<Lisanna>
I'm noticing that if I restart the nginx nixos service it will sometimes fail to unbind from the port or something, causing the restarted instance to fail to bind with "address already in use". Anyone ever have to solve this before?
Wizek_ has quit [(Ping timeout: 248 seconds)]
fiveht has joined #nixos
<Lisanna>
manually killing the stale process works but it'd be nice if there was a more "robust" solution
adamt_ has joined #nixos
adamt_ has quit [(Changing host)]
adamt_ has joined #nixos
hamishmack has joined #nixos
nslqqq has quit [(Ping timeout: 248 seconds)]
nslqqq has joined #nixos
spietz has joined #nixos
Sonarpulse_ has quit [(Ping timeout: 240 seconds)]
digitus has quit [(Quit: digitus)]
<Lisanna>
also, it looks like the NixOS cache is down?
dan_b has joined #nixos
erasmas has quit [(Quit: leaving)]
<dan_b>
so I apologise for paste & run, but I'm going to bed now (which makes this not a particulary urgent question)
<dan_b>
I'm trying to cross-compile a kernel
<dan_b>
but it seems to be assuming gcc as HOSTCC which is clearly not going to work
<dan_b>
I don't know if cross-compilation wizards hang out here nor when is the best time to reach them
<Lisanna>
oh, does the nixos cache not respond to ping?
Wizek_ has joined #nixos
wolfcub has joined #nixos
<adamt_>
Lisanna: cache.nixos.org does
adamt_ is now known as adamt
hariel has quit [(Ping timeout: 260 seconds)]
markus1199 has joined #nixos
dan_b has quit [(Ping timeout: 260 seconds)]
markus1189 has quit [(Ping timeout: 240 seconds)]
spietz has quit [(Ping timeout: 248 seconds)]
Arcaelyx has quit [(Ping timeout: 250 seconds)]
rosa has joined #nixos
fiveht has quit [(Quit: WeeChat 1.9.1)]
adamt_ has joined #nixos
adamt_ has quit [(Changing host)]
adamt_ has joined #nixos
<DavidEGrayson>
dan_b: I do a lot of cross compilation, but mostly outside of nixpkgs in my own recipes called nixcrpkgs.
<DavidEGrayson>
dan_b: Watch out for stdenv.mkDerivation! It defines a ton of environment variables that will confuse your build script. It also wraps all your compiler tools in shell scripts which seems like asking for trouble.
<gchristensen>
DavidEGrayson: have you reviewed the cross work from sonarpulsee?
kier has quit [(Remote host closed the connection)]
<DavidEGrayson>
dan_b: Here's the line I use if I happen to be using stdenv: unset CC CXX CFLAGS LDFLAGS LD AR AS RANLIB SIZE STRINGS NM STRIP OBJCOPY
<DavidEGrayson>
gchristensen: Not really, I know Ericson2314 is working on that stuff in nixpkgs and he CC's me pull requests once in a while, and I take a look.
<gchristensen>
ah, same person :)
kier has joined #nixos
adamt has quit [(Ping timeout: 248 seconds)]
<DavidEGrayson>
OK, yeah, I've chatted with im.
<DavidEGrayson>
*him
<gchristensen>
cool
<DavidEGrayson>
dan_b: That was just general advice from me. I don't know if that will actually help you get past your error.
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] kquick opened pull request #31923: thespian: Python library init at 3.8.3 (master...thespian) https://git.io/vFF7B
NixOS_GitHub has left #nixos []
orivej has quit [(Remote host closed the connection)]
rosa has quit [(Read error: Connection reset by peer)]
<DavidEGrayson>
dan_b: Yeah, 'gcc: command not found' is an odd error. There ought to be a 'gcc' on your path even if you're cross-compiling, because you might need to build some native programs along the way.
spietz has joined #nixos
ris has quit [(Ping timeout: 258 seconds)]
dhess``` has quit [(Remote host closed the connection)]
dhess``` has joined #nixos
erictapen has joined #nixos
jakub_ has joined #nixos
rosa has joined #nixos
<jakub_>
hi, i am completely new to nixos and i am completely confused, i can find a package 8.2.1.nix in channel nixos-unstable development/compilers/ghc but nix-env gives me only ghc-8.0.2 whats going on?
<tilpner>
You looked in nixos-unstable, but your nix-env might not use the ghc from there
<gchristensen>
run nix-info ?
tanonym has joined #nixos
dhess``` has quit [(Remote host closed the connection)]
mrkgnao has joined #nixos
<tanonym>
> QApplication: invalid style override passed, ignoring it. Cannot mix incompatible Qt library (version 0x50901) with this library (version 0x50902)
rosa_ has joined #nixos
<tanonym>
This is the error I get when trying to run the official telegram desktop client in NixOS.
<jakub_>
tilpner, gchristensen: the path in nix-info contains the file 8.2.1.nix
<tanonym>
I'm running plasma5 as my DE, but it also occurs in Enlightenment DE
adamt_ has quit [(Ping timeout: 268 seconds)]
rosa has quit [(Read error: Connection reset by peer)]
Supersonic112 has quit [(Disconnected by services)]
Supersonic112_ has joined #nixos
Supersonic112_ is now known as Supersonic112
lambdamu_ has joined #nixos
rosa has quit [(Quit: rosa)]
lambdamu has quit [(Ping timeout: 246 seconds)]
rosa has joined #nixos
mbrgm has quit [(Ping timeout: 248 seconds)]
Wizek_ has quit [(Ping timeout: 248 seconds)]
mbrgm has joined #nixos
rosa has quit [(Client Quit)]
rosa has joined #nixos
<codedmart>
I am not sure what this error means: `error: anonymous function at nixpkgs/pkgs/development/tools/build-managers/gn/default.nix:1:1 called without required argument ‘ApplicationServices’, at nixpkgs/lib/customisation.nix:74:12`
<codedmart>
I am trying to get gn to build for darwin. So I added `ApplicationServices` to the very top `{ stdenv, ..., ApplicationServices }`
<codedmart>
Then I see that error?
tanonym has quit [(Quit: Konversation terminated!)]
<rosa>
How would i determine wether cgroup hierarchy is used or not in a chroot
<rosa>
Assuming it is the same for every distro
<fearlessKim[m]>
any idea why rebuild would not restart livirtd "NOT restarting the following changed units: libvirtd.service". I am using nixops but all machines are stopped
<clever>
elvishjerricco: it would probably be simpler to make your own fixed-output derivation that sets $HOME and does all of those git config flags, then git clones
<elvishjerricco>
Meh. I'm already working with a fork of nixpkgs. Might as well add the few lines to fetchgit to support this =P
<clever>
a preFetch script might do it
<clever>
just add a preFetch string to the derivation, and have builder.sh eval it
<elvishjerricco>
Yea that sounds like the best way
* hodapp
stabs NVidia in the face.
dieggsy has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] joachifm pushed 2 new commits to master: https://git.io/vFFhD
<NixOS_GitHub>
nixpkgs/master e7a65e5 Andreas Rammhold: yara: 3.6.3 -> 3.7.0
<NixOS_GitHub>
nixpkgs/master 7cfe20d Joachim F: Merge pull request #31920 from andir/yara...
NixOS_GitHub has left #nixos []
<hodapp>
hrmph. maybe I should try to fix the Pandas package on Python 3.6 since I need it
<hodapp>
it works on Python 3.5, but tensorflow on Python 3.5 has tensorflow-tensorboard as a dependency, which has bleach 1.5.0 as a dependency, which conflicts with a bunch of other libraries which rely on bleach 2.x
<hodapp>
and I'm a little lost for why different major versions can't coexist
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] joachifm pushed 2 new commits to master: https://git.io/vFFhp
<NixOS_GitHub>
nixpkgs/master 3daaf09 rnhmjoj: mutt: add option to configure S/MIME and GnuPG
<NixOS_GitHub>
nixpkgs/master 7059c88 Joachim F: Merge pull request #31207 from rnhmjoj/mutt-gpg...
NixOS_GitHub has left #nixos []
rosa has joined #nixos
sibi_ has joined #nixos
<elvishjerricco>
Oh that's extremely frustrating. Adding a `postFetch` hook to a `fetchgit` call you had previously built will not yield a new build. Changing the url also doesn't trigger a rebuild. I think it just always thinks that `fetchgit` call with the same `rev` will have the same output...
Wizek has quit [(Quit: Connection closed for inactivity)]
<clever>
elvishjerricco: you have to make the hash invalid
<elvishjerricco>
Why shouldn't changing `postFetch` do that?
<clever>
elvishjerricco: the issue, is that nix already has an output with that name + hash, and by definition, the output is fixed to always have that hash
<clever>
so nix trusts you, and uses the previous value, because you claimed it has the same hash as before
<clever>
fixed-output rules bypass the normal automatic rebuild triggers
<elvishjerricco>
Oh I see, you just have to put a dummy in the `sha256` field to get it to rebuild and force you to update the hash.
rosa has quit [(Quit: rosa)]
rosa has joined #nixos
<clever>
yeah
<clever>
i always change a digit of the hash to 0, or increment a digit
<rosa>
Does ANYONE here know about systemd-nspawn? -_-
<clever>
then it will never find the output, and do a rebuild
c0ffee152 has quit [(Quit: Lost terminal)]
rosa has quit [(Quit: rosa)]
jtojnar has joined #nixos
rosa has joined #nixos
rosa has quit [(Ping timeout: 250 seconds)]
laggy_wifi has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] benley pushed 1 new commit to master: https://git.io/vFbfC
<NixOS_GitHub>
nixpkgs/master a1e340f Benjamin Staffin: noto fonts and tools: update to newer tagged releases (#31543)...
NixOS_GitHub has left #nixos []
gfixler has quit [(Ping timeout: 268 seconds)]
gfixler has joined #nixos
mfiano has left #nixos ["WeeChat 1.9.1"]
reinzelmann has joined #nixos
endformationage has quit [(Quit: WeeChat 1.9.1)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
justanotheruser has quit [(Ping timeout: 255 seconds)]
erictapen has joined #nixos
reinzelmann has quit [(Quit: Leaving)]
laggy_wifi has quit [(Remote host closed the connection)]
statusbot has quit [(Ping timeout: 264 seconds)]
laggy_wifi has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
spietz has quit [(Ping timeout: 260 seconds)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
Guanin has quit [(Ping timeout: 260 seconds)]
aszlig has quit [(Remote host closed the connection)]
dieggsy has quit [(Ping timeout: 250 seconds)]
katyucha has quit [(Ping timeout: 240 seconds)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
aszlig has joined #nixos
Guanin has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
babyflakes has joined #nixos
laggy_wifi has joined #nixos
goodwill has quit [(Quit: ...)]
kkini has joined #nixos
kkini has quit [(Remote host closed the connection)]
kkini has joined #nixos
<Guanin>
Hi, is there a default way to create a directory? I want to use the OpenSSH directive "ChrootDirectory" and to have it work, I need a directory which is owned by the group of the user
<Guanin>
hyper_ch, I'd prefer a separate directory in / (like /chroot) - but it does not really matter to me - in the end, I'd mount bind a raid into it
rtjure has joined #nixos
<hyper_ch>
Guanin: see the link
<Guanin>
thanks, that will work :)
<hyper_ch>
mkdir and then maybe add chown.... not sure if the chown part works though... you'll have to test it
<Guanin>
seems like "install -d -o <user> -g <group> <path>" would be an alternative to mkdir in my case
<Guanin>
thanks for the hint :)
<Guanin>
works perfectly :)
<Guanin>
are these scripts activated before or after file systems are mounted?
