<ottidmes>
Apparently my issue is just bad luck with timing. ZFS 0.7.4 has support for kernel 4.14, but NixOS is still on 0.7.3, because of how recent this new ZFS version is, but my current nixpkgs 17.09 update only has the LTS versions of Linux, while I see 4.13 is available on the latest nixos-17.09, so I will just update my checkout and revert back to kernel 4.13 for now
<orivej>
ottidmes: ZFS 0.7.4 is both in master and release-17.09 already
dan_b has joined #nixos
agjacome has quit [(Quit: leaving)]
<sevcsik>
by the way, is there any documentation on which releases contain breaking changes to the .nix descriptors? I'm trying to upgrade from 14.04 to unstable, but directly it doesn't work because I get syntax errors for `nix-channel --update`
<sevcsik>
14.04 -> 15.09 seems to work
<ottidmes>
orivej: But normally if you are on nixos 17.09 stable, you would use nixpkgs-channels, right? And that is still on 0.7.3, so I probably will just have to wait a few days before it catches up with release-17.09, right? The difference between the two as far as my understanding goes is that nixpkgs-channels only updates when certain build jobs pass certain tests
<ottidmes>
I feel like I have a lot of garbage in my nix store, because I not that much free space left. I did garbage collect as much as possible, but that only won me a few GB. Is there a easy way to truly remove everything from the nix store except what is being used by the current build?
jb55 has quit [(Read error: Connection reset by peer)]
<orivej>
ottidmes: you are right, but the current release-17.09 is actually good, so you can override the channel once with "nixos-rebuild switch -I nixpkgs=https://github.com/NixOS/nixpkgs/archive/release-17.09.tar.gz" if you want to
jb55 has joined #nixos
<orivej>
ottidmes: you have do delete old references first, at least with "nix-collect-garbage -d"
<orivej>
you may discovered additional gc roots in /nix/var/nix/gcroots/
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] davidak opened pull request #32785: elementary-gtk-theme: init at 5.1.1 (master...elementary-gtk-theme) https://git.io/vb6uF
<ottidmes>
orivej: I did that, with sudo, but I think there is plenty left to be cleaned, my data usage does not reflect the amount of GBs left. I will check gcroots, thanks
<ottidmes>
du -sh /nix/store gives me 12G, so I guessed wrong, I will have to check elsewhere to explain this increase in disk usage, I at least removed some extra garbage from gcroots/auto
<orivej>
ok. "filelight" is useful for disk cleaning
<samueldr>
to get a look at disk usage, I like using ncdu
greglearns has joined #nixos
<orivej>
jtojnar: #31891 did not help solvesolve (same error)...
<jtojnar>
orivej: are you using the gtk3 package in nixos repos?
<clever>
orivej: try "ncdu -x /"
ssmike1 has joined #nixos
<greglearns>
Are there problems with Nginx enableACME not working? I have this code: nginx_service = { enable = true; recommendedGzipSettings = true; recommendedOptimisation = true; recommendedProxySettings = true; recommendedTlsSettings = true; virtualHosts."v1.website.com" = { enableACME = true;
<greglearns>
and I'm getting this error: "Failed to start Renew ACME Certificate for"
<samueldr>
look at journalctl greglearns
<orivej>
clever: looks cool?
<orivej>
!
ssmike has quit [(Ping timeout: 255 seconds)]
ssmike1 is now known as ssmike
<samueldr>
it might fail with something like TOS hash mismatch
<samueldr>
if so, update your system
<orivej>
jtojnar: what do you mean?
<jtojnar>
the solvespace2x uses gtk2 so it would not work there
<greglearns>
yegortimoshenko I have nginx_service.virtualHosts."v1.website.com".locations."/" set "extraConfig" (I declare locations in the nginx config way, not using nixops... is that okay?) Also, I have "/" as protected (is that bad?) since I want the default "/" to require login. is that not possible?
<greglearns>
oops, typo... meant to say "I have it set in extraConfig"
<clever>
greglearns: the /.well-known/ directory cant be protected
ilja_kuklic has quit [(Ping timeout: 248 seconds)]
<greglearns>
clever, yes the DNS is correct and pointing to the correct place.
<greglearns>
oh. so, do I set up a special location for that?
ssmike has quit [(Ping timeout: 272 seconds)]
<clever>
greglearns: nixos sets it up for you, but your protections are blocking it
<greglearns>
that would explain it (but I'm surprised that's not documented...) (thank you clever and yegortimoshenk)
<greglearns>
In general, is it better to use "extraConfig" or explicit locations in nixops
<clever>
i prefer using the nixos options
<clever>
but sometimes a special flag doesnt have one
<yegortimoshenko>
(orivej, jtojnar: pushed the cosmetic change)
<gchristensen>
sorry y'all, I was AFK
ssmike has quit [(Ping timeout: 255 seconds)]
jtojnar has quit [(Quit: jtojnar)]
dieggsy` has joined #nixos
<contrapumpkin>
ilbelkyr: getting PM spam from musc535
jtojnar has joined #nixos
<greglearns>
clever and yegortimoshenko the "location = /.well-known/ {}" wasn't needed and didn't work. INSTEAD, the culprit was "location ~ /\. { access_log off; log_not_found off; deny all; }" # this prevents hidden files (beginning with a period) from being served
ditadi has joined #nixos
<yegortimoshenko>
greglearns: great!
dieggsy has quit [(Ping timeout: 255 seconds)]
<greglearns>
clever and yegortimoshenko but now I've got a different problem. I'm getting a "curl: (7) Failed to connect to v1.website.com port 443: Connection refused" but in NixOps I've set "networking.firewall.allowedTCPPorts = [ 22 80 443 ];"
<gchristensen>
disasm: aaand your "can you ban this guy" just came through to my phone.
<greglearns>
I've also opened up port 80 and 443 in my VPC settings on EC2, and the ports in NixOps appear to be open too. Not sure what's going on.
<yegortimoshenko>
greglearns: i think that probably you're hitting the instance firewall
<gchristensen>
ilbelkyr: maxe325 in #conservancy
<yegortimoshenko>
networking.firewall.allowedTCPPorts is NixOS firewall, not instance firewall
<gchristensen>
ilbelkyr: thanks
<yegortimoshenko>
s/is/only opens ports in/
<greglearns>
yegortimoshenko the instance firewall (in EC2) is setup with security groups, and port 80 and 443 are open to everyone.
<greglearns>
is that what you mean by instance firewall, or am I missing something?
<gchristensen>
ilbelkyr: god speed
<yegortimoshenko>
greglearns: yeah, that was what i thought is causing the issue...
crucialrhyme has joined #nixos
<crucialrhyme>
does anyone have any familiarity with using NixOS as a virtualbox host? I don't want to do anything complicated, i just have an ISO i want to use to boot up a vm
<crucialrhyme>
is this something i do through nix expressions or is there a command somewhere that i'm not finding? i enabled the config option for it
<samueldr>
you mean headless virtualbox host, or using the normal gui things?
<crucialrhyme>
normal gui
dieggsy` has quit [(Quit: ERC (IRC client for Emacs 27.0.50))]
<yegortimoshenko>
jtojnar: i've changed gobjectIntrospection hook to run as a preFixupPhase, surely that won't break anything? also, it'll take some time, there's quite a lot of stuff that i will need to rebuild in order to see if it works or not. it should
astronavt has quit [(Remote host closed the connection)]
<gchristensen>
yegortimoshenko: I already had all the code from {^_^} so I just had to copy-paste it and add a little bit of a string match + ban thing :)
<yegortimoshenko>
or, rather, not. it fails at json-glib build.
<jtojnar>
I think it needs to be in envHook in order for it to propagate to derivations using the libraries
<yegortimoshenko>
gchristensen: thanks! it will make irc much more useful if it persists. i'm seeing more of that lately, #gnu and #fsf had similar issues a few weeks ago.
