me too, or more accurately I let vim 'increment' the next digit and just make sure it didn't roll over xD
<clever>
so it wont notice the hash is wrong
hiratara has joined #nixos
<tnks>
clever: it shouldn't point to a newer file, right? this is a Github private repo.
<tnks>
so we're accessing this tarball by rev.
<tnks>
I'm just thinking about the dmj`'s snippet you pointed me to, and how to harden it.
devoid has joined #nixos
<clever>
tnks: i think fetchFromGitHub prevents this issue by naming the derivation "${name}-${rev}.tar.gz"
fhoffmeyer has joined #nixos
<clever>
so any change to rev causes the name to not match, and it forces a re-download
<clever>
so the hash doesnt need to be incremented
<dmj`>
tnks: fetchFromGitHub calls fetchgit which uses libcurl, you can specify curl flags that read an environment variable on your machine that doesn’t get stored in the nixstore
<dtzWill>
but if you cheat fetchFromGitHub into using a tag rev I think i've made that act unexpectedly
<dtzWill>
but basically I shouldn't do that and should feel bad :P lol
<dmj`>
tnks: the hash will be put into the store, so the derivation will be rebuilt on change, but you need to make the nix-daemon aware of the github private access token
<NixOS_GitHub>
[nixpkgs] TomSmeets opened pull request #23464: networkmanager service: support changing the mac-address (master...nm-chmac) https://git.io/vyCiX
<dmj`>
NIX_CURL_FLAGS is appended on all calls to fetchgit
<gchristensen>
dmj`: is that a private token?
<LnL>
tnks: fetchFromGitHub downloads a tarball by default
<clever>
dmj`: that better not be a real token :P
<tnks>
dmj`: the build server isn't running Nix-daemon or even NixOS.
<dmj`>
ghchristiansen, clever: an anonymized one :)
<tnks>
it's managed by another team.
<dmj`>
figured I might fool a few people :)
<dmj`>
tnks: well there’s your first problem
<dmj`>
:)
<dmj`>
nixify that ish
bobthejanitor has joined #nixos
<dmj`>
gchristensen: sorry I converted you to christianity again
<tnks>
dmj`: I agree, so that's why I'm going down this other pathc.
<gchristensen>
it is okay
<gchristensen>
I'm used to it
<dmj`>
:)
<clever>
i was under the impression that the nix-build command would read the NIX_CURL_FLAGS from its env, then forward that to nix-daemon over the unix socket
<clever>
and then nix-daemon would use that value for the builder
<tnks>
clever: I think it does... but you can't use the same token for all repositories.
<tnks>
so I'm not really sure this works as a full general solution.
<tnks>
clever: right... back to that.
<clever>
tnks: then .bashrc can setup all the tokens
<bobthejanitor>
I'm upgrading nixos from the unstable channel to the newest 17.03 channel. When I do a rebuild update, the newest generation will give the error "Error loading \efi
<bobthejanitor>
Oops
<dmj`>
tnks: if you have nix installed on a non-nixos box, you just need to ensure that the user that runs the nix-build command can see that environment variable
<dmj`>
I think you want to use github personal access tokens too
<tnks>
dmj`: I agree, but clever and I are down to the last problem that NIX_CURL_FLAGS is global for the whole nix-build invocation, and we might have multiple repositories that need different tokens.
<bobthejanitor>
I'm upgrading nixos from the unstable channel to the newest 17.03 channel. When I do a rebuild update, the newest generation will give the error "Error loading \efi\nixos\<hash>-linux-4.9.12-bzImage.efi: Not Found" and then a subsequent "Failed to execute Nixos (same path/file): Not Found")
<dmj`>
tnks: are you using more than one private git provider?
<dmj`>
like you have private github and gitlab repos?
<clever>
tnks: and also, NIX_CURL_FLAGS will hand your github token out to EVERY tarball server, like its free cookies
jophish has quit [(Quit: Lost terminal)]
<clever>
tnks: so now xorg and glibc servers are getting a copy of your token
<tnks>
clever: I agree.
jophish has joined #nixos
<dmj`>
clever, tnks: if they’re logging requests that could be an issue
<clever>
dmj`: or if some of those are not over https
<NixOS_GitHub>
[nixpkgs] abbradar pushed 1 new commit to master: https://git.io/vyCPK
<NixOS_GitHub>
nixpkgs/master 4a6ba21 Nikolay Amiantov: liferea: 1.10.19 -> 1.12-rc2...