BioSpider has joined #nixos
erictapen has quit [(Ping timeout: 248 seconds)]
<hyper_ch>
I guess after
<hyper_ch>
because if the mounts are not done, how would it know where to create stuff
<Guanin>
okay, then I'll have to setup the bind mounts in that script, too
<Guanin>
thanks
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] 7c6f434c pushed 1 new commit to master: https://git.io/vFbk6
<NixOS_GitHub>
nixpkgs/master 4db842f Michael Raskin: lispPackages: A less aggressive way to manipulate ASDF search path, as suggested by Fare
NixOS_GitHub has left #nixos []
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] orivej pushed 1 new commit to staging: https://git.io/vFbky
<NixOS_GitHub>
nixpkgs/staging 4d50d79 Orivej Desh: atlas: disable parallel building
NixOS_GitHub has left #nixos []
proteusguy has quit [(Remote host closed the connection)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] orivej pushed 2 new commits to master: https://git.io/vFbIa
<NixOS_GitHub>
nixpkgs/master 929d3d4 Bas van Dijk: opencv: 3.3.0 -> 3.3.1
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
darklajid has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
<darklajid>
Hey there. Considering to give nixos another try after a couple years of absense. I really love firefox nightly though - how difficult would it be to make that work in an otherwise stable/"normal" system?
<MichaelRaskin>
A one-time investment of learning about overlays.
<MichaelRaskin>
Then you check out Mozilla's Nix overlay that contains firefox-beta-bin
<darklajid>
Awesome! Thank you so much, I only searched the main nixpkgs repository
<MichaelRaskin>
I think Mozilla doesn't bother maintaining a separate source build of nightlies for Nixpkgs, and nobody in Nixpkgs tries to keep up.
<infinisil>
Oh My God, I'm so stupid
laggy_wifi has quit [(Remote host closed the connection)]
<MichaelRaskin>
Ouch ouch ouch. They use evaluation-time fetching of nightly checksums (with signature verification and over https), yeah, that will never land in mainline Nixpkgs.
laggy_wifi has joined #nixos
<Havvy>
MichaelRaskin: I think nightlies in nixpkgs without an overlay is a _bad_ idea anyways. (Including the Rust beta and nightly packages)
<infinisil>
I forgot to rebase my local master and wondered why nobody was working..
<MichaelRaskin>
Havvy: well, it depends.
<MichaelRaskin>
With Rust there are some long-term differences between stable/beta/nightly.
<Havvy>
MichaelRaskin: If you care about those differences, you should be using the aforementioned overlay.
<MichaelRaskin>
Well, I think there are some Rust packages that can be built with any nightly rust from the last few months or so.
<MichaelRaskin>
So then there would have to be yet another overlay for these.
laggy_wifi has quit [(Remote host closed the connection)]
<MichaelRaskin>
I guess it's a tradeoff. With Firefox Nightly it is clearer that the Mozilla overlay should be the place to get them (but betas might provide a pre-release check whether the build process needs to be updated).
asuryawanshi has joined #nixos
<infinisil>
Oh regarding the firefox evaluation thing, it's even worse: they use the exact same url to distribute new nightly versions -> need to update hash to not get a build failure
laggy_wifi has joined #nixos
<MichaelRaskin>
Well, they do update it in evaluation-time.
<hyper_ch>
I still think there should be a better way for vbox + extension = comipiling required
asuryawanshi has quit [(Remote host closed the connection)]
<Havvy>
MichaelRaskin: You probably don't want to have things in the main nixpkgs ecosystem depend upon unstable things in a compiler.
asuryawanshi has joined #nixos
<infinisil>
MichaelRaskin: I think there's 2 versions: The one you mentioned, evaluating and downloading the newest version everytime. Or you can pin it to a specific version and update the hash manually (they have a script for that)
<NixOS_GitHub>
[nixpkgs] Mic92 pushed 5 new commits to staging: https://git.io/vFbYe
<NixOS_GitHub>
nixpkgs/staging e207ac1 Andreas Rammhold: alsa-lib: 1.1.4.1 -> 1.1.5
<NixOS_GitHub>
nixpkgs/staging 9b8ebd8 Andreas Rammhold: alsa-utils: 1.1.4 -> 1.1.5
<NixOS_GitHub>
nixpkgs/staging e1f8c72 Andreas Rammhold: alsa-tools: 1.1.3 -> 1.1.5
NixOS_GitHub has left #nixos []
asuryawanshi has quit [(Ping timeout: 268 seconds)]
FRidh has quit [(Quit: Konversation terminated!)]
rosa has joined #nixos
<amfl>
Anyone know if there are special steps involved in running Firefox 57 with pulseaudio? I'm using the mozilla firefox overlay, and have installed `nix-env -iA nixos.latest.firefox-bin`, it's giving me "To play audio, you may need to install the required PulseAudio software." I'm okay to go down a rabbit hole on my own, but I thought I'd ask if there was an easy fix first. (Some flag I pass, maybe?)
seanparsons has quit [(Ping timeout: 260 seconds)]
<amfl>
Sorry for noob questions :)
asuryawanshi has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
rosa has quit [(Client Quit)]
asuryawanshi has quit [(Remote host closed the connection)]
<MichaelRaskin>
I think on NixOS you need to set hardware.pulseaudio.enable = true; and rebuild
<amfl>
That sounds sensible... I had installed nixos.pulseaudioLight but it didn't seem to help, which makes sense if it wasn't enabled
<MichaelRaskin>
You need the daemon running, not just installed.
FRidh has joined #nixos
rosa has quit [(Client Quit)]
rosa has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
seanparsons has joined #nixos
rosa has quit [(Client Quit)]
rosa has joined #nixos
<amfl>
MichaelRaskin you champioooon, works great
<amfl>
You helped me last night too :) Thank you!
zzamboni has quit [(Quit: Leaving.)]
laggy_wifi has quit [(Remote host closed the connection)]
adamt_ is now known as adamt
laggy_wifi has joined #nixos
zzamboni has joined #nixos
Capprentice has joined #nixos
thc202 has joined #nixos
rosa has quit [(Quit: rosa)]
mariel__ has joined #nixos
rosa has joined #nixos
civodul has joined #nixos
notdaniel has joined #nixos
notdaniel has quit [(Read error: Connection reset by peer)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
asuryawanshi has joined #nixos
asuryawanshi has quit [(Remote host closed the connection)]
asuryawanshi has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
FRidh has quit [(Ping timeout: 248 seconds)]
Tucky has quit [(Quit: WeeChat 1.9.1)]
ma27 has quit [(Ping timeout: 250 seconds)]
FRidh has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
ertes-w has joined #nixos
__monty__ has joined #nixos
Tucky has joined #nixos
zzamboni has quit [(Quit: Leaving.)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 pushed 1 new commit to master: https://git.io/vFbsv
<NixOS_GitHub>
nixpkgs/master 1476962 Joerg Thalheim: pythonPackages.nototools: fix name & evaluation...
NixOS_GitHub has left #nixos []
zzamboni has joined #nixos
ma27 has joined #nixos
davidak has joined #nixos
asuryawanshi has quit [(Ping timeout: 268 seconds)]
deepfire has joined #nixos
asuryawanshi has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
rosa has quit [(Quit: rosa)]
laggy_wifi has joined #nixos
__monty__ has quit [(Read error: Connection reset by peer)]
rosa has joined #nixos
<forgetful>
hello everybody! I can see on the nixpkgs-unstable channel that says: Released on 2017-11-16 11:11:49 from Git commit b8f7027360855faee9d72956092be2e030a12a5f via Hydra evaluation 1410813. Does anybody know how to do that with a private hydra instance? Thanks.
doublehp has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
<doublehp>
i have installed firefox 51 and 56; how do I remove 56 to fallback on 51 ?
laggy_wifi has joined #nixos
<goibhniu1>
hi doublehp, did you install it with nix-env?
<doublehp>
yes
goibhniu1 is now known as goibhniu
<goibhniu>
one way is to find the store path (ls /nix/store/*firefox*) and then `nix-env -i /nix/store/blahblah-firefox`
dan_b has joined #nixos
<doublehp>
so, reinstall it ?
<hyper_ch>
hmmm, is anyone using nixos as dns server?
<doublehp>
i know it's in /nix/store/jg6dx2l8xqydi2xjwvsiffsl0swafhvj-firefox-51.0.1/lib/firefox-51.0.1/firefox
<katona>
doublehp: it will just relink to the old one
<doublehp>
won't future nix-env update links to latest version ?
<katona>
It currently does, but if you do what goibhniu said , you can relink (although I can't try it out right now)
laggy_wifi has quit [(Remote host closed the connection)]
<dhess`>
hyper_ch: resolver, or authoritative?
laggy_wifi has joined #nixos
<goibhniu>
doublehp: yep, it will
<hyper_ch>
dhess`: resolver.... so that you can have dns over tls and dnssec
<dhess`>
hyper_ch: I am running unbound on NixOS hosts
<doublehp>
goibhniu: so, how do I either remove 56, or tell nix I Want to use 51 ?
<goibhniu>
doublehp: you never want to upgrade?
<hyper_ch>
dhess`: does it support dns over tls and dnssec?
<dhess`>
it is not configured to use dnssec though
<dhess`>
hyper_ch: it does support dnssec
<katona>
Anyone knows why nixos boots slower then for example arch? Is there some way to speed up the boot process? (I have no SSD but it takes 38 secs and ~28 respectively)
<dhess`>
I've never heard of dns over tls so I don't know about that one.
<doublehp>
goibhniu: not for now; and, probably never again (kernel too old for recent glibc, so, stuck with 56 for life time, cause I will never update my kernel on this box )
<doublehp>
can't build Firefox57 due to old kernel; can't build 56 due to flash download issues (built was success only after disabling flash); so I want to stick to 51
rosa has quit [(Quit: rosa)]
<goibhniu>
doublehp: I *believe* you can write an expression which overrides the version of nixpkgs used for a particular set of packages, by passing the URL of the nixpkgs channel revision it should use
<doublehp>
or at least make 51 the default one
rosa has joined #nixos
<goibhniu>
or you can not manage it in your user profile
<doublehp>
is it really that hard to uninstall a package ?