<yegortimoshenko>
jtojnar: i'll keep it as envHook and additionally invoke it at preFixupPhase so that it discovers its own girepository
<gchristensen>
yuck :( well if it persists, I can make the behavior part of {^_^} proper (who doesn't like being banned by {^_^})
<samueldr>
bots don't have feelings, even with by O__O eyes or happy-looking ^_^ faces
<jtojnar>
yegortimoshenko: I still need to understans why it does not work with envHook
aarvar has joined #nixos
crucialrhyme has joined #nixos
lambdamu has joined #nixos
<jtojnar>
and why it works in mypaint and such
<yegortimoshenko>
jtojnar: because envHook runs way before the build, and it needs to discover its own IBus typelib module that is only available after the build
<jtojnar>
oh, right
the has quit [(Remote host closed the connection)]
the has joined #nixos
the has quit [(Changing host)]
the has joined #nixos
astronavt has joined #nixos
<jtojnar>
yeah, creating both hooks sounds good then
lambdamu_ has quit [(Ping timeout: 256 seconds)]
drakonis_ has quit [(Read error: Connection reset by peer)]
<gchristensen>
ok I'm going to bed, good luck everyone, don't get hit by spambots that aren't otherwise covered by `the` :)
<jtojnar>
orivej: and GI_TYPELIB_DIR also
<orivej>
jtojnar: but when the application needs GI_TYPELIB_PATH, you do not add the comment "# For setup hook", do you?
<yegortimoshenko>
gchristensen: good night!
<orivej>
jtojnar: both XDG_DATA_DIRS and "moveToOutput share/gir-1.0" look out of place in the gi hook. the first should probably be a separate hook (propagated by gi) and the latter should be the default (independent of gi in build inputs)
<jtojnar>
orivej: when I do not mention for setup hook it is either for building introspection files (when in nativeBuildInputs) or as a library (when in buildInputs)
Supersonic112 has quit [(Disconnected by services)]
Supersonic112_ has joined #nixos
<jtojnar>
the XDG_DATA_DIRS propagated by gobject-introspection are only used during build time (the gir files are analogous to header files)
Supersonic112_ is now known as Supersonic112
<jtojnar>
the typelibs are analogous to libraries and are what is actually needed during runtime
<jtojnar>
Ideally, the XDG_DATA_DIRS with the gir files would not bleed into the closure
ylwghst has quit [(Ping timeout: 272 seconds)]
<orivej>
and this is the reason to move them to dev?
<jtojnar>
yes
<jtojnar>
but since the XDG_DATA_DIRS variable is used, the wrapGAppsHook will often add them
<jtojnar>
to the wrapper
<orivej>
jtojnar: does moving them to dev help with the closure size? it looks like make_gobject_introspection_find_gir_files will add them to XDG_DATA_DIRS regardless, and then wrapGAppsHook will embed them into the wrapper
<jtojnar>
it does not, I think it is done more for ease of mind
<jtojnar>
until we patch gobject-introspection to use a different variable
acarrico has quit [(Quit: Leaving.)]
astronavt has quit [(Remote host closed the connection)]
greglearns has quit [(Quit: Page closed)]
astronavt has joined #nixos
astronavt has quit [(Remote host closed the connection)]
<orivej>
jtojnar: how did you know that e.g. "pdfpc" needs gi for setup hook? what that a compilation or a run time error?
<orivej>
...was that...
<jtojnar>
a compilation error
<orivej>
ok, let's merge the PR now, I hope to look into this detail later
mizu_no_oto has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] yegortimoshenko opened pull request #32791: desktop-managers: do not leak feh to PATH (second attempt) (master...feh/go-away) https://git.io/vb6ot
NixOS_GitHub has left #nixos []
steshaw has quit [(Quit: Connection closed for inactivity)]
dieggsy has quit [(Remote host closed the connection)]
<yegortimoshenko>
jtojnar: there are other peculiar things in their build system that probably have to be reported, e.g. they resolve python path at autoconf time and not at actual configure time
amfl_ has joined #nixos
<yegortimoshenko>
while autoconf supposedly should generate portable configure script without any assumptions
nslqqq has joined #nixos
jtojnar has quit [(Read error: Connection reset by peer)]
jtojnar has joined #nixos
amfl has quit [(Ping timeout: 265 seconds)]
verite has joined #nixos
<jtojnar>
God, everyone should just replace it with Meson or something
<yegortimoshenko>
i like cmake
<jtojnar>
I do not like what cmake does to pkgconfig
<yegortimoshenko>
what does it do to pkgconfig?
<yegortimoshenko>
i thought i could just import PkgConfig module and then use pkgconfig without much hassle...
proteusguy has quit [(Remote host closed the connection)]
<jtojnar>
cmakelists still feel too much like a macro language
<jtojnar>
especially the functions that define variables
<yegortimoshenko>
for me it's ironic that autotools are so popular in gnu projects, because autoconf doesn't just generate blob from actual source code, but it also pushes people into shipping that blob to users
orivej has quit [(Ping timeout: 272 seconds)]
<yegortimoshenko>
i like cmake language, it is very simple and probably homoiconic
<yegortimoshenko>
or maybe not
dieggsy has joined #nixos
<yegortimoshenko>
most of our gnu-related derivations use these preautoreconfed derivations, which makes it impossible to easily swap src with git version, impossible to apply certain patches in some cases
<yegortimoshenko>
a bit more about cmake: while i see problems with the language, i believe it's the only build system around that anyone can agree on. meson afaik only has ninja backend, which makes it not an option for, e.g. game developers.
<yegortimoshenko>
s/anyone/everyone/
<yegortimoshenko>
and i tend to like things that everyone can agree on.
<jtojnar>
hmm, so incompatibility with newer versions is the reason for shipping the files
<yegortimoshenko>
it might be the reason, but it's very rare, and probably never happens anymore. autoconf is good at keeping reverse compatibility.
<yegortimoshenko>
the real problem is that this prebuilt configure script is not forward compatible. no support for new arches, no bugfixes.
<jtojnar>
I think there is at least MSVC backend now
<yegortimoshenko>
but you're right, meson does have vs and even xcode backend
<yegortimoshenko>
but i don't see the point of yet another build system when there's very mature cmake.
mizu_no_oto has quit [(Quit: ["Textual IRC Client: www.textualapp.com"])]
<yegortimoshenko>
jtojnar: thank you a lot for reviewing ibus. you understand gnome stuff better than i do, i didn't know about gi setup hook.
pie_ has quit [(Remote host closed the connection)]
pie_ has joined #nixos
zzamboni has joined #nixos
<jtojnar>
I thank you for investigating the stuff, now I understand it slightly bit more
dieggsy has quit [(Ping timeout: 265 seconds)]
jtojnar has quit [(Quit: jtojnar)]
jtojnar has joined #nixos
evangeline has quit [(Ping timeout: 240 seconds)]
aarvar has quit [(Ping timeout: 240 seconds)]
evangeline has joined #nixos
zzamboni has quit [(Quit: Leaving.)]
playX has quit [(Quit: Page closed)]
babyflakes has joined #nixos
ma27 has joined #nixos
ma27 has quit [(Client Quit)]
ma27 has joined #nixos
ma27 has quit [(Client Quit)]
yegortimoshenko has left #nixos ["ERC (IRC client for Emacs 27.0.50)"]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] peterhoeg pushed 1 new commit to master: https://git.io/vb6Pj
<NixOS_GitHub>
nixpkgs/master 2e2c2ca Peter Hoeg: uchiwa: 0.26.3 -> 1.1.0
NixOS_GitHub has left #nixos []
zzamboni has joined #nixos
uptime has quit [(Changing host)]
uptime has joined #nixos
reinzelmann has joined #nixos
zzamboni has quit [(Client Quit)]
reinzelmann has quit [(Ping timeout: 260 seconds)]
pie_ has quit [(Ping timeout: 248 seconds)]
theseriousadult has joined #nixos
<theseriousadult>
How do I update to the latest commit from the release-17.09 branch? nix-channel --update just gets me to af7e47921c4, and I need commits more recent than that for Steam to work
asuryawanshi has joined #nixos
aarvar has joined #nixos
dkibi has quit [(Ping timeout: 240 seconds)]
asuryawanshi has quit [(Ping timeout: 265 seconds)]
MP2E has quit [(Remote host closed the connection)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] peterhoeg opened pull request #32795: vala: patch releases for 0.23, 0.28, 0.34, 0.36 and 0.38 (master...u/vala) https://git.io/vb6y0
NixOS_GitHub has left #nixos []
freusque has joined #nixos
lezed1 has joined #nixos
oleks has joined #nixos
zzamboni has joined #nixos
asuryawanshi has quit [(Remote host closed the connection)]
asuryawanshi has joined #nixos
Itkovian has joined #nixos
zzamboni has quit [(Quit: Leaving.)]
