<NixOS_GitHub>
[nixpkgs] michalrus opened pull request #29720: xpad: init at 5.0.0 (master...xpad) https://git.io/vdUXd
NixOS_GitHub has left #nixos []
bennofs has quit [(Quit: WeeChat 1.9)]
glenn has quit [(Remote host closed the connection)]
_ris has quit [(Ping timeout: 252 seconds)]
tk__ has quit [(Ping timeout: 240 seconds)]
glenn has joined #nixos
Fare has joined #nixos
tk_ has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] primeos pushed 1 new commit to master: https://git.io/vdU1d
<NixOS_GitHub>
nixpkgs/master 2037f1b Michael Weiss: fscrypt: init at 0.2.1
NixOS_GitHub has left #nixos []
justanotheruser has quit [(Ping timeout: 240 seconds)]
glenn has quit [(Remote host closed the connection)]
glenn has joined #nixos
glenn has quit [(Remote host closed the connection)]
glenn has joined #nixos
gfixler has joined #nixos
orivej has quit [(Ping timeout: 240 seconds)]
<pikajude>
so i just found out that, after a week of trying to figure out how to give my nixops VMs static IPs, that virtualbox actually does it already by default
obadz- has joined #nixos
tmaekawa has joined #nixos
gfixler has quit [(Client Quit)]
kiloreux has quit [(Ping timeout: 240 seconds)]
drakonis has quit [(Remote host closed the connection)]
drakonis has joined #nixos
hamishmack has quit [(Quit: hamishmack)]
frankpf has quit [(Quit: Leaving)]
tmaekawa has quit [(Quit: tmaekawa)]
kakashiAL has joined #nixos
takle has joined #nixos
hamishmack has joined #nixos
Supersonic112 has quit [(Disconnected by services)]
Supersonic112_ has joined #nixos
Supersonic112_ is now known as Supersonic112
kakashiAL has quit [(Ping timeout: 248 seconds)]
glenn has quit [(Remote host closed the connection)]
<obadz->
2/bye
obadz- has quit [(Quit: WeeChat 1.9)]
mudri has quit [(Ping timeout: 255 seconds)]
mbrgm has quit [(Ping timeout: 240 seconds)]
drakonis has quit [(Remote host closed the connection)]
drakonis has joined #nixos
justanotheruser has joined #nixos
mbrgm has joined #nixos
orivej has joined #nixos
drakonis has quit [(Remote host closed the connection)]
drakonis has joined #nixos
glenn has joined #nixos
qtness[m] has quit [(Ping timeout: 276 seconds)]
abbafei[m] has quit [(Ping timeout: 276 seconds)]
abbafei[m] has joined #nixos
qtness[m] has joined #nixos
jlle[m] has quit [(Ping timeout: 276 seconds)]
myklam[m] has quit [(Ping timeout: 276 seconds)]
myklam[m] has joined #nixos
<qz>
is it possible to build one package from source (do not use binary cache), but use binary cache for all its dependencies?
<lejonet>
I think that is the standard unless you modify some of the deps
<lejonet>
i.e. if you do a overrideAttrs, it'll only compile from source the package you overrid, but resolve all the deps as normal
<lejonet>
(as in, from binary cache)
<qz>
lejonet: hrm.. i could do overrideAttrs from nix-repl, but how do i do that from command line and nix-build? make .nix file?
jlle[m] has joined #nixos
<lejonet>
qz: There I'm out of my depth, I've only done overrideAttrs in configuration.nix, once, to test how the system worked :P
<disasm>
qz: why do you want to?
<qz>
disasm: i want to build package that's failing on osx on my linux machine to possibly see what are differences and why it is failing
<qz>
and to do that i need to access build directory of package, just pulling it off cache would not work
<disasm>
qz: ah, so I'd run nix-shell -A mypackage in nixpkgs then cd into a scratch dir and run genericBuild
sellout-1 has joined #nixos
<qz>
disasm: cool, that worked. thanks
jsgrant has quit [(Read error: Connection reset by peer)]
mkoenig has quit [(Ping timeout: 240 seconds)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] fare opened pull request #29721: Update gambit and gerbil scheme (master...master) https://git.io/vdUDR
NixOS_GitHub has left #nixos []
sellout- has quit [(Ping timeout: 260 seconds)]
mkoenig has joined #nixos
lambdamu_ has joined #nixos
thc202 has quit [(Ping timeout: 248 seconds)]
koserge has joined #nixos
lambdamu has quit [(Ping timeout: 248 seconds)]
roni has joined #nixos
<roni>
hey all - anyone here experienced using R in nixos?
pxc has joined #nixos
ebzzry has joined #nixos
jb55 has joined #nixos
vaibhavsagar_ has joined #nixos
vaibhavsagar_ has quit [(Remote host closed the connection)]
koserge has quit [(Ping timeout: 248 seconds)]
pxc has quit [(Ping timeout: 240 seconds)]
pxc has joined #nixos
<Fare>
roni: using R anywhere sounds painful.
<roni>
Fare: agreed 100% :)
pxc has quit [(Ping timeout: 240 seconds)]
<disasm>
mesos builds!!! Time for sleep :)
ona has joined #nixos
iyzsong has joined #nixos
<Infinisi1>
Oh my god, I've been changing this xbindkeys config for hours now, wondering why it just doesn't work
<Infinisi1>
Turns out I forgot to make it reload the config all this time with a SIGHUP
ebzzry has quit [(Ping timeout: 240 seconds)]
<roni>
Infinisi1: womp womp
ebzzry has joined #nixos
drakonis has quit [(Read error: Connection reset by peer)]
sigmundv has quit [(Ping timeout: 240 seconds)]
freeman42z has joined #nixos
<lejonet>
I'm guessing the way I add a CA cert to the ca store with nixos is put the pem encoded string into security.pki.certificates
<Fare>
took me hours to get xinetd + nfs2 + Xvnc + chroot working for Genera
justanotheruser has quit [(Ping timeout: 252 seconds)]
Wizek has quit [(Quit: Connection closed for inactivity)]
jb55 has joined #nixos
kakashiAL has joined #nixos
Nobabs27 has joined #nixos
kakashiAL has quit [(Ping timeout: 240 seconds)]
<Nobabs27>
ok so I'm trying to 'build' something that already has a pre-compiled binary - I have dontBuild = true; & installTargets = "install-bin"; set. Anything else to do? It just needs to move the files where ever it needs to using magic
sary has quit [(Ping timeout: 264 seconds)]
<Infinisi1>
Nobabs27: Probably that binary needs patching, because nixos
<Infinisi1>
But maybe mkDerivation does that already
<Infinisi1>
if you just need to move the binaries then you could just do `installPhase = "mkdir -p $out/bin; mv <binary> $out/bin"
<Nobabs27>
ok new question - why when I do ./cyberfox it says "no such file or directory"
<Nobabs27>
when its right there...