<dmj`>
https all the things
<tnks>
it's just too sloppy for my tastes, and when I feel I have a better solution for the small investment of Yet Another Nix Expression™
<LnL>
tnks: you could nix-build -A pkg.src each package source before starting the build
<clever>
dmj`: nix doesnt really use https much for fixed-output stuff, because any mitm is caught by nix verifying the output hash
<NixOS_GitHub>
[nixpkgs] abbradar pushed 1 new commit to release-16.03: https://git.io/vyCPA
<NixOS_GitHub>
nixpkgs/release-16.03 73d9d2d Nikolay Amiantov: liferea: 1.10.18 -> 1.12-rc2...
<dmj`>
maybe there’s a way to inspect the host curl is receiving and choose wether or not to append those flags, but all calls to github / gitlab for fetching should be over https
<clever>
netrc partialy handles that, but it only has domain level accuracy i believe
<tnks>
that just sounds like more sausage. NIX_CURL_FLAGS could have any number of things in it, and it seems folly to parse out the switches for certain ones.
<clever>
though github does accept a name/pw pair over basic auth
<tnks>
clever: yeah, that might be true... even --netrc-file might be inadequate in some cases.
<NixOS_GitHub>
[nixpkgs] joachifm pushed 1 new commit to release-17.03: https://git.io/vyCXW
<NixOS_GitHub>
nixpkgs/release-17.03 5436f4d Joachim Fasting: torchat: mark as broken...
<tnks>
clever: so I think I've followed most of the the conversation thus far, but I'm not sure what point you were trying to make about the way the name affects caching and redownloading.
<MichaelRaskin>
Downloading happens if the target path is not registered as valid
<clever>
tnks: and you bump it to version 1.3, the name in the /nix/store wont change
<dmj`>
tnks: there’s 3 problems with this. 1) netrc isn’t in 1.11 2) NIX_CURL_FLAGS on the nix-daemon sends the token in all fetchgit requests. 3) the script I pasted before stores the environment variale in the store
<clever>
so it will match the old file you previously downloaded, and not update
<clever>
tnks: you need to change the hash, to make it re-download, and tell you the correct hash
<clever>
or put the version into the name, so it always mismatches
<dmj`>
it’s a 10x10ft room and an 8x8ft carpet
<LnL>
nix-build --check also works
<tnks>
dmj`: what do you mean by "1.11"? which version is that for?
<dmj`>
tnks: the one for 16.09 iirc
<dmj`>
someone added netrc support, but it’s not in the channel
<bobthejanitor>
I'm upgrading nixos from the unstable channel to the newest 17.03 channel. When I do a rebuild update, the newest generation will give the error "Error loading \efi\nixos\<hash>-linux-4.9.12-bzImage.efi: Not Found" and then a subsequent "Failed to execute Nixos (same path and file): Not Found". Anyone experience this issue? No errors, everything go
<bobthejanitor>
es normally from what I can see.
<clever>
bobthejanitor: does that file exist in /boot/ ?
<tnks>
dmj`: well, we'll on a pretty late version of both Nix and Nixpkgs, and netrc has been working for us.
<tnks>
but I think your script isn't the final product, but isn't too far off.
<tnks>
I'll work it, and report back.
<bobthejanitor>
clever: Yes it does
<dmj`>
tnks: I got it from someone else who uses it at their co
<NixOS_GitHub>
[nixpkgs] joachifm pushed 1 new commit to master: https://git.io/vyCMK
<tnks>
also, I want to see if I can just get rid of our dependence on git submodules.
<clever>
bobthejanitor: and is /boot correctly mounted?, does it show up in df -h or mount?
* tnks
has a plan.
<bobthejanitor>
clever: Yes, in older generation
zraexy1 has joined #nixos
<clever>
bobthejanitor: not sure then, i usualy see this kind of problem if somebody ran nixos-rebuild when /boot wasnt mounted, then the files wind up in the /boot folder of /, rather then the /boot partition
<bobthejanitor>
clever: Should I create an issue?