zzamboni has joined #nixos
sary has quit [(Ping timeout: 264 seconds)]
pauldub_ has joined #nixos
pauldub_ is now known as pauldub
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] peterhoeg opened pull request #32796: libva, libva-utils and vaapiIntel: split into v1 and v2 (staging...u/libva_v2) https://git.io/vb6Sx
NixOS_GitHub has left #nixos []
yegortimoshenko has joined #nixos
sary has joined #nixos
posco has quit [(Ping timeout: 248 seconds)]
posco has joined #nixos
dhess has quit [(Ping timeout: 264 seconds)]
dhess has joined #nixos
asuryawanshi has quit [(Ping timeout: 240 seconds)]
asuryawanshi has joined #nixos
ylwghst has quit [(Ping timeout: 256 seconds)]
thc202 has joined #nixos
ylwghst has joined #nixos
verite has quit [(Ping timeout: 248 seconds)]
nschoe has joined #nixos
<dhess>
BlessJah: here's a package for the latest suricata with most of the bells and whistles. No CUDA (it uses the driver API, not the runtime API), and no support for out-of-kernel patches like PF_RING, but pretty much everything else is compiled in.
<yegortimoshenko>
flokli: electron in rambox-bare isn't built, it's just patchelf'd
<yegortimoshenko>
it's using the same derivation that we use now. but electron is used as an interpreter, and the rest of rambox is built from source.
<yegortimoshenko>
s/that we use now/that we have now in nixpkgs/
ylwghst has joined #nixos
jensens has joined #nixos
<yegortimoshenko>
it's less than ideal, sure, but considering that rambox also needs a proprietary build system...
<flokli>
ah, right, they want you to npm install -g electron-prebuilt… urgh
<yegortimoshenko>
it isn't required for the build iirc, nor does it really matter. npm is used (via fetchNodeModules fetcher, currently private to rambox), but nixpkgs version of electron is used
ylwghst has quit [(Remote host closed the connection)]
<yegortimoshenko>
electron could have been built from source and rambox derivation would have been no different
__Sander__ has joined #nixos
<joko>
Has anyone used netboot recently? I am trying to use it, but I am getting kernel panic, unable to mount root fs on unknown-block(0,0)
<yegortimoshenko>
joko: (i think clever would be the most likely person to help you with that)
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] peterhoeg pushed 1 new commit to master: https://git.io/vb6Ny
<NixOS_GitHub>
nixpkgs/master e198522 Peter Hoeg: scummvm: 1.9.0 -> 2.0.0
NixOS_GitHub has left #nixos []
<aw>
I know that here are people around who have successfully deployed coreboot on their machines and I would really like to know how they did it… I mean: _build_ from NixOS.
<joko>
clever: are you here?
jcb_ has joined #nixos
<yegortimoshenko>
joko: unlikely, you should probably try at EST day-time
<joko>
yegortimoshenko: right, it's 5:30AM there xD
bkchr has joined #nixos
<bkchr>
Anyone here who knows the nix chrootenv?
<yegortimoshenko>
bkchr: yes
<bkchr>
yegortimoshenko: I want to run wine in the chrootenv and get the following error: "chrootenv.c:140: unshare: Operation not permitted"
<yegortimoshenko>
bkchr: operating system?
<bkchr>
Nixos
<bkchr>
with root it works
<yegortimoshenko>
bkchr: could you please run `nix-info`?
<yegortimoshenko>
bkchr: :-) i'll read 4.14.6 changelog, not sure what the problem might be
<Li[m]>
I dont know why the author wont release the source
<yegortimoshenko>
i'm currently running 4.14.5 and it just works
<Li[m]>
some kind of dual-personality thing
<bkchr>
Li[m]: ahh okay
<bkchr>
yegortimoshenko: what works? wine?
<Li[m]>
bkchr: oh and pijul still doesnt have a convert tool
<bkchr>
yegortimoshenko: or some other commands?
pie_ has joined #nixos
<yegortimoshenko>
bkchr: this is (most likely) not specific to any particular program, it fails at chroot creation
<bkchr>
yegortimoshenko: I can switch to the chroot, that works
<yegortimoshenko>
bkchr: you can test by going to /home/bastian/projects/nixos/nixos-config/nixpkgs/pkgs/build-support/build-fhs-userenv, running nix-shell -p gcc gnumake --run 'make chrootenv', and then running './chrootenv ls'
<bkchr>
yegortimoshenko: that works
<jcb_>
does anyone know how to get buildFHSChrootEnv to work? trying to install steam...
ris has joined #nixos
<bkchr>
jcb_: just install steam?
<yegortimoshenko>
jcb_: it works, or should, at least. what's the problem?
<bkchr>
for me steam works with buildFHSChrootEnv
<bkchr>
yegortimoshenko: maybe wine is doing some weird stuff when running a windows program?
<yegortimoshenko>
bkchr: error happens before wine is even started
<yegortimoshenko>
maybe dir/file permissions?
<ris>
is there any way of controlling the merge order of types.listOf options?
<ris>
i.e. will my setting of nix.nixPath always show up at the *end* of NIX_PATH?
<yegortimoshenko>
bkchr: could you provide a test case of what fails? not necessarilly with exe file, but just the full command string that causes the error above
<jcb_>
so just installing steam with nix-env -iA nixos.steam gives a lot of errors
<bkchr>
yegortimoshenko: that is my file for creating the wine-run command
ThatDocsLady has joined #nixos
<ris>
(actually nixPath is a types.envVar isn't it?)
<jcb_>
sure, one second
<yegortimoshenko>
bkchr: i can't reproduce, which makes me think it's a degradation in 4.14.6, but of course i can't be certain before i try it out. `wine-run ls`, works fine, and even if i add wine to chrootenv that you sent me and run `wine-run winecfg` it still works
<yegortimoshenko>
bkchr: and what is in wine.wrapped?
<bkchr>
yegortimoshenko: the original wine
<bkchr>
yegortimoshenko: I'm trying to write some magic to get PlayonLinux working out of the box
<yegortimoshenko>
bkchr: could you please show me how to reproduce this error? what steps should i take? chrootenv should not fail with unshare problems just because wine forks itself
<bkchr>
yegortimoshenko: the problem was, that this wanted to start chroot in chroot
<yegortimoshenko>
bkchr: aha! thanks!
<bkchr>
yegortimoshenko: yeah, I should not write code late in the night :(
<yegortimoshenko>
i haven't slept in a while, too, so sorry for my clumsy replies
<yegortimoshenko>
i'll write some code to detect chroot-in-chroot scenario
proteusguy has quit [(Remote host closed the connection)]
<yegortimoshenko>
bkchr: oh, one more thing: mind that currently chrootenv only passes environment variables from predefined whitelist, that might be an issue
<bkchr>
yegortimoshenko: where is that whitelist defined?
<Lisanna>
is it valid for nix-build to ever "hang" while evaluating a Nix expression?
<yegortimoshenko>
bkchr: if this proves to be a problem, open a github issue with environment variables to whitelist, i'll add them the same day
<ij>
How do I make a derivation that just copies files from some directory?
sigmundv__ has joined #nixos
<yegortimoshenko>
jcb_: for now, open ~/.local/share/steam/steamapps/, open SHENZHEN I/O dir, and find script that launches the game
<jcb_>
okay, will do, thanks!
ylwghst has joined #nixos
<ij>
Found it! copyPath(s)ToStore
<yegortimoshenko>
jcb_: in that script, there is a definition for LD_LIBRARY_PATH: paste it here, and i'll send back the changed version to make the game work
berce has joined #nixos
<jcb_>
what's strange is that I get the ld.so messages when I run stardew valley, but that game does launch
<jcb_>
okay, roger
<yegortimoshenko>
jcb_: i get them on every game launch
<yegortimoshenko>
proprietary software is hard(er) to package right...
