<dhess>
oh cool, using the activation scripts to create the users
jrolfs__ has joined #nixos
Acou_Bass has joined #nixos
<dhess>
now we just need a way to deploy this stuff with nixops :)
nithor has joined #nixos
sigmundv has joined #nixos
jrolfs__ has quit [Ping timeout: 240 seconds]
jrolfs has quit [Ping timeout: 264 seconds]
jrolfs has joined #nixos
jrolfs__ has joined #nixos
erasmas has quit [Quit: leaving]
nithor has quit [Ping timeout: 252 seconds]
la_putin has joined #nixos
el_putin has quit [Read error: Connection reset by peer]
<dhess>
LnL: ok it's installed, so now I just put something like your hydra.nix example in ~/.nixpkgs/darwin-configuration.nix and `darwin-rebuild switch` ?
<LnL>
yep
<dhess>
wow this is pretty sweet
<LnL>
did you get a warning about /etc/profile?
<dhess>
yes
<LnL>
ah perfect :)
<dhess>
hehehe
<dhess>
I was confused about that. Do I need to do anything special to get nix-daemon working or what?
<LnL>
by default it uses the daemon from the installer, services.nix-daemon.enable will make it manage the service for you
<dhess>
so if I do that, I can just ignore the /etc/profile warning?
nithor has joined #nixos
<LnL>
yes, but that will overrides NIX_PATH so I think it won't find the darwin channel then
<LnL>
also the daemon won't upgrade/restart when stuff changes
<dhess>
so... I'm still confused
<LnL>
howso?
alexteves_ has quit [Ping timeout: 240 seconds]
<dhess>
what should /etc/profile contain?
<LnL>
remove the nix related stuff
<dhess>
assuming that I: a) have installed Nix via the new multi-user installer, b) then installed nix-darwin (and got the warning), and c) am installing something like your examples/hydra.nix config
<dhess>
ok
<dhess>
oh ok, so it's either have that stuff in /etc/profile, or manage the daemon with services.nix-daemon.enable. Is that it?
<LnL>
it just overrides stuff since it runs after bashrc
<NixOS_GitHub>
[nixpkgs] eqyiel opened pull request #33443: ocaml-modules/dtoa: disable hardening (strictoverflow) on darwin (master...dtoa-disable-hardening) https://git.io/vNJep
<rnhmjoj[m]>
there is a script running as a systemd service for a nixos module that has to restart another service. this used to work but from quite some time `systemctl restart` fails with "interactive authentication required". i think it has to do with the fact the script runs as normal user (the same of the other service). any idea beside running it as root?
<dhess>
LnL: gchristensen: I created a hydra user with `dscl . create /Users/hydra`, `dscl . -read /users/hydra` shows the user has been created, but `id hydra` says "no such user". WTF!
jrolfs has quit [Ping timeout: 264 seconds]
<dhess>
I guess I need to give it an ID
Mateon3 has joined #nixos
jrolfs__ has joined #nixos
Mateon1 has quit [Ping timeout: 268 seconds]
Mateon3 is now known as Mateon1
<dhess>
yep
<dhess>
how stupid
holdend has quit [Ping timeout: 248 seconds]
sigmundv_ has quit [Quit: ZNC 1.6.5 - http://znc.in]
jrolfs has joined #nixos
thc202 has quit [Ping timeout: 248 seconds]
jb55 has quit [Ping timeout: 252 seconds]
jrolfs__ has quit [Ping timeout: 240 seconds]
jrolfs has quit [Ping timeout: 248 seconds]
jrolfs__ has joined #nixos
jrolfs has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] fpletz pushed 1 new commit to master: https://git.io/vNJU6
<NixOS_GitHub>
nixpkgs/master c01cfb9 Franz Pletz: firmware-linux-nonfree: 2017-12-06 -> 2018-01-04
NixOS_GitHub has left #nixos [#nixos]
jrolfs__ has quit [Ping timeout: 240 seconds]
jrolfs has quit [Ping timeout: 256 seconds]
duncan^ has quit [Quit: WeeChat 1.9.1]
<dhess>
fpletz: does that include the new microcode?
<fpletz>
dhess: I was hoping for the amd microcode but not yet
duncan^ has joined #nixos
jrolfs has joined #nixos
<Dezgeg>
aren't they in a separate package?
<gchristensen>
dhess: I agreee
<fpletz>
Dezgeg: yes but it is shipped in the nonfree linux firmware git repo
jrolfs__ has joined #nixos
<Dezgeg>
ah
<fpletz>
and redhat seems to have released the new intel microcode already even though intel hasn't published it yet :/
<dhess>
fpletz: but just to be clear, that does include the Intel updates?
<fpletz>
dhess: nope
<dhess>
oh
<dhess>
ugh
<fpletz>
currently investigating to get it into nixos :)
<dhess>
Dezgeg: man is armv7l broken right now on master :( I've been building for 24 hours
<Dezgeg>
hasn't hit unstable I think?
<dhess>
no, but I'm trying to get these GHC patches into master so that's where I have to build at the moment.
sigmundv_ has joined #nixos
<dhess>
I'm pretty sure it's ready to go but I had to basically rebuild world to get here
<dhess>
my ghc 8.2.1 build has been running now for 12 hours, which is bad enough, but it took another 12 to get to that bit because everything so much else needed to build first
<Dezgeg>
we using the upstream binaries now?
<dhess>
Dezgeg: there are binary builds for 7.10.3 and 8.2.1 now
<dhess>
unfortunately upstream 7.10.3 doesn't support aarch64, so that still isn't working
<dhess>
because there are some 7.10.3 dependencies lurking somewhere... maybe happy/alex
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] rnhmjoj opened pull request #33444: nixos/dnscrypt-wrapper: fix rotate script failing to restart the service (master...dnscrypt-wrapper) https://git.io/vNJTG
randomstrangerb has quit [Ping timeout: 240 seconds]
randomstrangerb has joined #nixos
noam__ has quit [Read error: Connection reset by peer]
<vaibhavsagar>
how do I override haskell's mkDerivation?
<vaibhavsagar>
it's defined as `makeOverridable mkDerivationImpl`
<vaibhavsagar>
but `nix-instantiate --eval -E "with import <nixpkgs> {}; pkgs.haskellPackages.mkDerivation.override"` gives me "error: value is a function while a set was expected"
jrolfs has joined #nixos
pie_ has joined #nixos
jrolfs__ has joined #nixos
cinimod has quit [Quit: Connection closed for inactivity]
sary has joined #nixos
pkill9 has quit [Quit: WeeChat 2.0]
pie_ has quit [Ping timeout: 240 seconds]
orivej has quit [Ping timeout: 248 seconds]
nuncanada has quit [Ping timeout: 248 seconds]
sigmundv has quit [Ping timeout: 264 seconds]
<earldouglas>
Anyone familiar with nix-kubernetes?
<simpson>
Hi! I'm trying out elmPackages.elm-reactor. I've been stuck waiting for "With new projects, I need a bunch of extra time to download packages." for a while. Is this normal?
Supersonic112_ has joined #nixos
Supersonic112_ is now known as Supersonic112
tnias has quit [Remote host closed the connection]
<simpson>
Huh, elm-make works fine. Guess it's just elm-reactor. Oh well.
jb55 has joined #nixos
tnias has joined #nixos
pjan_ has joined #nixos
jrolfs has quit [Ping timeout: 240 seconds]
Sonarpulse has quit [Ping timeout: 276 seconds]
asuryawanshi has joined #nixos
jrolfs has joined #nixos
asuryawanshi has quit [Ping timeout: 256 seconds]
jrolfs has quit [Ping timeout: 248 seconds]
jrolfs__ has quit [Ping timeout: 268 seconds]
sigmundv__ has quit [Ping timeout: 248 seconds]
jrolfs has joined #nixos
jrolfs__ has joined #nixos
yegortimoshenko has joined #nixos
Sonarpulse has joined #nixos
<yegortimoshenko>
could someone help me test nixpkgs issue labeling bot that i've built?
ee1943 has quit [Remote host closed the connection]
ee1943 has joined #nixos
atrx_ has quit [Ping timeout: 256 seconds]
dmj` has joined #nixos
hals has joined #nixos
jrolfs__ has quit [Ping timeout: 248 seconds]
jrolfs has quit [Ping timeout: 256 seconds]
mizu_no_oto has quit [Quit: Computer has gone to sleep.]
atrx_ has joined #nixos
jrolfs__ has joined #nixos
jrolfs has joined #nixos
Arcaelyx_ is now known as Arcaelyx
jrolfs has quit [Ping timeout: 256 seconds]
jrolfs__ has quit [Ping timeout: 264 seconds]
Ivanych has quit [Ping timeout: 260 seconds]
<disasm>
I have a python script that's installed by a package via nix. That script depends on a certain python library. I've added that library to propagatedBuildInputs but it still isn't findind that library when I run that script. How do I get around this?
<vaibhavsagar>
disasm: can you echo $PYTHON_PACKAGE_PATH at some stage to make sure the dependency is available to your script?
<dhess>
disasm: is it just a script, or is there a Python module as well?
Lisanna has joined #nixos
<dhess>
disasm: in any case, there are a lot of ways to do it. grep for PYTHONPATH and pythonPath in nixpkgs.
<dhess>
it probably also depends on how things are packaged by upstream.
DUszx has joined #nixos
<dhess>
but the most general way is to assemble a pythonPath and then use makeWrapper to set PYTHONPATH for the script.
<dhess>
that's what I've done when upstream just throws a random 'script.py' file in the package
Ivanych has joined #nixos
mrkgnao has quit [Ping timeout: 256 seconds]
asuryawanshi has joined #nixos
Lisanna has quit [Read error: Connection reset by peer]
jrolfs__ has joined #nixos
leat has quit [Quit: WeeChat 1.9.1]
jrolfs has joined #nixos
ssmike has joined #nixos
Tucky has joined #nixos
leat has joined #nixos
dywedir has joined #nixos
orivej has quit [Ping timeout: 248 seconds]
asuryawanshi has quit [Remote host closed the connection]
jrolfs__ has quit [Ping timeout: 240 seconds]
jrolfs__ has joined #nixos
dywedir has quit [Remote host closed the connection]
dywedir has joined #nixos
mrkgnao has joined #nixos
asuryawanshi has joined #nixos
asuryawanshi has quit [Remote host closed the connection]
asuryawanshi has quit [Remote host closed the connection]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] peti pushed 2 new commits to master: https://git.io/vNJlU
<NixOS_GitHub>
nixpkgs/master a1a3aea Peter Simons: hackage-packages.nix: automatic Haskell package set update...
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
nixpkgs/master b1a1062 Michael Alan Dorman: text-icu: Some sort of testing issue with ghc-8.2
ssmike has joined #nixos
jrolfs has joined #nixos
jrolfs__ has joined #nixos
pjan_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
jrolfs__ has quit [Ping timeout: 240 seconds]
jrolfs has quit [Ping timeout: 248 seconds]
jrolfs has joined #nixos
PlasmaStar has quit [Read error: Connection reset by peer]
jrolfs__ has joined #nixos
mrkgnao has quit [Ping timeout: 240 seconds]
goibhniu has joined #nixos
zzamboni has quit [Quit: Leaving.]
PlasmaStar has joined #nixos
sirkha has joined #nixos
sigmundv__ has joined #nixos
<joko>
Hello, I would like to use substituteInPlace to replace ${VAR}, how to properly escape it? I've tried "\${VAR}" and "\$\{VAR\}", but no luck so far
<longrin1>
hello, trying to install nixos from configuration files of an older nixos system. but it fails with my custom .nix files
<adisbladis>
joko: If I understand you correctly you want \${VAR}
<longrin1>
undefined variable ‘mkMerge’ and undefined variable ‘mkOption’ etc.
<longrin1>
undefined variable ‘mkIf’
<joko>
adisbladis: it says undefined variable 'VAR'
<joko>
longrin1: you could try adding "with lib;" on top
phreedom has quit [Ping timeout: 265 seconds]
<prelios>
hi there! can anyone help with nvidia_x11 driver generating flickering screen on 4.14.11 kernel?
<goibhniu>
hi prelios, is it just on the login screen?
jkemet has joined #nixos
knedlsepp has quit [Ping timeout: 255 seconds]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Mic92 opened pull request #33449: fix kernel modules that broke with 4.14 (master...libelf-fallout) https://git.io/vNJ4d
NixOS_GitHub has left #nixos [#nixos]
<prelios>
hi goibhniu, yes, the tty1-6 are flickering and no graphics on v-term 7
<longrin1>
joko, yeah, i previously removed with pkgs.lib; because of infinite recursion error . I readded it as "with lib;" . i also had to add lib to "{config, pjkgs, lib, ...};}"
<longrin1>
joko, it's working now, thanks
ma27 has joined #nixos
ma27 has quit [Client Quit]
jrolfs has quit [Ping timeout: 264 seconds]
ma27 has joined #nixos
asuryawanshi has joined #nixos
jrolfs has joined #nixos
<sirkha>
hi, i upgraded to 17.09 and many programs suddenly are acting like they are on a high DPI screen (graphical elements are bigger than they should be). Affected elements include awesomewm, chrome, hexchat, qpdfview. the Nvidia settings console and xterm seem unaffected. I have looked at xrandr and xdpyinfo and everything there checks out. not sure where to go from there
<clever>
can you re-run the command with --show-trace and then gist the output?
<dhess>
clever: Hydra question for you -- it appears to be common to set both maxJobs == (number of logical cores on the builder), and buildCores = 0. The latter will cause nix-build to use -jN or equivalent, where N is the number of cores. Meanwhile you're telling Hydra to schedule N jobs. Does this mean you'll effectively be running N^2 processes on the remote builder?
<clever>
dhess: the buildCores option is passed to make, and not all packages use ot
<clever>
dhess: while maxJobs is at the nix level, so it could potentially do x*y processes
<clever>
and it is a hard thing to balance right
<dhess>
clever: sure, but if it does (say, when building ghc) ..
<dhess>
yeah
<dhess>
that explains why my poor armv7l is getting hammered
<clever>
ive had the same issue on my arm
<dhess>
it's trying to build 2 ghcs at the same time
<dhess>
for example
<clever>
if i limit it to 1 job and -j4 at the make level, it wastes cpu half the time, on single-threaded builds
<dhess>
I finally gave up after 16 hours and each compile was crawling
<dhess>
I was hoping Hydra would be a little smarter about it
<clever>
but if i instead limit it to 4 jobs, and make -j1, it runs fine 90% of the time
<clever>
then ghc or the glibcLocales tries to use 99% of the ram in a single job
<clever>
and murderizes the other 3
<dhess>
hehe
jrolfs__ has quit [Ping timeout: 268 seconds]
<dhess>
I think I will set it to 1 job for now since I'm trying to get GHC built
<dhess>
how does one flush the local dns cache on NixOS?
<clever>
longrin1: can you also gist the entire nixos config?
<clever>
dhess: restart the nscd service
<dhess>
right ok
<dhess>
perfect thanks
jrolfs__ has joined #nixos
mrkgnao has quit [Ping timeout: 256 seconds]
woffs has quit [Quit: Gateway shutdown]
woffs has joined #nixos
bkchr has joined #nixos
<bkchr>
yegortimoshenko: you started reviewing my pull requests, any more concerns or can they be merged?
goibhniu has quit [Ping timeout: 268 seconds]
rogue_koder has quit [Quit: Konversation terminated!]
asuryawanshi has joined #nixos
asuryawanshi has quit [Remote host closed the connection]
asuryawanshi has joined #nixos
<dhess>
dammit, I can't get nix-build to connect to my Mac remote builder
<dhess>
keep getting "unable to connect", but I can sudo to root and ssh using the same host, user, and key as what's defined in /etc/nix/machines
<longrin1>
clever, not that easy because it consists of multiple files , what part could be interesting ?