<Infinisi1>
is this in a nix expression or in a runtime bash script?
<rnhmjoj>
save it and load it with nix-shell, then try running the binary
<Infinisi1>
Nobabs27: Um, $sourceRoot? But generally you're script is cd's there already
<Nobabs27>
oh
<Infinisi1>
like the buildPhase is already happening there, the default unpackPhase cd's to $sourceRoot
<Infinisi1>
iirc
justanotheruser has quit [(Quit: WeeChat 1.7.1)]
<Nobabs27>
mk ill try after I try fnhmjoj's magic.nix ;P
justanotheruser has joined #nixos
<rnhmjoj>
Nobabs27: ldd should work inside. once you figure out the libraries you can try to patch the binary so that it can run without the special environment
<Nobabs27>
"libgtk-3.so.0: cannot open shared object file: No such file or directory"
<ebzzry>
What is now the closest equivalent to the NixOS wiki?
<Nobabs27>
rnhmjoj: oh didn't see you had left - I added firefox, but still getting this error: https://hastebin.com/ulacusezup.pas any idea/what package it might be?
<samueldr>
some articles were imported through two wiki migrations, and are possibly out of date
<samueldr>
some are held up to date by contributors
<samueldr>
there's work happening to make it all relevant
<Infinisil>
Why is the main page on /wiki/Main_Page anyways, makes the link look unclean :P
<samueldr>
mediawiki shenanigans I guess
<samueldr>
I've never seen a mediawiki shenanigan not redirect there
<samueldr>
and looking at the nixos module of mediawiki lately, and how it works, it would cause issues to serve it at the root
<samueldr>
SEO-related issues, mainly
<Infinisil>
i'd think that would be customizable
<Infinisil>
SEO?
<samueldr>
the way mediawiki seems to be built, it assumes it's not at the root of a domain
<samueldr>
so it will always serve the main page at /[some prefix]/Main_Page
<samueldr>
if the webserver is configured to serve the main page at the root, mediawiki will still serve /wiki/Main_Page
<samueldr>
making two identical pages, which is verboten
justanotheruser has quit [(Quit: WeeChat 1.7.1)]
<Infinisil>
let some_prefix = ""
<samueldr>
(as far as I undertand it)
justanotheruser has joined #nixos
<ebzzry>
samueldr: I remember looking for a specific doc, some time ago. However, I already forgot what was it all about. :(
<samueldr>
what do you mean?
<samueldr>
was there a specific topic?
<rnhmjoj>
Nobabs27: ok, there is a dbus_glib in nixpkgs and libxul.so is really in firefox: /nix/store/blabla-firefox-unwrapped-55.0.3/lib/firefox-5.0.3/libxul.so
<Nobabs27>
rnhmjoj but I added firefox - I guess I have to patch it to make it work?
glenn has quit [(Remote host closed the connection)]
<rnhmjoj>
it's probably not in the search path of ld, see the strage subdir of lib/. try adding manually with LD_LIBRARY_PATH
<ebzzry>
samueldr: Yes. For example, the list of cloud providers that has NixOS
<xd1le>
How can I set an environment variable from a derivation?
simukis has joined #nixos
orivej has joined #nixos
xd1le has quit [(Ping timeout: 240 seconds)]
kakashiAL has joined #nixos
Itkovian has joined #nixos
<sphalerite>
garbas: awesome, thanks!
kakashiAL has quit [(Ping timeout: 240 seconds)]
<sphalerite>
xd1le: any attribute in the set passed to the derivation primitive function or to mkDerivation which doesn't have any special handling associated with it becomes an environment variable
Itkovian has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
a6a3uh has joined #nixos
Itkovian has joined #nixos
Itkovian has quit [(Client Quit)]
glenn has quit [(Remote host closed the connection)]
glenn has joined #nixos
glenn has quit [(Ping timeout: 252 seconds)]
Ivanych has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] joachifm pushed 2 new commits to master: https://git.io/vdUbX
<NixOS_GitHub>
nixpkgs/master cdd1281 Joachim F: Merge pull request #29714 from bachp/riot-web-0.12.6...
NixOS_GitHub has left #nixos []
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] joachifm pushed 2 new commits to master: https://git.io/vdUb1
<NixOS_GitHub>
nixpkgs/master aedfc0d Matt McHenry: minecraft-server: 1.12 -> 1.12.2
<NixOS_GitHub>
nixpkgs/master 105001d Joachim F: Merge pull request #29689 from jerith666/minecraft-1.12.2...
NixOS_GitHub has left #nixos []
<sphalerite>
So I want to have symlinks from /bin/bash -> /run/current-system/sw/bin/bash and similar for other shells (in order to support passwd entries that were made with debian in mind and live in an LDAP database shared with debian systems). What's the neatest way of setting these up? Would a systemd service be the appropriate way?
<hyper_ch>
sphalerite: why? :)
<sphalerite>
hyper_ch: because I have the nixos system in question integrated with ldap but nobody can log in :)
<xd1le>
sphalerite: oh. from that it looks like guile should be finding guile libraries.. :/
<xd1le>
sphalerite: thanks for your help anyway
<sphalerite>
xd1le: wait, you mean guile libraries installed into the user environment?
<sphalerite>
No, that shouldn't ever really happen
<sphalerite>
That's what nix-shell is for
<xd1le>
sphalerite: yes
<xd1le>
sphalerite: but I want it for the guile repl
<sphalerite>
use the guile repl in nix-shell :)
<xd1le>
sphalerite: ohhh
<xd1le>
sphalerite: thank you
<Fare>
xd1le: what I use for Gerbil Scheme is I have a env.sh that calls nix-shell to compute the paths to the dependencies, then echos plenty of variables that I can then use to make those things available interactively
b has quit [(Remote host closed the connection)]
<xd1le>
sphalerite: hmm didn't work
<xd1le>
Fare: yeah I think I understand, but actually I'm just trying to package a guile library rather than actually use it
<xd1le>
but I want to test it actually works though
<xd1le>
which I can't seem to do
<sphalerite>
xd1le: in a guile repl launched from `nix-shell -p guile guile-sdl2`, I can `(use-modules (sdl2))` just fine
<xd1le>
sphalerite: oh okay so I'm packaging it wrong
<sphalerite>
xd1le: you're using nix-shell wrong ;) nix-shell default.nix will give you the environment for building the package, not the package itself
<xd1le>
using '(import default.nix)' also has the same error
<sphalerite>
oops, ./default.nix
<sphalerite>
not default.nix
<sphalerite>
:)
<xd1le>
sphalerite: oh awesome it's compiling so I think it worked
<xd1le>
sphalerite: nice, thanks!