<yegortimoshenko>
jcb_: also, stardew valley will currently only run if you have a timezone set, so keep that in mind.
alexteves has joined #nixos
iyzsong has joined #nixos
alexteves has quit [(Client Quit)]
sary has joined #nixos
<Lisanna>
Okay, lesson learned: do not try to call builtins.trace on a disk image.
ssmike has joined #nixos
<berce>
I 'm trying to pack orca. It depends on xkbcomp at runtime, but can't find it. xkbcomp is called from python code, so that's probably why $out was not applied to it. wrapGAppsHook is already used. How can I add xkbcomp to this wrapper? Should I use another wrapper? Is it better to patch the python code?
<yegortimoshenko>
Lisanna: how is that nix-shell multi-env project going?
<Lisanna>
yegortimoshenko: I'm about to push the button that will build 24 environments and put them on a disk image
<jcb_>
okay, in `.local/share/Steam/steamapps/common/SHENZHEN IO/Shenzhen`, line 36: export LD_LIBRARY_PATH=$STEAM_LD_LIBRARY_PATH
<Lisanna>
just trying to find some good van canto music to put on while I watch the build :)
<manveru>
steam was broken after the last update yesterday :( had to install it from unstable
<yegortimoshenko>
manveru: we should have backported the fix earlier... it was never broken in unstable except for one beta version briefly
<jcb_>
wowwww, yeah that works
<yegortimoshenko>
jcb_: hopefully soon it will work without patching
<manveru>
yeah, it's working now... at least dota and starbound are :)
<yegortimoshenko>
jcb_: also please if you find a game that doesn't work, open an issue
ssmike has quit [(Quit: ssmike)]
<jcb_>
thanks so much, I will! I just switched over from Arch a few weeks ago and am really excited to help out!
ssmike has joined #nixos
<yegortimoshenko>
jcb_: thanks! :-)
ylwghst has quit [(Quit: leaving)]
<domenkozar>
[job spam] We're hiring again at IOHK. Would you like to work with me in 4 SRE team using Nix / AWS / Haskell and challenging growth? Remote position, preferably in EU timezones. Everything we do is open source. https://iohk.io/careers/#op-144226-devops-engineer
ylwghst has joined #nixos
<domenkozar>
/buffer #nixos-dev
<domenkozar>
ops :)
<jcb_>
domekozar: are you guys hiring junior haskell devs? because I might be interested...
<jcb_>
cardano looks super cool
<Lisanna>
can Nix code evaluation be parallelized at all?
<domenkozar>
yes, we don't do much advanced haskell in devops team
<domenkozar>
mostly automation and gluing
<manveru>
now i wish i spoke haskell, but i only got elm so far :P
<domenkozar>
manveru: I'm sure we'll hire in a few months again
<domenkozar>
:-)
<manveru>
:)
<manveru>
sounds like a plan
<jcb_>
manveru: check out haskellbook.com
<domenkozar>
manveru: going though haskellbook.com should suffice
<vincent_vdk>
is someone here running nixos on an openstack cloud?
simukis has joined #nixos
<jcb_>
it's one of the best pl books ever
<domenkozar>
note that we're hiring two for this position
<manveru>
i just had two switch teams at work, so now i'm without any nix at all :(
<manveru>
gonna have withdrawls the next few months
<bkchr>
yegortimoshenko: can I set the PWD for chroot
<Lisanna>
I've somehow managed to write a Nix expression that takes 13 seconds to *evaluate* for each instance of it x_x
<yegortimoshenko>
bkchr: inside the chrootenv, yes. but you can't propagate it from environment that launches chrootenv
<jcb_>
domenkozar: okay, filling out the application
<yegortimoshenko>
bkchr: i.e. wrapper script will suffice: ./chrootenv wrapper.sh, where wrapper.sh is "#!/bin/sh\nPWD=/tmp"
<manveru>
Lisanna: does it use a lot of memory?
<bkchr>
yegortimoshenko: ahh okay
<Lisanna>
manveru: 0.6g
<Lisanna>
that's the VIRT column of nix-instantiate
ris has left #nixos ["Konversation terminated!"]
<manveru>
and what does it do?
<Lisanna>
shitty constraint solver
<manveru>
i think nix 1.12 has some benchmarking/profileing tools
<manveru>
*profiling
<Lisanna>
oh, that will be nice
<manveru>
it should also be faster if you wanna try it :)
<Lisanna>
can I just use the nixUnstable "nix build" safely with my current /nix ?
<yegortimoshenko>
Lisanna: yes
<Lisanna>
so just nix-shell -p nixUnstable --run nix build?
<manveru>
yeah
<Lisanna>
ha, geez, okay
<yegortimoshenko>
quote 'nix build'
<Lisanna>
didn't know it was that easy
<Lisanna>
...what's the equivalent of nix-build -A ? .-.
<Lisanna>
nix build -A my.stuff gives error: unrecognised flag '-A'
<infinisil>
Cache down?
<infinisil>
Or just me
<manveru>
Lisanna: `nix build -f .`
<manveru>
Lisanna: or with argument `nix build -f . whateverAttributeYouWannaBuild`
<Lisanna>
"waiting for exclusive access to the Nix store..."
<Lisanna>
does nixUnstable lock the entire thing?
<Lisanna>
infinisil: cache seems to work for me
<infinisil>
works fine now too, hmm
<Lisanna>
manveru: doesn't appear to be any faster, still about 13 seconds per thing, thanks for the recommendation though
<manveru>
strange...
<manveru>
next thing you could try is `strace -c` to see if it's mostly I/O bound? :)
goibhniu has quit [(Remote host closed the connection)]
<Lisanna>
I don't think it's I/O bound... just lots of string processing I think
<manveru>
also, since you're on nixos... wouldn't `nix build` simply give the build to the daemon?
<Lisanna>
what do you mean?
<manveru>
that it still does the actual build via 1.11
<Lisanna>
not sure... I know that nixUnstable is failing to download one of the files during the build itself, where my regular nix-build does it fine
<Lisanna>
I guess there were lots of changes to fetchurl in 1.12?
bkchr has quit [(Quit: Konversation terminated!)]
<joko>
Is anyone using successfully netboot?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] NeQuissimus pushed 1 new commit to master: https://git.io/vbikC
<NixOS_GitHub>
nixpkgs/master cbd337b Tim Steinbach: linux: 4.14.6 -> 4.14.7
NixOS_GitHub has left #nixos []
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] NeQuissimus pushed 1 new commit to release-17.09: https://git.io/vbikW
<NixOS_GitHub>
nixpkgs/release-17.09 9f0226c Tim Steinbach: linux: 4.14.6 -> 4.14.7...
NixOS_GitHub has left #nixos []
goibhniu has joined #nixos
<berce>
domenkozar: thanks for the spam, I consider applying
<domenkozar>
great :)
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] NeQuissimus pushed 1 new commit to master: https://git.io/vbikQ
<NixOS_GitHub>
nixpkgs/master e0cbd73 Tim Steinbach: vscode: 1.18.1 -> 1.19.0
NixOS_GitHub has left #nixos []
<domenkozar>
let me know if you have questions
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] NeQuissimus pushed 1 new commit to release-17.09: https://git.io/vbik7
<NixOS_GitHub>
nixpkgs/release-17.09 ed3b1bc Tim Steinbach: vscode: 1.18.1 -> 1.19.0...
NixOS_GitHub has left #nixos []
the has quit [(Remote host closed the connection)]
<berce>
Thanks. Can the candidate be 'junior'? My education and professional experience are in electronics, 3D printing and education. I fit the requirements at the lower limit.
