<viaken>
On NixOS, while I'm developing in a personal checkout of nixpkgs, will nix-build use a sandbox with nix.useSandbox = true in /etc/nixos/configuration.nix?
<clever>
viaken: nix will use whatever is in /etc/nix/nix.conf
griff_ has quit [(Quit: griff_)]
<clever>
nicklaf: the entry in configuration.nix is used to generate nix.conf, when you run nixos-rebuild
<clever>
oops, wrong name on that 2nd msg
<viaken>
huh
<viaken>
Good to know!
<viaken>
So I can set "useSandbox" in /etc/nix/nix.conf?
kranium has quit [(Remote host closed the connection)]
justanotheruser has joined #nixos
Neo-- has quit [(Ping timeout: 246 seconds)]
griff_ has joined #nixos
moet has quit [(Quit: leaving)]
Guest93765 has quit [(Ping timeout: 240 seconds)]
Supersonic112 has quit [(Ping timeout: 240 seconds)]
Supersonic112 has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] csingley opened pull request #30144: nixos/modules/services/misc/nzbget: systemd unit PreStart fixes nzbget.conf paths broken by upgrade / garbage collection cycle (master...master) https://git.io/vd0IC
NixOS_GitHub has left #nixos []
<csingley>
Goodness, I didn't expect an announcement
Unode has quit [(Ping timeout: 240 seconds)]
rsa has quit [(Ping timeout: 240 seconds)]
rsa has joined #nixos
boxofrox has quit [(Ping timeout: 240 seconds)]
aminechikhaoui has quit [(Ping timeout: 240 seconds)]
srk has quit [(Ping timeout: 240 seconds)]
aminechikhaoui has joined #nixos
Unode has joined #nixos
rmarko has joined #nixos
dieggsy has joined #nixos
jb55 has joined #nixos
<viaken>
csingley: That caught me off-guard my first time, too.
<viaken>
Unless you're not new and I'm making a fool of myself. :)
<fearlessKim[m]>
I am trying to fix L2TP plugin to create a VPN (henceI updated it from 1.2.4 to 1.2.8 IIRC). Currently it fails with " VPN connection: failed to connect: 'Cannot create run-dir /nix/store/f7bpngi5igcgsydlwhvbh7ryw5fk5zcf-NetworkManager-l2tp-gnome-1.2.8/var/run (Read-only file system)'". Which path should it use instead of /var/run ? (or maybe I should just create /var/run in a pre-build statement)
MP2E has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] dpflug opened pull request #30145: tqsl: init at 2.3.1 (master...master) https://git.io/vd0Lu
NixOS_GitHub has left #nixos []
ebzzry has joined #nixos
Arcaelyx has quit [(Ping timeout: 240 seconds)]
<ebzzry>
ld-linux-x86-64.so.2 used to be at ~/.nix-profile/lib/ld-linux-x86-64.so.2. Where is it now?
boxofrox has joined #nixos
<csingley>
viaken: been using NixOS about a week; the fool is me!
pxc has quit [(Ping timeout: 248 seconds)]
rmarko is now known as srk
Arcaelyx has joined #nixos
iyzsong has joined #nixos
drakonis has joined #nixos
lambdamu has joined #nixos
griff_ has quit [(Quit: griff_)]
<viaken>
csingley: I've only been using it only about a month. We can be fools together!
cpennington has joined #nixos
lambdamu_ has quit [(Ping timeout: 264 seconds)]
jb55 has quit [(Quit: WeeChat 1.9)]
MarcelineVQ has joined #nixos
mbrgm has quit [(Ping timeout: 260 seconds)]
mbrgm has joined #nixos
wrl_ has joined #nixos
fractal has quit [(Ping timeout: 255 seconds)]
todder has quit [(Ping timeout: 255 seconds)]
trikl[m] has quit [(Ping timeout: 255 seconds)]
trevorriles[m] has quit [(Ping timeout: 255 seconds)]
the_m4ur1[m] has quit [(Ping timeout: 255 seconds)]
xplat|work has quit [(Ping timeout: 255 seconds)]
thoughtpolice has quit [(Ping timeout: 255 seconds)]
wrl has quit [(Ping timeout: 255 seconds)]
nh2 has quit [(Ping timeout: 255 seconds)]
StuK[m] has quit [(Ping timeout: 255 seconds)]
seif[m] has quit [(Ping timeout: 255 seconds)]
JameySharp[m] has quit [(Ping timeout: 255 seconds)]
jack[m] has quit [(Ping timeout: 255 seconds)]
spawnthink[m] has quit [(Ping timeout: 255 seconds)]
reactormonk[m] has quit [(Ping timeout: 255 seconds)]
indefini has quit [(Ping timeout: 255 seconds)]
primeos[m] has quit [(Ping timeout: 255 seconds)]
queiw_ has quit [(Ping timeout: 255 seconds)]
CustosLimen has quit [(Ping timeout: 255 seconds)]
CodeWarrior has quit [(Ping timeout: 255 seconds)]
prooftechnique has quit [(Ping timeout: 260 seconds)]
CodeWarrior has joined #nixos
astsmtl has quit [(Ping timeout: 240 seconds)]
iyzsong has quit [(Ping timeout: 240 seconds)]
itscaleb has quit [(Ping timeout: 260 seconds)]
xplat|work has joined #nixos
eddyb_ has joined #nixos
fingerzam_ has joined #nixos
bitonic_ has joined #nixos
edofic_ has joined #nixos
dvim_ has joined #nixos
dejanr has quit [(Ping timeout: 260 seconds)]
qewzee has quit [(Ping timeout: 260 seconds)]
thoughtpolice has joined #nixos
moredhel_ has joined #nixos
indika_ has joined #nixos
MightyJoe has joined #nixos
bdimcheff_ has joined #nixos
dejanr has joined #nixos
prooftechnique has joined #nixos
todder has joined #nixos
h30_ has joined #nixos
qewzee has joined #nixos
itscaleb has joined #nixos
CustosLimen has joined #nixos
nicklaf has quit [(Quit: leaving)]
sjourdois has quit [(Ping timeout: 255 seconds)]
mgttlinger has quit [(Ping timeout: 255 seconds)]
dvim has quit [(Ping timeout: 255 seconds)]
bitonic has quit [(Read error: Connection reset by peer)]
fingerzam has quit [(Read error: Connection reset by peer)]
eddyb has quit [(Read error: Connection reset by peer)]
edofic has quit [(Read error: Connection reset by peer)]
moredhel has quit [(Read error: Connection reset by peer)]
indika has quit [(Ping timeout: 255 seconds)]
alanz has quit [(Ping timeout: 255 seconds)]
bdimcheff has quit [(Ping timeout: 255 seconds)]
cyraxjoe has quit [(Quit: No Ping reply in 180 seconds.)]
h30 has quit [(Remote host closed the connection)]
mpuppe[m] has quit [(Ping timeout: 255 seconds)]
ninegua[m] has quit [(Ping timeout: 255 seconds)]
admin[m] has quit [(Ping timeout: 255 seconds)]
wmertens[m] has quit [(Ping timeout: 255 seconds)]
bhipple[m] has quit [(Ping timeout: 255 seconds)]
hedning[m] has quit [(Ping timeout: 255 seconds)]
ycy[m] has quit [(Ping timeout: 255 seconds)]
sirius[m] has quit [(Ping timeout: 255 seconds)]
Sovereign_Bleak has quit [(Ping timeout: 255 seconds)]
scott2 has quit [(Ping timeout: 255 seconds)]
TimePath has quit [(Ping timeout: 255 seconds)]
fpletz has quit [(Ping timeout: 255 seconds)]
himmAllRight has quit [(Quit: No Ping reply in 180 seconds.)]
<ebzzry>
May someone please remind me how to do a ` patchelf --set-interpreter ${stdenv.cc.libc.out}/lib/ld-linux-x86-64.so.2 foo` on the command line?
hamishmack has joined #nixos
boxofrox has quit [(Ping timeout: 248 seconds)]
marusich has joined #nixos
pxc has joined #nixos
justanotheruser has quit [(Ping timeout: 240 seconds)]
justanotheruser has joined #nixos
csingley has quit [(Ping timeout: 240 seconds)]
pxc has quit [(Ping timeout: 248 seconds)]
justanotheruser has quit [(Client Quit)]
justanotheruser has joined #nixos
rauno has quit [(Ping timeout: 260 seconds)]
reinzelmann has quit [(Quit: Leaving)]
proteus-guy has quit [(Remote host closed the connection)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] domenkozar pushed 1 new commit to release-17.09: https://git.io/vd0nH
<NixOS_GitHub>
nixpkgs/release-17.09 91a4d26 michael bishop: dd-agent: fix multiple tags in the config file...