<sphalerite>
np :)
<sphalerite>
guile is a language I've been meaning to learn
<xd1le>
sphalerite: just tested it, it worked. thanks. it's pretty full featured scheme implementation, it basically replaces shell scripts for me. :)
<xd1le>
but a concurrency library like this is one thing it lacks for example
<sphalerite>
oooooh that sounds very attractive
<xd1le>
(or rather, doesn't come with it)
<sphalerite>
shell scripts are awful
<sphalerite>
but so useful
<xd1le>
sphalerite: although I do mean for GNU/Linux, have no idea about how compatible Guile is with macOS, even though the platforms attribute says platforms.all
<sphalerite>
personally I don't give a damn :p
<sphalerite>
I use nixos everywhere I can
<xd1le>
sphalerite: yeah same, but just wanted to mention before you get your hopes up in case
<sphalerite>
and debian or ubuntu where I can't
<xd1le>
sphalerite: case in point, the entire guixsd distro is basically written in guile I think
<sphalerite>
yeah, although I don't think lisps are functional like nix is?
<xd1le>
sphalerite: although it is one of the slower scheme implementations, there are plans to make it a lot faster, but iirc that won't happen in the near future
freeman42x has quit [(Read error: Connection reset by peer)]
<sphalerite>
ah
<sphalerite>
Well, shell scripts aren't famed for their blazing speed either :)
freeman42x has joined #nixos
<xd1le>
lisps definitely lean toward the functional side imo, especially scheme.
<xd1le>
*in my experience.
<Fare>
xd1le, CL leans less functional than Scheme, but still a lot compared to blub languages.
<NixOS_GitHub>
nixpkgs/master 7332179 Matej Cotman: kube-dns: 1.14.1
NixOS_GitHub has left #nixos []
freeman42x[m] is now known as freeman42x
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] rvl opened pull request #29725: guile-lib: Disable a test which doesn't work with Guile 2.2 (master...guile-lib) https://git.io/vdUhW
NixOS_GitHub has left #nixos []
<toogley>
how can i install ruby's zlib module? a dedicated ruby package does not exist and the plain zlib package doesn't help me. do i have to package it myself?
a6a3uh has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
<srhb>
Hmm, when I try to run the new kubernetes tests from master, I get an error when it's trying to pull from a docker registry: x509: failed to load system roots and no roots provided"
<srhb>
Am I missing some certificates, and if so, shouldn't that be self-contained in the test?
<NixOS_GitHub>
[nixpkgs] womfoo opened pull request #29734: influxdb sevice: make postStart test work with non-localhost configurations (master...fix/influxdb-non-localhost-poststart) https://git.io/vdTJW
NixOS_GitHub has left #nixos []
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] zimbatm pushed 1 new commit to release-17.09: https://git.io/vdTJr
<gchristensen>
jtojnar: cat /etc/nix/nix.conf > /etc/nix/nix.conf.2; mv /etc/nix/nix.conf.2 /etc/nix/nix.conf might let you hack around it :) but it is nasty and you should figuree out your branch situation instead
freeman42y has quit [(Ping timeout: 255 seconds)]
<Infinisil>
globin: Alright, finally got it failing. The error is 404 to /someuser/calendar.ics/, but it doesn't look like this calender was created in the tests?
<Infinisil>
I'm not sure how this test is succeeding in master tbh
srhb has joined #nixos
Itkovian has joined #nixos
metaphysician has quit [(Quit: Bye.)]
<gchristensen>
is it? :)
* Infinisil
checks again, questioning his existence
nh2 has joined #nixos
<Infinisil>
Yeah it does succeed in master, INFO: GET response status for '/someuser/calendar.ics/' in 0.012 seconds: 200 OK
_ris has quit [(Ping timeout: 260 seconds)]
metaphysician has joined #nixos
numerobis has joined #nixos
Itkovian has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
jtojnar has quit [(Quit: jtojnar)]
jtojnar has joined #nixos
stanibanani has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] joachifm pushed 2 new commits to master: https://git.io/vdTTy
<NixOS_GitHub>
nixpkgs/master 9d01b51 Neil Mayhew: spideroak: 6.0.1 -> 6.1.9
<NixOS_GitHub>
nixpkgs/master 83ff400 Joachim F: Merge pull request #29482 from neilmayhew/upgrade/spideroak...
NixOS_GitHub has left #nixos []
b has joined #nixos
sigmundv has joined #nixos
corpix has quit [(Read error: Connection reset by peer)]
<Infinisil>
17.09 uses only radicale2 for the tests, setting system.stateVersion = "17.03" in the radicale1 node doesn't seem to use radicale1 either. Specifying services.radicale.package = pkgs.radicale1 works though. Then with radicale1 it doesn't seem to include the passlib
<Infinisil>
I'll have to go for now, be back later
Fare has joined #nixos
jtojnar has quit [(Quit: jtojnar)]
jtojnar has joined #nixos
<fearlessKim[m]>
There is a script nix_run_setup.py that eats 100% of my cpu but I dunno where it comes from :/
<bachp>
I followd https://nixos.org/nixos/manual/#sec-booting-from-pxe to get a network bootable image, and the command `nix-build -A netboot nixos/release.nix` gives me a result that indeed can be used to boot via network. Now I would like to build the same from my configuration.nix to have my server automatically serve the latest nixos image. How can I build the above derivation from within another nix expression? Calling just
<bachp>
`pkgs.netboot` gives me a different result missing some of the pieces the above command gives me.
zarel has quit [(Quit: Leaving)]
<bachp>
I guess my problem is that I'm not clear about what's the difference between `nix-build -A netboot` and `nix-build -A netboot nixos/release.nix`
<NixOS_GitHub>
[nixpkgs] teh closed pull request #29705: Python fixes for release 17.09 (release-17.09...release-17.09) https://git.io/vdUZK
NixOS_GitHub has left #nixos []
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 pushed 1 new commit to release-17.09: https://git.io/vdTt5
<NixOS_GitHub>
nixpkgs/release-17.09 550a7c9 Joerg Thalheim: termite: use wrapGAppsHook...