<goibhniu>
and add an alias
laggy_wifi has quit [(Remote host closed the connection)]
<goibhniu>
well, the problem is that you want to upgrade nixpkgs without upgrading one particular thing
<doublehp>
i mean, a specific version
laggy_wifi has joined #nixos
<goibhniu>
I presume you also don't want to compile it yourself
<dhess`>
hyper_ch: interesting. Which public DNS providers support it?
<doublehp>
no i don't want to update nixpkgs
<goibhniu>
ever?
<doublehp>
i said, glibc issues always complain about kernel; so I will stick to nixos-17.09 nixpkgs forever !
<goibhniu>
then you're fine, you can use the last revision of nixpkgs that had firefox 51
<goibhniu>
and never upgrade
<doublehp>
that's not answering my question
<goibhniu>
sorry, I think I don't understand
<hyper_ch>
dhess`: quad9 as large dns resolver
<dhess`>
hyper_ch: Hmm, do you trust them?
<goibhniu>
doublehp: nixos-17.09 will get upgrades to firefox, so you will need to use a specific version of nixpkgs, not just the nixos-17.09 channel
<doublehp>
goibhniu: I want to uninstall firefox 56, and keep firefox51
<hyper_ch>
dhess`: there's a few contributers to quad9... among them NY and Londoner Police... that's why I'm pondering to setup my own dns resolver
laggy_wifi has quit [(Remote host closed the connection)]
paul374 has quit [(Quit: ZNC 1.6.5 - http://znc.in)]
laggy_wifi has joined #nixos
<goibhniu>
doublehp: yes, so revert nixpgks to a version that had firefox 51 and reinstall firefox?
<doublehp>
ff51 is already installed correctly
<DIzFer[m]>
uninstalling should be as nix-env -e "fullname", with "fullname" being the full string, including version number. At least if you installed FF56 via nix-env, this should work. However, I don't think nixpkgs' firefox is set up to install multiple versions in parallel
hotfuzz has joined #nixos
rosa has quit [(Quit: rosa)]
rosa has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] domenkozar pushed 1 new commit to master: https://git.io/vFbcF
<NixOS_GitHub>
nixpkgs/master bfade32 Bas van Dijk: nixopsUnstable: upgrade to HEAD and use a tarball from hydra
NixOS_GitHub has left #nixos []
<dhess`>
hyper_ch: well unbound is very good, well supported, and pretty trusted (OpenBSD uses it, for example), so I can recommend it. However, I don't know whether they support RFC 7858
<DIzFer[m]>
in any case, I'd recommend using the not-strictly-necessary version number just in case it doesn't remove 51 accidentally
<dhess`>
It can be compiled with support for dnscrypt, though.
<hyper_ch>
well, only know bind9 as dns server this far and it can probably also act as dns resolver but I'm in no need to use bind9... however I could just setup a nixos vm and acts as dns resolver... will have a look at unbound
hotfuzz_ has quit [(Ping timeout: 248 seconds)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
<dhess`>
I would not recommend bind.
<dhess`>
I used to use djbdns. It was lovely in that DJB kind of way. :)
<adamt>
Does anybody then know a neat bind alternative that supports nsupdate? :-)
<doublehp>
goibhniu: what I needed was probably --rollback, but I did it an other way
<goibhniu>
doublehp: right, that's a way to change your version of nixpkgs
rosa has quit [(Quit: rosa)]
rosa has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
<hyper_ch>
dhess`: bind works great with the control panel I use :)
<hyper_ch>
adamt: nsupdate?
<adamt>
dhess`: That sounds nice, thanks for the tip. :-)
<dhess`>
hyper_ch: wayyyyyy too many vulnerabilities in bind over the years for me to trust it for anything.
<hyper_ch>
vbox still fails to build
<adamt>
hyper_ch: nsupdate is a protocol for sending updates to the name server, thus nsupdate. :P
<hyper_ch>
but does it update the nameserver software or the data? ;)
<dhess`>
dynamic zone updates
<dhess`>
for example, from a ddns client
<hyper_ch>
well, I assume any nameserver can update zone files somehow... so yo don't need nsupdate per se but can easily create your own way to automatic update
Rovanion has joined #nixos
<adamt>
hyper_ch: the trick is to be able to do it without having to worry about reloading the config and server too often.
<dhess`>
nsupdate sucks but I'm pretty sure it's better than anything someone could whip up ad hoc
<Rovanion>
Is it possible to use a encrypted home partition created by ubuntu as the home partition of a nixos?
<makefu>
Rovanion: they use ecryptfs, right?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] pSub pushed 2 new commits to master: https://git.io/vFblj
<NixOS_GitHub>
nixpkgs/master d41d43d Andreas Rammhold: apt-cacher-ng: 0.9.1 -> 3.1...
<adamt>
dhess`: But at some point the frequency of updates can be so high that you don't want to worry about the details of reloading the software. :-)
doublehp has quit [(Ping timeout: 240 seconds)]
<Rovanion>
makefu: Yes, their wiki seems to indicate so.
<dhess`>
adamt: I'm not arguing the point. It would be insane to try to gin up your own equivalent to nsupdate.
<dhess`>
well this works as well for any clients that use it as a resolver, so I prefer this approach
<dhess`>
anyway you can edit that bit out
<hyper_ch>
:)
doublehp has quit [(Quit: Leaving.)]
<dhess`>
oh and another thing -- if you import this, it will enable the service. There is no "enable" siwtch in the options/config. There should be, but when I wrote this I was just manually importing modules into my machine definitions.
<dhess`>
I'm in the process of fixing that but I haven't gotten to this one yet
<dhess`>
actually let me edit that to remove the bits that use the adblock stuff
zzamboni has joined #nixos
<dhess`>
eh just use the bit from services.unbound in that config, that's probably what you want anyway
kkini has quit [(Ping timeout: 260 seconds)]
phreedom has joined #nixos
<dhess`>
I run it on a "dummy" network interface with an RFC 1918 address, which decouples the DNS resolver you give to your clients from the address on the physical NIC. Then you can move the unbound service around to different hosts as needed without updating client configs
<hyper_ch>
dhess`: leave the adblock stuff in there :)
zzamboni has quit [(Ping timeout: 240 seconds)]
<dhess`>
hyper_ch: ok, in that case you will also need the unbound-block-hosts script derivation
<dhess`>
let me dig that up
notdaniel has joined #nixos
<dhess`>
it's very simple
<hyper_ch>
and I think I should really get ipv6 to run at the office
zzamboni has joined #nixos
<dhess`>
ok I added the derivation for the script that downloads the hosts file and converts it to unbound format
<dhess`>
you just need to add that to your overlays or packageOverrides
<hyper_ch>
will have a look at it
<dhess`>
so that pkgs.unbound-block-hosts evaluates
<hyper_ch>
shcFile? why "shc"?
<dhess`>
uhh...
<dhess`>
hmm
<hyper_ch>
I tend to think that you wanted to write "src"?
<dhess`>
oh yeah, SomeoneWhoCares. But I spelled it wrong! :D
<dhess`>
hahaha
<hyper_ch>
but I might be mistaken
<hyper_ch>
ah
<dhess`>
the block list is downloaded from someonewhocares.org (Dan Pollock)
fendor has joined #nixos
<dhess`>
should be swcFile. Or maybe I'll just pick a better name altogether
<hyper_ch>
why forward to google dns and not root servers?
<adamt>
hyper_ch: You probably shouldn't query the root servers directly, unless you don't trust your other options for DNS servers
<dhess`>
so actually it does update the list, it just can't reload unbound. That's because unbound-control doesn't work in NixOS. I need to fix that
<dhess`>
hyper_ch: god that is *awful* if you do any kind of streaming
<dhess`>
all streaming services (Netflix etc) expect that you're using anycast DNS with a local CDN
<dhess`>
anycast-/geo-DNS
<hyper_ch>
so what is aweful abou it?
<dhess`>
Awful for performance. You want to hit a local CDN node
<adamt>
hyper_ch: You end up connecting to servers far away from yourself
<dhess`>
otherwise you could be streaming from Australia or something
<hyper_ch>
yeah, there's high ping like 30ms
<adamt>
hyper_ch: Like for instance, many ISP's have local netflix caches to improve performance, which you would miss out on.
<TimePath>
Hi from Australia
<hyper_ch>
TimePath: Adelaid?
<TimePath>
if you're... anywhere in the world, you don't want to be streaming from here :P
<dhess`>
TimePath: err no offense :))
<hyper_ch>
I got my first cell phone in Australia
<TimePath>
hyper_ch: Western Sydney
<dhess`>
I just picked the location that would be most likely to be quite remote from pretty much anywhere else
<hyper_ch>
TimePath: at least not a Victorian ;)
<hyper_ch>
dhess`: you should have gone with NZL
<TimePath>
hyper_ch: NSW has rivalries with QLD and VIC
<dhess`>
Murray... prizint.
<hyper_ch>
TimePath: nobody likes Vics
mkoenig has quit [(Remote host closed the connection)]
<hyper_ch>
Unfortunatley, quite a few people I went to high school with in Adelaide moved to Melbourne
<MichaelRaskin>
hyper_ch: Well, you want all streamers to have CDN POPs there, NZ can actually use Australian servers (depending on CDN).
asuryawanshi has quit [(Remote host closed the connection)]
<TimePath>
hyper_ch: Mexico has them now
<TimePath>
(we call it Mexico because it's south of the border :P)
asuryawanshi has joined #nixos
<hyper_ch>
didn't know tha
<hyper_ch>
TimePath: you like footy? If so, how are the Crows doing?
mkoenig has joined #nixos
<TimePath>
hyper_ch: don't follow sports
zzamboni has quit [(Quit: Leaving.)]
<hyper_ch>
:)
rosa has quit [(Read error: Connection reset by peer)]
laggy_wifi has quit [(Remote host closed the connection)]
zzamboni has joined #nixos
laggy_wifi has joined #nixos
<hyper_ch>
TimePath: not even Netball?
maxpayne has joined #nixos
<TimePath>
hyper_ch: falls under sports, so nope
<hyper_ch>
I enjoyed watching netball in high school ;)
zzamboni has quit [(Client Quit)]
<maxpayne>
I have a multi user Ubuntu setup with NIX_DAEMON=remote. When a private git repository is referenced, authentication doesn't work and there is no useful error message other than "public key permission denied".
<TimePath>
hyper_ch: pervert :P
<dhess`>
maxpayne: most likely it's because the remote daemons don't have the private key needed to pull from the private git repo.
<maxpayne>
dhess`: I created a directory structure with the same key owned by the various nixbld1,2,etc. users
<hyper_ch>
TimePath: how comes?
<dhess`>
maxpayne: what about the username?
<maxpayne>
dhess`: I also instrumented the nix file to show as what user it was running.