NixOS_GitHub has left #nixos []
jcarr has quit [(Remote host closed the connection)]
moet has joined #nixos
endformationage has quit [(Quit: WeeChat 1.9)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] copumpkin opened pull request #30150: [WIP] Get rid of most @rpath nonsense on Darwin (master...no-rpath-nonsense) https://git.io/vd0cA
NixOS_GitHub has left #nixos []
simukis has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] domenkozar pushed 1 new commit to master: https://git.io/vd0CJ
<NixOS_GitHub>
nixpkgs/master 48b273a Tim Steinbach: atom: 1.20.1 -> 1.21.0
NixOS_GitHub has left #nixos []
MichaelRaskin has quit [(Quit: MichaelRaskin)]
moet has quit [(Ping timeout: 255 seconds)]
MercurialAlchemi has joined #nixos
eacameron has quit [(Remote host closed the connection)]
<clever>
and then line 31 just improperly kills the currently running os, and gives the loaded kernel control of the CPU
<clever>
in the case of this script, it will then boot nixos from a ramdisk
<clever>
and fire up sshd so you can get in
<clever>
ssh back in, run justdoit, reboot
<clever>
you can now turn ANY linux machine into a nixos machine
<clever>
even if its on the other side of the world
<sphalerite>
That sounds like a challenge :p
<sphalerite>
Will it work on my ereader? :p
<clever>
as long as nixos can boot on it, and fire up the network and sshd without user intervention
<clever>
and it has enough ram
<hyper_ch>
clever: well, I've been pondering if I should put a bash script into the usb live image... becasue then I also use tcl/expect to autofill encryption password for root enc zfs
<sphalerite>
Not sure nixos can boot on it
jushur has joined #nixos
<sphalerite>
I wouldn't be surprised if it could in principle, it's a nicely hackable device (e.g. its main persistent storage, where the OS lives and everything, is just a microSD card)
<hyper_ch>
still confused about that whole kexec process
<sphalerite>
hyper_ch: are you familiar with the exec system call?
<hyper_ch>
no
<sphalerite>
OK
<hyper_ch>
I'm just a normal computer user
<hyper_ch>
I don't have any kind of formal training with computers
<etu>
hyper_ch: I'd say that you're beyond normal by being here
<etu>
me neither
<sphalerite>
So if a process calls the exec system call, the kernel replaces the calling process with a given other executable
<hyper_ch>
at first I started with business and economics at university.. then I became sane and changed to.. well, my current profession
<steveeJ>
moin! are paths outside of /nix now enforced to not be readable by nix builds?
<sphalerite>
What kexec does is the same thing, except instead of replacing the process making the system call, the kernel replaces itself
<sphalerite>
steveeJ: with sandboxing enabled, yes, and it's been like that for a long time
<sphalerite>
There are exceptions
<sphalerite>
Like /dev/null and such
<steveeJ>
I have an expression that uses makeWrapper on a path that it is passed, and since this recently received checks it fails to wrap it
<sphalerite>
But on the whole, yeah nix builds aren't allowed to read anything other than the store paths that are in their inputs. As an example, try building pkgs.runCommand "test" "ls /"
<steveeJ>
it's supposed to be a wrapper to an editable shell script, for development purposes
<vaibhavsagar>
steveeJ: I ran into that issue recently too
<vaibhavsagar>
it fails when it tries to wrap a directory or a non-executable file
<steveeJ>
vaibhavsagar: for me it is an executable shell script, but it can't even access it at build-time so of course [[ -f .. && -x .. ]] will fail
<hyper_ch>
does that mean with clever's script that it doesn't even need to be booted from usb stick, but it's sufficient to just stick the usb stick into the computer, get root access and run kexec?
<sphalerite>
steveeJ: I suppose that should be possible really since makeWrapper doesn't actually need to read the file to create the wrapper
<sphalerite>
hyper_ch: yeah. You don't even need a USB stick at all, you can just copy the files over
<hyper_ch>
also cool that you can scrub a pool while being mounted
<hyper_ch>
can nixos schedule regular scrubbing as well? there's this autosnapshot feature in nixos somewhere
orivej has quit [(Ping timeout: 240 seconds)]
<hyper_ch>
also, zfs scrubbing seems to be rather fast.... for my 1TB SSD filled with 825G it estimates around 30min for scrubbing at ~450M/s... and it's encrypted zfs
<hyper_ch>
clever: I think something's wrong with zfs encryption.... it keeps detecting files it can't repair.. already done 2 installs now
<hyper_ch>
clever: I doubt it... it's a 5 months old samsung 850 pro
<fearlessKim[m]>
in my overlay, I would like to define the package dce only if the package ns3 exist "dce = super.stdenv.lib.optional (super.pkgs.ns3 != null) super.callPackage /home/teto/dce { pkgs = super; };" returns "attribute ‘ns3’ missing" . How can I accomplish this ?
<clever>
fearlessKim[m]: dce = if pkgs ? ns3 then something else pkgs.dce;
jensens has joined #nixos
<hyper_ch>
clever: if it was a bad sector, then it should already have lit up when I rsynced stuff back, right?
<clever>
it may only notice it upon read
<hyper_ch>
how do I check for bad sectors?
<hyper_ch>
there's badblocks but not sure if that's suitable for ssd
<clever>
it has a read-only mode
<steveeJ>
sphalerite: agreed that such an option would be useful
<hyper_ch>
is badblocks even suited for ssd?
erictapen has joined #nixos
<hyper_ch>
clever: more errors coming up :(
freusque has quit [(Ping timeout: 258 seconds)]
kkini has quit [(Remote host closed the connection)]
kkini has joined #nixos
<fearlessKim[m]>
clever: thanks it worked :)
ertes-w has joined #nixos
<hyper_ch>
clever: yeah, it's bad files :( just checked from the backup... file in backup has 40k lines, the file on zfs only 20k lines (using nano)
<hyper_ch>
so, check ssd for bad blocks, then nuke everything and reinstall?
nschoe has joined #nixos
Itkovian has joined #nixos
<hyper_ch>
clever: nixos does not have badblocks packaged?
<hyper_ch>
oh, it's there
Ivanych has quit [(Ping timeout: 258 seconds)]
erictapen has quit [(Ping timeout: 264 seconds)]
Isorkin has joined #nixos
<fearlessKim[m]>
clever: a ? b returns true if b in a ?
<clever>
fearlessKim[m]: yeah
Ivanych has joined #nixos
freusque has joined #nixos
<hyper_ch>
clever: if I setup the sysstem a new, how can I ensure the badblocks aren't being written to?
<jonge>
hey there. after some fights with systemwide root certificates etc. it seems that i really need to install a root cert in chrome manually using "certutil". now i don't have a clue how to find out what i need to install in nixos in order to have certutil. any idea?
proteusguy has quit [(Ping timeout: 240 seconds)]
silver_hook has joined #nixos
silver_hook has quit [(Changing host)]
silver_hook has joined #nixos
proteusguy has joined #nixos
proteusguy has quit [(Ping timeout: 260 seconds)]
nh2 has joined #nixos
infinisil has quit [(Quit: WeeChat 1.9)]
proteusguy has joined #nixos
xd1le has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 pushed 2 new commits to master: https://git.io/vd001
<adisbladis>
Someone care to help me a bit? Feel a bit lost. Trying to add a service to my overlay
<makefu>
adisbladis: afair right now there is no way to use overlays for services. BUT you can simply import your own modules like this: https://github.com/musnix/musnix#basic-usage
<adisbladis>
makefu: No wonder I'm confused then ^_^ Thanks
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] joachifm pushed 2 new commits to master: https://git.io/vd0EL
<NixOS_GitHub>
nixpkgs/master dbb8958 bricewge: git-crypt: patch don't hard code path to git-crypt...
<NixOS_GitHub>
nixpkgs/master 1ad383f Joachim F: Merge pull request #30041 from bricewge/patch-2...