NixOS_GitHub has left #nixos []
griff_ has quit [(Quit: griff_)]
griff_ has joined #nixos
griff_ has quit [(Client Quit)]
griff_ has joined #nixos
griff_ has quit [(Client Quit)]
takle has quit [(Remote host closed the connection)]
griff_ has joined #nixos
takle has joined #nixos
griff_ has quit [(Client Quit)]
griff_ has joined #nixos
takle has quit [(Remote host closed the connection)]
griff_ has quit [(Client Quit)]
takle has joined #nixos
griff_ has joined #nixos
griff__ has joined #nixos
griff_ has quit [(Read error: Connection reset by peer)]
griff__ is now known as griff_
sigmundv has quit [(Ping timeout: 240 seconds)]
a6a3uh has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
<lejonet>
is there something I must do to get SSSD to work for user accounts except enable sssd, nscd and supply a working conf for sssd? Like some pam args or nss args?
takle has quit [(Remote host closed the connection)]
a6a3uh has joined #nixos
cfricke has joined #nixos
ShalokShalom_ has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 pushed 2 new commits to master: https://git.io/vdTmv
<NixOS_GitHub>
nixpkgs/master a358c43 Robert Scott: python.pkgs.pyscss: 1.3.4 -> 1.3.5...
<lejonet>
Where can I see what options a binary fetched from the binary chace was built with? This issue seems to be with if you compile sssd with gnutls instead of openssl (most likely because gnutls doesn't support a cacert dir, for some stupid ass reason)
<lejonet>
Where would I find that? In one of the NIX_PATHs?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 closed pull request #29732: guile-modules: add vyp as maintainer to unmaintained guile modules (master...maintain-guile-modules) https://git.io/vdTfg
NixOS_GitHub has left #nixos []
griff_ has quit [(Client Quit)]
<symphorien>
The simplest way is to clone nixpkgs
erictapen has quit [(Ping timeout: 248 seconds)]
<lejonet>
Will do, also going to see about changing the cacertdir conf to cacert, as nixos does bundles instead of the cacert dir that openssl does
<Dezgeg>
I have ldap_tls_cacert = /etc/ssl/certs/ca-certificates.crt
<Dezgeg>
under [domain/LDAP]
<lejonet>
yeah, that is what I changed to
<lejonet>
I do it differently on the gentoo hardened system which I lifted the sssd conf from, as I have openssl there and use the openssl hashes type of cacertdir
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
<VLetrmx>
Woah you guys have 448 open PRs: mental :D
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
FRidh has joined #nixos
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
<Mic92>
and 22.098 closed ones
erictapen has joined #nixos
<VLetrmx>
Hey yeah I'm not being critical at all :)
<VLetrmx>
it's just a lot of PRs.
<Fare>
How many committers are there?
<Mic92>
1346
jellowj has quit [(Ping timeout: 240 seconds)]
<Fare>
Do you have a program to mentor new committers into doing quality reviews?
<Fare>
Mic92, more like, how many *active* reviewers?
jellowj has joined #nixos
<jluttine>
is it possible to have option default value depend on some parent attribute name? i have attrsOf (submodule ...) and a default value for an attribute in the submodule should depend on the attribute name in the attrsOf level
<sphalerite>
Fare: do you mean people with write access to the main nixpkgs repo?
<jluttine>
am i trying to achieve something impossible?
ertes has joined #nixos
JosW has joined #nixos
noam__ has joined #nixos
<jluttine>
use case: i can define many processes, the name of the process is its attribute name, and the default value of some path the process uses depends on the process name
<lejonet>
:D sssd is working for the resolving part, doesn't let LDAP-only users login yet, but that I'm guessing is just pam tomfoolery needed, just as on any other system
noam has quit [(Read error: Connection reset by peer)]
erictapen has quit [(Ping timeout: 246 seconds)]
<Dezgeg>
the sssd module enables that by default, iirc
<sphalerite>
jluttine: I'm not sure if it's possible using the default attr in the options section of your module, but you can let it have a special value like null and interpret that value into the appropriate default in the config section
fleaz has quit [(Remote host closed the connection)]
<Infinisil>
jluttine: I think something like this should work: https://git.io/vdTm7
fleaz has joined #nixos
<Mic92>
Fare: actually you do reviews without being a maintainer.
a6a3uh has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
<Mic92>
*you can
<sphalerite>
Mic92: maintainer as in person with push access to nixpkgs repo?
<Mic92>
yes
<lejonet>
Dezgeg: I had to munge the pam conf a bit on my other systems when I wanted to make it work, because it doesn't work to login over ssh as a ldap user (but it can successfully resolve a ldap user when connecting through ssh, it just doesn't want to accept the password :P )
<sphalerite>
because you can be a maintainer without having push access :p
<sphalerite>
at least in nixpkgs terminology
<Dezgeg>
hmm right, maybe disabling challengeResponseAuthentication from ssh was needed for some reason
<lejonet>
Dezgeg: but locally on the system it allows me to change to a LDAP user, so its just the ssh login that seems to be derping around
<Dezgeg>
yes sounds familiar
<lejonet>
xD "error: PAM: Authentication failure for illegal user lejonet" oh noes, I'm illegal :O
<lejonet>
D:
<lejonet>
so even tho I have sshAuthorizedKeys thingy for sssd to true, it seems like it doesn't believe the user to be legal, when connecting over ssh
<Infinisil>
Ohh, whoops
<Infinisil>
Well I fucked up
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] zimbatm pushed 1 new commit to master: https://git.io/vdTYc
<NixOS_GitHub>
nixpkgs/master 412fa16 Kranium Gikos: influxdb sevice: make postStart test work with non-localhost configurations (#29734)...
NixOS_GitHub has left #nixos []
<Dezgeg>
is the home directory existent?
<lejonet>
Dezgeg: and a simple "follow the logs" solves the problem, I have the shell set to /bin/bash on my ldap user, which doesn't exist and that makes it illegal
<lejonet>
That is true too, need to setup mkhomedir too
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] zimbatm pushed 1 new commit to release-17.09: https://git.io/vdTYg
<NixOS_GitHub>
nixpkgs/release-17.09 ad0f639 Kranium Gikos: influxdb sevice: make postStart test work with non-localhost configurations (#29734)...
<NixOS_GitHub>
[nixpkgs] richardipsum opened pull request #29742: luxio: init at 13 (master...init-luxio) https://git.io/vdTYa
NixOS_GitHub has left #nixos []
<lejonet>
couldn't it work by setting the shell var to relative path instead of absolute, like just bash instead of /bin/bash, or is there an requirement of the shell var to be an absolute path?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 closed pull request #29450: Add modules for tinydns and dnscache from djbdns (master...djb-1709) https://git.io/v55wz
NixOS_GitHub has left #nixos []
<lejonet>
(I'm going to do some changes in the LDAP directory anyway)
<Dezgeg>
I don't think ssd supports making it relative to something else
<tester123>
The last thing I did was try to change my hostname, but then I changed it back and get this error still
<tester123>
Running `nix-collect-garbage -d` also does nothing.
<VLetrmx>
Mic92, (luxio) damn I guess those luxio fixes were NixOS specific makes me think perhaps I should spin up a NixOS vm and ensure all these packages work there too first ?