<maxpayne>
dhess`: what do you mean?
fendor has quit [(Remote host closed the connection)]
fendor has joined #nixos
<maxpayne>
dhess`: on github you don't need a username, I think.
<dhess`>
maxpayne: the user@remote.git.repo.com
<maxpayne>
dhess`: for github it's al just git@somethingsomethinggithub.com
<dhess`>
maxpayne: oh... don't you need [github] user=foo in your .gitconfig?
<maxpayne>
dhess`: I don't think so, but the nixbld users do not have a home dir.
<maxpayne>
dhess`: is it forbidden for the nixbld users to have a homedir?
<maxpayne>
dhess`: because it would make life a lot easier if that wasn't the cae.
<dhess`>
maxpayne: I don't know.
<maxpayne>
case
<maxpayne>
According to the manual it is stated that the home dirs of the build dirs if they exist are supposed to be empty.
<MichaelRaskin>
You can create a directory and make it $HOME during the build
iyzsong has joined #nixos
<MichaelRaskin>
You can let additional paths to be accessed from inside the sandbox.
<maxpayne>
MichaelRaskin: I would like to copy my private key in some directory available to the various nixbld users as a first test.
<maxpayne>
It seems like a giant jigsaw puzzle, because every git(1) extension point is blocked by nix and not exported in the fetchPrivate extension by git.
<maxpayne>
by nix*
laggy_wifi has quit [(Remote host closed the connection)]
<maxpayne>
If I could just pass GIT_SSH_COMMAND="ssh -F /tmp/ssh-conf" everything would work.
laggy_wifi has joined #nixos
<maxpayne>
I have tested that already outside of a nix execution environment.
<maxpayne>
(as the right user)
<MichaelRaskin>
Well, you need to add a directory with the key to build-sandbox-paths in /etc/nix/nix.conf
jakub_ has quit [(Quit: leaving)]
<maxpayne>
MichaelRaskin: is there also a way to completely eliminate using the root user?
<MichaelRaskin>
What do you mean?
simukis has joined #nixos
<MichaelRaskin>
Nix daemon wants to switch to different build users.
zzamboni has joined #nixos
<maxpayne>
MichaelRaskin: I mean when configuring these things. The target systems are development workstations and it would be nice if root access was not required for this script.
<MichaelRaskin>
Target systems are the systems that run fetchgitPrivate?
<maxpayne>
MichaelRaskin: yes
<maxpayne>
MichaelRaskin: I am most interested however in how other people are currently doing this.
<MichaelRaskin>
Without root access you do not get all the sandboxing features during the build.
laggy_wifi has quit [(Remote host closed the connection)]
<maxpayne>
MichaelRaskin: I read somewhere that the .ssh/config file needs to be owned by exactly one user. If nixbld1..10 all need to potentially access it, it is impossible to solve the problem.
zzamboni has quit [(Ping timeout: 248 seconds)]
<maxpayne>
Via setfacl multiple users could access it, but I don't know whether the openssh client also checks for that.
<dhess`>
oh it uses the host key to auth with GitHub. Interesting.
zzamboni has joined #nixos
<maxpayne>
dhess`: that doesn't even mention nixbld users, so that's a different problem.
<MichaelRaskin>
maxpayne: you can generate a copy with proper permissions during the build.
<dhess`>
maxpayne: but the approach used solves your key issue, no?
<maxpayne>
dhess`: no
laggy_wifi has quit [(Remote host closed the connection)]
<maxpayne>
MichaelRaskin: as what user doing what?
laggy_wifi has joined #nixos
<MichaelRaskin>
As a part of the build, nixbldN user would make a copy, set the permissions and pass it to ssh with -f
<maxpayne>
MichaelRaskin: I don't understand what you mean. Are you talking about modifying code below nixpkgs?
<MichaelRaskin>
I think fetchgitPrivate already does that.
<MichaelRaskin>
On the other hand, niksnut seems to want to drop it.
Guanin has quit [(Read error: Connection reset by peer)]
<maxpayne>
MichaelRaskin: I am also unable to get any useful debugging information out of the call to git fetch.
<maxpayne>
And the annoying thing is that everything works without nix in the way.
zzamboni has quit [(Remote host closed the connection)]
zzamboni has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
<Lisanna>
Does /nix support multiple daemon processes using it? I'm thinking of having a shared /nix between multiple NixOS computers, and want to know if that would be "safe"
<maxpayne>
Would a single user setup just use my users ssh credentials or would there still be another user running the builds?
laggy_wifi has joined #nixos
<MichaelRaskin>
Well,
<MichaelRaskin>
it would all be under the same user
<MichaelRaskin>
Not sure if user-namespaces are used to block /home/ access by default
<maxpayne>
MichaelRaskin: do you know of anyone who has ever gotten the approach you described with nix.conf to work for the purpose of providing access to ssh keys for a set of nixbld users?
<MichaelRaskin>
No, I don't use git repositories for non-public stuff and do not follow the details of fetchgit* changes.
bennofs has joined #nixos
zzamboni has quit [(Ping timeout: 240 seconds)]
zzamboni has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
fendor has quit [(Ping timeout: 268 seconds)]
laggy_wifi has joined #nixos
<maxpayne>
MichaelRaskin, when I run nix-build is that run in a sandbox by default? I.e., will /tmp/foo as passed via ssh-config-file=/tmp/foo not be visible?
zzamboni has quit [(Ping timeout: 260 seconds)]
<MichaelRaskin>
I am not sure about the default for Nix-on-Ubuntu, but most probably it is sandboxed, but you can configure what paths are visible inside the sandbox.
zzamboni has joined #nixos
<maxpayne>
MichaelRaskin: yes, build-extra-sandbox-paths should do that.
bennofs has quit [(Ping timeout: 252 seconds)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
<adamt>
When installing nixos on a vsphere guest, it times out waiting for my root partition (ext4 on lvm) on boot (after install), and ends up kernel panic'ing. The same install procedure works fine on a KVM guest. Does anybody have an idea about kernel modules or similar that i might miss? (there's no automatic hardware detection, we're installing nixos by copying a closure to a host)
<adamt>
("waiting for device /dev/disk/by-label/nixos to appear....")
periklis has joined #nixos
<Dezgeg>
probably the driver for the root disk
<Dezgeg>
maybe boot.initrd.availableKernelModules = ["vmw_pvscsi"]; was it
laggy_wifi has quit [(Remote host closed the connection)]
Ivanych has quit [(Quit: Leaving.)]
laggy_wifi has joined #nixos
<adamt>
Dezgeg: Ah, good point, didn't think about that. Maybe i should compare with the detected kernel modules from a normally installed vsphere guest. :>
Wizek has joined #nixos
<Dezgeg>
yes
ma27 has quit [(Ping timeout: 252 seconds)]
<joko>
Is it possible to catch undefined variables? I've tried something like this: networking.nameservers = let try = builtins.tryEval networking.interfaces.eth0; in if try.success then [ "8.8.8.8" ] else [];
laggy_wifi has quit [(Remote host closed the connection)]
<maxpayne>
This is with the sandbox enabled and with the extra files in the sandbox.
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
<adamt>
Dezgeg: It worked. Different driver though, but thanks a bunch for the suggestion, i never thought about it being a silly missing driver. :-)
<Lisanna>
this seems like a really simple usecase, but I can't find documentation on this anywhere: how do I run more than one of a NixOS service (like nginx)? Or, alternately, more than one of a container?
laggy_wifi has quit [(Remote host closed the connection)]
<dan_b>
lisanna: it's based on systemd "unit templates"
<dan_b>
containers run as systemd units too, I think, so both questions have the same answer ;-)
<Lisanna>
okay, but that requires specification of services as systemd services, rather than as nixos services
<dan_b>
oh sorry, yeah. I see what you're getting at
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
<Lisanna>
and I understand that services need to be singletons sometimes, so it would be hard to have some interface for running more than one of them, but containers definitely seem like they at least should have a way to spin up multiple of the same kind, e.g., declaratively specified
<maxpayne>
MichaelRaskin: in the mapped files, what happens to permissions?
<MichaelRaskin>
Nothing special.
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
<maxpayne>
MichaelRaskin: I am looking within the context of the nix execution at a directory listing with all the proper permissions, but it is as if my /tmp/ssh-conf file completely ignored.
ma27 has joined #nixos
<maxpayne>
MichaelRaskin: e.g. GIT_SSH is not in the environment, which is what I would expect to happen.
zzamboni has quit [(Ping timeout: 240 seconds)]
<ij>
I've got a project with a nix/ directory, where mkDerivation { src = ./.. }; That means that I cannot get a cache hit on the project, when a rebuild of only the derivation is actually necessary. Can I supply multiple srcs?
<maxpayne>
Can someone please tell me how to call nix-build to get git fetch as in nix-prefetch-git to properly pass the right parameters to ssh?
<ij>
gchristensen, cool thanks \o/
ssmike has quit [(Ping timeout: 246 seconds)]
<maxpayne>
I am using a sandbox and I already mapped the key files to within the sandbox.
rosa has joined #nixos
<ij>
Oh, it's haskellPackages' mkDerivation, which doesn't do srcs.
<gchristensen>
:|
fendor has joined #nixos
bennofs has joined #nixos
<maxpayne>
gchristensen: I have been trying to get this to work for a few hours already. Can you please have a look?
nuncanada has joined #nixos
notdaniel has quit [(Quit: Leaving)]
rosa has quit [(Client Quit)]
laggy_wifi has quit [(Remote host closed the connection)]
<ij>
I guess I could make a derivation for that, but yeah — it sucks.
laggy_wifi has joined #nixos
<gchristensen>
maxpayne: you're using fetchgitprivate?
<maxpayne>
gchristensen: yes
rosa has joined #nixos
<maxpayne>
gchristensen: and I have instrumented it in all the ways I can think of to check assumptions.
Wizek_ has joined #nixos
<maxpayne>
gchristensen: the layer where I can see where ssh is looking for keys and authentication is beyond my control, unless I would recompile git.
<maxpayne>
gchristensen: if I pass GIT_SSH_COMMAND='ssh -F /tmp/ssh-conf' outside of nix, everything works.
<gchristensen>
ok, I'm stepping out for 10min, but can you put together a gist of everything you have, minus secret stuff? including permissions on all the relevant files
<maxpayne>
gchristensen: I would prefer to know how it is supposed to work, as opposed to how I am making it work, if that is possible.
laggy_wifi has quit [(Remote host closed the connection)]
<LnL>
tmp is namespaced in a build so the file might not exist there
nix-gsc-io`bot has quit [(Client Quit)]
Wharncliffe has joined #nixos
<maxpayne>
LnL: <foo> is supposed to be replaced before all that happens, no?
<maxpayne>
LnL: i.e. with a NIX_PATH=foo=/tmp/bar using <foo> should replace in an expanded file contents where no reference to /tmp/bar is made anymore.
<gchristensen>
maxpayne: who owns the SSH key listed in ssh-config?