<clever>
bobthejanitor: yeah, and put in any info you can gather on the issue
zraexy has quit [(Ping timeout: 258 seconds)]
<bobthejanitor>
Okay. Thanks for the help
<magnetophon>
My 2nd machine refuses to upgrade from 16.09 to 17.03: when I try to use my local binary-cache, I get: " invalid URL ‘the-url' " but when I wget that url it works. If I use the upstream caches, I get "narinfo’ is signed by unknown key ‘cache.nixos.org-1’; ignoring" and when I put the key in the flags, I get: "narinfo’ has an incorrect signature; ignoring"
<devoid>
anyone have suggestions for configuring xorg.conf for multiple displays? I've been using the xrandrHeads option, but I find that the identifiers for these change whenever I plug in different cables / change my KVM setup?
hiratara has joined #nixos
<Profpatsch>
Anyone knows a setting for LC_TIME that will display dates in the only sane format (yyyy-mm-dd)?
<devoid>
to be clear, xrandrHeads = [ left middle right ]; works really well when things aren't changing, but I'm debugging other issues and getting tired of having to do a systemctl restart display-manager to make sure everything is sane…
<clever>
devoid: i just drag them around in the xfce display settings
<clever>
devoid: only downside, is that those settings only take place after login, but i dont really need 3 monitors working correctly to type in a name+pw, lol
<devoid>
clever, yea, that's another approach that can work.
<MichaelRaskin>
I use the script that discovers present heads and layouts them from left to right, whatever they are
<devoid>
clever, on the name + pw typing, I *have* seen oddities where the slim window is halfway off the screen…which can be difficult
mudri has quit [(Ping timeout: 240 seconds)]
<clever>
devoid: the defaults on my system is to mirror it 3 ways
<dmj`>
tnks: are you still here
<magnetophon>
This seems weird: when I try to "nix-copy-closure --to other-machine /path/to/nixos-rebuild", I get: "error: imported archive of ‘/path/to/glibc-2.25’ lacks a signature"
<clever>
MichaelRaskin: my screens are laid out as 1,3,2, so that wouldnt look right
lucasOfBesaid has joined #nixos
<clever>
magnetophon: you need to either use --to root@other-machine, setup signing, or make the target user a trustedUser
<magnetophon>
clever: ah, thanks. I hope this'll get me able to rebuild now
<dmj`>
tnks: if you don’t care about the key being in the /nix/store
<dmj`>
there is also curlOpts that can be specified on fetchFromGitHub
<dmj`>
or any fetchgit
<dmj`>
that can probably read getEnv
<MichaelRaskin>
clever: well, reordering would be simple to add. I just rarely have more than two monitors, but I don't want to care about using a different port sometimes
Kendos-Kenlen_ has quit [(Ping timeout: 240 seconds)]
Kendos-Kenlen has joined #nixos
wedens has joined #nixos
deepfire has quit [(Ping timeout: 240 seconds)]
<magnetophon>
clever: first it said WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! and when I fixed that it wouldn't accept my password. It was set up for password-less login for root. somethings wonky...
<lucasOfBesaid>
I can't seem to start JACK. I get "jackdbus should be auto-executed by D-Bus message bus daemon." Does that mean I shouldn't try to start JACK myself or something?
<clever>
magnetophon: either the ip has changed, or somebody is performing a mitm attack and now has your pw :P
mudri has joined #nixos
<magnetophon>
clever: it's a direct cable between the machines, so no mitm
mkoenig has quit [(Ping timeout: 256 seconds)]
<magnetophon>
clever: and the ip still works, I can ssh in as a user
justbeingglad has joined #nixos
justbeingglad has left #nixos []
<clever>
magnetophon: get a root shell via sudo and double-check the ssh keys are in place correctly
<magnetophon>
clever: I can ssh-copy-id from the other PC to me, and can login without PW, but not the other way around. when I try to ssh-copy-id, it asks the PW
ambro718 has quit [(Ping timeout: 256 seconds)]
matthewbauer has quit [(Ping timeout: 240 seconds)]
<clever>
magnetophon: and does root have a pw set?, check /etc/shadow
mudri has quit [(Ping timeout: 240 seconds)]
<magnetophon>
clever: but this copy-closure is not my actual goal. I just want to upgrade my machine, but it won't accept any caches from either me or nixos. I'll check etc/shadow anyway...
jophish_ has joined #nixos
<clever>
magnetophon: how did you try adding the public key for signing?