<DIzFer[m]>
tester123: possibly looks like your efi partition is read-only
<tester123>
That makes sense because generations aren't being generated in my GRUB boot menu
<tester123>
I thought it was odd but ignored it
<Mic92>
VLetrmx you can catch those bugs by enabling sandbox builds on Linux
<tester123>
Is there a way to convert it to non-read only?
<tester123>
Or do I have to re-install NixOS from scratch?
<Mic92>
VLetrmx: then the build will not use /usr/bin/install for example
<VLetrmx>
Mic92, ah right, I'll look into that then thanks
<NixOS_GitHub>
[nixpkgs] Infinisil opened pull request #29743: radicale: fix default version (master...radicale-fix) https://git.io/vdTOd
NixOS_GitHub has left #nixos []
<DIzFer[m]>
I just checked my own (efi) system, and the only reference I have to the EFISYS partition is `boot.loader.efi.efiSysMountPoint = "/boot/efi";`
<NixOS_GitHub>
nixpkgs/master 3d278be Richard Ipsum: luxio: Add maintainer
NixOS_GitHub has left #nixos []
<DIzFer[m]>
is systemd-boot the default? With grub it's working for me like that, but, unlike sd-b, it doesn't require mounting the EFISYS every rebuild, which may be why my config is technically incomplete
<Infinisil>
`nix-instantiate --eval '<nixpkgs/nixos>' -A options.boot.loader.grub.enable.default`
<Infinisil>
true
<Infinisil>
Grub is the default ^^
pie__ has quit [(Ping timeout: 255 seconds)]
<tester123>
@DIzFer[m] I have `boot.loader.systemd-boot.enable = true;`
<tester123>
Also `sudo mount -o remound, rw /boot` still doesn't allow me to rebuild
<DIzFer[m]>
Infinisil: then grub must've learned new tricks since last time I checked.
pie__ has joined #nixos
<DIzFer[m]>
tester123: could it be /boot is full? Although the error message usually are explicit about disk space
bennofs has joined #nixos
<tester123>
DIzFer[m] No it's not full
<tester123>
This is interesting:
<tester123>
mount -o remount,rw /boot
<tester123>
works
<tester123>
But then when I run `nixos-rebuild switch`
<tester123>
It switches it back to read-only
<tester123>
And then fails
<tester123>
So it's definitely something in my nix config
<DIzFer[m]>
thing is, if the EFISYS is created correctly, it should be automagically detected without specifying it in /etc/fstab (or at least that's how this is working for me). I'd suggest commenting that block out and retrying
<DIzFer[m]>
which will of course fail because it can't write to /boot... argh
<Infinisil>
you can use nixos-rebuild test
<tester123>
What if I change it and then reboot?
<tester123>
No that worked
<tester123>
Nevermind
<tester123>
it didn't
<tester123>
Even nixos-rebuild test didn't work :(
<tester123>
Should I just reboot my system?
<Ankhers>
gleber_: I hate to keep bugging you, but any chance you got started on a todo list?
<DIzFer[m]>
do you have any record of what's the last generation that worked? maybe rolling back enough, then rebuilding...?
<gleber_>
Ankhers: I am starting doing it right now! Had a busy week so far :)
pie__ has quit [(Ping timeout: 240 seconds)]
<gchristensen>
tester123: check dmesg for FS errorss?
<tester123>
I'm going to try a reboot brb
<Ankhers>
gleber_: I understand what that is like. I hope I haven't been bugging you too much.
<tester123>
gchristensens what do you mean?
<Ankhers>
Just excited to start using this stuff in my own work is all.
<tester123>
gchristensen what do you mean?
<gchristensen>
tester123: well it sounds like the FS is encountering errors and itt is being remounted ro after encountering an error
<gchristensen>
tester123: so look in dmesg for errors around /boot
<gleber_>
Ankhers: no worries
<tester123>
[ 1970.413784] FAT-fs (sda2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2339.676366] FAT-fs (sda2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2339.676368] FAT-fs (sda2): Filesystem has been set read-only
<gchristensen>
ahha!
<gchristensen>
tester123: unmount /boot and run fsck on it :)
<gleber_>
Ankhers: see the main issue text section "Future plans" and subsection "Short term"
<qz>
is it possible to manually execute build phase by phase after doing nix-shell -A somepkg ? i can do genericBuild but that will execute all phases and calling individual ones like unpackPhase yields errors like "bash: [: : integer expression expected"
tester123 has joined #nixos
<tester123>
Ok now there's a new problem :]
<tester123>
I changed my hostname from `nixos` to `NixBox` in my config
pie__ has joined #nixos
<tester123>
When I reboot it still shows up as `nixos` and I get strange errors when I try to launch programs about system variables not being defined.
<Ankhers>
gleber_: Thanks!
<tester123>
If I run `nixos-rebuild switch` THEN the hostname changes
<Ankhers>
disasm: ^^ You said you wanted to know about an issue for BEAM.
<tester123>
If I reboot then it stays as `nixos` and not `NixBox` (the hostname)
<gchristensen>
yikes tester123, how did you change the hostname? I've not seen this problem before
<tester123>
networking.hostName = "NixBox";
<gleber_>
Ankhers: I have a very-very-very early code for rebar3_nix plugin, which does very little and essentially contains just the scaffolding: https://github.com/erlang-nix/rebar3_nix
<gchristensen>
:/ that should be just fine
<gleber_>
Ankhers: is there anything on the plans which interests you?
<tester123>
In case it matters: My /etc/nixos/configuration.nix imports my /etc/nixos/hardware-configuration.nix which imports my /path/to/my/special.nix, and in special.nix I have the hostName change.
<tester123>
However, even before this hostName change I would get weird behavior upon booting NixOS, and would have to run `nixos-rebuild switch` to get the weird behavior to go away.
<tester123>
The weird behavior is things like launching xrandr and getting "no protocol specified"
<tester123>
Or launching chrome and getting something like "Cannot access display :0:0"
<tester123>
And it claiming programs weren't installed taht were
<tester123>
And so running `nixos-rebuild switch` would solve all of it
<tester123>
There's also still only 1 generation in my GRUB boot menu
<tester123>
I just checked though and my `/boot` drive is in fact writable right now :]
<tester123>
I feel like all of these problems might be related though.
<Ankhers>
gleber_: I can write the mix2nix plugin. So I can get started on the common lib if you want?
grumble has quit [(Disconnected by services)]
rumble has joined #nixos
rumble is now known as grumble
<gchristensen>
tester123: sorry, I can't explain that :o
pie__ has quit [(Read error: Connection reset by peer)]
<Ankhers>
gleber_: As for binaries vs sources. Elixir has compile time configuration (Not sure if that exists in Erlang). So at the very least the Elixir packages would need to be sources.
pie_ has joined #nixos
<tester123>
Is there a way to list system generations? So I can see if generations are being made or not at a system level?