<gchristensen>
fpletz: I ordered one of those PCEngines from disasm's urging
<gchristensen>
berce: it never hurts to try anyway :)
<fpletz>
if they had a referral program I would be rich by now… %)
<gchristensen>
fpletz: I'm flabbergasted that they provide schematics
ma27 has quit [(Ping timeout: 240 seconds)]
<berce>
True
aarvar has quit [(Ping timeout: 272 seconds)]
<yegortimoshenko>
gchristensen: they also provide bios source code
<Li[m]>
yegortimoshenko: what's this?
bkchr has joined #nixos
<yegortimoshenko>
Li[m]: ?
babyflakes has quit [(Quit: Connection closed for inactivity)]
ma27 has joined #nixos
<Li[m]>
the message just before mine
<Li[m]>
I missed the beginning but it got my interest
<yegortimoshenko>
pcengines provides source code for bios they ship on their systems
<Li[m]>
thanks
<yegortimoshenko>
i think it's their own fork of seabios but i might be wrong
<gchristensen>
Li[m]: they also provide schematics and PCB layout files, it is pretty cool, and pretty affordable
asuryawanshi has quit [(Ping timeout: 255 seconds)]
szicari has quit [(Quit: szicari)]
jensens has quit [(Ping timeout: 256 seconds)]
freusque has joined #nixos
asuryawanshi has joined #nixos
asuryawanshi has quit [(Remote host closed the connection)]
aneeshusa has joined #nixos
aneeshusa has quit [(Client Quit)]
berce has quit [(Ping timeout: 248 seconds)]
fendor has joined #nixos
jensens has joined #nixos
<bkchr>
Does someone has seen the following error "'screen-256color': unknown terminal type." I want to use steam-run and get this error when executing a program
<Guest78301>
bkchr: Probably you can set TERM=xterm to work around it?
<fendor>
does someone has experience with installign discord
<fendor>
?
<bkchr>
Guest78301: already tried that, but does not work :(
<nixy>
bkchr: Are you in a screen session?
<bkchr>
nixy: no, trying `steam-run`
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] joachifm pushed 1 new commit to master: https://git.io/vbi0T
<NixOS_GitHub>
nixpkgs/master 3b36711 Joachim Fasting: tinycc: 0.9.27pre-20171016 -> 0.9.27
NixOS_GitHub has left #nixos []
dan_b has quit [(Ping timeout: 248 seconds)]
pie_ has quit [(Remote host closed the connection)]
pie_ has joined #nixos
<bkchr>
Fixed, steam-run needed ncurses to add the terminfo stuff
<ottidmes>
How can I check for the existance of a name in the Nix search path? For example lookup <some-name>, and instead of giving me an error, allow me to give an alternative value. Or just check for its existance with some predicate. Is there any way to do this?
asuryawanshi has joined #nixos
Itkovian has joined #nixos
ssmike has quit [(Remote host closed the connection)]
<Guest78301>
ottidmes: <some-name> actually just expands to a path, so you can use builtins.pathExists <some-name>
ssmike has joined #nixos
Guest78301 has quit [(Changing host)]
Guest78301 has joined #nixos
Guest78301 is now known as TweyII
<TweyII>
Hmm
<TweyII>
But I guess <…> fails if the name isn't in the NIX_PATH at all; never mind, I guess
asuryawanshi has quit [(Remote host closed the connection)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] orivej pushed 2 new commits to master: https://git.io/vbi6I
<NixOS_GitHub>
nixpkgs/master 209cbf9 Yegor Timoshenko: xfce: SVG icon support in xfce4-panel, fixes #18536...
<NixOS_GitHub>
[nixpkgs] jtojnar opened pull request #32815: gnome3.evince: clean up (master...evince-cleanup) https://git.io/vbi67
NixOS_GitHub has left #nixos []
<ottidmes>
TweyII: I did use pathExists, but I indeed run into the problem you describe, but for now I just work around it by doing the fallback logic at the defining side instead of the using side
ssmike has quit [(Remote host closed the connection)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] orivej pushed 1 new commit to staging: https://git.io/vbiPK
<acowley>
gchristensen: How do you do your rebuilds during testing?
<copumpkin>
nice
<acowley>
gchristensen: And were you able to teach racer and flycheck how to do it?
<gchristensen>
oh, hrm, _mostly_ I just do cargo build / cargo run and then just nix-build later
<acowley>
I'm having this problem where cargo in a nix-shell keeps rebuilding things
Tucky has quit [(Ping timeout: 248 seconds)]
<acowley>
I'll keep poking at it.
__Sander__ has quit [(Quit: Konversation terminated!)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] yegortimoshenko opened pull request #32818: mousepad: backport fix of issue 12134, resolves #14862 (master...20171218.164040/xfce-12134) https://git.io/vbiQc
NixOS_GitHub has left #nixos []
infinisil has joined #nixos
acarrico has joined #nixos
i-am-the-slime has quit [(Ping timeout: 240 seconds)]
infinisil has quit [(Client Quit)]
infinisil has joined #nixos
danl1240 has joined #nixos
<aminechikhaoui>
gchristensen: how was your experience with rust so far ? I suggested rewriting hydra perl codebase with rust to niksnut the other time but he wasn't very excited about that :p
<gchristensen>
very good :)
<gchristensen>
any time I've fought the borrow checker, it is because I didn't understand what I was trying to do
<aminechikhaoui>
that sounds good :)
roberth has joined #nixos
<gchristensen>
to me, rust reminds me a lot of Nix: you face most of the pain upfront :P
<vidbina>
:P
<aminechikhaoui>
not sure about domenkozar opinion, I mean compared to what he's trying to do with Herculus (haskell) for hydra
verite has joined #nixos
<domenkozar>
honestly either will do :)
<gchristensen>
I think domen likes all the rust code I've written, but mostly because of the results and not the code ;)
<aminechikhaoui>
hercules
<gchristensen>
aminechikhaoui: I can't spell the H word either
<aminechikhaoui>
hehe
<domenkozar>
it's greek, what do you expect
erictapen has quit [(Ping timeout: 248 seconds)]
<joepie91>
aminechikhaoui: so, the obligatory warning when suggesting a 'rewrite in Rust': make sure that you're ready to *maintain* the rewrite
<joepie91>
the people whose projects you're rewriting are probably not familiar with Rust, likely don't see any value in learning it (yet, or ever), and dropping a rewrite in Rust in their lap just means they now have a codebase they need to maintain that they have no clue how to... which is fine if you're there to help out, but not if you disappear right after the rewrite :)
<joepie91>
(this is not exclusive to Rust of course, but that's the current wave of "let's change everything to do X")
<gchristensen>
I'll only accept a rewrite of hydra if it is in coq or idris, I say, not having any authority
<joepie91>
another example of that would be people making PRs to JS projects to add typescript definitions - all great that you use typescript and that you've written some definitions for my library, but I *don't* use typescript, have no intention of doing so, and don't want to be stuck maintaining them
<aminechikhaoui>
joepie91: correct yeah, ideally the language used is what most of the community is ok/familiar with which is probably haskell in that case ?
<joepie91>
aminechikhaoui: well, it doesn't necessarily have to be "most of the community" - that makes it very hard to move forward, and might not attract the maintainers you want
mkoenig has quit [(Remote host closed the connection)]
<joepie91>
it's more important that there's a sufficient amount of people who both can and want to maintain a codebase in a given language
<joepie91>
doesn't have to be a majority, just has to be enough
<joepie91>
for Rust, I think that might eventually be the case (given the similar philosophies between Nix and Rust) but I don't think it's the case *yet*
sbjorn has joined #nixos
mkoenig has joined #nixos
<dash>
also, if you can, think of a way you can advertise that your version is better :)
<dash>
did python packaging change recently? getting a failure in that vicinity when upgrading
<aminechikhaoui>
joepie91: yeah, for instance if I look at the contributors it's mainly niksnut and ikwildrpepper , so their opinion is important but also anyone who's going to support NixOS infra in general as that would be important for them to fix issues/add features easily (which is niksnut / ikwildrpepper again currently :D )
<aminechikhaoui>
but I hear there are plans to expand to more people soon
berce has joined #nixos
sbjorn has quit [(Ping timeout: 240 seconds)]
alexteves has quit [(Quit: My Mac Mini has gone to sleep. ZZZzzz…)]
berce has quit [(Quit: leaving)]
ThatDocsLady has quit [(Ping timeout: 240 seconds)]
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
goibhniu has quit [(Ping timeout: 248 seconds)]
[0x4A6F] has joined #nixos
sbjorn has joined #nixos
davidak has joined #nixos
<yegortimoshenko>
davidak: hi!