<clever>
longrin1: anything that sets systemPackages
<clever>
longrin1: also, thats why i like gist, just nix-env -iA nixos.gist and then run "gist -p file1.nix file2.nix file3.nix" and all of them are published at once
<clever>
dhess: what if you run "ssh user@mac nix-store --help"
klntsky has joined #nixos
<dhess>
hmm, command not found
ThatDocsLady_ has joined #nixos
ThatDocsLady_ has quit [Remote host closed the connection]
<dhess>
but that command works fine when I run it on the Mac as the remote builder user
<clever>
dhess: bash sources different files when ran interactively
<clever>
you need to ensure ~/.bashrc on the mac sources
<bkchr>
yegortimoshenko: we have some mac os build errors there
<LnL>
I've not had time to look at it, but the error did look sort of familiar
jrolfs has joined #nixos
jrolfs__ has joined #nixos
zzamboni has joined #nixos
<dhess>
clever: yay!!! So the problem was that, as you mentioned, the /etc/bashrc checks for an interactive shell and exits if not, so I just created ~remote-builder/.bashrc and then copied the Nix bit from /etc/bashrc
ma27 has joined #nixos
<dhess>
now the remote builds are working. Thanks!
<dhess>
sure would have been nice if nix-build had told me that. All of the error messages indicated that it couldn't ssh into the remote builder at all.
prelios has quit [Quit: Page closed]
<LnL>
the error messages with the new ssh-store implementation are a lot better
<dhess>
LnL: in 1.12?
<LnL>
yeah, but the build-hook doesn't support that yet
<dhess>
LnL: unfortunately while trying to create a user using dscl and the activation scripts, I completely f**ked my Mac. Couldn't ssh in anymore, even as my login user.
<dhess>
I have no idea what happened. I gave up and re-installed
zzamboni has joined #nixos
<dhess>
so I haven't been brave enough to put the nix-darwin stuff back on it yet :)
<LnL>
huh
<dhess>
it's not the fault of your scripts. It was working fine at first (minus the part where it couldn't create the user successfully)
<dhess>
but as I tinkered with dscl to figure out all the right magic, something went majorly wrong.
<manveru>
and what change did you do to your bootloader?
<manveru>
or... i guess you didn't
<dag_>
I didnt
<manveru>
sorry, misread
<dag_>
k
<dag_>
I'd like to track down the issue, but the configuration is a few days old, the one that works
<dag_>
The issue occured only after a reboot
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] dotlambda opened pull request #33455: newsboat: init at 2.10.2 (master...newsboat) https://git.io/vNJVm
NixOS_GitHub has left #nixos [#nixos]
<dag_>
Thats why I'd like to find out, which entry in the /etc/nixos/configuration.nix causes the error. Thats why I asked if those files are persisted per derivation.
<manveru>
yeah, they're not persisted
<manveru>
only the output is
<dag_>
too bad.
ssmike has quit [Remote host closed the connection]
<manveru>
so unless you put your configuration.nix in version control, that's lost
ssmike has joined #nixos
<manveru>
you can still walk through all the .drv outputs manually... but diffing them will take days :P
<manveru>
so working from the errors should be easier
i-am-the-slime has joined #nixos
<manveru>
so when you `systemctl --user status`, all you get are those errors?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] svanderburg pushed 1 new commit to master: https://git.io/vNJVp
<NixOS_GitHub>
nixpkgs/master 62f7fc8 Sander van der Burg: xcodebuild: fix to make it build against the 11.2 iphone SDK
NixOS_GitHub has left #nixos [#nixos]
__Sander__ has joined #nixos
michaelpj_ has joined #nixos
Myrl-saki has joined #nixos
yegortimoshenko has quit [Remote host closed the connection]
joelpet has quit [Ping timeout: 260 seconds]
<dag_>
so I restored a configuration from my backup and try what happens ;)
i-am-the-slime has quit [Ping timeout: 265 seconds]
zzamboni has quit [Quit: Leaving.]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] svanderburg pushed 1 new commit to master: https://git.io/vNJwX
<NixOS_GitHub>
nixpkgs/master 61a7f0b Sander van der Burg: xcodeenv: use 9.2 by default
NixOS_GitHub has left #nixos [#nixos]
orivej has quit [Ping timeout: 240 seconds]
<dhess>
clever: I was under the impression that my Hydra would serve its binary cache, but I'm getting "curl error 60" when I try to connect from a remote builder. Is there anything I need to add to the Hydra config to get that to work?
<TonyTheLion>
with nix packages, how do I include the sources of one project (with its own derivation) into another project that depends on it, and will build it statically?
<dhess>
oh never mind, it's an SSL issue
zzamboni has joined #nixos
JosW has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] taku0 opened pull request #33456: Firefox bin 57.0.4 (master...firefox-bin-57.0.4) https://git.io/vNJrq
NixOS_GitHub has left #nixos [#nixos]
orivej has joined #nixos
asuryawanshi has quit [Remote host closed the connection]
ok2```` has quit [Quit: I shouldn't really be here - dircproxy 1.2.0]
asuryawanshi has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
nixpkgs/master bb06428 Sander van der Burg: nodePackages: move titanium from v4 to v6 package set
<NixOS_GitHub>
[nixpkgs] svanderburg pushed 1 new commit to master: https://git.io/vNJrV
<mpickering>
srhb: Could you perhaps explain the difference between ".extend" and ".override { overrides = _}" for haskellPackages?
jrolfs has joined #nixos
hellrazo1 has joined #nixos
i-am-the-slime has joined #nixos
asuryawanshi has quit [Ping timeout: 264 seconds]
Neo-- has joined #nixos
<Isorkin>
How to add ignore user/group mysql to security.hideProcessInformation=true ?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] Chiiruno opened pull request #33457: Added tewisay and it's dependencies (master...master) https://git.io/vNJo5
NixOS_GitHub has left #nixos [#nixos]
orivej has quit [Ping timeout: 264 seconds]
michaelpj_ has quit [Ping timeout: 252 seconds]
dan_b has joined #nixos
domenkozar has quit [Ping timeout: 240 seconds]
Acou_Bass has quit [Ping timeout: 240 seconds]
<samae>
disasm: do you have some code I could build upon (for a container centos7 in nixos)
Acou_Bass has joined #nixos
<i-am-the-slime>
How do I install ghc-mod that works with spacemacs?
FareTower has joined #nixos
<Aleksejs>
I have a laptop with 4K display. Is it possible to change resolution or font size in terminal?
hiratara has joined #nixos
<i-am-the-slime>
Aleksejs: as long as you only use one screen you should be fine, right?
domenkozar has joined #nixos
<Aleksejs>
not really. fonts are way too small
<i-am-the-slime>
What terminal do you use?
<Aleksejs>
default
<i-am-the-slime>
No window manager?
<Aleksejs>
yes
<i-am-the-slime>
Nice :)
<i-am-the-slime>
Then I don't know.
<Aleksejs>
well I will use wm of course
<Aleksejs>
but I'm playing with configurations now
<Aleksejs>
so, it would be useful to make fonts larger
<i-am-the-slime>
i see
hyphon81 has joined #nixos
<i-am-the-slime>
I have this setting in configuration.nix i18n.consoleFont = "Lat2-Terminus16"
<i-am-the-slime>
maybe there are other values like
ng__ has joined #nixos
<i-am-the-slime>
Lat2-Terminus128
<srhb>
mpickering: I wish I could.
<ng__>
greetings people
<ng__>
should I even be trying nixOS out when I don't yet know how to "hello world" in haskell.
<ng__>
or ask a question
<ng__>
**?
<mpickering>
srhb: :) Is it documented anywhere? I only learnt about it from that issue
<srhb>
ng__: Sure, they just have an overlap of users.
simukis has joined #nixos
<i-am-the-slime>
There seems to be ghc-mod-vim but not just ghc-mod
<srhb>
mpickering: Not that I know of :/ The only thing I've seen is that it's apparently not recommended to use extends currently.
longrin1 has joined #nixos
<mpickering>
why not? It's composable?
<mpickering>
and you don't have to ".override { overrides = ..}"
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] svanderburg pushed 1 new commit to master: https://git.io/vNJip
<NixOS_GitHub>
nixpkgs/master fb346c3 Sander van der Burg: titaniumenv: upgrade to 6.3 and remove deprecated old versions
NixOS_GitHub has left #nixos [#nixos]
jrolfs__ has quit [Ping timeout: 256 seconds]
jrolfs has quit [Ping timeout: 260 seconds]
<longrin1>
clever, during the rebuild process i got another assertion error related to php / pthreads after changing "php = {curlWrappers = false; zts = true;};" to php56
<longrin1>
before that i've noticed that both versions of php were build. php56 and php7
<longrin1>
somewhere must be another variable that i have to change but i can't find it
juhe has joined #nixos
<ng__>
with all the google-foo i know, I understood that debian is the way to go for stable haskell stuff, but the latest hsenv does not go with the latest haskell-platform.
<dhess>
yeah I was under the impression that .extends is the thing to use now.
knupfer has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] hamishmack opened pull request #33459: glib-networking: Fix glib-networking for macOS (master...glib-networking-macos) https://git.io/vNJPB
NixOS_GitHub has left #nixos [#nixos]
<Aleksejs>
i-am-the-slime: I think this setting is related to virtual consoles only
<ng__>
o wisefolks here, while the iso downloads on my pc, someone guide me right if nixos works well for mismatching package versions between haskell-platform and individual packages?
hyphon81 has quit [Quit: Konversation terminated!]
jtojnar has quit [Read error: Connection reset by peer]
jtojnar has joined #nixos
jrolfs__ has joined #nixos
jrolfs has joined #nixos
ma27 has quit [Quit: WeeChat 2.0]
ma27 has joined #nixos
<Aleksejs>
i-am-the-slime: actually... this setting is what I need. i changed it to "sun12x22" (found it on google) and it's a little bit better. I wonder if there's a list of possible values for this setting
pjan_ has joined #nixos
deltasquared has joined #nixos
<deltasquared>
hmm, time to recreate my external rescue media, may as well make it nixos.
jrolfs__ has quit [Ping timeout: 252 seconds]
jrolfs has quit [Ping timeout: 256 seconds]
<deltasquared>
ok, stupid question time, the nixos-generate-config command in the install manual, is that in a nix package somewhere I can get? just so I can bootstrap from a hosted nix store without having to faff around with booting the iso
<juhe>
hi, I have a similar problem setting the terminus console font (on virtual console, not in Xorg). The i18n.consoleFont is set to ter-v28n, package terminus_font is installed, but it doesn't work - the sun12x22 works though because it is in default xkb package... The vconsole setup tries to find the console font in xkb nix store. Is it a problem of wrong/insufficient configuration?
longrin1 has quit [Quit: Leaving]
<juhe>
systemd-vconsole-setup calls setfont which exits with error 66 and "
<juhe>
cannot open font file ter-v28n"
Myrl-saki has quit [Ping timeout: 252 seconds]
<deltasquared>
juhe: I have a logical guess as to what it might be, but I'm a relative novice with actually using nixos (I just understand some of it's concepts... ish), so I dunno if you want to hear it.
nuncanada has joined #nixos
<deltasquared>
it kinda sounds like it's looking in the store directory for xkb and not in say a "merged" path of a profile somewhere.
Ivanych has quit [Quit: Leaving.]
<deltasquared>
(which is where I'd expect all your fonts to be symlinked, given how profiles work)
<juhe>
deltasquared: true, that's my impression (btw, I'm a nixos novice too)
Myrl-saki has joined #nixos
i-am-the-slime has quit [Ping timeout: 240 seconds]
hellrazo1 has quit [Ping timeout: 248 seconds]
<deltasquared>
*decides to poke in nixos iso to see if it answers my question*
<deltasquared>
oh cool, it's smaller than the arch iso :P
<juhe>
deltasquared: The "string `which setfont` | grep nix" contains hardcoded strings to /nix/store/gdzw....jf54-kbd-2.0.4/share/... paths and setfont manual also mentions that it tries to find the font in the ...kbd-2.0.4... directory not the one provided by package in which the terminus font resides.
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
nixpkgs/master 23984e7 Domen Kožar: rescuetime: use patchelf to avoid LD_PRELOAD hack
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
[nixpkgs] domenkozar pushed 1 new commit to master: https://git.io/vNJ1B
<deltasquared>
somehow I suspect that might be a recurrent category problem in nix, due to the assumptions made by programs about their relative paths
<deltasquared>
*category of problem, rather.
longrin1 has joined #nixos
<juhe>
gchristensen: thx, will look at it now
<longrin1>
hello, on nixos-rebuild switch php does not compile "/nix/store/ryzqbbgrqzlazpy80ad56ywy6h6q8l30-php-5.6.32-dev/include/php/ext/pcre/php_pcre.h:29:18: fatal error: pcre.h: No such file or directory"
<deltasquared>
gchristensen: don't suppose you know where those special installation packages come from on the nixos iso? a few "nixos-*" things but searching for those from my local nix install doesn't turn up anything, so I assume it's from a different channel
hellrazo1 has joined #nixos
asuryawanshi has joined #nixos
<FareTower>
gchristensen, you want a job 100% Nix, no Haskell?
<longrin1>
gchristensen, i've noticed that is actually php-pthreads-2.0.10 which does not build
<gchristensen>
deltasquared: like nixos-manual? which ones specifically? I have nixos-install here on my system...
<deltasquared>
gchristensen: I'm not sure actually. whichever has the nixos-install, nixos-generate-config etc. commands mentioned in the nixos manual
<gchristensen>
FareTower: one moment
<gchristensen>
deltasquared: yeah its not really a package, which it probably should be:
<Aleksejs>
so, I've found a directory that contains available vconsole fonts, it's /nix/store/<some hash>/share/consolefonts but it looks like sun12x22 is the largest of them. It could be nice if someome would add some font for monitors with high dpi
<deltasquared>
gchristensen: I would try nicking that nix expression and trying to build it locally, but I'm not sure if I need a full nixos install to properly isolate the build environment.
<FareTower>
gchristensen, between fpcomplete, obsidian, iohk... many haskell companies use nix.
<deltasquared>
(well, and the files it references)
<FareTower>
any ocaml nix expert around? I'm failing to build tezos...
<gchristensen>
FareTower: my ideal would be working on things that benefits the community, which could be writing docs, building tools, security patching, etc. I don't want to be -just- writing Nix code in private
i-am-the-slime has joined #nixos
<deltasquared>
FareTower: I *thought* it sounded like a job advert initially :P
<gchristensen>
FareTower: or at least a portion of my paid time doing that
<FareTower>
gchristensen, were you the one who came to programming via PHP ?
<gchristensen>
basically I want to do a lot more of what I've been doing a little in my free time. yep, thats me :)
<FareTower>
well, I'm curious what lessons in community I can learn from PHP (a language that as a language... Ick!)
<mpickering>
FareTower: What is the problem?
mekeor has joined #nixos
<deltasquared>
gchristensen: unf, just looking at the install script, it kinda assumes stuff only present on the nixos iso... a bit annoying. I was hoping not to have to spin up a VM for this task.
truh has joined #nixos
<deltasquared>
brb lunch time
<juhe>
gchristensen,deltasquared: Tried the fonts.fonts thing but it doesn't work for me. I assume the problem is that fonts.fonts seems to be related to TTF fonts used by (e.g.) Xorg. Console fonts seem to be a different type of beast.
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] schneefux opened pull request #33460: metabase: init at 0.27.2 (master...pkg.metabase-jar) https://git.io/vNJM9
NixOS_GitHub has left #nixos [#nixos]
<FareTower>
mpickering, I suppose the tezos build scripts and/or opam on nixos are confused by C libraries not being "just available" in /usr/lib or something.
<gchristensen>
FareTower: they have some excellent community groups, and quite good docs too :)
<gchristensen>
juhe: I suspected that might be true :(
<FareTower>
mpickering, opam also complains about not finding one package, but I suppose that's secondary in comparison.
<gchristensen>
indeed, longrin1 ...
<mpickering>
is it already packaged at all?
pjan_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<longrin1>
gchristensen, anything i can do to resolve this ?
<deltasquared>
pretty sure it kinda does in the form of FS namespacing wrappers already
<FareTower>
(maybe even have /usr/lib point to some particular user's .nix-profile/lib )
<gchristensen>
longrin1: and you also set config.php.zts ?
Neo-- has quit [Ping timeout: 255 seconds]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] andir opened pull request #33461: blueman: add `gobjectIntrospection` as native build dependency (master...blueman) https://git.io/vNJDo
NixOS_GitHub has left #nixos [#nixos]
<deltasquared>
FareTower: IOW in theory yeah but you'd want to isolate it to just that one program and what it needs to maintain some degree of purity.
<deltasquared>
hence the mount namespacing.