NixOS_GitHub has left #nixos []
reinzelmann has quit [(Quit: Leaving)]
goibhniu has joined #nixos
charlycoste has joined #nixos
georges-duperon has joined #nixos
georges-duperon has quit [(Remote host closed the connection)]
k2s has joined #nixos
peacememories has joined #nixos
mudri has joined #nixos
<ertes-w>
how do i properly package a closure as a file and transfer it *offline* to another system?
<xd1le>
yeah something like overlays but for modules would be splendid imo ✨
<sphalerite>
ertes-w: I usually do tar cf closure.tar $(nix-store -qR whateveryouwantincluded)
Wizek_ has joined #nixos
Wizek has joined #nixos
<sphalerite>
assuming the destinatino system doesn't have nix, that is
<fgaz>
if I make a package that provides both a server and a client is it ok to create services.myservice.server and services.myservice.client?
<sphalerite>
if it does have nix, just nix-store --export/nix-store --import
<sphalerite>
fgaz: sure. Is the client a systemwide thing though? It may make more sense to implement client-side support using wrapping so it can be used on non-nixos systems, if a typical use case would involve it running per user rather than as a system service
johnw has quit [(Ping timeout: 240 seconds)]
<ertes-w>
sphalerite: yes, the latter is what i need, thanks
k2s has quit [(Ping timeout: 248 seconds)]
<sphalerite>
ertes-w: you'll need to import it as root or sign it with a key that's trusted on the destination system
JosW has joined #nixos
bkchr has joined #nixos
johnw has joined #nixos
<ertes-w>
that's fine… the only reason i'm doing this is so i can build the system on the host and then use `nixos-install --closure` on the guest
<fgaz>
sphalerite: well, once installed the client binary can be invoked directly by the user. but it can be useful as a system service (nix-defined options etc)
<fgaz>
what do you mean by wrapping?
ebzzry has quit [(Ping timeout: 240 seconds)]
<sphalerite>
ertes-w: neat :)
<sphalerite>
fgaz: creating a config file and a wrapper script that calls the client with the config file specified so that it can be invoked simply. I don't really know what the application is or how it's used so that may not make sense
marusich has quit [(Quit: Leaving)]
bkchr has quit [(Ping timeout: 248 seconds)]
<ertes-w>
i wish `nixos-install` could import a closure right away… that would save a lot of time
<sphalerite>
ertes-w: it even internally uses --export and --import. You could just hack the install script to do what you want :)
<sphalerite>
fgaz: right, that does sound like something that would be useful as a system service then :)
<fgaz>
a wrapper sounds useful, if it can take advantage of a nix configuration
<fgaz>
but I'm not sure if that's what you mean
freeman42y has quit [(Ping timeout: 258 seconds)]
jushur has quit [(Quit: The Borg joined forces with Skynet, Resistance is futile! Uploading has begun!)]
<fgaz>
probably not
<fgaz>
well, I'll do the services for now
<fgaz>
thanks sphalerite
thc202 has joined #nixos
goibhniu has quit [(Ping timeout: 264 seconds)]
phreedom has joined #nixos
bennofs has quit [(Ping timeout: 246 seconds)]
pxc has joined #nixos
pxc has quit [(Ping timeout: 240 seconds)]
peacememories has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
peacememories has joined #nixos
joepie91___ has joined #nixos
joepie91___ has quit [(Changing host)]
joepie91___ has joined #nixos
michiel_l has quit [(Quit: No Ping reply in 180 seconds.)]
maiksen has joined #nixos
joepie91 has quit [(Ping timeout: 258 seconds)]
<sphalerite>
fgaz: basically it'd be a package rather than a service configured via the nixos configuration, that can be installed like any other package. Perhaps not the best example because of its complexity, but vim for instance is like that
maiksen has quit [(Changing host)]
maiksen has joined #nixos
michiel_l has joined #nixos
WinchellsMAndroi has quit [(Ping timeout: 258 seconds)]
<ertes-w>
i have 8 GiB of RAM here, and i'm running out of RAM… gotta love tmpfs-based live systems =)
zzamboni has joined #nixos
<ertes-w>
i really should figure out how nixos-install works
<ertes-w>
can't be too complicated
Itkovian has quit [(Remote host closed the connection)]
<MoreTea>
it basically installs a minimal valid store, then chroots into it to build your nixos configuration, after which it ensures that some configured bootloader is installed
<ertes-w>
yeah, and it looks like most of the heavy lifting is done by nixpkgs, including the boot loader installer
Neo-- has quit [(Ping timeout: 248 seconds)]
orivej has joined #nixos
zzamboni has quit [(Remote host closed the connection)]
<fgaz>
sphalerite: wait so you can configure vim with nix files? whoa!
<sphalerite>
fgaz: yes :) from an appropriate nix expression, it'll fetch plugins for you, generate the vimrc, and write a wrapper that calls vim with that vimrc
<steveeJ>
can I add a new gc root from within an expression?
VLetrmx_ is now known as VLetrmx
peacememories has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
<infinisil>
steveeJ: You mean within nix itself? Nope
<infinisil>
steveeJ: What are trying to do?
<steveeJ>
infinisil: I'm trying to prevent the gc of a path that is referenced only by makeWrapper within a derivation
hyper_webirc has quit [(Ping timeout: 260 seconds)]
<infinisil>
steveeJ: it shouldn't be gc'd if you reference it, can you show the nix expression?
<steveeJ>
the path is a repository pulled via nix-env -i .... -f path/to/pkgs.tgz. the archive gets unpacked to the store but gets gc'd, so the wrapper doesn't work anymore
nckx has joined #nixos
<infinisil>
why not do that with a nix expression?
<steveeJ>
steveeJ: it's supposed to be impure, I don't want to maintain a hash for the tgz
<steveeJ>
oh, pinging myself is awesome
<infinisil>
indefini: Where do you get that tgz from?
<steveeJ>
github
<steveeJ>
nix-build acts on the expressions inside this tgz, so -f helps to retrieve its content
<steveeJ>
I switched from using a preceding nix-prefetch-url to nix-build -f ..
<infinisil>
steveeJ: You can use `builtins.fetchurl "https://github.com/...` which doesn't take a path, and use `import` on it, which acts on the nix expression in it
<steveeJ>
I'm thinking of a solution to maintain an indirect gc root for the latest fetched archive
<steveeJ>
infinisil: but where does that expression live?
<infinisil>
import (builtins.fetchTarball ...) should evaluate the thing inside the fetched github thing
<steveeJ>
infinisil: I understand that, but there is no nix expression before the tgz is unpacked
<infinisil>
fetchTarball unpacks it
goibhniu has quit [(Ping timeout: 255 seconds)]
<infinisil>
and returns a path to the revisions contents
<infinisil>
or does the github repo actually contain a tgz in itself?
goibhniu has joined #nixos
<steveeJ>
infinisil: no, the github repo is downloaded as tgz and it's default.nix is used by nix-build -A ...
<infinisil>
yeah, then this should work
<steveeJ>
this feature of nix-build is neat, just that the unpacked archive is immediately remove on next gc'ed
<ij>
I'm doing the nixos-install and at the very end, I get a "chroot failed, '[' not found" and a "installation's finished!"… So… did it finish well?
<steveeJ>
infinisil: it adds the burden of maintaining another nix expression possibly outside of this repository, which must also be fetched
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] peti pushed 2 new commits to master: https://git.io/vd0Xg
<NixOS_GitHub>
nixpkgs/master 53d754d Peter Simons: hackage-packages.nix: automatic Haskell package set update...
<NixOS_GitHub>
nixpkgs/master 929eade Peter Simons: git-annex: update to version 6.20171003
NixOS_GitHub has left #nixos []
<steveeJ>
ij: doesn't read like it went well. can you outline the full steps and the result in a gist?
<infinisil>
steveeJ: Ah, so you want a single command to fetch the github repo, unpack it, and install the thing that its default.nix defines so it doesn't get gcd?
<steveeJ>
indefini: ACK
<infinisil>
It's hard to help when i have so little info on the project
<steveeJ>
indefini: oh right, I haven't yet posted a link, hold on
<infinisil>
Which path from the example there would get GC'd for you, steveeJ ?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] makefu opened pull request #30157: u3-tool: init at 0.3 (master...pkgs/u3-tool/init) https://git.io/vd01g
NixOS_GitHub has left #nixos []
Privat_ has joined #nixos
<ij>
sphalerite, 17 is the latest stable?