Guest7754 is now known as judson
<johnw>
shlevy: ping
<sphalerite>
Can I prevent builds from happening remotely?
<sphalerite>
That is, when I have the options set up in configuration.nix
<sphalerite>
My main problem is that building stuff fails when I don't have a network connection even though it could build just fine locally
<judson>
I feel like I've failed to communicate my concern in my nix-devel email about repo mirroring.
<judson>
Or something.
<judson>
zimbatm had good points about what we could usefully ask of foreign package managers
<judson>
But more, is there interest in having a set of best practices and tending toward them?
<zimbatm>
YES
<zimbatm>
:)
<judson>
OK!
<zimbatm>
I'm mainly lacking time
<judson>
I 100% agree with that.
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] shlevy pushed 2 new commits to master: https://git.io/vbibm
<NixOS_GitHub>
nixpkgs/master 03e10f8 Shea Levy: gurobipy: Use buildPythonPackage on Linux
<NixOS_GitHub>
nixpkgs/master c6c05dd Shea Levy: gurobipy: Use buildPythonPackage on Darwin.
NixOS_GitHub has left #nixos []
<zimbatm>
the emails only covered 1/8th of the domain
<judson>
I feel like we could probably make progress without demanding overwhelming time. Maybe establish places on the wiki/ in the manual?
<judson>
Well, yeah, it's a huge domain - and I have my own limits
<zimbatm>
yeah, maybe outlining the subject would help
i-am-the-slime has joined #nixos
<judson>
Part of my motivation was to capture that there was interest and will outside of me for it.
<zimbatm>
every meetup I go we end up discussing this topic I think
<ariutta>
I've been trying to modify the package to make it work, but I'm getting "CMake Error in src/CMakeLists.txt: No known features for CXX compiler "Clang" version 4.0.1."
<marc__>
Wie läuft das Prozedere ab? Wann fließt Issue #32777 als pull request in das master ein? Bereits in der nächsten Stable? Was ist zu tun?
<marc__>
sorry
<marc__>
How does the procedure work? When does issue # 32777 flow into the master as a pull request? Already in the next stable? What should I do?
infinisil has joined #nixos
verite has quit [(Ping timeout: 248 seconds)]
simendsjo has quit [(Quit: ERC (IRC client for Emacs 25.3.1))]
rogue_koder has quit [(Remote host closed the connection)]
rogue_koder has joined #nixos
simendsjo has joined #nixos
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] ttuegel opened pull request #32821: haskell: set buildInputs in nix-shell env (master...haskell/shell-env-build-inputs) https://git.io/vbPIR
NixOS_GitHub has left #nixos []
ilyaigpetrov has quit [(Quit: Connection closed for inactivity)]
Itkovian has joined #nixos
<makefu>
marc__: normal process is that you explicitly open a PR which then gets merged into master. if the PR got merged, the next step is that the PR will become part of nixos-unstable and if it does not get reverted it will eventually become part of the next release (which is 18.3)
<kini>
orivej: thanks for fixing drat-trim on Darwin for me. I foolishly assumed it would work unmodified on Darwin since I happen to know the developer uses a Mac...
<kini>
zimbatm: it seems like the '' in the code blocks are not displaying, though I see them in the source of that wiki page...
rihards has quit [(Quit: rihards)]
<Wizek>
Would anyone know why this fails? `nix-shell -p 'haskell.packages.ghc822.ghcWithPackages (p: with p; [(callHackage "debug" "0.0.1" {})])' --run 'ghci'`
<Wizek>
I get `tar: */debug/0.0.1/debug.cabal: Not found in archive`
<Wizek>
`builder for ‘/nix/store/csgyr48lcn8b10jih0d45l44nm7s4klw-all-cabal-hashes-component-debug-0.0.1.drv’ failed with exit code 2`
<zimbatm>
kini: feel free to fix
<zimbatm>
;)
<samueldr>
(if there's any questions / issues with wikimarkup, especially relating to formatting, we're probably able to answer)
<zimbatm>
judson: I will take a look later
<zimbatm>
my page could do with some specific examples. currently it's assuming quite a bit of knowledge from the reader
<samueldr>
zimbatm: were ''' meant to be '' ?
<samueldr>
(I've fixed them to be '')
<samueldr>
(while adding syntax highlighting)
<judson>
I think we're coming at the same place by different roads.
erictapen has quit [(Ping timeout: 264 seconds)]
<judson>
Case studies make sense.
<judson>
Both in terms of "here's how X works" and "here's how the builder/fetcher for X works in Nix"
<judson>
I *absolutely* think there's room for "what could lang packagers learn from Nix's dependencies"
<judson>
And I still think "Why not use Nix as your platform packager?" is a worthwhile pitch.
rihards has joined #nixos
jb55 has quit [(Ping timeout: 240 seconds)]
coot has quit [(Read error: No route to host)]
<Wizek>
Or perhaps callCabal2nix is more recommended to be used?
coot_ has joined #nixos
<fendor>
how can i install teamviewer in nixos?
<judson>
zimbatm, have you tried, e.g. getting the Bundler folks to include a sha256 in lockfiles?
bpa has quit [(Remote host closed the connection)]
<symphorien>
fendor: add `teamviewer` to your systemPackages
<fendor>
in configuration.nix? build fails with 404
<fendor>
url not found
<symphorien>
then teamviewer remove the download url from which nix downloaded teamviewer
<symphorien>
*removed
<fendor>
i can download from unstable, but i cant use the unstable channel in my configuration.nix
bebarker has joined #nixos
sjm[m] has left #nixos ["User left"]
<symphorien>
you can: nix-channel --add <url> unstable ; in you configuration.nix add `let unstables = import <unstable> {}; in` and later `unstable.teamviewer`
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] gnidorah closed pull request #32765: rambox: lock electron to 1.7.5 (master...rambox) https://git.io/vb6UE
NixOS_GitHub has left #nixos []
marc__ has quit [(Quit: Leaving)]
<fendor>
i dont understand nix-expressions so far, where to i have to put `let unstables...`?
<fendor>
why cant i isntall it via nix-env and start the daemon?
<symphorien>
put `let unstable = import <unstable> {}; in ` just as the second line under {config...}:
pie_ has quit [(Ping timeout: 265 seconds)]
<fendor>
what should the url be? from nixos-unstable?
<symphorien>
ah I forgot, you also have to do `nix-channel --update`
<symphorien>
or --upgrade maybe
<fendor>
unstable not in the Nix search path
fendor has quit [(Remote host closed the connection)]
<cransom>
did you nix-channel --add as root?
<cransom>
and 2 seconds too late.
fendor has joined #nixos
<gchristensen>
cransom here is your chance
Itkovian has quit [(Quit: My MacBook has gone to sleep. ZZZzzz…)]
<fendor>
symphorien, does not work :/ why can't i execute systemctl start teamviewerd.service?
<symphorien>
ah installing the package won't install any service
<symphorien>
it will only put the binaries in your PATH
pie_ has joined #nixos
erictapen has joined #nixos
<symphorien>
I wasn't aware there was a service: usually services are enabled with nixos options so maybe you will have more luck with https://nixos.org/nixos/options.html#teamv
<fendor>
oh
<fendor>
i see
<cransom>
fendor: did you nix-channel --add as root?
<fendor>
no, i did not :(
<infinisil>
Oh my f**king god, I won't ever trust fail2ban again
<infinisil>
It was fail2ban that prevented me from being able to ssh to my server for the past 2 days
<infinisil>
Disabling that right now, I don't want to have anything to do with fail2ban anymore, that's the second time I've been frustrated with it
<cransom>
fendor: generally speaking, thats a requirement for things you want to see in configuration.nix
<fendor>
makes sense acutally :D i am terrible with nixos so far, i switched during the semester due to frustrations with ubuntu and now i am screwed :D
<samueldr>
infinisil: did it fail2ban properly? :)
ariutta has quit [(Ping timeout: 260 seconds)]
<infinisil>
indeed..
<samueldr>
though, I just activated it on a server, what do I have to watch out for?