<deltasquared>
make that particular "global" /usr visible for that one program and no others hopefully.
<FareTower>
more like I want to build this way, trace the list of packages actually used, and prepare a recipe based on that... vestasys style
pjan_ has joined #nixos
<juhe>
gchristensen, deltasquared: I have found a workaround for the font thing. This seems to work for me: i18n.consoleFont = "${pkgs.terminus_font}/share/consolefonts/ter-v28n";
<gchristensen>
something close to that should work :P maybe drop the last )
pie_ has joined #nixos
<juhe>
gchristensen: Thanks, much better! Though I had to change it a bit otherwise the file was not found, but with this i18n.consoleFont = "${pkgs.terminus_font}/share/consolefonts/ter-v28n.psf.gz"; (note the .psf.gz extension) it works. Great!
* deltasquared
has a poke around the nixos installer iso
jrolfs__ has joined #nixos
<deltasquared>
nice, the main system is just a tmpfs with only the nix store mounted from the CD. I had always wanted to do something like that with arch.
<gchristensen>
longrin1: this one should at least evaluate: (pkgs.php56Packages.pthreads.overrideAttrs (x: { buildInputs = x.buildInputs ++ [ pkgs.pecl ]; }))
jrolfs has joined #nixos
<gchristensen>
longrin1: replace pkgs.pecl with pkgs.pcre, try that, and I'm going to go get my coffee so I stop spamming #nixos with bad advice
JosW has quit [Quit: Konversation terminated!]
<longrin1>
gchristensen, right it does evaluate, but pecl attribute is missing. I changed it to pcre and the build process begins but fails with missing pcre.h
<deltasquared>
feck it, maybe I'll just have to mount this drive into the fecking VM
<deltasquared>
... erm. sorry. mild frustration
raynold has quit [Quit: Connection closed for inactivity]
<deltasquared>
so much for doing this downstairs with my morning beverage... VMs really hit the battery.
<joko>
Is there a way to properly link files from one package to another? As if the first package has a plugins dir and the second one needs them on its $out/lib/ ... If I do ln -s, I get collisions...
asuryawanshi has quit [Remote host closed the connection]
orivej has joined #nixos
<deltasquared>
I *personall* would have thought so if you're content with just a static set of modules from one package.
<deltasquared>
* s/ll/lly/
<deltasquared>
but then, I'm still blundering around with the installer iso, so...
<longrin1>
gchristensen, but that is what we have tried ?
<Li[m]>
why is force import on by default on zfs?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] svanderburg pushed 1 new commit to master: https://git.io/vNJSg
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
nixpkgs/master b481181 Sander van der Burg: titaniumenv: bump default versions of the SDK and Xcode
aarvar has joined #nixos
iyzsong has joined #nixos
<longrin1>
gchristensen, OK, after remount /nix/store readwrite and adding buildInputs = [ pkgs.pcre ]; to pthreads it got compiled
<gchristensen>
Isorkin_: yes, send the PR to master
catch22 has joined #nixos
<goibhniu>
octe: I've no idea myself, but maybe it helps to mention here that it's a cargo error: "error: the lock file needs to be updated but --locked was passed to prevent this"
Unode has quit [Ping timeout: 248 seconds]
<gchristensen>
srhb: nix-store --gc --print-roots on my system emits: /run/current-system -> /nix/store/y09271pq956xdyzg5zy5a1frc86czbny-nixos-system-zoidberg-17.09.2476.53e6d671a96
<aminechikhaoui>
srhb: current profile should be added as root automatically afaik
<octe>
goibhniu, yeah.. it's strange though that it works when i have the build file as a seperate .nix-file and use nix-build
<octe>
but when i moved it to nixpkgs structure it stopped working
longrin1 has quit [Quit: Leaving]
Myrl-saki has joined #nixos
Unode has joined #nixos
<srhb>
gchristensen: But |grep drv produces nothing (here)
<gchristensen>
the drv isn't a gc root
<srhb>
So why is it live? :D
<srhb>
It has no referrers nor any gc roots
<gchristensen>
oooooooooooohhhhhhhhhhhhhhhh I thought you were using "derivation" as in "output path"
<srhb>
Ah, I meant .drv :)
<gchristensen>
srhb: have you seen gc-keep-derivations? "If true (default), the garbage collector will keep the derivations from which non-garbage store paths were built."
<srhb>
ie what I get from nix-store -qd /var/run/current-system
<srhb>
gchristensen: Yeah, just wondering what mechanism it uses for that :)
<gchristensen>
oh I see
<gchristensen>
let's see!
<Isorkin_>
grahamc: please check this pr 33207 and 33267
<srhb>
Ah, so it's explicit. That's great, thank you!
<srhb>
(I want to be able to nix diff my deployed derivations vs the incoming ones, and avoid nixops-like state, so I rely on the derivation being on the target. Just wanted to make sure that's safe)
<srhb>
gchristensen: Thanks, I'll try to get used to that. :)
stepcut has joined #nixos
<gchristensen>
you can navigate just about any project's source code without knowing the language just by searching around for uniquely named tokens :)
orivej has joined #nixos
<srhb>
I've heard about the tool before, never actually tried it!
zzamboni has joined #nixos
coot has joined #nixos
pjan_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<deltasquared>
aww duck. one moment, and I shall be contiuning my nixos install shortly
<deltasquared>
question, will I have to pay attention to the hardware-config.nix (or whatever that file was) produced during the generation step of the install manual, if I were to do so from a VM but then want to use that install on bare metal later?
<gchristensen>
you should regenerate the hardware-config.nix later
pjan_ has joined #nixos
<gchristensen>
the hardware-config from the VM is invalid for the bare metal
zzamboni has quit [Quit: Leaving.]
<deltasquared>
gchristensen: actually, I'm more concerned it'll "optimise" things too aggressively for this use case - a portable system I can boot off of USB storage.
jrolfs__ has quit [Ping timeout: 240 seconds]
<deltasquared>
(if there are any docs on this for nixos I'm all ears)
jrolfs has quit [Ping timeout: 255 seconds]
<deltasquared>
the hardware autodetect might just assume too much about the machine it happens to be running on at the time.
<gchristensen>
I don't understand
<deltasquared>
what it means is, I'll have to at least inspect that file anyway, possibly alter it.
yegortimoshenko has joined #nixos
jrolfs__ has joined #nixos
jrolfs has joined #nixos
<deltasquared>
"the installer may need quite a lot of ram"... let me guess, trying to juggle all those expressions in memory again
jrolfs__ has quit [Ping timeout: 248 seconds]
jrolfs has quit [Ping timeout: 256 seconds]
orivej has quit [Ping timeout: 260 seconds]
coot_ has joined #nixos
orivej has joined #nixos
<bbsl>
everything gets installed in memory first afaik
dan_b has quit [Ping timeout: 255 seconds]
coot has quit [Ping timeout: 268 seconds]
vincent_vdk has left #nixos [#nixos]
<TonyTheLion>
is there a way to get nix to include sources for another project into a project so they can be statically linked?
<NixOS_GitHub>
nixpkgs/master b41e5ec Orivej Desh: mysql.connector-c: fix build on Darwin...
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
[nixpkgs] orivej pushed 1 new commit to master: https://git.io/vNJA0
jrolfs__ has joined #nixos
Phillemann has joined #nixos
<Phillemann>
I'd like to execute a command in patchPhase, as well as apply a patch. What's the best way to achieve that?
<Phillemann>
Can I call the "default patch phase" in my custom patchPhase function?
<symphorien>
you can put your command in prePatch or postPatch
<Phillemann>
Ah. That makes sense.
<Phillemann>
Another related question. I have two directories (old and new) and would like to create a patch that's "compatible" with what I specify in "patches = [ ... ];"
<Phillemann>
I tried git diff --no-index old/ new/, but apparently that's not right.
pjan_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
jrolfs has joined #nixos
hexa- has joined #nixos
<symphorien>
iirc there is a patchFlags where you can specify the right parameter for -p
<LnL>
Phillemann: use prePatch/postPatch
pjan_ has joined #nixos
<LnL>
it's generally recommended to use pre/post hooks instead of overriding the entire phase
jrolfs__ has quit [Ping timeout: 252 seconds]
mrkgnao has quit [Ping timeout: 246 seconds]
<Phillemann>
Ah, "diff -ru old new" did the trick apparently.
<LnL>
yeah diff -u or git diff -p
<Phillemann>
Ah. Got to remember that.
pjan_ has quit [Client Quit]
bbsl has quit [Remote host closed the connection]
fiveht has quit [Remote host closed the connection]
jrolfs has quit [Ping timeout: 240 seconds]
<detran`>
hey, I've done a nixos-rebuild test, is there a way to switch back to the previous configuration without rebooting?
<hyper_ch>
hmmm, is anyone running nixos on a raspberry?
<hyper_ch>
makefu: I like raspberries as standalone backup servers :)
<hyper_ch>
do you run zfs on it? :)
<makefu>
ha!
<makefu>
raspi is just very flaky and imho not very suitable for a server use-case
iyzsong has quit [Ping timeout: 248 seconds]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] ocharles pushed 1 new commit to release-17.09: https://git.io/vNJhW
<NixOS_GitHub>
nixpkgs/release-17.09 381a080 Ollie Charles: prometheus-rabbitmq-exporter: init at 0.25.2
NixOS_GitHub has left #nixos [#nixos]
<gchristensen>
ocharles: you're my hero!
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] ocharles pushed 1 new commit to master: https://git.io/vNJhE
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
nixpkgs/master f16431b Ollie Charles: prometheus-rabbitmq-exporter: init at 0.25.2
<pauldub>
I would love to use nixos to build rpi's (zero in my case) sdcard images, hopefully the cross compilation work will come along (i'm not sure how I could contribute to this effort)
Lisanna has joined #nixos
<Lisanna>
Hey gchristensen : just wanted to say that moving /nix and /tmp to SSD was a success, no complications at all
<gchristensen>
nice!
<gchristensen>
I won't scare people off it anymore :)
<Lisanna>
:)
<TonyTheLion>
is there a way to get nix to include sources for another project into a project so they can be statically linked?
<Lisanna>
I just setup fileSystems in configuration.nix, nixos-rebuild boot, rsync'd my current /nix to a /nix-new, and rebooted, and it all works :)
<NixOS_GitHub>
[nixpkgs] orivej pushed 1 new commit to master: https://git.io/vNJhF
NixOS_GitHub has left #nixos [#nixos]
justanotheruser has quit [Ping timeout: 248 seconds]
<sphalerite>
TonyTheLion: typically you'd want to generate a static library rather than using the sources for static linking
<sphalerite>
TonyTheLion: how to do that depends on the build system
<TonyTheLion>
its just if you want someone to build your projects statically, its more convenient for it to all become one package, rather than a bunch of differnt things
<sphalerite>
well that seems like going against the grain with nix, and has the disadvantage of making all the compilation less granular and so requiring much longer builds
<sphalerite>
I don't see the point in using nix if you're going to do that
jrolfs__ has joined #nixos
<TonyTheLion>
sphalerite: so basically keep the packages seperate and build them in order separately and then link to the .a files
jrolfs has joined #nixos
<sphalerite>
yeah that's what I'd do. Do you have a good reason for static linking though?
<hyper_ch>
makefu: as backup server it runs really nice
<TonyTheLion>
sphalerite: not sure what qualifies as a 'good reason'
i-am-the-slime has quit [Ping timeout: 264 seconds]
<TonyTheLion>
afaik, static linking is as valid as dynamic linking
<sphalerite>
TonyTheLion: yeah but nix eliminates some of the disadvantages of dynamic linking
<TonyTheLion>
could you elaborate?
<TonyTheLion>
(sorry I'm fairly new to this)
hals has quit [Ping timeout: 248 seconds]
<sphalerite>
TonyTheLion: thanks to nix you know exactly what you're linking against at runtime even though it's dynamic. DLL hell doesn't happen for the same reason
<sphalerite>
Basically, why are you using static linking?
<TonyTheLion>
to have one binary in the end, vs a set of them
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] orivej pushed 1 new commit to master: https://git.io/vNUeX
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
nixpkgs/master d1204e6 Orivej Desh: ttfautohint: fix build on Darwin...
<sphalerite>
Why do you want that?
dan_b has quit [Ping timeout: 240 seconds]
yegortimoshenko has left #nixos ["ERC (IRC client for Emacs 27.0.50)"]
<bhipple[m]>
Perhaps he's deploying to a machine without NixPkg and can't just nix-copy-closure
<TonyTheLion>
sphalerite: ease of distribution
<TonyTheLion>
no need to compile with -fPIC
<TonyTheLion>
embedded has no OS so you can't dynamic link
<sphalerite>
bhipple: tar c $(nix-store -qR result) | ssh target '( cd / ; tar x)'
<sphalerite>
Right so you want to use nix only for building, not for distribution?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] erosennin opened pull request #33466: qca2 and qca-qt5: use system CA certificates (master...master) https://git.io/vNUvY
NixOS_GitHub has left #nixos [#nixos]
mg_ has quit [Ping timeout: 255 seconds]
<TonyTheLion>
sphalerite: yea
<sphalerite>
Yeah in that case it makes a bit more sense. For applications you'll typically want to stick with dynamic linking, even if you're deploying to non-nix platforms (there are tools like https://github.com/matthewbauer/nix-bundle which can package a nix closure up for running on other linux systems)
<sphalerite>
but yeah if you're running on bare metal of course you can't do that
vidbina has joined #nixos
Svarog has joined #nixos
<Svarog>
is there a way to get cardano as an overlay in nixos?
<Svarog>
i've tried adding it, and it looked like it kind of worked, but now when i try to use connectScripts.mainnetWallet in a derivation, i get an error saying openssl is not installed
<Svarog>
which is odd.. cause it is definitely there
MercurialAlchemi has quit [Ping timeout: 248 seconds]
MercurialAlchemi has joined #nixos
Sonarpulse has quit [Ping timeout: 265 seconds]
cement has joined #nixos
MercurialAlchemi has quit [Ping timeout: 240 seconds]
vidbina has quit [Ping timeout: 240 seconds]
spietz has joined #nixos
MercurialAlchemi has joined #nixos
phreedom has quit [Ping timeout: 240 seconds]
<gchristensen>
ocharles: are there docs on using prometheus exporters with the prometheus module config?
<ocharles>
gchristensen: not sure I can parse the question
<ocharles>
oh, you mean the process of enabling an exporter and then telling prometheus to scrape it?
<NixOS_GitHub>
[nixpkgs] edolstra pushed 1 new commit to release-17.09: https://git.io/vNUJn
NixOS_GitHub has left #nixos [#nixos]
<deltasquared>
interesting, nixpkgs/nixos/modules/profiles/qemu-guest.nix ... now where are these profiles kept
<deltasquared>
... never mind, I have located it.
jrolfs__ has quit [Ping timeout: 265 seconds]
jrolfs has quit [Ping timeout: 248 seconds]
user__ has quit [Remote host closed the connection]
user__ has joined #nixos
simukis has joined #nixos
<deltasquared>
gchristensen: about asking about the hardware configuration from earlier... how well supported is a "portable" installation that tries to have as many kernel modules as possible, for booting on as much hardware as possible?
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] NeQuissimus pushed 2 new commits to master: https://git.io/vNUJD
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
nixpkgs/master b5ce602 Tim Steinbach: linux: 4.14.11 -> 4.14.12
<NixOS_GitHub>
nixpkgs/master 6960541 Tim Steinbach: linux: 4.4.109 -> 4.4.110
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] NeQuissimus pushed 1 new commit to release-17.09: https://git.io/vNUJ9
<NixOS_GitHub>
nixpkgs/release-17.09 f4e2b93 Tim Steinbach: linux: 4.14.11 -> 4.14.12...
NixOS_GitHub has left #nixos [#nixos]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] NeQuissimus pushed 1 new commit to release-17.09: https://git.io/vNUJ7
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
nixpkgs/release-17.09 81373e4 Tim Steinbach: linux: 4.4.109 -> 4.4.110...
<deltasquared>
(on arch for instance there was a "fallback" mkinitcpio profile that just included everything, I don't know yet how nix does it's initramfs generation)
<gchristensen>
ocharles: I suspect my ignorance is showing :) I'll have to go play with it and see
<gchristensen>
deltasquared: yes, our installer already follows this pattern
<deltasquared>
ah well, I'll just have tae boot it and see what happens.