<sphalerite>
ij: 17 what?
k2s has joined #nixos
<ij>
Ah, 17.09, found it.
maiksen has quit [(Quit: leaving)]
boxofrox has joined #nixos
<moredhel1>
hi all, I'm trying to install firefox-nightly through the mozilla overlays repo. It works when I use it through nixos-rebuild, and when I install it using nix-shell -p "latest.firefox-nightly-bin" it also works fine. When trying to install using nix-env -i "latest.firefox-nightly-bin" it fails though. Does nix-env not look at my overlays? or do I need to set them for my user somehow?
maiksen has joined #nixos
Privat_ is now known as fendor
peti has left #nixos ["WeeChat 1.5"]
<infinisil>
moredhel1: Not sure, do you have the overlay in configuration.nix or ~/.config/nixpkgs/overlays ?
<infinisil>
I'm thinking that maybe user overlays are strictly separate from system overlays
<moredhel1>
in configuration.nix
<moredhel1>
possibly, are there docs on adding an overlay for users?
<infinisil>
try putting it in ~/.config/nixpkgs/overlays then (ln -s /path/to/firefox/overlay ~/.config/nixpkgs/overlays)
<infinisil>
s/then//
<infinisil>
and create this overlays directory first if you don't have it already
<NixOS_GitHub>
[nix] Mic92 opened pull request #1593: fixing bashisms in test code (master...bashism) https://git.io/vd0Qd
NixOS_GitHub has left #nixos []
lsix has quit [(Ping timeout: 260 seconds)]
<steveeJ>
infinisil: LABSHELL_EXPRESSIONS_LOCAL
<Tucky>
infinisil: Thank you.
Acou_Bass has quit [(Ping timeout: 258 seconds)]
<gchristensen>
does anyone want the IRC nickname `the`? I'm about to release it, the failed nickserv logins are stressful :P
<infinisil>
steveeJ: Looking into it
<jonge>
hi there. i try to build a default.nix file so that i can build a c++ project in a pure nix-shell. the problem is that the whole building involves launching some bash scripts with "#!/bin/bash". is there some way to tell the default.nix file to produce this symbolic link for me?
<gchristensen>
and it fixes the shebangs to be (for example) /nix/store/5j8r4n35rzbwg95ayrfwn5ir07c1v6f6-bash-4.4-p12/bin/bash
<gchristensen>
jonge: if it finds /usr/bin/python it'll fix those too
<jonge>
gchristensen: that sounds strange, as giving the scripts just a simple /bin/bash -> /nix/store/..../bin/bash link would be so much easier
<gchristensen>
jonge: during a build, it is not possible to create a link from /bin/bash to /nix/store.../bin/bash
<jonge>
wow i see.
<ertes-w>
is there a way to supply a custom script for LUKS that runs at the time when the normal LUKS processing with preLVM would run?
<ertes-w>
unfortunately NixOS' LUKS processing is not flexible enough for what i need
pxc has joined #nixos
proteusguy has quit [(Ping timeout: 255 seconds)]
<ertes-w>
postDeviceCommands might work
<ertes-w>
preLVMCommands – even better
acarrico has quit [(Ping timeout: 255 seconds)]
<infinisil>
steveeJ: so, what exactly are the steps you take when using this repo?
pxc has quit [(Ping timeout: 248 seconds)]
<steveeJ>
indefini: initially I install the labshell derivation like so: REV=master; nix-env -iA labshell --argstr labshellExpressionsGitHubRev ${REV} -f https://github.com/htwg-syslab/nix-expressions/archive/${REV}.tar.gz --- after a while of usage I'd like to just run "nix-collect-gargabe -d" to clean up old derivations, which unfortunately removes the unpacked tgz and renders the labshell wrapper useless
* infinisil
tries
<steveeJ>
indefini: the REV passing is actually not required for master, but sometimes I change the branch
ShalokShalom_ has joined #nixos
<steveeJ>
indefini: if you try, please use the bump-nixpkgs REV
<gchristensen>
orivej: *wave*
ShalokShalom has quit [(Ping timeout: 240 seconds)]
<orivej>
gchristensen: hi!
<infinisil>
waiting for it to build
<infinisil>
gchristensen: Can't you turn off the failed nixservs?
acarrico has joined #nixos
<gchristensen>
infinisil: I want to know :)
<gchristensen>
orivej: may I PM?
<orivej>
yes
ebzzry has joined #nixos
<ertes-w>
hmm, if i include cryptsetup in the initramfs, its image suddenly jumps to 45 MiB
<ertes-w>
is there a small statically linked version of cryptsetup that the default initrd uses, if LUKS is enabled?
<steveeJ>
infinisil: it only has nix as a dependency, shouldn't take too long
<infinisil>
gchristensen: How about a /filter?
<infinisil>
steveeJ: Yeah it's done, trying it now
<gchristensen>
nah, I don't use it, I just registered it b/c it was available and I thought it was cute, infinisil
<gchristensen>
I mean, who wants to be `the`? :)
<steveeJ>
indefini: you can try to `nix-store --gc` the path that it used for downloading
<TimePath>
I can think of many /me uses
peterbb has quit [(Quit: Lost terminal)]
<gchristensen>
TimePath: do you want it? :)
<infinisil>
Heh, no idea, but i imagine there are some creative uses for it :P
acarrico has quit [(Ping timeout: 248 seconds)]
lsix has joined #nixos
<TimePath>
gchristensen: nah, I'm good
lsix_ has quit [(Ping timeout: 255 seconds)]
<infinisil>
steveeJ: Hmm, weird, the labshell certainly doesn't have the source as a dependency, even though the path is in the result
<TimePath>
To have multiple nicks with my IRC client if a pain
<steveeJ>
infinisil: how did you list the dependencies directly?
<infinisil>
shows that there are indeed no roots to it
eacameron has quit [(Read error: Connection reset by peer)]
cpennington has joined #nixos
<infinisil>
/nix/store/k2k66d9pyrrhpjph6zgp71xwa47q5hha-labshell/bin/labshell clearly contains that store path, and according to https://stackoverflow.com/a/34837585/6605742 this should make it a dependency
eacameron has joined #nixos
<infinisil>
steveeJ: ^^
dejanr has quit [(Ping timeout: 248 seconds)]
<infinisil>
This seems like something clever could give more info on
dejanr has joined #nixos
<steveeJ>
infinisil: from a user perspective this seems like a bug
<ij>
In no example have I seen someone use '<nixos>', they're all '<nixpkgs>'. That's just for consistency — do nixosians use <nixos>?
eacameron has quit [(Read error: Connection reset by peer)]
eacameron has joined #nixos
Acou_Bass has joined #nixos
<infinisil>
ij: Because this doesn't work if you set the NIX_PATH to something other than the default
<infinisil>
which is the case for me, so <nixos> doesn't work
<infinisil>
And i think this comes from the past where nixos was a separate repository, but now it's in nixpkgs/nixos
<ij>
Do you have the "nixos" named channel/are on nixos?
<infinisil>
i do
<infinisil>
but that's not how it gets resolved
<infinisil>
at least not directly
<ertes-w>
gchristensen: 45M means that i need quite a large boot partition =)
<ertes-w>
otherwise i'm not going to have many system generations
<steveeJ>
ij: in <name>, name is set via NIX_PATH=name=/some/path/to/some/nixpkgs, so you could use any name here. by default it's NIX_PATH=nixpkgs=.. though
<gchristensen>
true
<ij>
I was just wondering shouldn't nix_path be related to the channels you've set?
<steveeJ>
ij: I have you can also set multiple as in NIX_PATH=mynixpkgsfork=/path/to/fork/:nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixos/nixpkgs
<steveeJ>
ij: the example shows how nixpkgs relates to system-wide (root's) channels
lambdael has joined #nixos
<ij>
So people usually set this manually?
<steveeJ>
ij: no, what you see in the example is the default on NixOS
<steveeJ>
ij: minus "mynixpkgsfork", that is exemplary
<ij>
Oh, I thought the default in nixos was nixos=, not nixpkgs=.
<steveeJ>
ij: how exactly are you messing with this again in a installation?
<steveeJ>
ij: not since I've been using it, which is about 2 years now
<ij>
Cool, then I'll rename it back. Maybe the manual's old then.
<ij>
I'm just installing nixos- tools to install it on another partition and thought I should have it renamed. I sowed this problem myself.