<maxpayne>
gchristensen: nixbldN (via %u syntax)
<LnL>
the path is resolved by nix, but the build still needs to read it
<gchristensen>
I don't know how to help without you providing the details I asked for
<maxpayne>
LnL: in that case, that might be the problem, but shouldn't it warn about that?
<LnL>
AFAAIK
<LnL>
dunno
<gchristensen>
LnL: even in a fixed-output?
<LnL>
could be something else
<maxpayne>
gchristensen: in my ssh-config I refer to a pattern based Identity*.
<maxpayne>
gchristensen: that's the answer to your question, but perhaps I wasn't clear.
<gchristensen>
oh, no, you answered that just fine :) it was "a gist of everything you have, minus secret stuff? including permissions on all the relevant files"
laggy_wifi has quit [(Remote host closed the connection)]
<gchristensen>
somehow people'd rather maintain a complicated SSH key setup than a simple local bare clone
<maxpayne>
gchristensen: no, sometimes existing tools exist that do things already wrong and there can only be worked around.
<gchristensen>
I'm not saying strictly for your case
<maxpayne>
gchristensen: you are right that your approach is better in all other cases.
Neo-- has joined #nixos
rosa has quit [(Quit: rosa)]
rosa has joined #nixos
<gchristensen>
I don't know, maxpayne, I've only ever gotten this to work once, and I can't look at that implementation anymore b/c it doesn't exist :(
freusque has joined #nixos
<gchristensen>
also it was on a mac, which had bad sandboxing
<gchristensen>
maybe I can help you get the bare clone idea working?
<maxpayne>
gchristensen: I was interested in getting node2nix to work, but I don't suppose you want to port that to use bare clones :P
<maxpayne>
gchristensen: how would this situation be different with a single user nix setup?
<gchristensen>
I don't see why node2nix wouldn't support it
<gchristensen>
its the same as a fetchgit, but with "url" set to a local path
<maxpayne>
gchristensen: the build includes a ssh file config in /tmp that contains data from the user that is running nix-build.
<maxpayne>
gchristensen: the compiler generates fetchgit commands.
bennofs has quit [(Ping timeout: 240 seconds)]
<gchristensen>
sure
<maxpayne>
gchristensen: those could be replaced, but who knows what nasal daemons I will find there?
<gchristensen>
so run `git remote set-url origin /your/local/path` and see what it does when you generate it
<maxpayne>
gchristensen: I don't understand.
<gchristensen>
sorry, I'm out of time for the morning :( I'd recommend experimenting with this, even in the worst ways possible (editing the node2nix output)
<hyper_ch>
so, on Black Friday, will the put Sasmung 960 2TB on sale for half price? :)
zzamboni has joined #nixos
fendor has quit [(Remote host closed the connection)]
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Moredread opened pull request #31936: calibre: Fix error when sending E-Mails (master...calibre) https://git.io/vFbiF
NixOS_GitHub has left #nixos []
Wharncliffe has quit [(Quit: Lost terminal)]
rosa has quit [(Read error: Connection reset by peer)]
rosa has joined #nixos
laggy_wifi has quit [(Remote host closed the connection)]
laggy_wifi has joined #nixos
laggy_wifi_ has joined #nixos
laggy_wifi has quit [(Read error: Connection reset by peer)]
myrl has joined #nixos
<Rovanion>
Sorry for being daft but which package contains sshd?
<Rovanion>
So I put services.sshd.enable = true; in my /etc/nixos/configuration.nix and then?
zzamboni has quit [(Quit: Leaving.)]
<hiroshi>
it looks like sshd is in the base system
<Rovanion>
That's a surprisingly large package to be in the base system.
<hiroshi>
you can't find sshd_config in the unix path /etc/ssh/sshd_config
<hiroshi>
it isn't so large
<hiroshi>
you need an ssh server for your host. in the base instalation
<Rovanion>
It probably rules out nixos for use in containers.
<hiroshi>
what do you mean Rovanion ?
<Rovanion>
Either way. I've added services.openssh.enable = true; to my /etc/nixos/configuration.nix, which command should I run to gobble up that information and enable sshd?
<Rovanion>
systemctl start sshd says there is no such service.
<clever>
nixos-rebuild switch
<hiroshi>
after any change in /etc/nixos/configuration.nix you need to rebuild --> nixos-rebuild switch
<hiroshi>
hyper_ch: hello there. I tested nixOs in a virtio disk inside a kvm and crashed -_- haha
rosa has quit [(Ping timeout: 246 seconds)]
<hyper_ch>
hiroshi: switch to sata.... having issues as well with the virtio driver
<hiroshi>
hyper_ch: I will do it this weekend . thanks
<hyper_ch>
you used virt-manager?
<hiroshi>
yes
zzamboni has joined #nixos
mrkgnao has joined #nixos
<Rovanion>
hiroshi: So what I meant by that is: If I have a new-fangled container environment with perhaps a 100 different containers being built, shuffled around, deployed and run at the same time I wouldn't want them all to contain sshd if they don't need it.
<clever>
Rovanion: nixos containers share the /nix directory with the host, so the data isnt duplicated
laggy_wifi_ has quit [(Remote host closed the connection)]
<hyper_ch>
hiroshi: nixos-live cd was able to see the virtio disk just fine but after installed, it didn't work anymore for me... all I did was just change to switch to sata and it works.... I guess it's some driver missing but I needed to get things up and running, so didn't test more closely
laggy_wifi_ has joined #nixos
<hiroshi>
Rovanion: I understand your point
<hiroshi>
hyper_ch: nice sreenshot . I will change to sata
<clever>
Rovanion: nixpkgs also contains routines for making docker images, they usually lack full nixos, and ive gotten them down to 69mb
<Rovanion>
clever: That's interesting. Are nix containers their own type of containers/images where docker is another type?
zzamboni has quit [(Ping timeout: 260 seconds)]
<clever>
Rovanion: nixos hosts support containers, and will automaticaly build the container and spawn it with a shared copy of the host /nix/
<hiroshi>
I mean containers is for all linux containers
<hiroshi>
haha so many options
<Rovanion>
Interesting. I've longed to set up and play with kubernetes for quite a while now, and nixos has also seemed like the next logical steps in terms of linux distributions. I've just not gotten into it yet.
<clever>
hyper_ch: everything under the containers attribute is declarative containers, you give it a nixos module describing the container, and nixos-rebuild will build it and launch it for you
<clever>
hiroshi: ^^^
rosa has quit [(Client Quit)]
<hyper_ch>
clever: I tried with imperative container
<clever>
hiroshi: docker, is more about having pre-made images (or making them) that dont depend on the host in any way, and it cant share the /nix of the host
<clever>
i havent played with lxc yet
<hiroshi>
cool
laggy_wifi_ has quit [(Remote host closed the connection)]
<steveeJ>
clever: why can't it share /nix?
<hiroshi>
clever: lxc has no chance. docker, kubernetes ..
mariel__ has quit [(Read error: Connection reset by peer)]
laggy_wifi_ has joined #nixos
mariel__ has joined #nixos
<steveeJ>
hiratara: LXC is used by Canonical's LXD
<clever>
steveeJ: it may have that option, but it would be more complex to setup, docker doesnt expect the sharing, and there are security issues with just jaming your own mounts into docker
ssmike has joined #nixos
<steveeJ>
clever: isn't that exactly what nix containers do? there's not much difference at the kernel level between systemd-nspawn and docker
<clever>
steveeJ: at the kernel level, there isnt much difference
<Rovanion>
Encryptfs integration Just Worked (tm) by the way!
<hiroshi>
clever: there are an other light options like: firejail bubblewrap
<hiroshi>
at this current moment flatpak hasn't a binary in nixOS
<clever>
ive also played with a custom container type using systemd-nspawn and fuse
<Rovanion>
How do you keep track of your nixos configuration? Just stick it in a public git repository?
laggy_wifi_ has quit [(Remote host closed the connection)]
<clever>
Rovanion: i mostly put the boot related stuff into configuration.nix, then add ./nixcfg/hostname.nix to the imports list
<clever>
Rovanion: so everything that isnt needed to boot, goes into a file in the nixcfg git repo
laggy_wifi_ has joined #nixos
<clever>
if i ever have to duplicate the install, the boot stuff is going to change anyways, no need to preserve it
babyflakes has quit [(Quit: Connection closed for inactivity)]
<maxpayne>
gchristensen: I got it to work, but I don't know whether it will be fragile or not, yet.
<gchristensen>
which?
<maxpayne>
gchristensen: just modifying /etc/nix/nix.conf
<gchristensen>
oh?
<steveeJ>
is there support for inputting a user's password on nixos-rebuild yet?
<maxpayne>
gchristensen: I was able to instrument git after all and then it was easy.
mariel__ has quit [(Remote host closed the connection)]
mariel__ has joined #nixos
laggy_wifi_ has quit [(Read error: Connection reset by peer)]
laggy_wifi_ has joined #nixos
<hyper_ch>
need moooore coffee
<maxpayne>
I need more LSD, but I don't cheat at programming.
laggy_wifi_ has quit [(Remote host closed the connection)]
<hiroshi>
haha
<hiroshi>
go for it
laggy_wifi_ has joined #nixos
Ivanych has joined #nixos
ssmike has quit [(Remote host closed the connection)]
ssmike has joined #nixos
<maxpayne>
Why does "pinpointing versions of dependencies..." take so long? I suspect it is using some O(n^2) algorithm or worse.
<maxpayne>
Some code in node-env.nix is doing that.
<maxpayne>
OK, it terminated, but it took 5 minutes.
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 closed pull request #30808: luajit: do not override INSTALL_INC (master...fix-luajit-include-directory) https://git.io/vFfGS
NixOS_GitHub has left #nixos []
<Mic92>
maxpayne: it does a lot of symlink in slow shell scripts
<maxpayne>
Mic92: I have been so busy getting it to run that I don't even know what to expect in result anymore when it is done.
<maxpayne>
Mic92: nix-build -A package # with some extra params.
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
bkchr has joined #nixos
slack1256 has joined #nixos
periklis has joined #nixos
zzamboni has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<maxpayne>
nix-env -i nodejs works but is slow. How can I just make nix-env -iA nodejs or something similar work?