<deltasquared>
gchristensen: for instance, the variable "boot.initrd.availableKernelModules" defined in the profile expression, I assume I can append to that say (and now I'm going to need to look at docs on the syntax...)
<fpletz>
gchristensen: if you have prometheus questions you can also ask me if i'm around :)
ebzzry has quit [Ping timeout: 265 seconds]
Profpatsch has quit [Ping timeout: 260 seconds]
<deltasquared>
interesting, the boot.initrd.availableKernelModules option appears to be assigned twice.. is there some default to concatenation if you assign a list to something that's already a list? (also, pointers to whereabouts in the docs the explanation for nixexprs is hiding would be cool)
asuryawanshi has joined #nixos
* deltasquared
realises he forgot to setup networking for the qemu VM
<ocharles>
gchristensen: starting with the prometheus docs will hopefully be enough, but if not you can always ping me :)
<deltasquared>
this is going *swimmingly* thus far... >_<
<gchristensen>
ocharles: I think I was confused by having to setup my own systemd service for each exporter, but I get it now :) thanks!
<ocharles>
well, most exporters have a nixos module
<ocharles>
this rabbitmq one will, as soon as I can get it working
<ocharles>
so it shouldn't be necessary to do systemd.services.blahblahblah
<srhb>
deltasquared: :When multiple modules define an option, NixOS will try to merge the definitions. In the case of environment.systemPackages, that’s easy: the lists of packages can simply be concatenated."
<deltasquared>
srhb: right, so it depends on the variable in question
<srhb>
deltasquared: The type specifically, yeah.
<deltasquared>
srhb: that's fine, just making sure I understand what I see
<srhb>
:)
<deltasquared>
wait, so package expressions are creating a function by calling another standard function? (just trying to get my head around what the language is doing here)
asuryawanshi has quit [Ping timeout: 268 seconds]
<deltasquared>
(constructing functions from other functions is nothing new to me, again just curiosity.)
<srhb>
deltasquared: In the case you're talking about we're discussing NixOS modules specifically, not packages.
<srhb>
deltasquared: Notice in the top of your configuration, there should be a config argument passed to it
<deltasquared>
srhb: indeed, I do see that
<fpletz>
deltasquared: package expressions just evaluate to a path in the nix store, basically a string
<deltasquared>
fpletz: oh that figures, the whole "hash of their input" thing
<srhb>
deltasquared: That's the result of all the "active" (for lack of a better word, currently) modules
<srhb>
Loaded? Evaluated? :-)
<fpletz>
so environment.systemPackages for instance is essentially a list of store paths that will be magically symlinked together into /run/current-system/sw
<srhb>
mpickering: I think you're using super a few places where it's not strictly necessary (and which hampers composability a bit)
<srhb>
Meh, it's really just callPackage, so that's probably not a big deal.
<mpickering>
I suppose I should use "self.haskell.packages.ghcHEAD" rather than "super" as well?
<mpickering>
I am using sup a bit too much but not on things which are going to be modified, in which case it just doesn't matter or are there other tradeoffs?
<srhb>
If possible, yes, I think so. That makes it possible for me to reuse your modifications. :)
<srhb>
I get to alter what your ghcHEAD is/does if it's from self
<srhb>
But in this case I'm not sure it really makes a meaningful difference.
tg has quit [Ping timeout: 252 seconds]
<srhb>
(consider the case where I've modified the rev/sha of ghcHEAD myself)
<mpickering>
yes that's a good point, you want to be able to do that in the same overlay
<mpickering>
great feedback thanks
<vaibhavsagar>
mpickering: you have a minor typo, s/availible/available/
<vaibhavsagar>
I can't figure out where your source is otherwise I would send a 1 character PR :)
<vaibhavsagar>
which is my favourite kind of PR
<mpickering>
the source is only on my machine heh
<vaibhavsagar>
fair enough, that's what I suspected
<mpickering>
I thought I already fixed that hmm
<mpickering>
thanks for pointing it out again
<srhb>
Hakyll?
<mpickering>
yes
<srhb>
:)
<vaibhavsagar>
"For example, we could enter an environment with my-cool-new-attribute availible with nix-shell -p my-cool-new-attribute as if it were defined in the main nixpkgs repo."
asuryawanshi has joined #nixos
<vaibhavsagar>
my pleasure, I am pedantic like that
nadley has quit [Ping timeout: 260 seconds]
<srhb>
Thanks for the post :D
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] nixy opened pull request #33467: [WIP] kdeconnect: Add `sshfs` as a dependency (master...kdeconnect-sshfs) https://git.io/vNUID
NixOS_GitHub has left #nixos [#nixos]
nadley has joined #nixos
<mpickering>
I really should use self.callPackage I think as I also modify "all-cabal-hashes" in my overlay
Lisanna has quit [Ping timeout: 260 seconds]
buovjaga has joined #nixos
<srhb>
Someone posted somewhere some rules of thumb about when to use self and when to use super, let me see if I can dig it up..
<buovjaga>
Dezgeg: I think your work on NixOS for ARM could qualify for a FUUG grant: https://fuug.fi/saatio/apurahat/ Do consider applying :) (maybe defining some small milestone would help)
<srhb>
I guess dhall2nix could cover that.
* srhb
really wants an excuse to throw dhall everywhere
<deltasquared>
hmm, nixos-install is complaining about a lack of boot device configuration despite --no-bootloader
<deltasquared>
(I cannot correctly set up boot configuration within a VM... I'm not exposing the entire disk)
<srhb>
I only think that option prevents the execution of it, it doesn't remove the assertions (that I think are in the module system?)
<srhb>
If so, liberal use of mkForce may help (or just put in a dummy)
<deltasquared>
a dummy? but would that not cause problems
<deltasquared>
as in "no such device" problems
<magnetophon>
I'm working on upgraing the faust pkg, and it compiles and runs. When I try to compile something with it, pkgconfig complains about missing sndfile. faust already had libsndfile in the pkg at the previous version. Any ideas?
<srhb>
deltasquared: Err, possibly. Actually, listen to someone more knowledgable on this. It's been a while since I look into that part :P
jrolfs__ has joined #nixos
jrolfs has joined #nixos
<deltasquared>
I just hope it won't cause more difficulties later. ruining a carefully choreographed boot setup is a sure way to get me upset.
<srhb>
Even more reason not to listen to me! :-)
Tucky has quit [Quit: WeeChat 2.0.1]
<deltasquared>
what's this mkForce thing anyway
<srhb>
It would allow you to overwrite the attribute that has that assertion (assuming there is one)
<srhb>
Essentially rendering it a noop.
<srhb>
What's the error message? I'm starting to think it's not a module assertion.
<deltasquared>
- You must set the option ‘boot.loader.grub.devices’ or 'boot.loader.grub.mirroredBoots' to make the system bootable.
<nixy>
If someone requests changes to a PR do I have to @ them to get the big red x's to go away or will they be notified
<deltasquared>
srhb: the note about --show-trace beneath it does nothing.
<srhb>
Hmm, that is indeed from grub.nix
<deltasquared>
needless to say, I didn't order that ;)
<srhb>
So you want grub, you want it to write to /boot, but not write to a device?
<srhb>
Maybe you can use "nodev"
<deltasquared>
srhb: actually, I'll just try setting boot.loader.grub.enable to false, I didn't expect it to default true
<srhb>
that is, grub.devices = [ "nodev" ]. That should yield a menu but not write anywhere
<deltasquared>
I think I'll be finding a *lot* of stuff I wasn't expecting to as default as well...
<srhb>
Oh, if you don't even care about the menu, yeah, that's the way to go :-)
<mpickering>
also, is there an existing solution for nix syntax highlighting with pandoc/hakyll?
<srhb>
But how will you load NixOS then?
<deltasquared>
srhb: I'll figure that out later, I be learnin' the ropes
<srhb>
deltasquared: OK! :)
<deltasquared>
srhb: I'm not sure how the boot config will look anyway atm. initial install is in QEMU but it will be a portable install later (mainly a rescue-disk type thing that is itself updateable)
<srhb>
I'm just puzzled how the vm will boot. :D
<Orbstheorem>
I'm writing a script what uses grep, awk and sed a lot..., do I really have to ${pkgs.gawk}/bin/awk, ... sed... grep... or is there a better way to do it?
<deltasquared>
srhb: g' question... no idea yet. :P
<deltasquared>
srhb: also I wanted to poke around the base system that was given to me in any case.
<srhb>
Orbstheorem: You could add them to PATH.
<deltasquared>
me being an arch person I'm probably going to find a lot of fat to carve out, for starters.
ertes has quit [Ping timeout: 248 seconds]
<srhb>
deltasquared: Exciting :-)
<infinisil>
Orbstheorem: Oh you're the guy with the Idris shirts! I replied to you in private messages but you didn't seem to answer, pinging here instead
<deltasquared>
srhb: 1.2GB... ok, not bad for a base install. looking good thus far.
lbd has joined #nixos
<srhb>
deltasquared: In my experience, most of the space ends up being consumed by the inevitable desire to never garbage collect :-P
<deltasquared>
srhb: that's why I gave it 24GB for starters, and the LVM volume can be resized later ;)
<deltasquared>
I've got the larger part of a terabyte to play with
<srhb>
26G /nix/store here. And that's like nothing. :-P
<srhb>
But my development environments are often large.
Sonarpulse has joined #nixos
<deltasquared>
I'm not on the nix crack yet, give me a chance
<srhb>
You're right, sorry. ;-)
<nixy>
24GB is fine for a server (in my experience) but it's once you start doing devy/desktop stuff that the store really blows up
<srhb>
Just trying to give an idea that it really isn't a smallish distro, usually.
<Orbstheorem>
infinisil: I just pm'd you :)
<deltasquared>
srhb: compared to my arch install where /usr hasn't yet broken 10GB in it's entire life
<deltasquared>
(my po- erm, personal file collection usually beats that)
<nixy>
Wow that's a lot of poems
jrolfs__ has quit [Ping timeout: 248 seconds]
<srhb>
deltasquared: I remember Arch being quite small for me too, yes.
<deltasquared>
pony! I was totally gonna say pony!
Alling has joined #nixos
<infinisil>
heh
<Alling>
So I finally got NixOS up and running on my RPi3. Now, is there any way to install Borg Backup? It fails with "unsupported system: aarch64-linux".
lbd has quit [Quit: leaving]
<deltasquared>
Alling: I suspect that's less to do with nix...
jrolfs__ has joined #nixos
<deltasquared>
more than it only supporting certain arches (and, potentially, daftness with uname string matching)
<deltasquared>
(the program in question, I mean)
<srhb>
That sounds like a nixpkgs warning
<srhb>
So it's probably explicitly disabled
<deltasquared>
srhb: oh? ok, fine, I'm shutting up :P
arximboldi has joined #nixos
<deltasquared>
nixos. I really should say nixos. bah. more characters to type
<srhb>
nixpkgs, technically, I'd think :)
<nixy>
deltasquared: That's dangerouns, nix means so many things around here :P
<Alling>
Well, the wiki says "Using the 64-bit AArch64 image is highly recommended, as the availability of binaries is much better and allows the use of the 64-bit instruction set."
<deltasquared>
F*f-minor chord*
<srhb>
:P
<deltasquared>
but "n i x o s" is all over the keyboard in either layout that I happen to use
<deltasquared>
fine *grumble*
<Alling>
Anyway, wat do? Isn't AArch64 "the way to do it"?
<deltasquared>
srhb: so what, that borg backup thing was blacklisted for whatever reason?
<Alling>
(I have no idea what AArch64 vs ARMv7 means.)
<srhb>
deltasquared Alling : I'm looking. Not very used to cross-platform stuff though :)
<Alling>
And here I was, thinking an upgrade from RPi1 to RPi3 would solve all my problems (as in the single problem of being able to install Borg).
<Alling>
Thanks man!
<srhb>
So borgbackup has meta.platforms = platforms.unix
<Alling>
To be more specific, the last line with --show-trace is this:
<deltasquared>
Alling: I would wager an upgrade to the rpi3 will solve a few other problems in the long run...
<Alling>
called from /nix/store/pbdwy5f4r7ymv01097zwkpwrp3jap5yy-nixos-18.03pre-git/nixos/pkgs/development/libraries/science/math/openblas/default.nix:103:8: unsupported system: aarch64-linux
<srhb>
deltasquared: I used to be around astrophysicists a lot of the day. Fortran is like their native language :-P
<Alling>
srhb: Sure brb
<srhb>
Or was, at least.
<gchristensen>
my understanding it is more about the mathematics libraries that have such a high level of time / money / proving correct investment
<deltasquared>
(side note, turns out one can fake restrict via abusing the strict aliasing rule... but eyy, off topic)
<srhb>
There's also some supposedly extremely optimizing fortran compilers out there, but yeah, I imagine correctly written C can do the same, but building it all over is.. Ow.
<deltasquared>
gchristensen: oof, formal correctness... yeah I can see why that's important
asuryawanshi has quit [Remote host closed the connection]
<srhb>
So you don't go crashing billion dollar probes into Mar-- oh..
<deltasquared>
gchristensen: that too. the C99 "restrict" thing being one thing that let it be closer to fortran is one thing I know about in the performance area
<gchristensen>
ahh
jrolfs has quit [Ping timeout: 256 seconds]
<deltasquared>
lets it assume you don't have to reload b->x if you write to a->x
<deltasquared>
(assuming a and b are the same kind of pointer)
<srhb>
So something funny is happening in blas64
<deltasquared>
srhb: hmm?
<gchristensen>
deltasquared: fortran is the only time I've ever been on a team who paid $40,000 for a compiler :)
<srhb>
hasPrefix x86_64
<srhb>
Maybe
<deltasquared>
gchristensen: bloody *meep*
<gchristensen>
ifort, man
jtojnar has joined #nixos
<srhb>
Alling: Have you tried overriding a package before?
<deltasquared>
ok, first port of call in changing config... where is my mainline kernel
<deltasquared>
(or closer to)
<deltasquared>
and actually, changing to the unstable channel.
<Yaniel>
deltasquared: I was going to ask about that too :D
<deltasquared>
but I may have to do that later because now I have to arrange dinner.
jacob__ has joined #nixos
asuryawanshi has joined #nixos
<Yaniel>
unstable seems to use 4.9 by default
<gchristensen>
to get 4.14 on 17.09 or unstable use boot.kernelPackages = pkgs.linuxPackages_latest.
maiksen has quit [Ping timeout: 260 seconds]
<gchristensen>
additionally, 17.09 already has KPTI patches for 4.14 and will have KPTI patches for 4.4 and 4.9 very soon (next couple hours)
<Orbstheorem>
I've been working in a module to separate the network namespace in which network-manager runs and my "internal" networking. Eventually I'd like to get it merged but for the moment could you please comment about what you think/what could be improved: https://paste.gnugen.ch/raw/Dpdz
NixOS_GitHub has joined #nixos
NixOS_GitHub has left #nixos [#nixos]
<NixOS_GitHub>
[nixpkgs] fpletz pushed 3 new commits to master: https://git.io/vNUO7
<NixOS_GitHub>
nixpkgs/master 375f50f Franz Pletz: Merge pull request #33456 from taku0/firefox-bin-57.0.4...
ssmike has quit [Remote host closed the connection]
ssmike has joined #nixos
<Alling>
srhb: Yes, I have done so with a few packages, with 'pkgs.mitmproxy.overrideAttrs' as well as pkgs.python3Packages.buildPythonPackage'.
<deltasquared>
well, nothing to do just yet.
jrolfs has quit [Ping timeout: 248 seconds]
jrolfs__ has quit [Ping timeout: 248 seconds]
<srhb>
Alling: Are you sure your stdenv.system says aarch64-linux?
<Alling>
srhb: I have absolutely no idea; how do I check?
<deltasquared>
next stupid question: seeing as I can't reboot just yet (boot config not set up), can I get nix-env to work with the new system while it's mounted at /mnt?
<srhb>
Alling: I think this should do: nix-instantiate --eval --expr "with import <nixpkgs> {}; pkgs.stdenv.system"
<deltasquared>
something like a --root option I would assume...
rogue_koder has joined #nixos
asuryawanshi has quit [Remote host closed the connection]
<Alling>
srhb: It echoed "aarch64-linux" (including the quotes).