<fendor>
hm, why can't i install something unfree although i enabled `nixpkgs.config.allowUnfree = true;` in configuration.nix
<samueldr>
in your user's configuration.nix or system?
erictapen has quit [(Ping timeout: 248 seconds)]
<symphorien>
fendor: sorry, when you do let unstable = import <unstable> {}; you import nixpkgs from unstable with an empty config (=default config)
<fendor>
system
<symphorien>
so to import unstable while allowing unfree you have to do let unstable = import <unstable> {allowUnfree = true;} ;
<fendor>
ok, aaaah
<fendor>
ok
pie_ has quit [(Quit: Leaving)]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] fgaz opened pull request #32823: tuntox: init at 0.0.8 (master...tuntox) https://git.io/vbPO0
NixOS_GitHub has left #nixos []
<samueldr>
oh, good to know
<symphorien>
to prevent this problem, in my configuration.nix I have let nixpkgs_config = {...}; in let unstable = import <unstable> nixpkgs.config; in ... nixpkgs.config = nixpkgs_config ...
<fendor>
anonymous function with unexpected arguments :(
<symphorien>
that way all my nixpkgs have the same config
<symphorien>
ah sorry I typed that out of my head:
<symphorien>
let unstable = import <nixos-unstable> { config = nixpkgs_config; }; in
<symphorien>
is the right incantation
asuryawanshi has quit [(Ping timeout: 240 seconds)]
<symphorien>
well, <unstable> in your case
<fendor>
undefined variable nixpkgs_config
<symphorien>
you have to replace it with the config you want : here something like { allowUnfree = true; }
pie_ has joined #nixos
<fendor>
anonymous function again :D
pkill9 has joined #nixos
<symphorien>
hum... could you paste what you have with the error message ?
<pkill9>
wooo I got nix version of blender running on non-nix OS
<pkill9>
would it be safe to move /nix to another directory and make /nix a symbolic link to it?
<catern>
pkill9: yes, if you don't want to build things
<catern>
pkill9: if you do want to build things, then that will break
<pkill9>
oh ok
<pkill9>
why will it break?
aminechikhaoui has quit [(Ping timeout: 248 seconds)]
<catern>
because the wrong paths (/the/other/directory rather than /nix) will get embedded into binaries, which some of the Nix toolchain has been patched specifically to check for and abort on
<pkill9>
ah ok
ma27 has quit [(Ping timeout: 240 seconds)]
civodul has joined #nixos
<bebarker>
my nix may be getting rusty yet again; trying to figure out how to do a simple package override inline in a nix-shell expression, and get an "unexpected }" here: https://pastebin.com/r0G4zr8m - anything obviously wrong with this expression?
<pkill9>
catern: is there any way to put the nix store on a different partition?
<gchristensen>
you need an extra ; bebarker between }}
<gchristensen>
-> };};
sbjorn has quit [(Ping timeout: 255 seconds)]
<bebarker>
aha, thanks!
Wharncliffe has quit [(Quit: Lost terminal)]
aminechikhaoui has joined #nixos
<gchristensen>
I have recently made similar silly mistakes :)
<infinisil>
samueldr: You mean watch out regarding fail2ban?
<samueldr>
yes
<samueldr>
I mean, what caused you troubles
<infinisil>
Well, my first problem with it was when I tried to block dns requests, which i failed after 2 days because the regexes didn't seem to apply for some reason and debugging was pretty much impossible
<infinisil>
And now my second problem is because it for some reason suddenly started blocking my ip (only from a certain subnet), i still have no idea why that happened
<zimbatm>
judson: in regards to bundler, the idea crossed my mind. rubygems.org could also benefit from having the sha256. I haven't started anything in that regard yet. My hope was to build a $lang checklist based on the braindump
<zimbatm>
and use that to convince them
<infinisil>
ping samueldr
<zimbatm>
ideally something like the SSLlabs test or ACID test that has a point system
<samueldr>
ah, then this wasn't caused by the default settings?
<samueldr>
zimbatm: what a great idea, "how sane is your package manager?" but s/sane/[friendlier wording for sane]/
<infinisil>
samueldr: The first one wasn't, the second one was
<infinisil>
I only had fail2ban.enable = true; removing this made it work again
<samueldr>
I'll stay on my toes, I've had a colleague fail2banning the office (on a non-nixos setup) which I just shrugged off
Itkovian has joined #nixos
bkchr has quit [(Quit: Konversation terminated!)]
<fendor>
sorry, symphorien, my line is `let unstable = import <nixos-unstable> { config = nixpkgs_config; }; in` and the error message is https://hastebin.com/xuyejiveno.vbs
<infinisil>
I'm now looking into openvpn instead, which would solve also some other problems in my case
<clever>
fendor: what does nix-instantiate --find-file nixos-unstable say?
<symphorien>
fendor: I mean with the whole context
<joepie91>
infinisil: samueldr: fwiw, I regularly hear about issues with fail2ban, usually either concerning resource usage or false positives
<joepie91>
these seem to be recurring issues
<infinisil>
glad I'm not the only one
<fendor>
symphorien, what do you mean with context?
<joepie91>
it's bad enough that when something breaks on somebody elses system (since I don't use fail2ban myself), fail2ban is on the check-this-first list for me :)
<dhess>
Well for the record I've been running fail2ban on servers for years and as long as you maintain a whitelist, I've never had an issue with it.
<symphorien>
the whole file
<symphorien>
or relevant parts of it
<fendor>
clever, nixos-unstable was not found but unstable was found
<clever>
fendor: at what path?
<fendor>
which basically point to the same thing but different naming
<judson>
samueldr (much delayed): I think same version. LEmme check
<clever>
fendor: that isnt the same as what you gave in irc
<clever>
fendor: you need let unstable = import <unstable> { config = { allowUnfree = true; }; }; in
<judson>
"How could pidgin start a different chrome when you click a link"
goibhniu has joined #nixos
<judson>
Hour or two ago.
dywedir has quit [(Remote host closed the connection)]
<samueldr>
oh, right
leat has quit [(Ping timeout: 264 seconds)]
<catern>
is there a way for me to build closed-source software through Nix, such that it gets rebuilt whenever its dependencies change, but its sources are never in the store? arbitrary amounts of infrastructure permitted
<samueldr>
this feels almost like pidgin has a different home, tmpdir on runtime dir, which is then inherited by child processes
<judson>
All I can think is that somehow it gets started with an environment that prevents it from locating the running chrome
<fendor>
oh, yeah, i tried some things. ok, when changing the file, i get a url 404 again
<samueldr>
do you know if you're the only one to have that issue?
<clever>
catern: not really, it would be better to just restrict who has access to that nix store
<fendor>
it seems to try to download it from stable
<judson>
I grouse about it occassionally, and no one says "oh, I have exactly that problem"
<fendor>
`cannot download teamviewer_12.0.76279_i386.deb from any mirror
<fendor>
`
<catern>
clever: urgh but that is even worse
<judson>
But how many folks use NixOS as their desktop and use chromium (and use pidgin; but franz had the same problem)
Isorkin has quit [(Read error: Connection reset by peer)]
<clever>
catern: the issue, is that all of the mechanics for detecting when to rebuild stuff, is based on hashing things and putting them into the store
<samueldr>
nixos desktop, chrom[e|ium] and pidgin, this drives the user number quite low :)
Isorkin has joined #nixos
<clever>
samueldr: if you run strings on /proc/PID/environ, you can peek at the env variables for any process
<judson>
I don't know of any case where opening links from outside of chrome works for me
<catern>
clever: hmm okay sure but what about if I use massive amounts of impurity?
<samueldr>
(replace google-chrome with apprpriate chromia)
<clever>
catern: the more impurity you add, the harder it is for nix to rebuild at the right time, and then things go horribly wrong and things just dont rebuild
simendsjo has quit [(Remote host closed the connection)]
leat has joined #nixos
<judson>
Running from the terminal *does* create a new chromium.
<judson>
Maybe it has to do with starting Chrome from dmenu?
<judson>
Because if there's a second chromium already, running from a terminal doesn't open a new instance
<joepie91>
judson: any chance that xdg-open has a different idea of what your default browser is?
<catern>
clever: well, which do you think is better: represent the source code as a commit hash (a string) and impurely fetch it during the build of the closed source software, or represent the end result build artifact with a fixed-output derivation and somehow hack that into rebuilding when desired ehhh (not sure about the second one there)
drakonis has quit [(Read error: Connection reset by peer)]
<judson>
Nothing else of note.