<magnetophon>
clever: root has a PW
<magnetophon>
key: I just did ssh-keygen and ssh-copy-id
<clever>
magnetophon: i mean the binary cache key
<magnetophon>
clever: I did nix-store --generate-binary-cache-key cache.nixos.org-1 /tmp/tst/sk1 /tmp/tst/pk1
<magnetophon>
then nixos-rebuild --option binary-cache-public-keys cache.nixos.org-1:LdcdZ0yjR0+MeCm1qPYrKPzfJTL2IW5XhhmMvBg6ejM=% --option binary-caches cache.nixos.org-1 test
<gchristensen>
and you're trying to use cache.nixos.org?
<magnetophon>
yea, is that wrong?
<magnetophon>
I also tried with my local caches first
<clever>
magnetophon: "--option binary-caches cache.nixos.org-1" is an invalid url, and you must use the correct pubkey for it to work against the real cache.nixos.org
<clever>
the -1 is part of the key name, but it is NOT part of the url
<gchristensen>
and the is cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
<magnetophon>
narinfo’ is signed by unknown key ‘cache.nixos.org-1’; ignoring
<magnetophon>
:(
<magnetophon>
I did: nixos-rebuild --option binary-cache-public-keys cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= --option binary-caches cache.nixos.org test
c0bw3b has left #nixos []
<clever>
magnetophon: try this, "cd /etc/nix; cat nix.conf > nix.conf.copy; rm nix.conf; mv nix.conf.copy nix.conf" then just edit nix.conf and put in the right config
<clever>
magnetophon: next time nixos-rebuild does (test|switch), it will restore nix.conf back to the symlink it should be
nh2 has quit [(Ping timeout: 260 seconds)]
devoid has joined #nixos
<devoid>
Hmm, anyone know why nvidia-settings and xrandr would disagree as to the names of the DisplayPort displays? e.g. DP-2.1 vs DP-0.1 ?
mudri has joined #nixos
<NixOS_GitHub>
[nixpkgs] LnL7 opened pull request #23469: vim-plugins: update and use https for github sources (master...vim-plugins) https://git.io/vyC7A
dbmikus has quit [(Ping timeout: 240 seconds)]
<magnetophon>
clever: I tried that, but I still get: narinfo’ is signed by unknown key ‘cache.nixos.org-1’; ignoring
<Profpatsch>
GRRRR, not only does the module system throw type errors at the completely wrong position, it also removes any trace of your module names from the stack traces.
<Profpatsch>
I didn’t change anything and get a completely crazy error.
<Profpatsch>
Not fun.
freusque has quit [(Ping timeout: 240 seconds)]
<magnetophon>
clever: thanks for looking into this!
<clever>
magnetophon: lines 17-20 look like you used " rather then '', and now the file just looks weird
<clever>
magnetophon: try removing the custom 2.2.2.2 cache from the config and see if the problem goes away
<magnetophon>
clever: yeah, just did
<magnetophon>
no dice
mudri has quit [(Ping timeout: 246 seconds)]
<clever>
magnetophon: you can also use nix-copy-closure --from to pull things in, rather then push
<clever>
magnetophon: and if you run that as root, it will bypass the signing checks for things it pulls in
<magnetophon>
ok, and then i copy nixos-rebuild, or what?
<clever>
and you dont need to use root on the remote machine, only the local machine
<magnetophon>
OK, that works, but doesn't let me rebuild
<clever>
do you have physical access to the problem machine?
<magnetophon>
clever: yes
<clever>
one solution is to just boot it from an install ISO, add the new channel as nixos, mount the original filesystems up, and then re-run nixos-install
<clever>
nixos-install is basicaly just a script for running nixos-rebuild under a chroot
<clever>
so you can use nixos-install to upgrade any machine that isnt capable of upgrading itself
<magnetophon>
clever: OK, I'll try that... Though I'd rather learn the cause of the problem and fix that...
<qknight>
magnetophon: are you on sha2017? i'm going there and ... just in case
<clever>
magnetophon: only other thing i can think of is strace, which will generate several MB worth of logs, and include IP's that you appear to be censoring
<qknight>
magnetophon: i plan to do a new emscripten nix port there
<magnetophon>
clever: doesn't sound like something I can do on my own, and I don't want to wast more of your time. I'll go DL an ISO. (haven't found the 17.03 one yet, though)
systemfault has joined #nixos
<clever>
magnetophon: oh, and i dont think 17.03 has actualy released officialy yet
<magnetophon>
qknight: yeah, I wanna go. don't have a ticket yet, though...
<clever>
magnetophon: but you can just download any ISO, and switch the channel to 17.03 after it boots