fragamus has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<joepie91>
gchristensen: where do I specify that? as far as I can tell, the 'buildMachines' option does not exist for the Hydra service in nixpkgs
LnL has quit [Ping timeout: 276 seconds]
<joepie91>
(only buildMachinesFiles does, and that's empty in my cawse)
<joepie91>
case*
<gchristensen>
nix.buildMachines
<joepie91>
oh, it's a Nix-wide thing
<joepie91>
gchristensen: any other options I need to set to make Hydra use those settings?
<joepie91>
or should this be enough?
<gchristensen>
should be enough?
LnL has joined #nixos
<joepie91>
gchristensen: build in progress!
<joepie91>
aaaaand then hydra-server crashed
kreetx has joined #nixos
<joepie91>
lol
<joepie91>
this is going well
wangoe has quit [Ping timeout: 260 seconds]
<joepie91>
still seeing these messages in journalctl: Jun 21 00:22:31 workbot hydra-queue-runner[20360]: notification sender: notification about build 8 failed: failed with exit code 255
<joepie91>
but build is ongoing
<gchristensen>
maybe you can pass -vvvvv to the queue runner
andymandias has quit [Ping timeout: 264 seconds]
jperras has joined #nixos
<joepie91>
and then firefox broke
<gchristensen>
or strace
<joepie91>
apparently everything is just broken today
<joepie91>
it's one of Those Days
kreetx has quit [Ping timeout: 265 seconds]
<ben>
is there an easy way to download all build logs for a hydra job?
<joepie91>
gchristensen: how do I set -vvvvv in my config?
<joepie91>
given that it's NixOps-managed
<gchristensen>
dunno, joepie91
andymandias has joined #nixos
<gchristensen>
ben: `nix log $(which curl)`
<joepie91>
maybe I should look at this tomorrow and call it a night :)
<joepie91>
important package delivery in T minus 9 hours so need to sleep anyway
<gchristensen>
something good?
<ben>
gchristensen: i meant logs from all builds for that job, like, historically
<joepie91>
gchristensen: package contains an air cleaning filtering thingem
<gchristensen>
neat
<gchristensen>
ben: I don't know
tzemanovic has quit [Remote host closed the connection]
<samueldr>
maybe the fuzziness in the font makes the difference
silver has quit [Read error: Connection reset by peer]
<worldofpeace>
The f does look a little fuzzy :D
<worldofpeace>
I'd argue it appears more readable. Yet again the test isn't a human reading a screen
<{^_^}>
[nixpkgs] @Infinisil opened pull request #42313 → shadowfox-updater: init at 1.5.2 → https://git.io/fCVKr
<infinisil>
Full black theme for firefox ^^
<worldofpeace>
Perhaps blur is just confusing to text detection.
wangoe has joined #nixos
fragamus has joined #nixos
contrapumpkin has quit [Quit: My MacBook Pro has gone to sleep. ZZZzzz…]
<tenten8401>
Hey, so if I'm making a package that needs write access to the folder it's installed in, what would be a good way to go about allowing something like that?
<tenten8401>
As in the program being run tries to write to where it's installed to
<gchristensen>
patch it to not do that
<infinisil>
Yeah you don't want to allow that at all
<samueldr>
tenten8401: something web-based? some users will manage the servers using nixos, but throw the towel and manage web apps the old fasioned stateful way :/
<tenten8401>
ahh wait, launcher has a --working-dir option now
<tenten8401>
apparently
<infinisil>
I looked a bit into minecraft versioning some time ago, and it would be possible to declaratively install specific minecraft versions, probably even with specific mods installed
<samueldr>
if you write a wrapper, tenten8401, make sure that passing a second --working-dir overrides the first one
<samueldr>
(that's a personal opinion)
<tenten8401>
Is there a set place that program data goes?
ericsagn1 has joined #nixos
<tenten8401>
could I end up just using $HOME as a variable when launching?
<tenten8401>
because really it's supposed to store your stuff seperate from other users
<samueldr>
$HOME may put some weird stuff at weird place
tzemanovic has quit [Remote host closed the connection]
<samueldr>
but "${XDG_DATA_HOME:-$HOME/.local/share}/atlauncher" would look right to me
<tenten8401>
So something like "${jre}/bin/java -jar $out/ATLauncher.jar --working-dir ${XDG_DATA_HOME:-$HOME/.local/share}/atlauncher" for the launch command?