<srhb>
deltasquared: nixos-install has a chroot option, but iirc it needs a bit of fiddling
jensens has quit [Ping timeout: 268 seconds]
asuryawanshi has joined #nixos
<deltasquared>
srhb: would it just be cleaner to chroot directly then
<srhb>
Alling: openblas has this: config = configs.${stdenv.system} or (throw "unsupported system: ${stdenv.system}");
<deltasquared>
interesting, I can see linux in the store for the new system, yet "nix-env --query --installed linux" matches nothing... what am I not understanding here
<srhb>
Alling: What was your commit again?
<srhb>
Alling: I feel silly that I didn't check that :-)
<deltasquared>
(yes, I am chrooted into it)
<Alling>
srhb: 42 was the answer. ^^
<srhb>
Alling: Right, just checking... nixos-version said what commit?
<Alling>
18.03pre-git (Impala)
<srhb>
Oh, it doesn't say the hash?
<Alling>
That was its only output.
jrolfs__ has joined #nixos
jrolfs has joined #nixos
<hyper_ch>
makefu: wanna test something?
<srhb>
Alling: Does this give a hash? nix-shell -p nix-info --run nix-info
<Alling>
srhb: Actually it failed. error: undefined variable ‘nix-info’ at (string):1:66 (use ‘--show-trace’ to show detailed location information)
<deltasquared>
anyone got any ideas for what I'm doing wrong with my question above?
<srhb>
Alling: I'm guessing it uses a somewhat to much older nixpkgs version
balaji has joined #nixos
balaji has quit [Client Quit]
<srhb>
I can't remember how to actually get it when none of the above spit it out :-P
<Alling>
Yeah, seems kind of reasonable.
<srhb>
Alling: Apologies for the wild goose chase
<Alling>
srhb: No apologies needed. I'm very thankful to all of you guys. It can't be easy to troubleshoot some random person's system over the internet.
<srhb>
:)
<gchristensen>
srhb is super good at it
<srhb>
Alling: Anyway, if it isn't modified in some magical way to allow aarch64, I'm guessing you could just update it
<srhb>
gchristensen: Thanks! :-)
ma27 has joined #nixos
dan_b has joined #nixos
<gchristensen>
srhb: no way, thank _you_ at it
<Alling>
I'm gonna try to add it manually.
<srhb>
deltasquared: Are you trying to see the linux package in the system profile?
<srhb>
deltasquared: Or well, current-system
<Alling>
srhb: Gotta go now though, thank you very much! :)
<srhb>
deltasquared: If so, maybe nix-store -qR /nix/var/nix/profiles/system | grep linux
delta3 has quit [Remote host closed the connection]
<deltasquared>
srhb: one moment.
Svarog has quit [Quit: Ex-Chat]
<srhb>
Alling: Take care :)
<deltasquared>
srhb: so what's nix-env --query --installed actually doing then?
jrolfs__ has quit [Ping timeout: 248 seconds]
jrolfs has quit [Ping timeout: 268 seconds]
pmade has joined #nixos
<srhb>
deltasquared: I'm not sure I can give an exact answer, but something to the extent of telling you which packages were installed into the profile of the current user with nix-env
<srhb>
deltasquared: (So not as a result of nixos-rebuild)
<srhb>
Actually, that's a lie
orivej has quit [Ping timeout: 252 seconds]
<srhb>
I suppose it depends on the symlinks in /root, if you're root...
asuryawanshi has quit [Remote host closed the connection]
Alling has left #nixos [#nixos]
noobineer has joined #nixos
noobineer has quit [Max SendQ exceeded]
<deltasquared>
srhb: /root in the installed system has .nix-defexpr but no profile, yet.
asuryawanshi has joined #nixos
<srhb>
Uh, not sure what it does then.
<deltasquared>
I wonder if you must tell it to use the system profile... one moment.
<deltasquared>
srhb: whereas there isn't a "default" profile on this setup yet, only a "system" one.
<srhb>
Tried installing anything?
<srhb>
With nix-env, that is
phreedom has joined #nixos
<srhb>
I think the relevant profile will pop into existence.
<deltasquared>
srhb: no, I had not... I had only run the base installer.
<deltasquared>
I assumed something must be keeping the base system "anchored" as it were
<srhb>
deltasquared: Yes, the system profile.
<deltasquared>
srhb: alas I can't seem to get nix-env to use that, tried "system" and the corresponding path. no dice
nwspk has quit [Ping timeout: 252 seconds]
<srhb>
I don't think they're installed in the sense that nix-env normally understands, but I may be mistaken here.
<deltasquared>
srhb: I guess seeing as it's managed by nixos-rebuild anyway, I should probably leave it alone (though I was just attempting to query it, not tamper with it)
<srhb>
I think the manifest.nix file is relevant here.
<srhb>
Which does not exist in the system profile, indeed.
<deltasquared>
srhb: I don't have one of those *anywhere* atm
<srhb>
Right, but if you installed something as any user, I think you would get one in that profile
<deltasquared>
ok, let's try something else. is there a way to list dependenencies of a derivation (which the profile just appears to be... ish) just based on info in the store
<srhb>
nix-store -qR as stated earlier :)
<deltasquared>
... doesn't return anything? now what
<deltasquared>
ok. that's close enough to the idea of "installed set of packages" for me I guess... (ones actually pulled in by the profile)
<deltasquared>
the idea of "installed" is going to get very confused in my head at some point methinks
<srhb>
deltasquared: It is definitely at first :)
<gchristensen>
"what does it even mean to be installed"
<srhb>
But it's not just close enough, it really is all that the system profile pulls in
<deltasquared>
well in any case from the above I can immediately say there's some stuff I didn't order and want taking out... now comes the part of figuring out where that comes from.
aloiscochard has quit [Quit: Connection closed for inactivity]
<srhb>
deltasquared: You can probably find that by quering the immediate requestor of any path
<srhb>
Lemme see...
<srhb>
--query --referrers should do it, I think
<deltasquared>
srhb: so like --query --referrers $storepath ?
<srhb>
Right
<srhb>
Or you could use --tree on the system profile and get a pwetty nested ascii tree. :-P
<srhb>
(Note, less useful!)
<srhb>
nix-store is a glorious tool.
__Sander__ has quit [Quit: Konversation terminated!]
<infinisil>
new nix 1.12 also has some new command for that, why-depends i think
<deltasquared>
so that's required by that required by... hmm.
<srhb>
infinisil: Oh yeah, I forgot about that!
<deltasquared>
ok, next question. I wrote a fairly minimal configuration.nix but I've got all this implicit extra stuff, where does *that* come from
<gchristensen>
what is the implicit extra stuff
<deltasquared>
gchristensen: well I didn't order that firewall unit for starters but the current generated /etc pulls it in
<deltasquared>
anything not strictly required (even though that's somewhat vague)
knupfer has joined #nixos
<hyper_ch>
and what's a fairly minimal configuration.nix?
<gchristensen>
yes, we do turn on a firewall by default
<deltasquared>
gchristensen: I have my own firewall. :P
<srhb>
deltasquared: Basically a lot of modules are imported (all of them)
<srhb>
deltasquared: Some of them are enabled by default
<deltasquared>
srhb: *where* are they enabled by default
<srhb>
deltasquared: They in turn add dependencies, usually.
<deltasquared>
gchristensen: cause I'm learning! "just because" is another way to piss me off pretty fast :P
<deltasquared>
ocharles: well that's *fun*
<gchristensen>
cool :)
<srhb>
deltasquared: The default value for enable is = true, so it's on by default
<ocharles>
man configuration.nix # grep for "enable" and see which are true is one way to work out which are on by default
<srhb>
ocharles: That's smart!
* ocharles
beams
<srhb>
:-)
<gchristensen>
by policy though, only very important and minimal modules are enabled by default
<deltasquared>
gchristensen: fair enough, though I guess I just had a case of "nope, I have my own thing for that"
<gchristensen>
sure, great, that is why you can easily turn it off :)
<deltasquared>
I do prefer building up than tearing down though, so some option to inhibit default-enabled modules would be nice.
<deltasquared>
(in the configuration.nix file perhaps)
<deltasquared>
or --yes-i-know-what-im-doing
<deltasquared>
(not really, but I don't learn without blowing stuff up)
<gchristensen>
I wonder if you'll find other stuff you'd rather off by default
<deltasquared>
gchristensen: tons, most likely.
<gchristensen>
let me know if that is true
jb55 has joined #nixos
<deltasquared>
I'm very much accustomed to ex nihilo construction as opposed to any idea of a "base" system, because base varies anyway depending on setup
ottidmes has joined #nixos
simendsjo has joined #nixos
<gchristensen>
you can rm -rf nixpkgs and start fresh if you'd like
<srhb>
I guess it would be possible to map over every attribute that's called enable and set it to false, but it would probably have disastrous consequences and I'm not actually sure how to do it.
<srhb>
I think blanking the module list will be easier, but that will also break things disastrously :P
<srhb>
But perhaps that's what you want :)
<srhb>
It's in nixos/modules/module-list.nix
<ocharles>
blanking that is definitely a road of pain
rodgort has quit [Quit: Leaving]
<ocharles>
so many modules implicitly assume other modules are enabled
<deltasquared>
well in the meantime something else blew up anyway
<srhb>
Well, that's the point, innit :P
<ocharles>
the lack of any used import system makes it so fragile, it's a shame
<deltasquared>
it would appear that I tried to run nixos-rebuild inside the chroot, it borked, and now no commands work in there.
jrolfs__ has quit [Ping timeout: 240 seconds]
<deltasquared>
well that is *fun*...
<srhb>
I don't know the incantations for making nixos-rebuild work in the chroot anymore, nor am I sure they still work...
dywedir has joined #nixos
<deltasquared>
srhb: ok fair enough, but leaving my system in an undefined state isn't fun. :P
asuryawanshi has quit [Ping timeout: 240 seconds]
<srhb>
Follow the manual! :P
jrolfs__ has joined #nixos
<clever>
srhb: nixos-install is just a bash script that does all those incantations for you
<clever>
srhb: it also has `nixos-install --chroot` that does most of them for you
<srhb>
clever: I'm pretty sure that hasn't worked for at least a year without Other Stuff
<srhb>
--chroot, I mean
<gchristensen>
ouch, srhb
<clever>
it was broken at one point when nixos-install got rewritten
<srhb>
Ah ok :)
<clever>
it has been fixed a few months ago
macslayer has joined #nixos
Myrl-saki has quit [Read error: Connection reset by peer]
<deltasquared>
just re-running the install process anyway, that fixed it.
rodgort has joined #nixos
<deltasquared>
now that *is* one useful thing about nixos, if something borks generally you can rebuild in one go
ryanartecona has joined #nixos
<deltasquared>
unless the config is the thing that's borked... but that's another issue.
<srhb>
clever: That's good to hear. I ran into it a lot at that point, *probably* because I messed up and didn't follow instructions. :-P
<macslayer>
Good afternoon! Has anyone else had any issues with the `pulseaudio` installation in NixOS? For some reason, no matter which music player I use, my audio skips and pauses and gets silent randomly. It sounds like a skipping record.
<gchristensen>
that fundamental means we don't have to be so perfect in every way, and mistakes are less disastrous... whereas most distros have to be extremely careful in so many ways
<srhb>
(gee, I wonder what happens if I pull out this one disk while the system is going...)
<clever>
macslayer: what does pavucontrol say about the music player?
<gchristensen>
obviously we still try really hard to do the best and most correct thing
pkill9 has joined #nixos
jrolfs has quit [Ping timeout: 264 seconds]
<deltasquared>
srhb: explosions, probably
<deltasquared>
gchristensen: naturally.
<srhb>
deltasquared: More or less...
<macslayer>
clever: Lemme install that, just a sec...
vidbina has quit [Ping timeout: 255 seconds]
jrolfs has joined #nixos
<macslayer>
srhb: Technically I think SATA is plug-n-play, right? So nothing would happen until the OS decides to access something on the disk, it would time out and fail. You could probably run quite a long time without your hard drive, assuming everything's already in memory.
<macslayer>
I think I've actually done that before, just to see what happens
asuryawanshi has joined #nixos
Myrl-saki has joined #nixos
jrolfs__ has quit [Ping timeout: 248 seconds]
buovjaga has quit [Remote host closed the connection]
<srhb>
macslayer: Right, I was writing onto a weirdly set up btrfs raid thing and everything went really terrible.
<macslayer>
clever: Hmmm, I don't think it says anything about it. Under the "playback" tab it's got the application name ("Clementine"), and obviously the volume slider for it
<macslayer>
srhb: Oh gosh, RAID was involved.
<srhb>
I sometimes have a strained relationship with sanity. :-)
<macslayer>
Yeah, I'm gonna copy deltasquared and say that it looked something like a black powder explosion.
jrolfs__ has joined #nixos
<clever>
macslayer: sounds like the application is properly using pulse, so the alsa emulation isnt to blame
<deltasquared>
I said nothing about black powder... ;)
<fpletz>
macslayer: are you on 17.09 or unstable?
<macslayer>
Right, I added that for the imagery of tons of smoke billowing out of the fans
<deltasquared>
srhb, gchristensen: looking at the module-list.nix, I can see that there would be stuff in there that are important to the build process itself, so... more ginger caution
kolb has joined #nixos
ckauhaus has joined #nixos
<macslayer>
fpletz: 17.09, pretty much fresh install
<deltasquared>
gchristensen: I would find a lot more if I took the time to comb through it all, I could just tell at a glance I was going to have disagreements.
<deltasquared>
out of curiosity, those modules that "enable themselves", would it be such a radical change to shift the interpretation of that enabled flag to a sep. expression that was included-by-default in the template file generated by nixos-generate-config ?
<macslayer>
clever: Oh gosh, is it just because it's a cheap Chinese adapter or something?
<clever>
macslayer: yeah, one sec
<srhb>
deltasquared: Pretty much, due to the way dependencies being able to pull in dependencies themselves work.
<gchristensen>
deltasquared: please thoroughly understand what those modules do, and try to make an educated guess for yourself
<deltasquared>
let's see what else we have here...
<kolb>
I am in need of Sphinx (the RST documentation toolkit) and the more exotic sphinxcontrib-cmtinc extension), I figured maybe nix can help me. I found multiple versions of Sphinx in 18.03 but no mention of cmtinc. Any idea how I might go about this?
<deltasquared>
timesyncd I could understand.
<deltasquared>
udisks... eh.
<gchristensen>
deltasquared: tr starting by _examining_ your system and see what you have
<deltasquared>
gchristensen: more than what I want, that has already been established
<deltasquared>
that *said*, I will try to determine why those unwanted things are present. let's see...
* gchristensen
leaves this conversation
<Baughn>
Is it possible to make Nix *not* set the date of a file in the story to 0?
ambro718 has joined #nixos
<Baughn>
In this particular case, the date is part of the information my application needs...
<infinisil>
basically just filter for options named "enable" and that have default set to true
jrolfs__ has quit [Ping timeout: 252 seconds]
<deltasquared>
I'll read that in a minute.
asuryawa_ has joined #nixos
<macslayer>
clever: Do I need to do anything other than `hardware.pulseaudio.enable = true;`?
<deltasquared>
hmm... ok, perl, let's see what pulls that.
<infinisil>
need jq installed (or replace jq with "nix-shell -p jq --run jq"), just generates a nice readable list
hals has joined #nixos
<deltasquared>
oh, quite a bit actually... 'mkay.
<clever>
macslayer: i also like doing nixpkgs.config.pulseaudio = true;, which means anything installed with systemPackages has pulse support enabled in it
<srhb>
infinisil: Nice :)
jrolfs has joined #nixos
jrolfs__ has joined #nixos
<srhb>
deltasquared: The Nix you're running is probably a lot of Perl
<infinisil>
deltasquared: srhb: I manually filtered out some dynamic options like systemd.services.<name>...
<deltasquared>
interesting... X11 is *not* pulled in by default for the system profile... so then why would it be present... intriguing
Neo-- has joined #nixos
<deltasquared>
oh wait, possibly transistive.
<deltasquared>
... dbus. of course. -_-
<infinisil>
note that I used the minimal system profile in my command
Myrl-saki has quit [Ping timeout: 260 seconds]
<deltasquared>
please excuse me, need to sort something out.
asuryawanshi has quit [Ping timeout: 264 seconds]
<macslayer>
clever: Hmmm, just tried that, still doing the skipping... perhaps another reboot will do.