<gleber_>
Ankhers: mix2nix sounds like a good direction! If you could start by extracting into a standalone library parts of hex2nix which perform creation of nix expressions, that would be awesome!
<gchristensen>
tester123: /nix/var/nix/profiles/ ones that start with system :)
jellowj has quit [(Ping timeout: 240 seconds)]
<tester123>
gchristensen Ok there are indeed a bunch of generations being generated
<gleber_>
Ankhers: Erlang libraries should be distribitable in binary form. I'd say this aspect of the effort is still long time ahead of us though, so I do not worry
<gchristensen>
tester123: hmm and on boot you only saw 1?
<tester123>
Yeah
<gchristensen>
tester123: ok, I have an idea but you must follow the directions very carefull
<tester123>
Ok
<gchristensen>
tester123: (1) `mount | grep boot` does this show anything?
<gleber_>
Ankhers: I think in long term it would be awesome to integrate Erlang releases - e.g. via relx - with Nix ecosystem, so that such releases can be easily reused e.g. for deployment to NixOS
<tester123>
Yes
ertes has quit [(Quit: Bye!)]
<tester123>
systemd-1 on /boot type autofs (rw,relatime,fd=27,pgrp=1,timeout=120,minproto=5,maxproto=5,driect)
<gchristensen>
tester123: (2) run umount /boot, then `ls /boot` what does the `ls /boot` output?
ertes has joined #nixos
<Ankhers>
gleber_: Forgive me, but what does that give us? Wouldn't it already be in the binary cache for NixOS?
<gchristensen>
tester123: ok, `ls /boot/loader/entries` -> does this show a bunch of entries?
<tester123>
Yes
<gchristensen>
ok `sudo mount /boot` and then `ls /boot` again, what does it say?
<gleber_>
Ankhers: I am not entirely sure :) Erlang releases is *the* standard way to distribute "binary distributions" of Erlang software. It has well-known properties in Erlang community and would be familiar to e.g. sysadmins who every worked on services coded in Erlang. But still I am not entirely sure :)
<tester123>
`sudo mount /boot` yields the error "can't find /boot in /etc/fstab"
<gchristensen>
oh interesting :)
<Ankhers>
gleber_: Are they not downloadable from the erlang website?
<gchristensen>
`sudo mount /dev/disk/by-uuid/A50E-2C8F /boot`
<tester123>
That's because I took that entry out of my config.nix
<gleber_>
Oh! I do not mean distributions of Erlang/OTP itself
<gleber_>
Ankhers: I mean distribution of any software written with Erlang/OTP suite
<Ankhers>
Right... I'm sorry.
<Ankhers>
Yes. I would be interested in looking into something like that as well.
<gchristensen>
tester123: ok definitely put that entry back in your hardware configuration :)
<gleber_>
Ankhers: so essentially write a Nix wrapper around logic in https://github.com/erlware/relx so that it plays well with Nix ecosystem. One thing is for example to force such release to depend on the Erlang/OTP binaries in /nix/store
<Ankhers>
Yes. That would be nice to have eventually.
* gleber_
nods at Ankhers
<tester123>
Ok I'll reboot now
<gleber_>
Ankhers: I am unlikely to work on this effort in next 1-2 months, so do not worry about duplicating my work. If you create the Nix-expressions-creation common library, I'd be happy to create a project in https://github.com/erlang-nix/ to be the home for the library
<gchristensen>
tester123: first mount your /boot partition, nixos-rebuild, and then reboot
<Ankhers>
Sounds good. I will let you know when I have something.
<Ankhers>
gleber_: Would you prefer me ping you here, or just write something on that issue?
<gleber_>
Ankhers: both are fine, I usually get notifications about both really quickly (although I can react to them only in evenings)
<Ankhers>
gleber_: Sounds good. Thanks again for taking the lead on this.
* gleber_
nods
xd1le has quit [(Quit: Toodaloo padawans! 👣)]
tester123 has quit [(Ping timeout: 260 seconds)]
jtojnar_ has quit [(Read error: Connection reset by peer)]
<VLetrmx>
Hrm I get an odd error if I try build with sandbox.
<VLetrmx>
error: cannot change ownership of ‘/nix/store/f7ccgmpwfdbrahjamnx7pqr4hs7fjlyk-user-environment.drv.chroot’: Operation not permitted
<VLetrmx>
Doesn't seem to happen if I disable it (by moving /etc/nix/nix.conf to elsewhere)
FRidh has quit [(Quit: Konversation terminated!)]
Sonarpulse has quit [(Ping timeout: 246 seconds)]
fendor has quit [(Ping timeout: 264 seconds)]
<VLetrmx>
Is it because it's expecting the buidl to be run as root?
<VLetrmx>
(the sandbox that is)
numerobis has quit [(Ping timeout: 255 seconds)]
<disasm>
globin: sorry for my ignorance, never ran tests before. what command were you running to test mesos?
<globin>
disasm: nix-build nixos/tests/media.nix
<mitchty>
if i'm building something with some rather evil hard coded pkg-configs in Makefile, would it be better to let pkg-config take care of things or to just search replace on the Makefile to say "get your includes/libs here"
endformationage has joined #nixos
<VLetrmx>
Ah, "Currently, sandboxing only work on Linux and Mac OS X. The use of a sandbox requires that Nix is run as root (so you should use the “build users” feature to perform the actual builds under different users than root).
<Infinisil>
Hey, how does this mime stuff work on nixos?
<Infinisil>
Konsole fails to open links in my browser and I don't know what's involved
<Infinisil>
I get the error "kf5.kio.widgets: Unknown mimetype """
Fare has quit [(Ping timeout: 240 seconds)]
<Infinisil>
Oh wait, I just found xdg-mime, gonna read through the man page
Arcaelyx_ has joined #nixos
Arcaelyx has quit [(Ping timeout: 240 seconds)]
roni has joined #nixos
<disasm>
gleber_ Ankhers: one of my coworkers (twedta) on github is showing some interest in elixir and nixos. I pointed him to that beam packages tracking issue.
<julm>
Infinisil: https://gist.github.com/proger/3563bc77184a12654fee works around runCommand storing output into the nix store by using an ephemeral nix store. But this is so complex… I wish there simply were a readCommand or readURL…
mudri has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] jb55 opened pull request #29752: swift: remove me as maintainer (master...swift/remove-jb55) https://git.io/vdTuS
NixOS_GitHub has left #nixos []
<jonge>
hi there. i needed to add a hardeningDisable = ["format"] line to a default.nix environment file. when i start "nix-shell" now, nothing happens. although i would like to get a gcc without the hardening flag.