<steveeJ>
infinisil: I have worked around the problem by copying the shell script to $out for now. but if I required more from that repository that wouldn't do the trick
<infinisil>
steveeJ: Hmm, alright, not sure what's the problem myself
<ij>
infinisil, consistent with steveeJ's stmts.
<infinisil>
hyper_webirc: Oh no :( what problems do you get?
<hyper_webirc>
not sure what is is... did 3 installs now and on every rsync back to my ssd it had unrecovereable errors
<Dezgeg>
maybe your hardware is bad
<hyper_webirc>
so I thought the problem might be the ssd...... booted into live, let badblocks run - nothing unusual
<hyper_webirc>
even let badblock run with -w switch that it actually wrote and afterwards checked
<hyper_webirc>
still nothing wrong
<hyper_webirc>
so I thought, lets do a mirror install with zfs
<hyper_webirc>
however I fail to attach the external usb now to the existing pool..... zpool attach tank sda2 sde just returns: cannot attach sde to sda2: no such device in pool
<hyper_webirc>
so, how do I creat a mirror now?
<hyper_webirc>
I did fdisk /dev/sde and pressed "o" to create no dos partition thing... didn't create any other partitions
<hyper_webirc>
Dezgeg: fail to see how that's related
proteusguy has quit [(Ping timeout: 255 seconds)]
<Dezgeg>
that only you get segfaults in gcc or corrupted files in the store?
<hyper_webirc>
pretty sure I'm not the only one
<infinisil>
hyper_webirc: Did you always export pools on usb before detaching them?
<hyper_webirc>
infinisil: I have no pool on a usb
<hyper_webirc>
infinisil: I have a pool on sda2
<hyper_webirc>
and now I want to attach a usb disk as mirror
<infinisil>
I thought zfs didn't work well with usb stuff in general
<infinisil>
maybe i'm wrong though
<infinisil>
hyper_webirc: Have you tried the same thing without crypto?
<hyper_webirc>
infinisil: no crypt is not an option
<hyper_webirc>
but still, how can I add a second disk as mirror to an existing pool?
<steveeJ>
off-topic: what are the advantages of zfs over btrfs? I've always been wondering why people choose it, as btrfs has been reliable for me since 4-5 years
<infinisil>
hyper_webirc: I mean for debugging, because if the same setup works without crypto, then the crypto broke it. If it still does'nt work, you're probably doing something wrong yourself
<hyper_webirc>
steveeJ: I can crash btrfs in a matter of hours/days
kier has quit [(Ping timeout: 240 seconds)]
<hyper_webirc>
infinisil: well, I need to write large data back
cpennington has quit [(Ping timeout: 255 seconds)]
<hyper_webirc>
infinisil: I do not want to write that back unencrypted
<steveeJ>
hyper_ch: unintentionally?
<hyper_webirc>
succeeded in attaching usb
<infinisil>
hyper_webirc: Just do a test with non-important data
<steveeJ>
hyper_webirc: unintentionally?
<hyper_webirc>
steveeJ: well, yes.... last was on home server.... power outage... btrfs totally unrecoverable
<hyper_webirc>
infinisil: there's people that have no non-important data ;)
<infinisil>
/dev/urandom ?
<hyper_webirc>
infinisil: testing now with mirror ;)
<steveeJ>
hyper_webirc: weird. my laptop crashes quite a lot due to unreliable gpu drivers, but the filesystem never had an issue. I use btrfs on top of lvm+luks though
<steveeJ>
hyper_webirc: maybe you have bad memory?
<steveeJ>
I'd test the system thoroughly, it sounds like something else is wrong
<hyper_webirc>
infinisil: well, I think if it's the ssd that causes troubles - even when badblocks couldn't find anything - then install with mirror setup should help as there should be at least the usb copy intact
Privat_ has quit [(Remote host closed the connection)]
Privat_ has joined #nixos
<ij>
nixos-install --root /mnt/b => error: creating symlink from ‘/boot/result.tmp-27914-1927857036’ to ‘/nix/store/m64lj18r…-nixos-system-myhostname-17.09.1502.19879836d1’: Operation not permitted
<hyper_webirc>
also been pondering to loop through the files, for each file found make rsync copy from backup to pool and then create a snapshot
thblt has joined #nixos
<hyper_webirc>
but that will be like a gazillion snapshots ;)
<DiThi>
it gives me this error: /tmp/nix-build-check-firefox-signature.drv-0/.attr-0: line 3: gpg: command not found
<DiThi>
am I missing something obvious?
justanotheruser has quit [(Ping timeout: 255 seconds)]
bennofs has joined #nixos
zzamboni has joined #nixos
<infinisil>
DiThi: That's because gpg2 (in nix usually used like "${pkgs.gnupg}/bin/gpg2") changed the name of the binary to just "gpg", breaking all instances where the binary was referenced in nixpkgs (and other tools that use it)
<DiThi>
honestly I'm having a hard time using nixos since I installed it a couple of months ago, I've been missing a list of "cookbook recipes"
fgaz[m] has joined #nixos
<hyper_webirc>
wait, you run nixos or just nixpkgs?
<DiThi>
nixos
<infinisil>
DiThi: Is this with sudo?
<DiThi>
infinisil: user env, I've kept system env in stable
<DiThi>
I've started using nix in an ubuntu machine, to easily install several apps that have no ubuntu repo
<ivanivan>
hi, i'm transitioning to nixos from macOS (where I used Homebrew).
<ivanivan>
I keep find myself searching for available packages in the browser ( nixos.org/nixos/packages.html ), but I imagine there's a way I could do this from the terminal, sort of like Homebrew's `brew search <package-name>` and `brew info <package-name>`?
<infinisil>
DiThi: What's your $NIX_PATH?
<hyper_webirc>
any reasons you use nixpkgs and not just nixos-unstable(-small) ?
<ivanivan>
hyper_webirc: cool, I'll take a look at nox. thanks!
<DiThi>
hyper_webirc: there should be a place where I can find out all these tricks without having to ask so much in irc and looking at many comments, manuals and nix sources
<hyper_webirc>
DiThi: feel free to expand the wiki
<infinisil>
Hmm, I actually haven't ever used a user-level channel
<infinisil>
Not sure how this even works without changing NIX_PATH
python476 has joined #nixos
<hyper_webirc>
I don't even use user-level packages :)
<infinisil>
because NIX_PATH doesn't ever refer to any users stuff
<infinisil>
by default that is
DiThi has quit [(Ping timeout: 260 seconds)]
DiThi has joined #nixos
<hyper_webirc>
DiThi: any reason why you use nixpkgs channel and not nixos one?
<sphalerite>
If I have a service that I want started on every boot, should it be "wanted by" default.target or multi-user.target?
<gchristensen>
I usually use multi-user.target
ivanivan has quit [(Quit: ERC (IRC client for Emacs 25.2.1))]
<infinisil>
multi-user.target is what you want
mortum5 has quit [(Ping timeout: 258 seconds)]
<infinisil>
actually, reading the man systemd.special manpage, I'm not so sure about that anymore
<infinisil>
default.target
<infinisil>
The default unit systemd starts at bootup. Usually, this should be aliased (symlinked) to multi-user.target or graphical.target.
<infinisil>
Ah, and graphical depends on multi-user
<infinisil>
so if you need x stuff then graphical, otherwise multi-user
Mateon2 has joined #nixos
Mateon2 is now known as Mateon1
<DiThi>
hyper_webirc: I wanted a more recent version of some things
<DiThi>
also I lost connection for a while, not sure if someone said something
<hyper_webirc>
DiThi: :)
<sphalerite>
infinisil: why?
<infinisil>
nah, you didn't miss anything
<sphalerite>
infinisil: as in why not default
<DiThi>
hyper_webirc: I also tried to say that the cheatsheet is great and should be more prominently linked in more places, like the manual, the subreddit, etc
<sphalerite>
because default works too
<infinisil>
sphalerite: multi-user is just what everybody uses
<DiThi>
I've been a couple of months using nixos without knowing that cheatsheet
<infinisil>
I'm currently checking out what default.target is on nixos
<sphalerite>
it'll be symlinked to multi-user or graphical as the manpage says I presume
<sphalerite>
depending on systemd.defaultUnit
<sphalerite>
which is multi-user by default and graphical if services.xserver.enable and services.xserver.autostart are enabled
<infinisil>
hmm, i don't see default.target
<hyper_webirc>
DiThi: what's a subreddit?