<macslayer>
I'm also going to try out another media player that I trust, `mpv`.
macslayer has quit [Quit: Konversation terminated!]
tmaekawa has joined #nixos
macslayer has joined #nixos
mrkgnao has joined #nixos
jrolfs__ has quit [Ping timeout: 240 seconds]
jrolfs has quit [Ping timeout: 240 seconds]
<macslayer>
Huh, I've noticed that the issue doesn't get fixed, but changes when I play with `mpv` instead.
<macslayer>
In Clementine and Audacious, they skip randomly, have random moments of silence, and sometimes pause altogther and won't continue playing. In MPV, though, it never pauses or skips, but makes little distorted noises at random, kind of like if you lightly scratch a record or something.
<Ralith>
is there a private git repo workflow that doesn't require submodules or nixbld-readable ssh keys?
<srhb>
macslayer: I've had similar symptons with realtime scheduling in pulse, but that was ages ago (and on a different system and distro entirely)
<gchristensen>
fetch bare repos outside of nix, Ralith
<gchristensen>
I should write that down ...
m0rphism has joined #nixos
<deltasquared>
infinisil: would I be correct in assuming I could throw this list into a nix-expression and include it in the master one?
<deltasquared>
it seems straightforward enough (though I just need to check syntax stuff again...)
<infinisil>
deltasquared: you mean the list of modules that are included?
nwspk has joined #nixos
<srhb>
deltasquared: Or do you mean set them all to false? :)
<srhb>
Does anyone use nixsap keyrings and are able to explain how they work?
<deltasquared>
interesting, what's with that ... argument in the generated hardware configuration?
<deltasquared>
(my logic tells me varargs, but...)
<srhb>
deltasquared: It means "allow other named arguments"
<srhb>
in the argument set
<deltasquared>
srhb: oh, so keyword arguments. 'mkay.
<gchristensen>
:D
<gchristensen>
s/:D//
<deltasquared>
gchristensen: wrong channel? :P
<srhb>
deltasquared: The entire {}: is called a set pattern. It's one argument, that must contain the named attributes listed in it, and if given ... it allows other attributes as well.
<gchristensen>
deltasquared: not just channel, but wrong protocol :)
<srhb>
deltasquared: So in a same they're all keyword arguments.
<deltasquared>
next daft question, nix expressions aren't indentation sensitive are they? (though I do strive to indent my files)
<srhb>
deltasquared: Not sure how to answer that, really. Multiline strings are in a sense indentation sensitive.
<gchristensen>
it isn't like python though
<deltasquared>
gchristensen: oh thank celestia.
<infinisil>
it's really only indentation sensitive in strings
<deltasquared>
infinisil: noted.
arximboldi has quit [Quit: arximboldi]
<srhb>
deltasquared: Chapter 15 in the Nix manual is a really concise description of the language :)
<Ralith>
gchristensen: that makes for a heavyweight build process
<gchristensen>
one sec, Ralith
<deltasquared>
so, this mysterious stateVersion variable, saying it should only be changed when instructed... I'll have to look at what that does later
<srhb>
lejonet: I think default string values in extraConfig are confusing
<srhb>
lejonet: (Er, just braindumping as I go along, hope you don't mind)
<lejonet>
srhb: No worries, that is what I was looking for ^^
<lejonet>
srhb: true, I could just move that to the template, however, I kindof want to give the user the option of actually overwrite them if they want to
<srhb>
lejonet: There's a funny 1 in line 132! but you'll find that :P
<lejonet>
srhb: already fixed ;) pushed a commit almost directly after I gave you the link
<Aleksejs>
I'm trying to add a user to sudoers but I'm getting "group sudo does not exist"
<srhb>
lejonet: I wonder if one of the ini generators would be appropriate to generate the config file lines from attribute sets
<gchristensen>
Aleksejs: usually nixos uses `wheel` instead of `sudo`
<lejonet>
srhb: that might be an idea, this is inherently something that maps really well to an attrset
asuryawanshi has quit [Ping timeout: 240 seconds]
andyjscott[m] has quit [Ping timeout: 255 seconds]
<clever>
srhb: oh, and if pulseaudio restarts, chromium can reconnect for playback, but not capture
<clever>
srhb: so i silently loose the ability to capture audio until i restart all of chrome
joh[m] has quit [Ping timeout: 252 seconds]
gridaphobe[m] has quit [Ping timeout: 252 seconds]
coffeeshot has quit [Ping timeout: 264 seconds]
paperdigits[m] has quit [Ping timeout: 255 seconds]
DIzFer[m] has quit [Ping timeout: 255 seconds]
<srhb>
clever: hnngh
<srhb>
lejonet: Yes, and it makes overriding individual options very clean :)
<lejonet>
srhb: indeed very true
<Aleksejs>
gchristensen: I've added user to wheel group but it still shows "user is not in sudoers file" when I'm trying to sudo something
<gchristensen>
you need to log out and log back in
<clever>
Aleksejs: has that user relogged since the change?
<srhb>
lejonet: is local-fs.target an obvious target for the mds? I'm not sure...
ryanartecona has quit [Quit: ryanartecona]
<srhb>
Oh, I suppose it needs to get at its keystore
<srhb>
Nevermind
jrolfs has quit [Ping timeout: 252 seconds]
jrolfs__ has quit [Ping timeout: 252 seconds]
<lejonet>
srhb: I've just copied what I could find in the unit files supplied by ceph themselves :P
<srhb>
Ah, okay!
joh[m] has joined #nixos
coffeeshot has joined #nixos
andyjscott[m] has joined #nixos
DIzFer[m] has joined #nixos
gridaphobe[m] has joined #nixos
paperdigits[m] has joined #nixos
<Aleksejs>
yes, reloggin helped, thanks!
<macslayer>
clever: srhb: I just recompiled `mpv` using `libav` instead of `ffmpeg`, and it didn't help. Now, though, the error message beings with `libav` instead of `ffmpeg`, but it still says that the mp3 file's header is missing for some reason, then continues to play and skip randomly.
<lejonet>
Tried to translate them to the best of my ability, but haven't really found any good explanation of what options are implemented or not for systemd.services, or if the attr set is just taken and inputted into a generator
<srhb>
lejonet: I think it looks really good! Great job! :D
<srhb>
lejonet: I think serviceConfig maps directly :)
<lejonet>
srhb: Thanks :D
<lejonet>
That is what I hope xD
<lejonet>
But I'll go and look at ini generators and see about fixing the extraConfig and such
<NixOS_GitHub>
[nixpkgs] andir opened pull request #33477: wireshark-gtk: explicitly disable the Qt build when building Gtk (master...wireshark-gtk) https://git.io/vNUz5
NixOS_GitHub has left #nixos [#nixos]
ryanartecona has joined #nixos
zzamboni has joined #nixos
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] dtzWill opened pull request #33478: bc: Mark appropriate buildInputs as nativeBuildInputs (master...fix/cross-bc) https://git.io/vNUgE
NixOS_GitHub has left #nixos [#nixos]
asuryawa_ has quit [Remote host closed the connection]
ogleb has joined #nixos
<ogleb>
Is there any way I can create an overlayfs without root privaleges?
max has joined #nixos
max is now known as Guest32208
<Guest32208>
hey all. Question about nix on debian. Is this the right place?
zzamboni has quit [Quit: Leaving.]
zzamboni has joined #nixos
<samueldr>
yes
<Guest32208>
cool. so I ran nix-env -i kitty
<Guest32208>
all smooth
<Guest32208>
then kitty
<Guest32208>
libGL error: unable to load driver: i965_dri.so libGL error: driver pointer missing libGL error: failed to load driver: i965 libGL error: unable to load driver: i965_dri.so libGL error: driver pointer missing libGL error: failed to load driver: i965 libGL error: unable to load driver: swrast_dri.so libGL error: failed to load driver: swrast [glfw error 65543]: GLX: Failed to create context: GLXBadFBConfig Failed to create a window a
<lejonet>
sad kitty :P
<Guest32208>
prefer warm kitty, myself :P
<samueldr>
agh, I need to find the relevant issues/discussions, but there *may* be issues with libgl and other distros...
<lejonet>
sounds like you don't have the i965_dri.so driver accessible
<samueldr>
(because of the way that specific library works, there is a special handling in nixpkgs)
<Guest32208>
was afraid of that
<pkill9>
Guest32208: i have link that may be of help
<pkill9>
i'm running nix on slackware with proprietary nvidia drivers
<Guest32208>
that was fast :)
<pkill9>
i had that saved in a script i wrote that automatically does those steps
<Guest32208>
man, if the community is like this, I'm tempted to try the OS itself soon :)
<lejonet>
Guest32208: join the dark side, we have cookies :P
<makefu>
pkill9: would you mind adding the info to the wiki (https://nixos.wiki)
ogleb has left #nixos [#nixos]
<pkill9>
sure
<makefu>
great!
<macslayer>
I've read online about my strange stuttering/decoding issue, and it looks like it may be due to GCC optimizations when `libav` or `ffmpeg` were compiled.
<macslayer>
I think disabling optimizations when compiling those packages may help.
<macslayer>
I've tried recompiling `mpv` with `libav` already, but that didn't help, so I'm now going to compile `ffmpeg` with optimizations disabled.
<deltasquared>
clever: ah, ta very much for the lib.mkForce thing.
simendsjo has quit [Ping timeout: 256 seconds]
<deltasquared>
oh, *meep*. how the hell did that happen... nix-instantiate got oom wh-
<deltasquared>
oh, that's the expression thing taking too much memory again. rip.
pie___ has joined #nixos
pie__ has quit [Read error: Connection reset by peer]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] vcunat closed pull request #33263: Update a bunch (148+) of homepages (permanent redirect problems as found by repology) (master...repology/autofixer) https://git.io/vbxCp
NixOS_GitHub has left #nixos [#nixos]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] pSub pushed 2 new commits to master: https://git.io/vNUVl
<wchresta>
Hi everybody. I'd like to use vim with a custom plugin (there is no nix-pkg for it, yet) and execute a vim-script, which in turn creates a file that I want to expose into my system. So I want to basically use vim in the build process to create a single file which is the result of my nix-build. If I wanted to do that relatively cleanly, how would I go about that? Can someoe nudge me into the right direction?
<NixOS_GitHub>
[nixpkgs] efx opened pull request #33481: apache-httpd: enable brotli support by default (master...topic-apache-brotli) https://git.io/vNUw5
NixOS_GitHub has left #nixos [#nixos]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] dtzWill opened pull request #33482: sharutils: don't hardcode AR (master...fix/sharutils-ar) https://git.io/vNUwp
<ariutta>
nixy: not sure. Maybe the change could be to this wording in the manual: "No tool is preferred at the moment." There are three tools listed, but "pypi2nix by Rok Garbas" appears to be similar to "pypi2nix by Jaka Hudoklin" except it's improved and maintained.
<efx[m]>
lazy question: how do I list all installed packages using nix-env?
bkchr has quit [Quit: Konversation terminated!]
<infinisil>
efx[m]: nix-env -q
<efx[m]>
(I keep getting confused by the nix-env cli)
<nixy>
Well that's all package installed in the current user environment
<efx[m]>
awesome thanks @infi
<nixy>
That doesn't list system packages
<efx[m]>
ah, so this is the ones i've manually installed with nix-env -i right?
<infinisil>
yup
<efx[m]>
roger, thanks for quick help infinisil and nixy
Guest32208 has quit [Ping timeout: 260 seconds]
<ariutta>
nixy: there are quite a few different python to nix related libs. Is the list in the manual trying to include them all? It doesn't include this one: https://github.com/tailhook/reqtxt2nix
<infinisil>
I also have a command ready to show installed systemPackages
<nixy>
I feel like you have a point and it could probable be better organized
MP2E has joined #nixos
<nixy>
But I simply disagree with removing references to things uor inactivity unless they have stopped working somehow
<deltasquared>
hmm, in the manual part about EFI booting, where it talks about "look at options starting with boot.loader.efi ...", where would I find these? is there a command to list out all config options presented by modules
<ariutta>
nixy: it could reference these two as actively maintained: "python2nix by Vladimir Kirillov" and "pypi2nix by Rok Garbas" and then list "pypi2nix by Jaka Hudoklin" and https://github.com/tailhook/reqtxt2nix as additional tools.
<deltasquared>
especially when I'll be porting this thing around... don't want someone's poor EFI variables to get borked ;)
<sphalerite>
is there a more lightweight alternative to hydra for doing CI with nix?
phreedom has quit [Quit: No Ping reply in 180 seconds.]
<wchresta>
ariutta: Awseome, thanks
jrolfs has joined #nixos
jrolfs__ has joined #nixos
<infinisil>
dhess: the best thing about the manpage is that it's always updated. Any time you change an option declaration or add one, the man page gets updated. Unlike the online option lookup which is always just for the semesterly releases
<contrapumpkin>
sphalerite: I saw sphalerite for the first time recently!
raynold has joined #nixos
<gchristensen>
infinisil: the website is updated every time the stable channel updates
<sphalerite>
contrapumpkin: ??
<infinisil>
gchristensen: yeah, but not unstable/<your custom git version>/anything like that
<dhess>
infinisil: what about systems that get deployed via NixOps? On those systems does it reflect the running system, or just whenever you last did a "nixos-rebuild switch"?
<sphalerite>
contrapumpkin: oooh haha
<infinisil>
dhess: what does it mean to have nixos module options at runtime? They are only evaluated on a nixos-rebuild switch
<infinisil>
deployed machines will get the manual of the nixpkgs you used for nixops
<ariutta>
wchresta: hope it helps! I'm still figuring it out myself. It might be better to use "/etc/nixos/configuration.nix", but I want it to run on NixOS, Debian and macOS, and I didn't know how to do that with configuration.nix.
wchresta has quit [Ping timeout: 256 seconds]
<infinisil>
(unless you have services.nixosManual.enable = false)
<dhess>
infinisil: cool that's what I wanted to know. My build host deploys to itself so I literally never run 'nixos-rebuild switch' anywhere
<infinisil>
gchristensen: I've been using that, but it's a bit counterproductive as you can't evaluate `import <nixpkgs/nixos> {}` to check some options or so
<macslayer>
I tried out some sampled sounds downloaded from the Internet, and they all played successfully with my installation of `ffmpeg`. However, none of the files in my music library do.
<dhess>
oh right I see
<gchristensen>
infinisil: pass a custom config :) I've ruined a server or two running nixos-rebuild switch on it and never being able to get it back
<gchristensen>
so ... I just don't let me do that anymore.
phreedom has joined #nixos
<dhess>
infinisil: ahh I was wondering what that services.nixosManual thing did
<dhess>
I will need to turn that on, at least on my build server
<deltasquared>
right, setting up the EFI stuff now.. fingers crossed
<infinisil>
gchristensen: I actually did this too once, but there is a simple solution: just use the nixops private key for sshing to it
<gchristensen>
that is not always an applicable solution, unfortunately
<infinisil>
gchristensen: when is it not?
<gchristensen>
if the on-disk config assumed one network which doesn't exist or work anymore
<gchristensen>
or worse :)
<infinisil>
hmm i see
mrkgnao has quit [Ping timeout: 240 seconds]
<infinisil>
hmm, i think with normal nixos machines for nixops it might even work to be able to nixos-rebuild like normal, which would be the equivalent to nixops deploy --include <machine-name>
<dhess>
I want a JS for Hydra that live-udpates a build log a la Travis
<deltasquared>
apparently it doesn't like me temporarily mounting boot via 9p inside the VM... oh dear.
<deltasquared>
though, it's bootctl failing, I wonder what's up with that... *tries to re-run command*
phreedom has quit [Ping timeout: 248 seconds]
<deltasquared>
yeah, that's bootctl alright. hrm.
<dhess>
gchristensen: oh I like the way you've made a secrets.nix. I'm always needing to remember where I am in the tree to get the right path to my secrets/ subdir
<gchristensen>
:)
<gchristensen>
dhess: _really_ I'd like it to be a full on module, but eh
<gchristensen>
a full on module would make it much cleaner, right now this is a weird hack
<dhess>
(digging through other peoples' NixOps deployments is always so fun)
<dhess>
gchristensen: sure. On the other hand, I don't want importing secrets to be *too* easy. You should have to think about it a bit. Limit the scope of where it can be used. That kind of thing.