<judson>
Which is weird, because those don't look like env K=V pairs.
<catern>
clever: well, yes, definitely.... but I could do that and still do impure hacks with build hooks
<clever>
judson: the issue, is that the file has null bytes in it, try opening it in a text editor that supports nulls
hiratara has quit [(Ping timeout: 255 seconds)]
coot_ has joined #nixos
<judson>
clever, those lines are from `strings /proc/.../environ`
fendor has quit [(Remote host closed the connection)]
szicari has quit [(Quit: szicari)]
<clever>
judson: try runinng a text editor directly on that file, rather then using strings
<judson>
It does look like some null garbage in the environ file.
<clever>
its a null between every k/v pair
<judson>
There's ~200 nulls after the driver-date line, and then /gtk-3.0 thing, then null separated KVs
<clever>
it might be that something modified the env
<clever>
try peeking at another process
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] joachifm pushed 7 new commits to master: https://git.io/vbPWP
<NixOS_GitHub>
nixpkgs/master a44b7bc Michael Alan Dorman: elpa-packages: 2017-12-18
<NixOS_GitHub>
nixpkgs/master 018db6a Michael Alan Dorman: org-packages: 2017-12-18
<NixOS_GitHub>
nixpkgs/master e349a98 Michael Alan Dorman: melpa-stable-packages: 2017-12-18
NixOS_GitHub has left #nixos []
hiratara has joined #nixos
fendor has joined #nixos
<fendor>
i finally did it, thanks to clever, and symphorien who helped a poor lost soul! the last important change was to move the teamviewer daemon enabling to the unstable expression, right after config. thanks a lot!
goibhniu has quit [(Ping timeout: 256 seconds)]
aarvar has joined #nixos
<catern>
clever: I think the best approach is to have a derivation which makes a script, then I run the script to build the proprietary software and adds to store
simukis has quit [(Ping timeout: 264 seconds)]
<cmiles74>
I have a project that has paths to some stuff hard-coded (/usr/bin/gpg). Is there a trick or anything that could make it appear in /usr/bin? I can make symlinks to fake out the test for now, but I can't do that in the package derviation.
nevermind has joined #nixos
nevermind is now known as Guest84811
jb55 has joined #nixos
<clever>
cmiles74: first thing to try is to run sed over it to fix the paths up
<clever>
cmiles74: it should just run things like "gpg" or ${gpg}/bin/gpg
pkill9 has quit [(Quit: WeeChat 1.9.1)]
<cmiles74>
clever: Okay, that makes sense. Thank you. :-)
MP2E has joined #nixos
rihards has quit [(Quit: rihards)]
pkill9 has joined #nixos
civodul has quit [(Quit: ERC (IRC client for Emacs 25.3.1))]
<i-am-the-slime>
Argh how do I disable this annoying double tap to drag in libinput?
<pstn>
dhess: Good luck (you are going to need it :-D)
cmiles74 has quit [(Ping timeout: 256 seconds)]
<orivej>
kini: it probably builds on stock darwin because it aliases gcc to clang
<dhess>
pstn: :O
babyflakes has quit [(Quit: Connection closed for inactivity)]
<kini>
orivej: oh, and I guess nixpkgs doesn't provide such an alias for its own clang in the standard environment?
<makefu>
dhess: it would be fantastic if you could add your findings to https://nixos.wiki/wiki/Hydra . i also wanted to set up a hydra last week but there are just so many knobs
<orivej>
yes, because we also provide gcc for darwin
<kini>
but can't priorities deal with such a thing? i.e. if installing both gcc and clang into the same environment, "gcc" points to actual gcc, but if an environment contains clang and not gcc, "gcc" points to clang
coot_ has quit [(Quit: coot_)]
<clever>
makefu, dhess: you can also bounce questions off me, ive setup ~5 hydras, and help maintain a 6th
<dhess>
makefu: If I have any insights, I'll add them, sure. I expect to publish the configuration on Github, in any case.
<dhess>
clever: thanks!
<makefu>
dhess: problem is that the nixos config is not nearly enough. so much stuff needs to be set up in the web itf in a stateful manner (sad!)
<dhess>
clever: for starters, is peti's tutorial still a good place to start?
<dhess>
makefu: ahh I see
<clever>
dhess, makefu: the declarative hydra jobsets handle some of that
<samueldr>
about hydra, we've had work lately (dec. 11) on the wiki https://nixos.wiki/wiki/Hydra , based on joepie91's gist post (linked at the end)
<clever>
if you set hydra up like this, it will download that spec.json, and then configure everything else based on it
<kini>
yeah, I guess not; also, because the current situation exists, you were able to find a "bug" in the drat-trim Makefile, so it has some good points :)
<samueldr>
I say based, but I might be wrong, there's the post still
jb55 has quit [(Ping timeout: 272 seconds)]
<dhess>
clever: so like, you have to set up the project first in the web interface and then point it to that declarative spec?
<clever>
dhess: yeah, and then the spec file does the rest of the project config
<dhess>
cool, thank you
<clever>
dhess: just create a project and input that url
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
erictapen has quit [(Remote host closed the connection)]
erictapen has joined #nixos
<clever>
dhess: the way it works, is that the spec file defines all of the config for a jobset called .jobsets
<clever>
dhess: so .jobsets is auto-created, and its config is locked to match the spec.json file
<clever>
hydra will then build whatever it specified, and it expects the jobset to contain a single job called jobsets, which must produce a json file
<clever>
that json file then contains a object of objects similar to the original spec.json, which configure the remaining jobsets on the project
<clever>
and you can use whatever whacky (but pure!) programming you want to generate that list of jobsets
<dhess>
clever: in toxvpn/spec.json, inputs.configs is used for what, exactly? To refer to this spec so that it can be updated?
<clever>
dhess: nix will attempt to build nixexprpath, which is found in the input named by nixexprinput
<dhess>
right ok
<clever>
dhess: nixexprinput=configs, and nixexprpath=toxvpn/default.nix, so it will fetch the configs defined on line 14, then eval hydra-configs/toxvpn/default.nix
<dhess>
got it
<clever>
and every attribute in that file becomes a job in the jobset
<clever>
the other inputs are passed to default.nix as arguments, and also put into $NIX_PATH
<clever>
13 fetches the latest nixpkgs 17.03, and line 4 of that default.nix imports it
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] jtojnar opened pull request #32826: More GNOME clean-ups (master...gnome-python3) https://git.io/vbPzR
NixOS_GitHub has left #nixos []
<clever>
then i just use "regular old nix" to parse the json in pulls, manipulate all the data, and generate a set of jobs
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] dezgeg pushed 1 new commit to master: https://git.io/vbPzw
<NixOS_GitHub>
nixpkgs/master fa82216 Tuomas Tynkkynen: bmap-tools: init at 3.4
NixOS_GitHub has left #nixos []
pie_ has quit [(Ping timeout: 248 seconds)]
<clever>
and line 42 then writes that to a file in the store and passes it back to hydra
<dhess>
clever: so I notice that you use 17.03 in the spec.json, and then in each jobset you get a different nixpkgs and use that as input to that jobset.
<clever>
yeah, that 17.03 is only used for one thing, to write the json to a file
<clever>
and nothing else
jrolfs_ has joined #nixos
<dhess>
ok, that's good, because I already use the "fetchNixPkgs" trick in all of my repos to get a pinned version.
<dhess>
so I just need to put that in my jobsets, I guess
jrolfs_ is now known as otherjrolfs
<clever>
then you can just entirely omit nixpkgs in the inputs for the jobsets
infinisil has quit [(Quit: ZNC 1.6.5 - http://znc.in)]
<dhess>
oh, so when Hydra builds the jobset, and the release.nix for that jobset does a fetchFromGitHub to get nixpkgs, that will work?
<boxofrox>
for giggles, try on client A: `ssh -R 2222:localhost:22 infinisil.com -O cancel`. then verify the port 2222 is closed with `ssh infinisil.com ss -tln`, then restart your unit and see if it still binds to localhost.