<jonge>
is there something like "nix-shell --env-rebuild" ?
erictapen has joined #nixos
JohnMH has joined #nixos
<JohnMH>
Is it possible to get acme to work with Apache? i.e. without having nginx
taktoa has quit [(Remote host closed the connection)]
<disasm>
what's the best way to create a derivation that just copies the src to $out? I don't really want to create a custom builder and figured there has to be some example of how to do it easily.
<gchristensen>
disasm: no need, just refer to the path
<JohnMH>
gchristensen: Right, I had that. That code doesn't create /var/lib/acme
<JohnMH>
In fact, that's the code that was failing because /var/lib/acme didn't exist
<disasm>
haha, now I get do not know how to unpack source archive /nix/store/s2kjqs3i1j6ls1f5ap6c8a213c7l59g5-index.html I guess fetchurl doesn't work with raw files
<jonge>
symphorien: shall i export that in my normal bash prior to calling "nix-shell" and it will rebuild my gcc, or is that wrong?
<schoppenhauer>
hi. where can I find documentation on how to set up an own nixos channel which has additional packages?
<schoppenhauer>
is this possible?
<symphorien>
it wont rebuild anything
<gchristensen>
schoppenhauer: man nix-channel has some stuff
<jonge>
symphorien: ok. it also did not work.
<symphorien>
but if the nix-shell has --pure, all exports before launching the nix-shell will be ignored
<symphorien>
you have to do it inside
<jonge>
symphorien: how to do it "inside"?
<symphorien>
nix-shell drops you in a shell, doesn't it ?
<schoppenhauer>
gchristensen: but only a few lines … nothing that really documents it.
<jonge>
symphorien: yes.
<symphorien>
do the export inside this shell
<jonge>
symphorien: oh i see.
<schoppenhauer>
gchristensen: it doesn't say what the corresponding files should contain, etc.
<jonge>
symphorien: ok. did that, also did not work. but i have the impression that hardeningDisable describes flags which, when changed, should cause a rebuild of the gcc5 package?
<symphorien>
not at all.
<jonge>
symphorien: then i wonder how to make it work. my code is not compilable because the gcc in my nix-shell does not let me disable "-Werror=format-security".
<symphorien>
export hardeningDisable=all inside nix-shell doesn't work ?
<symphorien>
gcc is not the real gcc but a wrapper shell script which includes this file
<symphorien>
so no recompilation when you change hardening flags
<jonge>
symphorien: oh wow i see.
nh2 has joined #nixos
glenn has quit [(Remote host closed the connection)]
mortum5 has quit [(Ping timeout: 264 seconds)]
<symphorien>
you can export NIX_DEBUG=1 to see what happens apparently
<schoppenhauer>
ok, there is nix-push for generating binary caches
glenn has joined #nixos
<schoppenhauer>
but not for channels
<jonge>
symphorien: ok with that script i can at least check if i can get the "echo "Hardening flag unknown: $flag" >&2" message. so i can see if
<jonge>
if _something_ works
orivej has joined #nixos
<gchristensen>
schoppenhauer: a channel doesn't inherently mean a binary cache
<gchristensen>
schoppenhauer: a channnel,really, is just a tarball of expressions
<schoppenhauer>
gchristensen: but what format does it have?
<gchristensen>
schoppenhauer: this is a valid channel URL:https://github.com/NixOS/nixpkgs/archive/master.tar.gz
<jonge>
symphorien: if i run "hardeningFlags=foo gcc" i should get the error "Hardening flag unknown", shouldn't i?
<schoppenhauer>
gchristensen: can packages from one channel depend on packages from another channel? (like repositories from debian can)?
glenn has quit [(Ping timeout: 240 seconds)]
<symphorien>
it doesn't work with my test above
<gchristensen>
schoppenhauer: they could, say, import <nixpkgs>, sure
<symphorien>
jonge: hardeningFlags is not an env var it is a bash array
glenn has joined #nixos
<schoppenhauer>
the standard format is a big nix expression passing dependencies to the packages automatically.
<symphorien>
you have to use hardeningDisable
<gchristensen>
only because it happens to be self-contained
<schoppenhauer>
gchristensen: ok. because I will mainly have some smaller packages which are not of public interest in my repo.
<schoppenhauer>
gchristensen: thank you
<gchristensen>
you're welcome, good luck :)
<jonge>
symphorien: sorry, i realized that this flag _does_ work, but my build system ignores env variables....
<symphorien>
:)
<jonge>
symphorien: so i hacked that env var into the build script and now gcc respects it.
<jonge>
symphorien: thank you very much for explaining it. this was a great help.
<symphorien>
np
glenn has quit [(Remote host closed the connection)]
glenn has joined #nixos
jb55 has quit [(Ping timeout: 260 seconds)]
glenn has quit [(Ping timeout: 248 seconds)]
a6a3uh has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
phreedom has joined #nixos
mudri has quit [(Quit: WeeChat 1.9)]
civodul has joined #nixos
rauno has quit [(Ping timeout: 252 seconds)]
glenn has joined #nixos
orivej has quit [(Ping timeout: 252 seconds)]
erictapen has quit [(Ping timeout: 255 seconds)]
fragamus_ has joined #nixos
<fragamus_>
hi does anyone have a nice ami with nix, snap, reflex etc. ?
glenn has quit [(Remote host closed the connection)]
glenn has joined #nixos
glenn has quit [(Remote host closed the connection)]
glenn has joined #nixos
jcarr has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] vcunat pushed 1 new commit to master: https://git.io/vdTaT
<NixOS_GitHub>
nixpkgs/master cd4eba7 William Casarin: swift: remove me as maintainer...
NixOS_GitHub has left #nixos []
kkini has quit [(Remote host closed the connection)]
kkini has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] vcunat closed pull request #29752: swift: remove me as maintainer (master...swift/remove-jb55) https://git.io/vdTuS
NixOS_GitHub has left #nixos []
<jonge>
symphorien: by the way is it possible to get gcc5 without the wrapper?
<symphorien>
gcc-unwrapped
<symphorien>
but it won't work -- the wrapper is needed to tell gcc where glib, binutils and so on are.
python476 has quit [(Read error: Connection reset by peer)]
<jonge>
symphorien: oh, i see. so for one project i need gcc 5.4.0. we usually use docker in order to get a nice build environment where everything fits. i hoped to be able to use nix to achieve the same without docker. and it does work now, but i have to add the hardening disable env var, which i hoped to also be able to avoid.
orivej has joined #nixos
<symphorien>
if it is make-based maybe you can do `make CC="hardening-disable=all gcc"`
<symphorien>
maybe the shell will split the words correctly
ambro718 has joined #nixos
<jonge>
symphorien: i will figure something out. however, a little export in the build file is also acceptable in the end. :)
<jonge>
symphorien: oh wow. will have a look at it. thx!
endformationage has joined #nixos
<gchristensen>
or just patches = [ ./the.patch ]; might work
MagneticDuck has joined #nixos
<MagneticDuck>
how do I find what hash `requireFile` is looking for after `nix-store --add-fix`ing a file to the store?