<gchristensen>
true
<gchristensen>
could add secrets to pkgs with an overlay, then do `pkgs.deployment-secrets.mything` :)
<dhess>
what you've got looks like a better balance vs what I have. A separate import is probably enough
<dhess>
gchristensen: see that's what I mean. I definitely don't want them to be in scope by default.
<gchristensen>
ahh
<dhess>
but you've got just the one import per module, whereas I am currently importing as many times as I need a secret
<dhess>
one for each secret. Or readFile or whatever
<dhess>
so I think I will crib this :)
<gchristensen>
cool :)
<infinisil>
dhess: gchristensen: I have a private git repo containing a module that adds the (internal) options `private.password` and some more, along with setting some passwords options, it's rather nice
<dhess>
long-term I want to hook up Vault/Consul to NixOps and get rid of all my imported/readFile'ed secrtes
<infinisil>
the file gen.nix is generated with a script and contains something like { "foo" = "bar"; ... }
<dhess>
or AWS KMS
<gchristensen>
yes please, dhess
<gchristensen>
some way to use a TPM could be nice too
<Fannar>
My TPM is broken.
<infinisil>
dhess: you mean that secrets won't be in the nix store but rather in e.g. /keys/foo and will get read at runtime?
<Fannar>
I need a new laptop.
<Fannar>
Who wants a limitED edition latitude 6400?
vidbina has joined #nixos
jrolfs__ has quit [Ping timeout: 260 seconds]
<dhess>
infinisil: we already get that with NixOps of course. No, I mean where at the very least /run/keys is populated from Vault or KMS, and not from a NixOps deploy where NixOps is reading the secrets from a file(s)
arximboldi has quit [Client Quit]
jrolfs has quit [Ping timeout: 268 seconds]
* infinisil
checks out Vault/KMS
<dhess>
going through /run/keys would be the first pass anyway, so that it would be compatible with existing deployments and you could just plug in the secrets "vault"
<dhess>
eventually you might just want to have a "secrets" API or interface that doesn't need to put keys in the filesystem.
<dhess>
although most config systems are going to want a key file somewhere eventually
<dhess>
so maybe that's not buying much
<infinisil>
dhess: but i mean the filesystem is the only thing that's persistent, you mean to get the keys from the web?
<dhess>
infinisil: yes.
<dhess>
and whatever is providing those keys via "the web" is checking credentials, has a hardened storage backend for key protection, etc.
<gchristensen>
and auditing!
<dhess>
and rotation
<gchristensen>
ahh yes rotation
<gchristensen>
and per-device secret generation
colabeer has joined #nixos
<gchristensen>
basically it lets you have automated hygienic handling of secrets
isHavvy has quit [Read error: Connection reset by peer]
<infinisil>
i see, that seems nice
vidbina has quit [Ping timeout: 248 seconds]
<dhess>
gchristensen: have you ever worked with KMS or Vault?
<gchristensen>
Vault, yeah
spietz has joined #nixos
<dhess>
gchristensen: ok good to know ;)
<srhb>
This is relevant to my interests.
<gchristensen>
:D
<dhess>
srhb: speaking of secrets, what's the status of that GitLab PR?
<srhb>
dhess: Think it got stuck in review.
<srhb>
I can poke it.
<gchristensen>
a few co's back I was doing a lot of work with data from institutions who cared about things, and focused a _lot_ on keeping things safe
<dhess>
srhb: that's too bad, I thought it pretty much had agreement
<srhb>
Hmm, maybe I misunderstood.
<dhess>
srhb: more likely that I did :)
<srhb>
I'm also poorly motivated because I feel these kind of PRs ruin modules to address security shortcomings.
* srhb
whines
<srhb>
:-)
<srhb>
I'll poke it.
<dhess>
srhb: anyway I have my own GitLab module that did similar but less cleanly.
<dhess>
srhb: well basically what I mean is that I assumed one was using NixOps, and put the deployment.keys stuff directly in it,
* srhb
nods
<srhb>
That makes things much nicer.
<dhess>
ok yeah I guess in some ways it was cleaner :)
<srhb>
What I dislike about it is that it took a perfectly nice attributeset and turned it into a bash subsitution monstrosity.
<dhess>
but you separated out the secrets more cleanly from the config
<deltasquared>
oh dear.
<srhb>
And this happens with most of these security PRs.
<deltasquared>
(hold on pasting difficulties)
<dhess>
srhb: yeah this is why we need something like Consul integration. It handles all of that templating for you
<srhb>
Agreed.
<srhb>
Actually... Very agreed
<srhb>
That doesn't sound hard
<deltasquared>
“switch_root: can't execute '/init': No such file or directory”
<deltasquared>
grr. now what... (not quite sure how to address this one)
* gchristensen
has a hard time agreeing with things mentioning "Consul"
<srhb>
Well, agree with that as well
<srhb>
The thing we need is a proper nixpkgs -> runtime template -> secret substitution thingy
<dhess>
is it bad?
<infinisil>
deltasquared: never seen that before, where does this occur?
<srhb>
Yeah, it's annoying.
<dhess>
oh ok
<srhb>
But it does provide a solution here.
<deltasquared>
infinisil: trying to boot the new installation inside qemu.
<dhess>
well in that case maybe a NixOps-specific thing would be the right way to go.
<infinisil>
deltasquared: and there were no errors on installation that time?
<dhess>
so Consul is bad but Vault is OK?
<deltasquared>
infinisil: nope, all clean.
jrolfs__ has joined #nixos
jrolfs has joined #nixos
<srhb>
dhess: I don't have experience with Vault firsthand.
<deltasquared>
let's see if I can pass it paths to systemd directly...
<srhb>
It's all the rage with the docker peoples, which makes me suspicious :-)
<dhess>
srhb: hahahaha
<dhess>
that's a good point
<infinisil>
deltasquared: I haven't ever used qemu, so I can't help much with that. What I'd do is just boot from an iso usb stick instead, pretty much guaranteed to work without problems
<deltasquared>
infinisil: yeah, but then I'd have to reboot... it's a mild pain :P
<dhess>
I have seen good things said about Vault by OPSEC-ish people, at least. Well, compared to the alternatives, anyway.
* Fannar
*looks around the room wide eyed*
<srhb>
Fannar: Hullo :-)
<srhb>
We're not *really* dangerous.
<Fannar>
fuck off srhb
<srhb>
... well, that escalated quickly.
Fannar has left #nixos [requested by gchristensen (no)]
<aminechikhaoui>
:o
<dhess>
touched a nerve
Fannar has joined #nixos
<dhess>
I don't really know what just happened there but I'm sorry if I contributed to it somehow
<srhb>
dhess: I'm intrigued at least. :)
<srhb>
I doubt it :P
<deltasquared>
wh- I switch away for a moment then-.... daphaken just happened
<deltasquared>
where's the bot printing the title when you need it
<srhb>
dhess: Hmm, now I'm wondering how to integrate it. Obviously you'd want to produce some templates with all the safe stuff in the nix store, and then in the systemd unit render it with vault or something.
<srhb>
dhess: But what kind of access should the systemd unit use to attain whatever is needed to decrypt/fetch the secret?
<srhb>
Maybe root is good enough
<dhess>
srhb: there are some fuse bits in Consul, I believe
<srhb>
But there's a bootstrapping problem still...
<dhess>
where it looks for <#some-cookie#> of some kind and subs them
<dhess>
srhb: oh that part I just figured /run/keys deployment would do it
<srhb>
True, can't really get around that.
<dhess>
no
<dhess>
and at least whatever that is is generated, as gchristensen mentioned, and can be expired, revoked, rotated, etc
<srhb>
Right.
<dhess>
srhb: as a first pass I figured something like that plus fuse integration with Consul would be a good start
<srhb>
It would certainly alleviate a lot of pain.
<dhess>
I don't now much about it more than that to be honest, this is just something I read about for 20 min here and there before I go to bed :)
<srhb>
I've been thinking about this on/off for a long while.. Not getting far. :-)
<srhb>
Mostly because I keep dreaming for some kind of secondary secret store to use for runtime substitutions.
<srhb>
I was thinking 1.12 could be helpful there.
<dhess>
Me too. No promises but I *may* be in a position to fund some work on it this year.
<srhb>
Interesting :) Let us know.
<dhess>
of course.
<macslayer>
clever: srhb: I found out my issue. Something must have happened to the sound files (ALL of them, too!) when I copied it from my external hard drive to my new laptop. I played them directly off of the external hard drive, and there are no errors at all, but when I play the version that I have locally, they throw all sorts of errors and skip.
<clever>
macslayer: try hashing the files with md5sum
* Fannar
*smirks*
<macslayer>
Thus, it's not an OS or library issue, it's got to be some issue with copying them from the external hard drive using the Dolphin file manager.
<deltasquared>
infinisil: I've temporarily gotten it to work by passing the path to systemd in the system profile as init=.
<macslayer>
clever: Okay, I'll try that. Since I'm paranoid about my music collection now, I'm copying all of the files to another computer right now, but I'll try the md5sum in a sec.
<deltasquared>
aaaand now I borked the boot setup and locked myself out of the root account. just my look. I'll be right back.
<srhb>
macslayer: D:
* Fannar
over and aboot.
Fannar has quit [Quit: leaving]
DerGuteM1ritz has quit [Read error: Connection reset by peer]
<dhess>
gchristensen: on a related note I really want to switch my servers over to coreboot-/libreboot-compatible HW but there doesn't appear to be any modern server gear that it works with
<gchristensen>
how big of a server do you need? :)
<samueldr>
someone's about to recommend a pcengines machine
* gchristensen
looks shifty
<dhess>
yeah not an APU2
<samueldr>
(not that there's anything wrong with that!)
<gchristensen>
I don't know about any core/libre-boot hardware, it isn't a project I've really followed or explored
<dhess>
gchristensen: well it gets rid of the Intel/AMD "management engine" garbage, at the very least
<dhess>
very fast reboots. You can ssh into the firmware. that kind of thing
<gchristensen>
hmm... how would it? wouldn't it still be there underneath?
<dhess>
gchristensen: if it is, it's lobotomized. Anyway this is the core problem :) Neither AMD nor Intel makes modern hardware without it
<gchristensen>
yeah :|
magnetophon has quit [Remote host closed the connection]
<dhess>
gchristensen: it sounds like Google and FB might be getting hardware that they can coreboot-ize, but if so it's not available to the public.
<dhess>
Hmm I wonder if any of that stuff ends up on Ebay
<gchristensen>
iirc you can buy FB-like servers? not sure, this is more fpletz's thing I think
<deltasquared>
*tries root login* Cannot execute /run/current-system/sw/bin/bash: No such file or directory
<deltasquared>
(╯°□°)╯︵ ┻━┻
<dhess>
gchristensen: I would love to hear about it if so. A friend of mine started that whole OpenCompute thing at FB but I have never seen any of it on sale
<dhess>
s/on/for/
<makefu>
thinkpads are only supported till 230 and you will need to in circuit reprogram the bios chip
<efx[m]>
I know coreboot folks have worked on an ME cleaner script, which AFAIK does a lot to "nerf" Intel's management engine. Trammel Hudson's blog has some interesting mods
<dhess>
deltasquared: in Japan there are arcade machines where you serve beer to people until some certain point, at which you flip the table.
<deltasquared>
why is there no bash... interesting.
<efx[m]>
most of this is in the context of which Intel thinkpad though
<dhess>
I don't really understand how it works but it looked pretty fun
<deltasquared>
I just found it amusing that minix was found to be everywhere all of a sudden, even moreso than linux or even windows is.
<dhess>
efx[m]: yeah there are quite a few of those lying around. I mean to try one eventually but it's not clear to me which server motherboards they work on and don't
<dhess>
it's surprisingly hard to find out whether Supermicro boards (which is what I use) even have ME turned on
<gchristensen>
dhess: lmk if you'd like to buy me some too
<efx[m]>
agreed. The board status page is difficult to navigate too, but some of it is up to date
thaega has quit [Remote host closed the connection]
<dhess>
all of the units I looked at from Penguin are like that. They're extreme high-density so you're trying to cram as many of those in per 1U as you can, up to your power density
Lisanna has joined #nixos
<gchristensen>
yes, but still -- this is for "OU" -> Open Units, not "RU" -> Rack Units
vidbina has quit [Ping timeout: 240 seconds]
Piece_Maker has joined #nixos
<gchristensen>
the intention is 3 of those fit in 1 OU, and 1OU is 21" wide, do you have a 19" rack or a 23" rack?
<dhess>
yes but that's what I was asking about -- can you get an adapter that lets me mount just one of these in a rack
<gchristensen>
gotcha
<aminechikhaoui>
seems the nixos-17.09-small channel didn't get updated eventhough the jobset is green on hydra 5h ago ?
<gchristensen>
maybe just a tray? but that is a bit janky :P
<dhess>
Mine is standard... 19" I guess
<aminechikhaoui>
is that the right jobste ?
<dhess>
yeah I was hoping to avoid the janky bit, exactly :)
* infinisil
points out that gchristensen and dhess's conversation has very little to do with NixOS
<dhess>
infinisil: you're right, sorry
<gchristensen>
thanks, infinisil :)
<Lisanna>
Does anyone have any tips on making using KVM not so much of a headache? Specifically, the problem with trying to run multiple different KVM applications at the same time. This issue isn't really NixOS specific, but it does come up quite a bit since Nix uses qumu for runInLinuxVM.
<dhess>
I'm a blabber mouth.
<Lisanna>
qemu* :)
Acou_Bass has quit [Ping timeout: 265 seconds]
Piece_Maker is now known as Acou_Bass
zzamboni has quit [Client Quit]
asuryawanshi has quit [Ping timeout: 248 seconds]
jrolfs has quit [Ping timeout: 240 seconds]
<ison[m]>
Is there something I need to do in my config to get Vulkan working with nvidiaBeta? If I run "vulkaninfo" I get the error VK_ERROR_INCOMPATIBLE_DRIVER. But I know this card works with Vulkan as I've played Vulkan games with it on Gentoo before.
jrolfs__ has quit [Ping timeout: 248 seconds]
nithor has quit [Ping timeout: 250 seconds]
zzamboni has joined #nixos
jrolfs has joined #nixos
jrolfs__ has joined #nixos
Acou_Bass has quit [Client Quit]
ison111 has joined #nixos
typetetris has joined #nixos
MercurialAlchemi has quit [Ping timeout: 248 seconds]
NixOS_GitHub has joined #nixos
<NixOS_GitHub>
[nixpkgs] pbogdan opened pull request #33484: firefox: backport 57.0.4 to 17.09 (release-17.09...firefox-57.0.4-17.09) https://git.io/vNUDb
NixOS_GitHub has left #nixos [#nixos]
<ison111>
Is there something special I have to do to get Vulkan working on nvidiaBeta? If I run vulkaninfo I get VK_ERROR_INCOMPATIBLE_DRIVER. But I know this card works with Vulkan as I've played Vulkan games with it before on Gentoo.
jrolfs has quit [Ping timeout: 240 seconds]
llgtr has joined #nixos
jrolfs__ has quit [Ping timeout: 256 seconds]
llgtr has left #nixos [#nixos]
llgtr has joined #nixos
jrolfs has joined #nixos
jrolfs__ has joined #nixos
Acou_Bass has joined #nixos
ogleb has joined #nixos
sigmundv__ has joined #nixos
<ogleb>
can I create a systemd unit for a nixpkg for non nixos systems?
srid has joined #nixos
<Lisanna>
ogleb: sure, you just have to give the full /nix/store path in the unit file
<srid>
How does nix determine binary caching on nixos?
<srid>
I have `nix.binaryCaches = [ "https://nixcache.reflex-frp.org" ];` in my configuration.nix … and I wonder if that is somehow _overriding_ some global binary cache settings?
<srid>
Installing ghc822 for example compiles it from source (is this expected behaviour?) in latest nixos.
knupfer has quit [Remote host closed the connection]
<infinisil>
srid: that is the global config, it writes to /etc/nix/nix.conf
knupfer has joined #nixos
<ogleb>
Lisanna: but `nix-env -i <pkg>` wouldnt install the systemd unit right?