<gchristensen>
`nix-env -qaP '.*nodejs.*'` will reveal a few options for installing nodejs with -A :)
<gchristensen>
hint, the left column is the argument to use
zzamboni has quit [(Client Quit)]
zzamboni has joined #nixos
Itkovian has quit [(Quit: Textual IRC Client signing off)]
<steveeJ>
gchristensen: maxpayne: in case you don't know nox, I'd recommend to check it out
<gchristensen>
ah yeah people definitely like that
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
rotaerk has quit [(Ping timeout: 248 seconds)]
zzamboni has quit [(Read error: Connection reset by peer)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
Neo-- has quit [(Remote host closed the connection)]
Neo-- has joined #nixos
<maxpayne>
nix-env -iA nixos-17.09.nodejs-6_x returns error: attribute ‘nodejs-6_x’ in selection path ‘nodejs-6_x’ not found
pie_ has quit [(Ping timeout: 248 seconds)]
<clever>
steveeJ: there is something special about having access to a filehandle of an FS outside the container
<clever>
steveeJ: that allows gaining access to a handle to /
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<ee1943>
is the "clang can't find headers" problem still unresolved?
slack1256 has quit [(Remote host closed the connection)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<tilpner>
maxpayne - Does nixos-17.09.anything-else work?
<tilpner>
(Possible, but uncommon)
<steveeJ>
clever: AFAIU that's true for ordinary chroot's
<steveeJ>
clever: modern containers prevent from escaping the chroot by dropping the CAP_SYS_CHROOT capability and by using pivot_root instead of chroot
laggy_wifi_ has quit [(Remote host closed the connection)]
<steveeJ>
clever: and of course by using a separate mount namespace. I think it should be enough, otherwise using what docker calls "volumes" would be inherently insecure
laggy_wifi_ has joined #nixos
Isorkin has joined #nixos
ssmike has quit [(Ping timeout: 240 seconds)]
<Isorkin>
Hi. How to change in apache Log Format to my custom format?
<tilpner>
Isorkin - Are you looking for services.httpd.logFormat and services.httpd.virtualHosts.*.logFormat?
<Rovanion>
Is it possible to make the nixos-rebuild output less agressive?
<steveeJ>
Rovanion: what is an aggressive output? :-D
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has quit [(Remote host closed the connection)]
ssmike has joined #nixos
<tilpner>
Oops, very sorry, confused you with the other person :/
laggy_wifi_ has joined #nixos
<ekleog>
makefu: so... I never had any answer from google, but my mail eventually got delivered, after being stuck ~39 hours inside google's servers... no idea what that was about!
indie-visitor has joined #nixos
<ekleog>
hope things get right by themselves for you too!
JosW has joined #nixos
<makefu>
ekleog: i found at least one issue (but with another mail server). the RDNS entry for the ip was poiting to a domain which was disabled
rotaerk has joined #nixos
<ekleog>
my RDNS is alright, so... not this in my case :/ (and I've got spf/dkim/dmarc setup)
laggy_wifi_ has quit [(Remote host closed the connection)]
drakonis has quit [(Read error: Connection reset by peer)]
laggy_wifi_ has joined #nixos
<woffs>
maxpayne, tilpner: I remember there have been problems with channel names containing - or .
<Rovanion>
Do you run git as root to version /etc/nixos?
<Rovanion>
I guess that's the only sane thing to do in order to not leak privileges.
<tilpner>
woffs - This would be possible with .nix-defexpr/nixos-17.nix, which returns an attribute set { "09" = ... };, but that is probably not what maxpayne has set up
laggy_wifi_ has quit [(Remote host closed the connection)]
<tilpner>
Rovanion - I have /cfg/nixos, owned by me:users, no problems so far
laggy_wifi_ has joined #nixos
yermalovich has joined #nixos
ssmike has quit [(Remote host closed the connection)]
ssmike has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Ma27 opened pull request #31938: docker-ls: init at v0.3.1 (master...init/docker-ls) https://git.io/vFbAh
<tilpner>
Ah, okay. I was going to ask you to run nix-instantiate --eval -E '(import <nixos-17.09> {}).lib.nixpkgsVersion'
laggy_wifi_ has joined #nixos
<maxpayne>
tilpner: what is the relationship between nixpkgs set in NIX_PATH and the nix-channel?
zraexy has joined #nixos
<tilpner>
maxpayne - NIX_PATH specifies where to look for <path-items>. It can set a single path item (nixpkgs=...), but also set where to look for any other path items. In this case NIX_PATH points to a directory maintained by nix-channel, specifying to look up any unknown path items there
roberth has joined #nixos
<tilpner>
maxpayne - So if your NIX_PATH=/foo, and you ask to find <bar>, it will look for /foo/bar/default.nix
<tilpner>
(And /foo/bar.nix)
<maxpayne>
tilpner: I don't see why in this case NIX_APTH points to a directory maintained by nix-channel.
mrkgnao has quit [(Ping timeout: 250 seconds)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
periklis has quit [(Remote host closed the connection)]
<tilpner>
maxpayne - nix-env doesn't know about the concept of channels (not in this regard, at least). You can use nix-env without nix-channel. nix-channel maintains this directory of Nix expressions that we call channels, but nix-env wouldn't use them on its own. By setting the right NIX_PATH, we tell it where to look for e.g. <nixpkgs>
periklis has joined #nixos
<maxpayne>
tilpner: ok, in that case I might not be using the channel at all, since my nixpkgs points to ~/projects/nixpkgs
nallar has joined #nixos
Ross has quit [(Ping timeout: 268 seconds)]
nallar is now known as Ross
<tilpner>
You can verify that by running nix-instantiate --eval -E '(import <nixpkgs> {}).path' and nix-instantiate --find-file nixpkgs
<tilpner>
(With different channel names, as appropriate)
Slabity has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
rosa has joined #nixos
laggy_wifi_ has joined #nixos
fendor has joined #nixos
<Wizek>
so, cabal2nix outputs a nix expression that is a function, which returns a derivation, right? How do I need to modify this output if I want to override a haskell package dependency with `haskell.lib.dontCheck`?
<Wizek>
Do I have to make the function return a hashmap of derivations?
rosa has quit [(Client Quit)]
<Wizek>
I've tried like this, which doesn't seem to work: `executableHaskellDepends = [async base bytestring (haskell.lib.dontCheck compose-ltr) containers]`; the build still fails with a test-failure
laggy_wifi_ has quit [(Remote host closed the connection)]
babyflakes has joined #nixos
laggy_wifi_ has joined #nixos
<Wizek>
is that because this only overrides compose-ltr at the top level? And if it is also a dependency of a dependency of the main project, then nix will still try to run tests on it?
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<maxpayne>
tilpner: I don't know what you meant by "as appropriate" in that context.
<maxpayne>
tilpner: both commands when used literally returned the same.
mrkgnao has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
adamt has quit [(Ping timeout: 248 seconds)]
trevorcook has joined #nixos
maxpayne has quit [(Ping timeout: 260 seconds)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
ThatDocsLady_ has joined #nixos
mariel__ has quit [(Read error: Connection reset by peer)]
ssmike has quit [(Ping timeout: 255 seconds)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
adamt has joined #nixos
adamt has quit [(Changing host)]
adamt has joined #nixos
justan0theruser has quit [(Ping timeout: 248 seconds)]
<steveeJ>
Rovanion: try --no-build-output
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
dak`nakal has quit [()]
laggy_wifi_ has quit [(Remote host closed the connection)]
SuprDewd has quit [(Read error: Connection reset by peer)]
laggy_wifi_ has joined #nixos
adamt has quit [(Ping timeout: 255 seconds)]
jtojnar_ has joined #nixos
jtojnar has quit [(Ping timeout: 240 seconds)]
SuprDewd has joined #nixos
jtojnar_ is now known as jtojnar
spietz has joined #nixos
<forgetful>
hello everybody. I am trying to make a private channel but when updating it I get the following error: mv: cannot move 'my-channel' to a subdirectory of itself, '/nix/store/nbmdw9xr057iklzfg2xd1h626d37avmf-my-channel/my-channel/my-channel'. Any idea why? If I remove the folder my-channel from the nixexprs.tag.bz2 then I get a "not a directory" error.
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
jsgrant has quit [(Ping timeout: 268 seconds)]
fendor has quit [(Ping timeout: 240 seconds)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
zzamboni has joined #nixos
<Rovanion>
I see users.extraUsers mentioned in the documentation for adding a user. But then who are the original users?
<Rovanion>
steveeJ: Will do!
Arcaelyx has quit [(Ping timeout: 240 seconds)]
Arcaelyx_ has joined #nixos
<gchristensen>
Rovanion: users.extraUsers is an alias to users.users
<Rovanion>
But why?
<gchristensen>
well for exactly the reason you're asking: it used to be called extrausers but users makes more sense
laggy_wifi_ has quit [(Remote host closed the connection)]
erasmas has joined #nixos
laggy_wifi_ has joined #nixos
<Rovanion>
Ha, so its just a matter of renaming the option name in the configuration then?
<gchristensen>
yep
<hyper_ch>
hmmm, in a nix-expression in the unpackCmd: How can I use bash's pe? it doens't like filesizes="${filesizes##*=}"
Neo-- has quit [(Remote host closed the connection)]
Neo-- has joined #nixos
miko__ has joined #nixos
mrkgnao has quit [(Ping timeout: 240 seconds)]
<Rovanion>
gchristensen: Same goes for extraGrups then I guess?
<gchristensen>
yeah
ma27 has quit [(Ping timeout: 240 seconds)]
yermalovich has left #nixos ["ERC (IRC client for Emacs 25.3.2)"]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<Rovanion>
:)
reinzelmann has quit [(Quit: Leaving)]
yegortimoshenko has joined #nixos
<yegortimoshenko>
i want to shadow an executable in system-wide environment (specifically, GNU tar, with libarchive tar). it works fine, but nixos-rebuilds warns about collision. how do i disable that warning?
<yegortimoshenko>
nixos-rebuild*
laggy_wifi_ has quit [(Remote host closed the connection)]
<Rovanion>
Now this is a little weird language theory question: But why does the nix config format have semicolons everywhere? It seems like everything that is followed by a semicolon is already something which belongs to a pair and thus in no need of a terminating character.
<gchristensen>
Rovanion: perhaps to prevent cases of ambiguous parsing
mrkgnao has quit [(Ping timeout: 255 seconds)]
<clever>
das-g[m]: ah, just run the app like ./result/bin/appname
jb55 has joined #nixos
<das-g[m]>
thanks, I'll try that
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] domenkozar pushed 1 new commit to master: https://git.io/vFN8t
<NixOS_GitHub>
nixpkgs/master ad492e6 Domen Kožar: hydra: 2017-10-26 -> 2017-11-21
NixOS_GitHub has left #nixos []
<aminechikhaoui>
Hi, how is the ./nixos/maintainers/scripts/ec2/create-amis.sh script invoked for generating amis
<aminechikhaoui>
if I run as is it barfs about some pkg that need alloUnfree = true to be set
asuryawanshi has joined #nixos
<clever>
asuryawanshi: which package does it complain about?
<aminechikhaoui>
the package is ec2-ami-tools
<clever>
ah, my only guess is to put allowUnfree into your config.nix like the error says
katyucha has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] domenkozar pushed 1 new commit to release-17.09: https://git.io/vFN8r
<NixOS_GitHub>
nixpkgs/release-17.09 8ca1b2c Domen Kožar: hydra: 2017-10-26 -> 2017-11-21...