<lejonet>
What is the recommended way of allowing a user, from an external, centralised source, to choose their shell for nixos? Carte blanche override the shell of SSH connections for example might work, but that seems more like a hack solutionand accepting a nix expression in the login shell var is just plain stupid :P
himmAllRight has quit [(Remote host closed the connection)]
<lejonet>
Like, some way to transform lets say /bin/bash to /run/current-system/sw/bin/bash, behind the scenes
himmAllRight has joined #nixos
kwork has quit [(Remote host closed the connection)]
<lejonet>
(another hackish solution would be to make a wrapper script that is always called that takes the users shell var and prepends "/run/current-system/sw" to it)
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
<lejonet>
or I guess a whitelisting solution similar to /etc/shells, that understands pkgs.blah type of expression
erictapen has joined #nixos
<gchristensen>
lejonet: is this for ldap?
jellowj has quit [(Ping timeout: 248 seconds)]
<lejonet>
gchristensen: my actual use case is for LDAP, but I think the problem can be abstracted to any external source
<gchristensen>
lejonet: I just symlink bash to /bin/bash for those cases
<gchristensen>
in an activation script, just like /bin/sh is
jellowj has joined #nixos
<lejonet>
gchristensen: would maybe having something similar in the config work: config.environment.bin."bash".source = pkgs.bash
<lejonet>
Because preferably such a thing should be updated and not need manual intervention everytime bash is updated :)
<lejonet>
gchristensen: atleast its contained in nix then :P
<lejonet>
That is my minimum requirement :P
<gchristensen>
:)
<lejonet>
Because asoon as you start to have manual intervention or the equivalent of /etc/init.d/local hacks, you're just on thin ice lol :P
<gchristensen>
haha yeah
kwork has quit [(Changing host)]
kwork has joined #nixos
<gchristensen>
I'm too much of a Nix zealot to have _manual_ hacks
<lejonet>
^^
<gchristensen>
I'd rather not have /bin/bash, but I have to meet my LDAP administrator where he is
goibhniu has quit [(Ping timeout: 240 seconds)]
<lejonet>
Hehe yeah, that was my plan too, even tho I don't really have someone else to meet at the middle (I'm the benevolent dictator of this entire env) but its not guaranteed that nixos, if I choose to switch to it, is going to be the only OS
<lejonet>
(I'm very much of a pragmatic person :P )
mattcode has quit [(Read error: Connection reset by peer)]
takle has quit [(Remote host closed the connection)]
<Dezgeg>
maybe a shell_prefix feature could be added to sssd
jensens has joined #nixos
<lejonet>
gchristensen: do you have a snippet you could share or? Because I'm guessing something needs to be appended to /etc/shells
<lejonet>
Dezgeg: that would be really nice
<lejonet>
or even at the pam level
<gchristensen>
lejonet: I don't have one right now :(
<lejonet>
gchristensen: awh :P no worries
jb55 has joined #nixos
hamishmack has quit [(Quit: hamishmack)]
<gchristensen>
Dezgeg: or maybe safer a static rewrite, /bin/bash => /nix/store/...
<Dezgeg>
well if you're ok with everyone having to use bash there's already an option for that
takle has joined #nixos
<gchristensen>
I mean a dictionary of static rewrites :)
<MagneticDuck>
how do I find what hash `requireFile` is looking for after `nix-store --add-fix`ing a file to the store?
<lejonet>
gchristensen: yeah, that would be really awesome
<lejonet>
that way if you want the rewrite to be different, you just override that entry in the dict, no need to "hack around" with shell commands and such
justan0theruser has joined #nixos
JohnMH has left #nixos ["Bye!"]
<Dezgeg>
you can use a file system as a dict ;)
<lejonet>
That is indeed true :P
<gchristensen>
back to where we started with my symlink
<lejonet>
a fs is just a key/value store, with some extra metadata ;)
jellowj has quit [(Ping timeout: 240 seconds)]
<gchristensen>
and somewhat poor semantics
justan0theruser has quit [(Client Quit)]
justan0theruser has joined #nixos
justanotheruser has quit [(Ping timeout: 255 seconds)]
<lejonet>
Yeah
<lejonet>
So far my stint with nixos is very much to my liking, the real test will be when I start to fiddle with the stuff that is above OS layer :P
<lejonet>
I'm a big fan of the declarative language so far :P
<VLetrmx>
Ah right, sure. Yeah I wondered about that myself.
<VLetrmx>
gchristensen, done :)
<symphorien>
I am trying to package giac, a scientific library. The download page lists which debian packages to install to build from source, and I tried to translate in nixos libs, but there seems to be strange things : is there a tool to check whether I add spurious buildInputs whose hash are is not referenced in the end output ?
<gchristensen>
VLetrmx: thank you a LOT! :) I really appreciate it!
hiratara has quit [(Ping timeout: 252 seconds)]
<VLetrmx>
:)
kungfukenny has quit [(Ping timeout: 240 seconds)]
Mateon1 has quit [(Remote host closed the connection)]
hiratara has joined #nixos
ambro718 has quit [(Quit: Konversation terminated!)]
<gchristensen>
also how could it be that I got my .travis.yml right on the first try :)
mekeor has quit [(Quit: digital revolution = cryptoanarchism + cybercommunism)]
<Nobabs27>
ok so I do this command to start cyberfox-bin: https://gist.github.com/Nobabs27/b6ffc3d0df422f886e57d031ed3985f0 But this brings two issues. One, Cyberfox is all messed, every tab crashes & gtk themes don't apply. Two, pretty sure you aren't supposed to use absolute paths in NixOS? So how do I make sure it knows where those binaries are, without have to figure where nix has put them each time?
ryanarte_ has quit [(Quit: ryanarte_)]
nh2 has quit [(Ping timeout: 240 seconds)]
stanibanani has joined #nixos
mudri has quit [(Ping timeout: 240 seconds)]
numerobis has quit [(Ping timeout: 240 seconds)]
corpix has quit [(Ping timeout: 248 seconds)]
acarrico has quit [(Ping timeout: 248 seconds)]
stanibanani has quit [(Ping timeout: 248 seconds)]
nh2 has joined #nixos
dywedir has quit [(Ping timeout: 240 seconds)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] garbas opened pull request #29756: assertion should check for encrypted.label of the defined fileSystem (master...fix-encrypted-assertion) https://git.io/vdTP3