<infinisil>
Ah
<sphalerite>
s/autostart/autorun/
<infinisil>
Hmm, but is there any reason to use default.target instead of multi-user or graphical?
griff_ has joined #nixos
<infinisil>
because multi-user.target is like a startup item, without graphical stuff, graphical.target is like a startup item with the graphical stuff
<sphalerite>
I don't know, that's what I'm asking. And simultaneously if there's a reason to use multi-user instead of default
<infinisil>
What does your service do?
<DiThi>
hyper_webirc: a community build in the website reddit.com, specifically I talk about https://www.reddit.com/r/NixOS/
<sphalerite>
I definitely don't want graphical.target because graphical.target won't actually apply in this configuration (no x server)
<DiThi>
I'll send a message to the mods suggesting adding a link to the cheatsheet in the side bar
<sphalerite>
infinisil: just some setup stuff for some machines that I'm netbooting
<infinisil>
i see, I'd use multi-user
<infinisil>
maybe just because default.target is somehow unconventional
<Olgierd>
hi, I use nix-shell for per-project development environments. how do I add some lines to php.ini?
<Olgierd>
I would like to use xslt extension for one particular project
<sphalerite>
Olgierd: running the php interpreter from the command line?
<hyper_webirc>
DiThi: oh.... yeah... never jumped on that hype :)
<sphalerite>
Olgierd: if so, I'd see if there's a way to pass the php.ini file to the interpreter on the command line, and if so wrap it to pass that config
simukis has quit [(Read error: Connection reset by peer)]
simukis has joined #nixos
ertes-w has quit [(Ping timeout: 240 seconds)]
<Olgierd>
some day i'll have to actually learn the workings of nix instead of copy pasting code xD
<DiThi>
hyper_webirc: but your name starts by "hype"! :p anyway I don't think it's matter of hype, but the fact that in the last ~7 years I've found so many good niche communities in reddit that are much better than forums
<hyper_webirc>
7 years is nothing ;)
* DiThi
feels old
* hyper_webirc
is old
mortum5 has joined #nixos
<DiThi>
thanks for the help everyone, bye
DiThi has quit [(Quit: Page closed)]
zzamboni has quit [(Remote host closed the connection)]
freeman42y has quit [(Quit: Leaving)]
phdoerfler has quit [(Quit: Leaving.)]
lsix has quit [(Quit: Konversation terminated!)]
lsix has joined #nixos
lambdael has quit [(Quit: WeeChat 1.7.1)]
Acou_Bass has quit [(Ping timeout: 240 seconds)]
<sphalerite>
How can I make a systemd unit depend on a network connection including DNS being available? I tried adding network-online.target to its requires, but that doesn't seem to have helped
Arcaelyx_ has joined #nixos
<sphalerite>
do I need after as well?
Arcaelyx has quit [(Ping timeout: 240 seconds)]
mortum5 has quit [(Ping timeout: 240 seconds)]
jtojnar has quit [(Read error: Connection reset by peer)]
cpennington has quit [(Ping timeout: 240 seconds)]
<clever>
sphalerite: i dont think systemd has any units that wait for dns to be working
<sphalerite>
aw, bummer
orivej has quit [(Ping timeout: 255 seconds)]
<sphalerite>
Is there a way also to do builtins.readFile without failing evaluation completely if the file doesn't exist?
<sphalerite>
oh, I guess I could make it conditional on builtins.pathExists x
ebzzry has quit [(Ping timeout: 240 seconds)]
<sphalerite>
Specifically, I'm trying to read /sys/class/net/enp0s25/address to assign the host name magically :D
erasmas has joined #nixos
<clever>
sphalerite: dhcp has a protocol in it, to assign the hostname that the dhcp server gave it
<sphalerite>
clever: yeah but I want to make nixos config stuff conditional on it too
<sphalerite>
potentially
<sphalerite>
and base the config on other information I've stored, like whether the disk is known to be broken
<clever>
i would have done that server side, the boot.php script given to ipxe gets the mac
<clever>
and can then switch to the right image
bennofs has quit [(Ping timeout: 255 seconds)]
<sphalerite>
right
<sphalerite>
but this way I can write nix instead of php :D
griff_ has quit [(Quit: griff_)]
griff_ has joined #nixos
<Dezgeg>
reading sysfs files from nix doesn't work, IIRC
<clever>
ah yeah, i remember something about nix checking the length with stat
<clever>
then reading that many
<clever>
proc and sys all have 0 byte files with real content
<sphalerite>
awww
cpennington has joined #nixos
corpix has quit [(Write error: Connection reset by peer)]
<sphalerite>
oh well, I can still use the nix file I'm putting together to generate a dnsmasq config or whatever
bennofs has joined #nixos
corpix has joined #nixos
<infinisil>
couldn't you write your own systemd target that activates upon working dns?
<clever>
it will need to use sd_notify and type=notify
<clever>
so systemd doesnt consider it "online" until it says its online
<infinisil>
yeah something like that
oida has joined #nixos
python476 has quit [(Read error: Connection reset by peer)]
python476 has joined #nixos
oida_ has quit [(Ping timeout: 260 seconds)]
<sphalerite>
Or just one that tries to resolve a name until it succeeds, and make it a oneshot?
<sphalerite>
With inotify on /etc/resolv.conf so it only checks when it's likely to be useful :D
<cransom>
am i a bad person if i say to make a service that runs tcpdump and as soon as it finds a reply to an ns/a record, go online? :) super speedy!
ixxie has joined #nixos
pxc has joined #nixos
boxofrox has joined #nixos
ertes has joined #nixos
<sphalerite>
cransom: it's hacky! I like it!
griff_ has quit [(Quit: griff_)]
<sphalerite>
[root@nixos:~]# date\nSat Dec 5 13:43:28 UTC 2099
<sphalerite>
Nice!
nschoe has quit [(Quit: Program. Terminated.)]
Tucky has quit [(Quit: WeeChat 1.9.1)]
jb55 has joined #nixos
bennofs has quit [(Ping timeout: 248 seconds)]
hellrazor has joined #nixos
<infinisil>
cransom: So this only works when services already try to go online?
lsix has quit [(Remote host closed the connection)]
Acou_Bass has joined #nixos
lsix has joined #nixos
lsix has quit [(Client Quit)]
erictapen has quit [(Ping timeout: 240 seconds)]
griff_ has joined #nixos
griff_ has quit [(Client Quit)]
<cransom>
it would be dependent on something have asked for and gotten a dns reply. if that doesn't happen, it would never proceed.
<ixxie>
yoyo, is there any official representative of the NixOS foundation in the house? We wanna make a logo variation for the wiki and need to know whats cool
<infinisil>
cransom: That is rather hacky, but probably somewhat reliable
griff_ has joined #nixos
<gchristensen>
ixxie: I'm not sure we have "brand guidelines" like that, nor do we have specific representatives beyond ikwildrpepper and nixy
<gchristensen>
ixxie: I'm not sure we have "brand guidelines" like that, nor do we have specific representatives beyond ikwildrpepper and niksnut
<cransom>
infinisil: not as reliable as just making a dns request. the only interesting part about it is that it doesn't add extra healthcheck lead to a nameserver. but if that kills your dns layer, you are optimizing your time poorly.
mortum5 has joined #nixos
<ixxie>
hmmm
rauno has joined #nixos
jensens has quit [(Ping timeout: 255 seconds)]
<cransom>
hrm. also fun. i just found the bug where nix in multiuser mode causes my mac to crash. i thought i was goign crazy and i had a hard disk failing.
<infinisil>
i've heard of this bug a few times
<infinisil>
high sierra?
<cransom>
yeah
<infinisil>
probably there's an issue already
<cransom>
there is
<infinisil>
ah lol you said that
<cransom>
it even includes a mention of it being apples problem that they aren't at liberty to discuss.
<cransom>
i went from freebsd to macos 10 years ago as it was cool at the time to have hardware support and a commercially supported unix. that shinyness has faded.
<infinisil>
True..
<infinisil>
I abandoned osx about half a year ago
<infinisil>
too many problems and too little openness
hellrazor has quit [(Ping timeout: 248 seconds)]
kuznero has joined #nixos
<kuznero>
Mic92: wrt coreclr2 fix - is that generally a good practice to enable sandboxing to catch problems like missing shebangs?
hellrazor has joined #nixos
<Mic92>
kuznero: yes
<kuznero>
Mic92: is it possible to enable sandboxing for one single `nix-env -f . -i ...` invocation somehow? I think I remember how to enable global sandboxing...