NixOS_GitHub has left #nixos []
<Rovanion>
gchristensen: Yes, well I was sort of wondering what these cases would be. Perhaps that there are things like "with var" that you can throw into the value side of a key-value-pair.
<aminechikhaoui>
clever: well I have that in my machine configuration.nix
<aminechikhaoui>
but in this case I think it complains about the nix-shell script
<clever>
aminechikhaoui: that only has an impact on nixos-rebuild, it doesnt affect nix-shell, nix-build, or nix-env
laggy_wifi_ has quit [(Remote host closed the connection)]
<aminechikhaoui>
:q
<aminechikhaoui>
oops
<clever>
:q!
laggy_wifi_ has joined #nixos
<aminechikhaoui>
so the whole point of the script is to not have a shell.nix I guess
<aminechikhaoui>
$ head ./nixos/maintainers/scripts/ec2/create-amis.sh
<clever>
yeah, that will re-run the script inside a shell that has those tools in $PATH
katyucha has quit [(Ping timeout: 240 seconds)]
justan0theruser has joined #nixos
<aminechikhaoui>
yeah I know
<Rovanion>
gchristensen: You know that thing about changing extraGroups -> groups in the documentation, that isn't actually valid. My nixos complains that users.users.rovanion.groups does not exist...
<aminechikhaoui>
but I expected that I don't have to create a shell.nix with those pkgs as build inputs and alloUnfree= true;
<aminechikhaoui>
I just expected the script to work out of the box as it's being used for generating images
<aminechikhaoui>
clever: am I missing something ?
<clever>
aminechikhaoui: the problem is that the option has to go into config.nix, not a shell.nix
<clever>
aminechikhaoui: and thats over in ~/.config/nixpkgs/config.nix
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
myrl has quit [(Ping timeout: 240 seconds)]
<aminechikhaoui>
yeah so I guess what I'm not understanding is why I have to add allowUnfree to the override config file if I have that already (nixpkgs.config.allowUnfree = true;) in my configuration.nix of the machine
<clever>
aminechikhaoui: the nixpkgs.config option is only passed to the instance of nixpkgs used within nixos-rebuild
<clever>
aminechikhaoui: it has no effect on all of the other nix tools
davidak has quit [(Ping timeout: 258 seconds)]
<aminechikhaoui>
ah sorry for the slow understanding :p
<aminechikhaoui>
thanks
<ij>
If I'm making a runCommand derivation, can I just use nixpkgs.rsync for building it or do I have to add it as an input?
<gchristensen>
note this fixes a sub-issue where even _existing_ for a short period is a security issue, much less actually making it in to the store permanently
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<alphor>
I see. The problem here is to prevent arbitrary expressions from having setuid capability which can be abused, as opposed to making sure specific system binaries have that priv which they need
<dhess`>
gchristensen: This is something I've encountered a few times. If you need to use an setuid ping in a derivation, should one hard-code "/run/wrappers/bin/ping" in the derivation, or is there a symbolic name that should be used?
<dhess`>
same for sendmail etc.
<alphor>
^ this was my next question, more so for config of a nixos host though
<dhess`>
it seems fragile to use the string, but I have not seen a more "proper" method anywhere in Nixpkgs.
<gchristensen>
typically we refer directly to the wrapper path
<gchristensen>
though I admit this isn't the most wonderful "story"
<dhess`>
gchristensen: that should probably be abstracted away.
<dhess`>
in case it ever changes
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<dhess`>
gchristensen: it's no worse than every shell script in the world doing #!/bin/sh :D
<dhess`>
justin-sleep: Building LEDE on NixOS is an interesting idea. Do you have a derivation somewhere?
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
Winwin has joined #nixos
<the-kenny>
Hm. Anyone got any hints on packaging a tool that resides in the kernel tree?
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<Lisanna>
Hey, does sharing a /nix between multiple hosts sound like a bad idea? Or is the /nix database concurrency safe?
Winwin has quit [(Excess Flood)]
hotfuzz has quit [(Quit: WeeChat 1.9.1)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
hotfuzz has joined #nixos
<gchristensen>
it is concurrency safe but not multiple host safe
<gchristensen>
this is because GC is done by seeing if the paths are live
<clever>
and that involves looking in /proc
<justin-sleep>
dhess`: no, I'm still pretty new to NixOS. I tried using nix-shell with buildFHSUserEnv (overriding zlib with static = true) but that didn't seem to work.
asuryawanshi has quit [(Remote host closed the connection)]
srdqty has joined #nixos
asuryawanshi has joined #nixos
justan0theruser has quit [(Ping timeout: 240 seconds)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
pie_ has joined #nixos
LexLeoGryfon has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
gsmith has joined #nixos
<gsmith>
allo, wondering if anyone has been doing any work to update the ceph package for nixpkgs ?
<Lisanna>
gchristensen: so, does that mean that just the garbage collect is not multiple host safe?
<gchristensen>
yeah
<gsmith>
I am trying to learn how to build my own packages, but turns out that taking on ceph may have been a bit too much
jtojnar has quit [(Remote host closed the connection)]
<gchristensen>
yeah I mean I wouldn't recommend doing it heh
<gchristensen>
but it might be fine
<dhess`>
justin-sleep: that's a pretty tough one to start with :) Good luck
<Lisanna>
I'm guessing hardlinking wouldn't work either
jtojnar has joined #nixos
jtojnar has quit [(Read error: Connection reset by peer)]
erasmas has quit [(Ping timeout: 250 seconds)]
<MichaelRaskin>
Well, if there is a main host that actually manages the store, and many hosts that use the store, read-only sharing should work fine.
erasmas has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
<Lisanna>
MichaelRaskin: as opposed to what? garbage collect would still not work, and were there any other problems?
laggy_wifi_ has joined #nixos
<gchristensen>
is there a way to take each line of input on the cli and output it twice without using a read loop?
<gchristensen>
like echo "hi" | mything == echo "hi hi"
<MichaelRaskin>
Lisanna: GC will work, but pretend the reader machines do not exist.
jtojnar has joined #nixos
<Lisanna>
I'm planning on having all of the hosts be more or less identical, so even with a multiple writer sharing, the GC results for one machine should be fine for any other machine
<MichaelRaskin>
If they are all identical, read-only sharing of just /nix/store and /nix/var/nix/profiles could work just fine.
<the-kenny>
Wow, usbip is great
<the-kenny>
<3 linux
JosW has quit [(Quit: Konversation terminated!)]
<Lisanna>
right... I guess I wouldn't need to have multiple writers in that case
<justin-sleep>
dhess`: trial by fire :)
<gchristensen>
Lisanna: it'd be ideal then to enforce that by making the nix store read only on all your readers
laggy_wifi_ has quit [(Remote host closed the connection)]
<Lisanna>
and read-only sharing could be implemented simply by mounting the shared nix store with read-only on all machines, and then mount with rw on the "management" machine
laggy_wifi_ has joined #nixos
<MichaelRaskin>
gchristensen: or share it as an FS after the bind-mount is there
jtojnar has quit [(Remote host closed the connection)]
<Lisanna>
MichaelRaskin: right, this is going to be a virtual network disk of some kind
<Lisanna>
and each machine will have a small bootstrapping /nix as part of a base nixos install
jtojnar has joined #nixos
<Lisanna>
just enough to get it to be able to mount the shared nix store
roberth has quit [(Ping timeout: 255 seconds)]
<gchristensen>
what is this for?
<Lisanna>
personal cluster :)
<gchristensen>
maybe you could use netboot?
laggy_wifi_ has quit [(Remote host closed the connection)]
jtojnar has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
jtojnar has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] FRidh pushed 2 new commits to master: https://git.io/vFNyq
<NixOS_GitHub>
nixpkgs/master d756ded Raphael Das Gupta: qgis: 2.18.13 -> 2.18.14
<NixOS_GitHub>
nixpkgs/master 2eafb3c Frederik Rietdijk: Merge pull request #31942 from das-g/qgis-2.18.14...
NixOS_GitHub has left #nixos []
erasmas has quit [(Quit: leaving)]
justan0theruser has joined #nixos
jtojnar has quit [(Remote host closed the connection)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] FRidh pushed 1 new commit to release-17.09: https://git.io/vFNy3
laggy_wifi_ has quit [(Remote host closed the connection)]
jmc_fr has joined #nixos
laggy_wifi_ has joined #nixos
<jmc_fr>
Hi, how can I fix this ? I have in my conf the following : `defaultLocale = "fr_FR.UTF-8";' which I want to keep, except for LC_MESSAGES which I want to be set to "en_US.UTF-8". (Looking at https://nixos.org/nixos/options.html#locale has not helped.)
erictapen has quit [(Ping timeout: 248 seconds)]
dan_b_ has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
<clever>
jmc_fr: click on the declared in link
laggy_wifi_ has joined #nixos
<clever>
it doesnt appear to set LC_MESSAGES
asuryawanshi has quit [(Ping timeout: 240 seconds)]
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
zzamboni has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
ambro718 has quit [(Quit: Konversation terminated!)]
adamt has joined #nixos
justbeingglad1 has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<jmc_fr>
clever: I'm not sure to understand : is there a solution ?
<clever>
QT plugin, ive been having the same issue with virtualbox
justan0theruser has joined #nixos
<clever>
i havent found a solution yet
laggy_wifi_ has quit [(Remote host closed the connection)]
<socksy>
well i can no longer connect to new wifi networks easily
<clever>
wpa_cli still works
<socksy>
any recommendations for WPA guis that don't use Qt?
<socksy>
somehow I can't get my head around wpa_cli
laggy_wifi_ has joined #nixos
<socksy>
isn't there like a curses one?
<clever>
ive never used a gui, i just manualy run wpa_passphrase, append it to /etc/wpa_supplicant.conf and restart the daemon
<socksy>
great for when you know exactly how to spell the SSID
<socksy>
which is almost never for me :)
<clever>
run wpa_cli, scan, wait for results, scan_results, copy/paste
<socksy>
> scan \\ OK
<socksy>
:D
vcunat has quit [(Ping timeout: 250 seconds)]
<clever>
you may need to do "wpa_cli -i wlan0" to tell it which interface to scan on
notdaniel has joined #nixos
justan0theruser has quit [(Read error: Connection reset by peer)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
jmc_fr has quit [(Ping timeout: 264 seconds)]
<socksy>
oh, scan_results. I'm not gonna remember this when it's the middle of a meetup and i need to connect and the organizer is urging me to connect to the projector
<clever>
wpa_gui should be fixed by then
<socksy>
"just gotta scan for the wifi, generate a wpa_passphrase, add it to my config and reload, 1 sec"
<socksy>
i mean, i suppose i have done literally that before
<symphorien>
if you really need a non-qt gui, consider using network manager and nm-applet
<socksy>
yeah, but something else will break in my nixconfig and i won't be able to update for ages
<socksy>
sorry, not trying to be too snarky, just musing
<clever>
i leave /etc/wpa_supplicant.conf untouched by nix
<clever>
so i can just write to it at any time and systemctl restart
<socksy>
yep, same
<socksy>
wpa_gui is literally just for quick wifi uses i plan to never return to
<socksy>
which is quite frequent
<clever>
i think wpa_cli has a command for that as well
zzamboni has quit [(Quit: Leaving.)]