<srhb>
deltasquared: Lists are merged by concatting them generally
llgtr has joined #nixos
<Lisanna>
deltasquared: if you set that option as part of a different NixOS service, it should concat them by default I think
<srid>
Lisanna: cool!
<Lisanna>
but if you set it in your configuration.nix, it won't concat them
<deltasquared>
srhb: got the system booted at last (still inside QEMU for the time being). now it seems that root is having it's path set to default profile's bin, but all the stuff I have only exists in the system profile thus far
<deltasquared>
did I miss a step?
szicari has quit [Quit: szicari]
nithor has joined #nixos
<infinisil>
deltasquared: srid: You can do nix.binaryCaches = options.nix.binaryCaches.default ++ [ "othercache" ]; to append to the default
<Lisanna>
infinisil ++
<srhb>
deltasquared: If you're missing /run/current-system/sw/bin on your PATH, I'd say you've probably taken one step too far :-)
<deltasquared>
srhb: it's in my path, but... hold on
vidbina has joined #nixos
<infinisil>
the reason this is needed is because otherwise you wouldn't be able to disable the default one
<deltasquared>
oh dear. srhb: /run/current-system does not exist...
<anthony__brice>
Would anyone know if there's a way I can have nix recreate the symbolic links its made (including its own, eg., nix-env)? I think a macOS update wiped them all out for me, but my /nix directory looks fine
<deltasquared>
me thinks I be boned
magnetophon has joined #nixos
<srhb>
deltasquared: How'd you manage that? :o
<deltasquared>
I dunno!
<srhb>
deltasquared: ... how did you boot?
<deltasquared>
srhb: sec...
<deltasquared>
srhb: the command is a bit long. one moment.
<srhb>
ehe.
<infinisil>
anthony__brice: reinstall nix
<infinisil>
anthony__brice: or do you mean your previously installed packages?
<deltasquared>
seeing as boot setup was giving me issues.
<infinisil>
anthony__brice: because those you won't be able to recover without manually adding them all again (unless you used -r with a file)
jrolfs has joined #nixos
jrolfs__ has joined #nixos
<deltasquared>
just told QEMU to directly load the image
<srhb>
deltasquared: You seem to be missing at least systemConfig, if I'm reading that correctly
<infinisil>
anthony__brice: but if they are in the store already it won't download them again
<deltasquared>
srhb: systemConfig? is this some option in configuration.nix that I overlooked? (though the manual would not suggest it was necessary)
<srhb>
deltasquared: That also looks like the wrong init
<deltasquared>
srhb: it probably is, but otherwise there wasn't one at all
<srhb>
deltasquared: try generating a real grub.cfg next time and using the options from there. :)
<anthony__brice>
@infinisil both the symbolic links nix makes when it's installed and previously installed packages. I can reinstall, thanks!
<srhb>
deltasquared: As in, using "nodev" or something like that and still having it populate /boot
<magnetophon>
I'm working on upgrading faust. When I compile something with it,I get "fatal error: alsa/asoundlib.h: No such file or directory". The wrapper script I use for that compile has the path to alsaLib in NIX_CFLAGS_COMPILE. any ideas?
<deltasquared>
srhb: well actually I want it to be using systemd-boot at some point, but that borked at bootctl - it did *not* like 9p being used for a shared /boot.
<srhb>
This is just to give you an idea of the necessary options for booting NixOS.
<srhb>
You can change it afterwards.
<deltasquared>
hmm.
<srhb>
What you have now seems rather arbitrary :)
<deltasquared>
srhb: I could explain each one, mind...
<srhb>
I'm more interested in the omissions.
<deltasquared>
right, *fine*, one moment...
<srhb>
:-)
<deltasquared>
side question, which package is "ip" and friends hiding in, I'm going to need that methinks... or possibly just dhcpcd for now.
<deltasquared>
srhb: hmm, apparently that particular option is deprecated now, it's pointing me to "devices" plural.
<srhb>
Oh, right.
<srhb>
[ "nodev" ] for that.
thaega has quit [Remote host closed the connection]
hiratara has quit [Ping timeout: 265 seconds]
* deltasquared
waits for finish
ison111 has quit [Quit: WeeChat 2.0]
<deltasquared>
srhb: ... OOOOH of course I completely forgot about that I'm an idiot... you can specify at boot time which derivation to use as "the system" as it were.
mekeor has joined #nixos
<srhb>
deltasquared: Right! :)
<deltasquared>
meaning I'm going to have to pay attention to the master derivation and update accordingly... -_-
hiratara has joined #nixos
<srhb>
Right! ;-)
<deltasquared>
I should probably put that mess of a qemu cmdline into a proper script also...
<deltasquared>
question, has nix ever caused PATH_MAX issues?
<srhb>
deltasquared: Often.
<deltasquared>
gg
<srhb>
deltasquared: We have helpers for that. :)
<sphalerite>
yes
ragge_ has quit []
nithor has quit [Ping timeout: 255 seconds]
<Lisanna>
srhb: okay, that's not *too* terrible of a solution :)
<sphalerite>
deltasquared: why are you using qemu actually? It's not entirely clear to me what you're ultimately trying to achieve from the history
<deltasquared>
sphalerite: well, let's just say right now that rebooting this on physical hardware would be somewhat inconvienient.
orivej has quit [Ping timeout: 260 seconds]
<deltasquared>
especially as I only really have this machine right now to work with
johnw has quit [Ping timeout: 265 seconds]
contrapumpkin has quit [Quit: My MacBook Pro has gone to sleep. ZZZzzz…]
<sphalerite>
deltasquared: fair enough, but can't you do most of the setup just using nixos-install and nixos-install --chroot?
orivej has joined #nixos
vidbina has quit [Ping timeout: 240 seconds]
<deltasquared>
sphalerite: I was, using the nixos iso... also in qemu.
<sphalerite>
deltasquared: why not nixos-install in the host system?
leothrix has joined #nixos
<srhb>
dhess: Poked it.
<srid>
infinisil: where does the `options` in `options.nix.binaryCaches.default` come from?
<deltasquared>
sphalerite: because I don't have it there?
<dhess>
srhb: I saw that, thanks.
<deltasquared>
I asked earlier about obtaining it separately, apparently that isn't possible
<sphalerite>
deltasquared: are you sure? ;p
<srhb>
Oh yeah, notifications. how advanced.
<dhess>
hehe
<sphalerite>
oh is it a non-nixos system?
<deltasquared>
sphalerite: yes, I'm on arch.
<Lisanna>
different idea: add a symlink manually in /nix/var/nix/gcroots that points to /etc/gcroots, then declaratively put things in /etc/gcroots with environment.etc
<deltasquared>
sphalerite: this is the bootstrap, as it were
<sphalerite>
deltasquared: ah right. And no nix?
<Lisanna>
(or: how to abuse environment.etc #438)
<srhb>
Lisanna: :D
<deltasquared>
sphalerite: I have a hosted nix setup, but I enquired where to find the nixos packages, and apparenly they are not available in the main channels
<deltasquared>
I didn't feel like mucking around with trying to build the relevant nix expressions independently.
<NixOS_GitHub>
nixpkgs/master f106e5f Robert Schütz: newsboat: init at 2.10.2
<NixOS_GitHub>
[nixpkgs] joachifm pushed 2 new commits to master: https://git.io/vNUHb
<NixOS_GitHub>
nixpkgs/master a8d7485 Joachim F: Merge pull request #33455 from dotlambda/newsboat...
NixOS_GitHub has left #nixos [#nixos]
<sphalerite>
./result/bin/nixos-install
<Alling>
I was thinking I could try to fix the aarch64-linux issue in openblas/borgbackup.
<deltasquared>
sphalerite: yeah, you've lost me as to what that actually does. :P
<srhb>
Alling: I think we (I?) concluded you just need to update your nixpkgs
<Alling>
Though, I don't know how to "replace" configs in the openblas package with my own expression.
<srhb>
Alling: Since you said the aarch64 attribute had been added in december
<Alling>
srhb: Yeah ... does "update" mean, like, sudo apt upgrade or something equally simple?
<sphalerite>
deltasquared: gives you nixos-install. You can also do `echo {} > configuration.nix; nix-env -I nixos-config=configuration.nix -f '<nixpkgs/nixos>' -iA config.system.build.nixos-install` to install nixos-install into your user env
<srhb>
Alling: conceptually similar to apt-get update
<srhb>
Alling: Do you get nixpkgs from a channel? sudo nix-channel --list
<srhb>
Alling: sudo nix-channel --update should do the trick then
<srhb>
It's in the unstable channel, but not 17.09
<srhb>
Hence the issue.
<srhb>
Er, well, your unstable is old :-)
<Alling>
How could you tell?
wchresta has joined #nixos
<srhb>
Alling: Because of the error you had and the fact that the attribute was added in december and unstable has updated since then.
<srhb>
The error essentially said "that attribute (aarch64-linux) does not exist"
<Alling>
srhb: Ah, of course! I guess I kind of thought that unstable would somehow always be automatically updated.
<deltasquared>
srhb: I've written an updated version of my QEMU start script which includes the system derivation now. one moment.
<srhb>
Alling: Oh, no, it's like any other channel :)
<srhb>
Alling: Well... Aside from the pesky stability thing... :-)
<sphalerite>
deltasquared: is having nixos-install in the host system not enough to avoid the need for qemu?
<srid>
infinisil: got it. it is an argument you specify at the top.
<Alling>
srhb: It's downloading the updates now. This is just SO NixOS: one command solves the problem, but IRC is the only way to find out what command. :D
<deltasquared>
sphalerite: probably, but now I can actually test a full nixos system without rebooting.
<srhb>
Alling: Heh, well, that's a bit of a shame indeed. :P
<deltasquared>
srhb: https://ptpb.pw/gWaq is what I was trying to do in an attempt to set up the system.
<sphalerite>
deltasquared: you could also have used nixos-rebuild build-vm for that (obtaining nixos-rebuild the same way as nixos-install)
<srhb>
deltasquared: But...?
<deltasquared>
though, with some adaptation that may well be generally useful to anyone wanting to use QEMU for this purpose... feel free to steal
<sphalerite>
deltasquared: that may be faster to iterate on as it'll share the host store
nithor has quit [Ping timeout: 252 seconds]
<deltasquared>
sphalerite: yeah, but again, I don't really "know" nixos all that much yet, and I need to feel how the actual system behaves.
<deltasquared>
*actual installed system
<infinisil>
srhb: Yup :)
<deltasquared>
I'll look into a hosted copy of the nixos tools later.
<sphalerite>
deltasquared: yes, nixos-rebuild build-vm generates a qemu VM corresponding to a fully installed nixos system
<deltasquared>
sphalerite: I'll stick to my hand-written scripts for now... let me have my corner of imperativeness :P
wchresta has quit [Remote host closed the connection]
<Alling>
Possibly the wrong place to ask, but I'll give it a shot. My external 2,5" HDD does not seem to want to play nicely with my RPi3. It either clicks repeatedly or restarts after a few seconds. Is it possible to do anything about this from within NixOS?
nithor has quit [Ping timeout: 255 seconds]
<Alling>
The connected PSUs should be able to supply around 4,5 A in total.
<Alling>
Dezgeg: I feel stupid now. What you mentioned was not the problem ... but I switched to another USB cable and voila! -.-' Hi btw and thanks for hosting ARM images etc! (Y)
llgtr has quit [Remote host closed the connection]
<Ralith>
hm, X and/or GTK seem to have decided to make my pointer really huge
<Ralith>
anyone have any clue how to influence that?
typetetris has quit [Ping timeout: 260 seconds]
<Dezgeg>
yeah, properly powering those raspis seem to be a real nightmare
asuryawanshi has quit [Ping timeout: 256 seconds]
<infinisil>
Ralith: dpi maybe
<Ralith>
infinisil: what about it?
coot has quit [Ping timeout: 248 seconds]
<sphalerite>
Ralith: .Xresources, XCursor.size
<sphalerite>
Ralith: it's unfortunately rather stateful, but it's how I managed to get my cursor big enough
* Ralith
uses home-manager to de-state that sort of thing
<sphalerite>
perfect :D
<Ralith>
setting that to 16 seems to have done the trick, thanks!
<infinisil>
Question: How secure are nixos containers?
<sphalerite>
"Warning: Currently, NixOS containers are not perfectly isolated from the host system. This means that a user with root access to the container can do things that affect the host. So you should not give container root access to untrusted users."
<infinisil>
What can they exploit/do that a proper sandbox/virtual machine can't?
jrolfs has quit [Ping timeout: 268 seconds]
<Ralith>
Linus: any idea why I might need this on some machines and not others? is it defaulted based on your connected displays or something?
<infinisil>
sphalerite: Thanks, if that's all then that's perfect for my usecase
sary has quit [Read error: Connection reset by peer]
jrolfs__ has quit [Ping timeout: 256 seconds]
<sphalerite>
Ralith: possibly, I really don't know. Do they all have the same desktop environment setup?
<Ralith>
the issue manifested when I switched one machine to use a similar config as the other (i.e. a non-default cursor theme, also set via .Xresources via home-manager)
<sphalerite>
infinisil: for all the gory details I'd recommend reading up on systemd-nspawn and the implementation in nixos/modules/virtualisation/containers.nix
<sphalerite>
Ralith: which desktop environment?
<sphalerite>
infinisil: man systemd-nspawn is generally quite an interesting read 🙂
nithor has quit [Ping timeout: 240 seconds]
spietz has quit [Ping timeout: 268 seconds]
<Ralith>
none
<lejonet>
srhb: Seems like there is a "default" INI generator, just can't figure out how to use it xD
<lejonet>
generators.toINI
la_putin has quit [Ping timeout: 252 seconds]
<sphalerite>
Ralith: that's odd then, idk if maybe your window manager does something with it or anything
<sphalerite>
lejonet: did you see the documentation at its definition?
<sphalerite>
Ralith: I guess gtk uses information about the monitor provided by X then
<sphalerite>
or libXcursor. Or something else involved
<sphalerite>
This stuff is complicated
<Ralith>
yeah @_@
<Ralith>
I'm just glad I have home-manager so I won't need to rediscover this fix regularly for the forseeable future
pkill9 has quit [Quit: WeeChat 2.0]
<infinisil>
home-manager ftw
jrolfs has quit [Ping timeout: 248 seconds]
jrolfs__ has quit [Ping timeout: 264 seconds]
nithor has joined #nixos
tmaekawa has quit [Ping timeout: 240 seconds]
tmaekawa has joined #nixos
<lejonet>
sphalerite: only found the closed issue where it was added, haven't found it in the manual or so :P
<sphalerite>
lejonet: nixpkgs.lib is thoroughly documented in its source
<lejonet>
sphalerite: will look then
<sphalerite>
lejonet: check out lib/generators.nix, it contains the implementation and documentation including an example
<sphalerite>
:)
<macslayer>
All of my music plays correctly!
<Ralith>
also, it's remarkable how terminus is still prettier than antialiased fonts even at 4k :/
<lejonet>
sphalerite: yeah, that I've found, I've found how to use it, but not how I'm supposed to import it or if I even need to import it etc etc
hals has quit [Remote host closed the connection]
phreedom has joined #nixos
<lejonet>
like, how do I use it in a nix-repl shell, so I can play around with different inputs and so to see if it works the way I think and so
Alling has quit [Ping timeout: 260 seconds]
<sphalerite>
lejonet: aaah right. My best guess is that it's in pkgs.lib like all the rest of the stuff in lib/
la_putin has joined #nixos
mk-fg has quit [Ping timeout: 268 seconds]
<sphalerite>
So nix-repl '<nixpkgs>'
nithor has quit [Ping timeout: 255 seconds]
<sphalerite>
And in there use lib.toINI
<sphalerite>
Just a guess though, not 100% sure and I'm on my phone so I can't check easily
<lejonet>
:P
<lejonet>
lib.generators.toINI seems to be the right way :P
Fare has quit [Quit: Leaving]
<lejonet>
Thank you ^^ now I can continue :P
johnw has quit [Ping timeout: 252 seconds]
mk-fg has joined #nixos
mk-fg has quit [Changing host]
mk-fg has joined #nixos
detran` has quit [Ping timeout: 248 seconds]
<dhess>
is there something in lib or elsewhere that will take a list of derivations [ a b c ] and turn it into an attrset { "a" = a; "b" = b; "c" = c; } ?
<dhess>
easy enough to do but if there's already something there...