<Mic92>
kuznero: not if you have a nix daemon running
<kuznero>
Mic92: I see, thanks!
<kuznero>
Mic92: btw, are there any thought for adding corefx (framework) as well?
<Mic92>
kuznero: probably a good idea. the package structure currently looks messy
<Mic92>
kuznero: all files needs to recide in the same directory, right?
<kuznero>
Mic92: I couldn't find corefx at all as a package in nixpkgs. So, I thought it was never there... I guess it would be nice to try to do something similar to what is there for Haskell packages for different ghc versions.
<kuznero>
Mic92: do you think coreclr is ready as of now or it is time to start building more appropriate structure for it?
<Mic92>
kuznero: does lib2 lib3 lib4 has any meaning in dotnet?
<kuznero>
Mic92: hypothetical lib2, lib3, lib4 are just a dependency with a specific version that is critical. I guess I misunderstand the question
<Mic92>
kuznero: is dotnet looking for these directories? why not keeping the original structure?
jtojnar has joined #nixos
griff_ has quit [(Quit: griff_)]
<kuznero>
Mic92: typical nuget package structure can contain some subfolders including lib, but not lib2, lib3, ...
<Mic92>
kuznero: I would move bin/Product/Linux.$BuildArch.$BuildType/ to $out/share/dotnet and then just symlink the binaries back to $out/bin
Itkovian has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
<jtojnar>
how can I override nix version? adding nix to nixpkgs.config.overlays does not seem to do anything
<kuznero>
Mic92: That makes sense
k2s has joined #nixos
<sphalerite>
jtojnar: why do you want to do that? Do you maybe just want to use nixUnstable?
fragamus has joined #nixos
<Mic92>
kuznero: it is building, with this setup on my system
mooseboobs has quit [(Ping timeout: 240 seconds)]
<kuznero>
Mic92: is there anything like cabal2nix for nuget/paket? Like paket2nix, nuget2nix to manage dependencies in nix for coreclr/mono?
<jtojnar>
sphalerite: the kernel on my server does not not support libseccomp so I need Nix < 1.11.10
civodul has quit [(Quit: ERC (IRC client for Emacs 25.3.1))]
<sphalerite>
oooh ok. What does your overlay look like? Is just using an older nixpkgs version to get nix not an option?
<Mic92>
kuznero: I am not aware of something, nixpkgs/pkgs/development/libraries/dotnetfx40 generated manually I think
<kuznero>
Mic92: here is an attempt (not updated for more than a year by now) https://github.com/krgn/Paket2Nix and seems nothing for nuget2nix.
<jtojnar>
it does not even return an error
<jtojnar>
about invalid hash
darlan has joined #nixos
darlan has quit [(Client Quit)]
k2s has quit [(Ping timeout: 255 seconds)]
<kuznero>
Mic92: so, what is the projection for coreclr/fx+nuget packages in NixOS? Who is working on coreclr/dotnet? Does it make sense to try to plan the effort a little bit?
<sphalerite>
jtojnar: that should work afaict :/
<Mic92>
kuznero: I can't name you any, maybe you can look at the git history. If you think you need something, you can contribute.
<sphalerite>
jtojnar: maybe just set nix.package to that expression instead
<kuznero>
Mic92: I am interested in supporting dotnet ecosystem in Nix, yes. I am only aware of those who's reviewing my PRs.
<catern>
hey #nixos
<catern>
is there any good method for doing a nix-copy-closure or something like that from an Ansible playbook?
<catern>
specifically, I want to copy some arbitrary version of package A over to this remote host H
<sphalerite>
(yes they're all named after pokemon)
<sphalerite>
catern: how? The lights, or the names? :p
<catern>
sphalerite: the names, but I noticed the lights when I checked for other differences after saying that :)
<sphalerite>
:D
<sphalerite>
Yeah, there aren't enough eeveelutions to name all of them consistently :( (there are 3 more of those boxes)
erictapen has joined #nixos
<hyper_webirc>
infinisil: seems with external usb it works
zraexy has quit [(Quit: Leaving.)]
Arcaelyx_ has quit [(Read error: Connection reset by peer)]
<jtojnar>
sphalerite: nix.package worked. Thanks
zraexy has joined #nixos
<hyper_webirc>
still need to create a custom iso some day
<sphalerite>
jtojnar: great. Still odd that the overlay didn't work. Maybe overlays don't apply to nix somehow. You could try adding a package of some sort and putting it in systemPackages to see if the overlay is being picked up in general
schoppenhauer has quit [(Ping timeout: 248 seconds)]
Arcaelyx has joined #nixos
schoppenhauer has joined #nixos
<catern>
hmm
<catern>
hmmmmm
<catern>
what's the easiest way to add a gc root for an arbitrary store path?
infinisil has quit [(Ping timeout: 255 seconds)]
<catern>
can I add an arbitrary store path to my profile? without the derivation to produce that store path?
jushur has joined #nixos
infinisil has joined #nixos
ison111 has joined #nixos
<catern>
that is what is tricky
mudri has joined #nixos
<catern>
because I don't want to have to deploy nixpkgs to this machine, I just want to stick a store path over there
<catern>
I *guess* I can just do --add-root but ugh
<catern>
or maybe I really should deploy nixpkgs to this machine?
<steveeJ>
infinisil: did you get the gist of labshell's use-case while you looked at the code? are you aware of something that already exists to extend nix-shell in this way?
<infinisil>
steveeJ: I did not, what's it do?
<steveeJ>
infinisil: it's a convenience wrapper for nix-shell. it maintains a gc-root directory in ~/.config/labshell/ for different set of dependencies (called flavors) to speed up subsequent invocations
<steveeJ>
for that is invokes nix-instantiate directly
<ison111>
I'm trying to build something using autotools and ./configure complains that it can't find "shtool" and I'm not sure which package to get it from. Also is there any more "correct" way to install autotools other than to just add them all manually? (autoconf, autobuild, libtool, etc.)
erictapen has quit [(Remote host closed the connection)]
fragamus has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
erictapen has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] steveeJ opened pull request #30161: make-wrapper: add `--no-assert` to skip assertExecutable() (master...make-wrapper-skip-assert) https://git.io/vdEzo
NixOS_GitHub has left #nixos []
<steveeJ>
sphalerite: ^
erictapen has quit [(Remote host closed the connection)]
<sphalerite>
steveeJ: commented :)
erictapen has joined #nixos
ShalokShalom_ is now known as ShalokShalom
Acou_Bass has quit [(Read error: Connection reset by peer)]
<hyper_webirc>
Mic92: never knew how hard "crypto" is... you need so many unique/random things and make sure they are unique and random...
<Mic92>
hyper_webirc: I skimmed over the slides at some point
<hyper_webirc>
Mic92: well, I actually watched it... it's a good explanation on what it actually does... also interesting that zfs encryption still works with dedup
<bigvalen>
I was on last night asking for help re-building /boot - got it all working in the end. Probably not the right way. And it took WAY TOO LONG to remember that you need to set the bootable bit in the MBR.
orivej has joined #nixos
<bigvalen>
Today's question; do people keep their /etc/nixos configs in github ?
<pxc>
yes
hc has quit [(Ping timeout: 255 seconds)]
<sheyll>
I would like to switch from CentOS7+CloudInit to NixOS. Is it possible to configure nixos to boot to some pre-cloud-configuration systemd-target that retreives a Nix configuration from e.g. user-data and then does nixos-rebuild as last step, which (re-)configures the system (including network) and automatically (re)starts systemd-services?
hc_ has quit [(Ping timeout: 248 seconds)]
hc has joined #nixos
orivej has quit [(Ping timeout: 260 seconds)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] acowley opened pull request #30164: lnav: add platforms metadata so hydra builds on darwin (master...lnav-platforms) https://git.io/vdEDq
NixOS_GitHub has left #nixos []
<disasm>
sheyll: not sure if it's exactly what your looking for, but I know the nixops backend for digital ocean uses nixos-infect to take a non-nixos system and make it nixos.