<clever>
wpa_gui is just a wrapper over the same protocol wpa_cli uses
<socksy>
nm-applet worked when i tried gnome, but i think it's quite complex with dzen2 and xmonad
<clever>
try help in wpa_cli, look for add network, and select network
<socksy>
yep, for sure. I'm pretty sure i remember a curses wrapper around wpa_cli too
<socksy>
i will probably just document it somewhere in my ~/
<symphorien>
there is nmtui, an ncurses wrapper around network manager
<symphorien>
id gnome is too much
<symphorien>
*if
<clever>
select_network <network id> = select a network (disable others)
<clever>
add_network = add a network
laggy_wifi_ has quit [(Remote host closed the connection)]
<clever>
ah, add_network just creates an empty network, then set_network configures params of it
<clever>
and then select_network to force it to connect
<socksy>
clever: I'm just moaning, i googled and found that site :)
<clever>
it helps me too, so i can speed up the same problems you mentioned
<clever>
i have also written my own UI's for wpa before
<clever>
i once had a bargraph showing the signal level, updating 20 times a second
<clever>
it was sensitive enough to detect the screen being tilted
<symphorien>
wavemon can do that
<clever>
my custom GUI also monitored the cpu temp, and had its own PID loop to manage the cpu fan speed
<socksy>
sounds cool, you should open source it
laggy_wifi_ has quit [(Remote host closed the connection)]
<socksy>
and then make a nix package and let me install it ;)
<clever>
it uses QT
<socksy>
my work flow now: `vim wpa_cli_instructions; ...`
laggy_wifi_ has joined #nixos
<socksy>
clever: nooooooo
<clever>
and the code is 6 years old
<clever>
i last used it in 2011
<socksy>
i remember 2011
<clever>
symphorien: was wavemon even a thing then?
<socksy>
i use xmobar back then
<socksy>
6 years, what a change
<socksy>
ok i'm gonna shut up now
<symphorien>
not my point -- if socksy is interested in such a functionnality here is an alternative
<clever>
yeah
<socksy>
oh somehow i missed that
jtojnar has quit [(Remote host closed the connection)]
<socksy>
well that's cool af
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
nordkap has joined #nixos
jtojnar has joined #nixos
nordkap has quit [(Client Quit)]
nordkap has joined #nixos
<socksy>
ok thx
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
zzamboni has joined #nixos
davidak has joined #nixos
justbeingglad has joined #nixos
justbeingglad has left #nixos []
snajpa has joined #nixos
<snajpa>
hi guys, is there anyone brave willing to help me with NixOS installation from Debian?
<snajpa>
I'm trying to install on ZFS encrypted dataset, I have booted debian live CD (I don't have any other on me and this is the only live I had in the house)
<snajpa>
but I end up at cryptic error while nixos-install-ing
miko__ has joined #nixos
<snajpa>
importing serialized closure /tmp/tmp.VkxSbAmxLC/channel.closure to /mnt...
<snajpa>
error: path '/nix/store/b4s1gxiis1ryvybnjhdjvgc5sr1nq0ys-nix-1.11.15' is not valid
<snajpa>
what the actual... ? :D
<snajpa>
I'm like seconds from shutting it down and installing debian... which I'd rather not do, since that won't get me too far in the long run
<tilpner>
Is there no way to create a proper NixOS live stick? This sounds... uhm, interesting
<tilpner>
I guess I could ask if you have tested that your Nix-on-Debian works correctly
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] the-kenny opened pull request #31948: usbip: Init at ${kernel.version} (master...usbip) https://git.io/vFNbU
NixOS_GitHub has left #nixos []
laggy_wifi_ has quit [(Remote host closed the connection)]
<snajpa>
well I have installed nixos-generate-config with it
laggy_wifi_ has joined #nixos
sigmundv has joined #nixos
<snajpa>
I guess I could debootstrap something minimal just to dd the nixos live system from there
<srk>
we've traced it up to path ‘/nix/store/b4s1gxiis1ryvybnjhdjvgc5sr1nq0ys-nix-1.11.15’ was modified! expected hash ‘0000000000000000000000000000000000000000000000000000000000000000’, got
<snajpa>
tilpner: though I thought one could install NixOS from 'alien' distros too, since there's nothing too alien to run nix alongside .. was I wrong? :)
<nordkap>
hi! I've been trying to solve a problem all day and before I'm going to lose my sleep over it, maybe one of you can help me. I have some packages I install from outside the nixpkgs tree (via import ./path/to/file.nix which starts with "import <nixpkgs>") but wanted to be able to reference them via "mypkgs.package". I followed the instructions found at Sander van der Burgs blog, and what is working is that I could now
<nordkap>
install my packages via "nix-env -f '<repo>' -iA package"; but what I want is to define them in configuration.nix as "repo.package". I uploaded a minimal example of what I'm trying to to here: https://gist.github.com/anonymous/2abcd7dc9256dd26c908bc2c10c5e52e Please apologize my rather long post; I'm really trying to grasp the concept of Nix and am willing to learn :-)
<MichaelRaskin>
I wonder if nixos-install you got assumes a different Nix than what you have.
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
erictapen has joined #nixos
Sonarpulse has quit [(Ping timeout: 248 seconds)]
mizu_no__ has joined #nixos
<snajpa>
I'll try to set up nix once more
Sonarpulse has joined #nixos
<MichaelRaskin>
No-no, you Nix setup works, but what version is it?
spietz has quit [(Ping timeout: 268 seconds)]
digitus has quit [(Quit: digitus)]
<MichaelRaskin>
Although the error is a bit strange, although not too surprising.
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
derchris has quit [(Read error: Connection reset by peer)]
derchris_ has joined #nixos
derchris_ has quit [(Read error: Connection reset by peer)]
<snajpa>
MichaelRaskin: 1.11.15
<snajpa>
should I be on the same version that's in 17.09?
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<MichaelRaskin>
Maybe nix-env -iA nixos.nix ?
<snajpa>
error: path '/nix/store/b4s1gxiis1ryvybnjhdjvgc5sr1nq0ys-nix-1.11.15' is not valid
<snajpa>
but nix itself installed fine
<nordkap>
aszlig: not asking to have you do the work for me, mind you. But I tried that now; and nixos-rebuild is complaining about the variable "singleton" not being defined. nixpkgs.overlays takes a list as an argument, according to the manual; and the manual doesn't say anything about what "singleton" is.
<MichaelRaskin>
Boring DB corruption, I would assume…
<snajpa>
where is that db stored?
orbekk has quit [(Quit: WeeChat 1.9.1)]
<snajpa>
I have rm -Rf'd /etc/nix* ~/.nix* /nix* /mnt/nix* several times and retried the whole process
<snajpa>
consistently getting this :(
<MichaelRaskin>
Hm.
<MichaelRaskin>
Well, still would be a sanity check.
orbekk has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
jensens has quit [(Ping timeout: 240 seconds)]
<gleber_>
I am consistently getting `download-from-binary-cache.pl: still waiting for ...` when trying to `nixos-rebuild build` after switching to `nixos-unstable` channel. is this normal? Any way to unblock myself?
<snajpa>
MichaelRaskin: okay I'm giving up, I'm gonna debootstrap debian to the machine and dd nixos live to the USB key from there
<snajpa>
and I'll give NixOS one more try from more tested install path
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
orbekk has quit [(Quit: WeeChat 1.7.1)]
orbekk has joined #nixos
jb55 has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
civodul has quit [(Quit: ERC (IRC client for Emacs 25.3.1))]
orbekk has quit [(Quit: WeeChat 1.9.1)]
alhariel has quit [(Remote host closed the connection)]
orbekk has joined #nixos
forgetfulf has quit [(Remote host closed the connection)]
forgetfulf has joined #nixos
mizu_no__ has quit [(Quit: Computer has gone to sleep.)]
laggy_wifi_ has quit [(Remote host closed the connection)]
<gleber_>
Any of my attempts to install anything now gets stuck due to `download-from-binary-cache.pl: still waiting for ...` :( At the same time I can get the same files with wget...
laggy_wifi_ has joined #nixos
jensens has joined #nixos
ma27 has quit [(Ping timeout: 250 seconds)]
Curiontice has joined #nixos
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
Capprentice has quit [(Ping timeout: 240 seconds)]
nordkap has quit [(Remote host closed the connection)]
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<rycee>
gleber_: Glad you like it :-) The firefox module uses `pkgs.firefox-unwrapped` by default. You can change it to, e.g. `firefox-esr-unwrapped` by setting `programs.firefox.package = pkgs.firefox-esr-unwrapped`.
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 pushed 1 new commit to master: https://git.io/vFAe0
<NixOS_GitHub>
nixpkgs/master f6dfa22 Moritz U: usbip: init at ${kernel.version} (#31948)...
NixOS_GitHub has left #nixos []
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
<dhess`>
The tests in nixos/release.nix, how do you run those all in one fell swoop? `nix-build -A tests` doesn't do what I expected
<LnL>
don't know if there's an easy way with nix-build
<dhess`>
huh, that's surprising.
<dhess`>
LnL: how does it work with Hydra? I've never used it.
<dhess`>
does Hydra just take the release.nix and plumb all the attributes?
laggy_wifi_ has quit [(Remote host closed the connection)]
<LnL>
the hydra evaluator recursively look for drvs in attributes, nix-build only checks one level
laggy_wifi_ has joined #nixos
<LnL>
and everything gets suffixed with the platform
<dhess`>
right
<dhess`>
ok I can work around it I think
<LnL>
oh wait, I think that might not be the case for the tests
phreedom has quit [(Remote host closed the connection)]
laggy_wifi_ has quit [(Remote host closed the connection)]
<jtojnar>
why does not `nix-store --query --tree (nix-build -A xhtml1)` list libxml2 even though it is in buildInputs?
<rnhmjoj[m]>
is there any way to do some sort of partial compilation/cache with nix? i'm starting to feel older between one firefox build and another
laggy_wifi_ has quit [(Remote host closed the connection)]
laggy_wifi_ has joined #nixos
avn has joined #nixos
zzamboni has quit [(Quit: Leaving.)]
<rnhmjoj[m]>
judson: yeah, it's a lot of effort if you have many dependencies, and probably not much to gain besides not having a ton of generated code
<judson>
IIRC it's a solid couple dozen deps?
<judson>
(this is related to my feeling that there ought to be a Package Repo Adapter Best Practices Club)
<judson>
So, if there's not much to gain, can it get merged?