<sheyll>
nice, cannot use though, I am looking to replace Centos+Cloud-init
<sheyll>
this cloud-init python crap is terrible
<sheyll>
as is CentOS
reinzelmann has quit [(Quit: Leaving)]
c0dehero is now known as PyroLagus
<sheyll>
so I want to boot a configuration, that contains a systemd service that might trigger a nix-rebuild with a nix configuration from an external source like amazons user-data
<sheyll>
I am a nix noob, just evaluating alternatives
<sheyll>
I read part of the manual, and it sais, that `nixos-rebuild switch` will apply a config and also restart systemd services, I wonder how robust that is
<hyper_ch>
on zfs, do I have to use any kind of "discard" option on zfs?
<hyper_ch>
I mean with ssd
fiveht has joined #nixos
<hyper_ch>
and also, is there anything wrong with disabling atime on zfs?
deepfire has quit [(Ping timeout: 248 seconds)]
fiveht has quit [(Client Quit)]
koserge has quit [(Ping timeout: 255 seconds)]
k2s has joined #nixos
fiveht has joined #nixos
eacameron has quit [(Remote host closed the connection)]
fiveht has quit [(Client Quit)]
k2s has quit [(Client Quit)]
fiveht has joined #nixos
<disasm>
anyone see this during nox review? subprocess.CalledProcessError: Command '['git', '-c', 'commit.gpgSign=false', 'fetch', '--depth', '20', '--quiet', 'origin', '+refs/heads/master']' returned non-zero exit status 128
taktoa has joined #nixos
<clever>
disasm: what happens if you manualy run the same command?
<hyper_ch>
hi clever
<makefu>
disasm: for me it helps when i remove .nox
<makefu>
in home dir
MoreTea has quit [(Ping timeout: 260 seconds)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] vbgl pushed 2 new commits to master: https://git.io/vduUq
<NixOS_GitHub>
nixpkgs/master cbf5307 Vincent Laporte: ocamlPackages.biniou: 1.0.9 -> 1.2.0
<NixOS_GitHub>
nixpkgs/master 5728b8d Vincent Laporte: coqPackages.coquelicot: 2.1.2 -> 3.0.1...
NixOS_GitHub has left #nixos []
nico202 has joined #nixos
Piece_Maker has joined #nixos
<Piece_Maker>
eey all, im wondering if anyone here's running nixos on a raspberry pi 3? ive got the base image installed and a basic server configuration going, but the built-in wifi doesnt seem to work - has anyone got a fix for this i could swipe?
<nico202>
hi, anybody using hydra? I've a problem setting it up. I've enabled it as a service in the config and i'm forwarding requests to it via nginx proxypass. The home html loads, but the link inside it are pointing to it's local address (not the server)
<Piece_Maker>
ixxie: the only part about making the wifi work is just the wpa_supplicant commands - but my wifi card doesnt even *show up* in ifconfig hehe
<ixxie>
hmmm
<ixxie>
not sure Piece_Maker, but Dezgeg is the resident ARM expert; they may know...
iqubic has quit [(Quit: Connection closed for inactivity)]
<Piece_Maker>
its not a dealbreaker, once im done writing my configuration its gonna be plugged into my router via ethernet and forgotten about anyway XD but would be nice to have it all going
oida_ has joined #nixos
goibhniu has quit [(Ping timeout: 258 seconds)]
oida has quit [(Ping timeout: 260 seconds)]
<hyper_ch>
when I enable services.cron - how could I check on the system what was actually setup?
JosW has quit [(Quit: Konversation terminated!)]
<samueldr>
Piece_Maker: you will either want to import <nixpkgs/nixos/modules/installer/scan/not-detected.nix>
<samueldr>
I have not tested yet, but it's how the installation media should load the firmware
<Piece_Maker>
oooohhh ok
<Piece_Maker>
is there a preference for either of those two?
<samueldr>
not sure
<Piece_Maker>
ahh wait
<Piece_Maker>
the first one is actually the same thing as the second by the looks of it, its literally just a 'hardware.enableRedistributableFirmware = true; line hehe
<samueldr>
the not-detected file is only enabling that rule
<samueldr>
ninja'd
<Piece_Maker>
:) thanks, ill give it a go
<samueldr>
I know that for a time, `not-detected` was in the generated hardware-configuration.nix for the installer, possibly?
<Piece_Maker>
well the thing is
<Piece_Maker>
i used a pre-built image, not the installer
<Piece_Maker>
so i never got a generated hardware-configuration.nix :P
<Piece_Maker>
hmmokay so its now downloading a package 'firmware-linux-nonfree', always a good sign
<azdle>
Darn, well luckily I have a not-too-old version in a git repo.
<infinisil>
^^ this puts the config files in /run/current-system/configuration
<azdle>
Thanks for that for the ineviatable next time, infinisil.
mudri has joined #nixos
<infinisil>
azdle: ;)
taktoa has joined #nixos
simukis has quit [(Quit: simukis)]
sigmundv has quit [(Quit: ZNC 1.6.5 - http://znc.in)]
<catern>
guh
<catern>
ansible is so much worse than I expected
<catern>
this is the first time I've written a non-trivial playbook, and it's *awful*
sigmundv has joined #nixos
deepfire has quit [(Ping timeout: 240 seconds)]
koserge has quit [(Ping timeout: 240 seconds)]
<catern>
just curious, does anyone have a suggestion for a non-awful way to script my Nix on Debian deployment? i'll probably have to stick with ansible though..
<Drakeson>
Hmm, in https://nixos.wiki/wiki/How_to_install_NixOS_from_Linux there is a part that asks me to modify init. and it looks a bit dirty to me. Do you know if systemd can be coerced to run a bash session instead of its regular?
<Drakeson>
I guess I should learn me some systemd...
ToxicFrog has quit [(Ping timeout: 252 seconds)]
orivej has quit [(Ping timeout: 255 seconds)]
pxc has joined #nixos
sary has quit [(Ping timeout: 260 seconds)]
sary has joined #nixos
maiksen has quit [(Ping timeout: 248 seconds)]
erasmas has quit [(Quit: leaving)]
magnetophon has quit [(Remote host closed the connection)]
<Acou_Bass>
hmm ive got a slightly weird problem that i feel should have a really easy answer but my minds drawing a blank :P im firing up a ZNC server in my configuration.nix - got a services.znc.networks.networkname.password = "passwordgoeshere"; line
<Acou_Bass>
but its erroring
<Acou_Bass>
because my password contains a { character
<Acou_Bass>
do i just need to escape that character?
<infinisil>
Acou_Bass: if it contains "${" you need to make a "\${" out of it
<Acou_Bass>
its just a { not a ${
<infinisil>
Can you get me a string that has this problem?
<infinisil>
because just "{" works in a nix-repl
<Acou_Bass>
hmmkay well obviously im not typing the full password here but
<Acou_Bass>
i mean... maybe it isnt the { throwing the error but its that line that has it and i cant see what else it could be :P
JagaJaga has joined #nixos
<infinisil>
Acou_Bass: What's the error exactly?
<Acou_Bass>
ahhh wait... nope, ignore me
<Acou_Bass>
its not the { throwing the error... my password also contains a \ at the end
Acou_Bass has quit [(Quit: ZNC 1.6.5 - http://znc.in)]
Acou_Bass has joined #nixos
<infinisil>
Already then :)
<Acou_Bass>
sorry about that... i reckon ive fixed it
* Acou_Bass
tests
<Acou_Bass>
it appears this is even sillier than i thought originally
<Acou_Bass>
my password also has a \ at the end which it appears to be escaping the final " to surround the password, can that happen? 0,o
Acou_Bass has quit [(Client Quit)]
JagaJaga has quit [(Ping timeout: 260 seconds)]
Acou_Bass has joined #nixos
ToxicFrog has joined #nixos
markus1189 has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] fpletz opened pull request #30172: nixos: clean up wifi firmware & default kernel modules (master...cleanup/firmware-modules) https://git.io/vduG5
NixOS_GitHub has left #nixos []
<Acou_Bass>
turns out setting up nixos as a server is hard than i expected :D my config is gigantic compared to my desktop config and i havent finnished yet!
<infinisil>
Acou_Bass: What's so big in it?
<Acou_Bass>
well, my znc config is a good chunk
markus1199 has quit [(Ping timeout: 240 seconds)]
serhart has quit [(Quit: serhart)]
serhart has joined #nixos
* infinisil
looked up ZNC and now needs it too
<infinisil>
I've been wanting to set up an IRC bouncer for a bit now