<samueldr>
make sure to quote including the quotes I said earlier
<tenten8401>
ahh yeah whoops
<tenten8401>
thanks for the link by the way
<samueldr>
XDG standards are mostly good
<samueldr>
(there's the menu standard that I don't really like)
<samueldr>
(but it's mostly due to backwards compat I think)
<tenten8401>
Getting an unexpected $undefined for some reason with that line in there
<samueldr>
ah
<samueldr>
yeah, that ${XDG_DATA_HOME} is for bash
<{^_^}>
[nixpkgs] @jerith666 opened pull request #42314 → clementine: add gst_plugins to buildInputs so setup hooks work → https://git.io/fCV6S
<samueldr>
use ''${XDG_DATA ...
<tenten8401>
it's being echoed to a bash script
<samueldr>
''$ will escape it into doubly-quoted strings
<samueldr>
oh
<tenten8401>
trying to paste my build file but hastebin is being dumb
<samueldr>
,escape'' tenten8401
<{^_^}>
tenten8401: '' two single quotes: ''' bash curly bois: ''${} newline: ''\n tab: ''\t any character x: ''\x ''
<samueldr>
(I'm waiting for a bin before trying to explain, just in case I'm assuming wrongly)
<samueldr>
» Since ${ and '' have special meaning in indented strings, you need a way to quote them. $ can be escaped by prefixing it with '' (that is, two single quotes), i.e., ''$. '' can be escaped by prefixing it with ', i.e., '''. $ removes any special meaning from the following $. Linefeed, carriage-return and tab characters can be written as ''\n, ''\r, ''\t, and ''\ escapes any other character.
jackdk has quit [Ping timeout: 248 seconds]
et4te has joined #nixos
<tenten8401>
ahh so I would want the double single quote
<samueldr>
well, you keep your line 41 exactly as it is, except you ADD two single-quotes before the dollar-sign for XDG_DATA_HOME
<samueldr>
so: ... --working-dir "''${XDG_DATA_H ...
<samueldr>
ot works a bit like the \" escape, but for double-single-quoted strings
<samueldr>
or uh, the \$ escape ;)
<worldofpeace>
grahamc: Thanks for being nice
Guanin has joined #nixos
<tenten8401>
so I'd want 2 sets of 2 single quotes?
jackdk has joined #nixos
<tenten8401>
oh wait one of those is a double quote
<tenten8401>
I'm dumb
<samueldr>
ah, non-monospaced font?
fader has quit [Ping timeout: 256 seconds]
<tenten8401>
yeah
<samueldr>
I think you got it then
<tenten8401>
and now ATLauncher is throwing an ArrayIndexOutOfBoundsException... nice
<samueldr>
well, at least it now starts :)
<samueldr>
or tries to
<tenten8401>
yeah
<infinisil>
Imagine our IRC clients had some string interpolation mechanism and you had to explain Nix string escaping
<tenten8401>
checked out the bash script
<samueldr>
the nightmare
<tenten8401>
it decided to substitute $HOME anyways
<tenten8401>
would I have to singlequote the ending EOF too?
<samueldr>
no
<tenten8401>
that'd probably be why it wasn't working
<shachaf>
If I run any nix-env command, I get this error: syntax error, unexpected $undefined, expecting IND_STR or DOLLAR_CURLY or IND_STRING_CLOSE, at /nix/store/2k6agi5zz3rlnc8i9l0bgvzz1vaiilj4-nixpkgs-18.09pre142966.91ca88b3e6b/nixpkgs/pkgs/applications/networking/remote/citrix-receiver/default.nix:212:34
<shachaf>
Am I missing something? It doesn't look like that file was updated very recently
<tenten8401>
looks like $out doesn't get substituted when using 'EOF'
<samueldr>
shachaf: your nix version is?
tzemanovic has quit [Ping timeout: 256 seconds]
<shachaf>
nix-env (Nix) 1.11.2
<samueldr>
tenten8401: yeah, it wouldn't
<samueldr>
shachaf: that's old, even for 1.11 standard iir
<samueldr>
c
<samueldr>
shachaf: ^
andreabedini has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
orivej has quit [Ping timeout: 248 seconds]
* samueldr
thought he got confused with tab completion
<shachaf>
OK, maybe I can figure out how to upgrade.
kreetx has joined #nixos
<shachaf>
OK, that was pretty straightforward.
<samueldr>
shachaf: how did you?
<shachaf>
Is there something I can put in my .nixpkgs/config.nix to keep nix itself up to date? Or does it need to be installed differently?
<shachaf>
I ran the installer.
<tenten8401>
uhg, this is still getting substituted somehow with homeless-shelter
<samueldr>
tenten8401: in that situation, I think one way to handle this is to have the script next to the derivation, with a @out@ placeholder, then use substituteAll or substituteAllInPlace https://nixos.org/nixpkgs/manual/#fun-substituteAll
<samueldr>
something like cp ${./wrapper.sh} $out/bin/atlauncher ; substituteAllInPlace $out/bin/atlauncher
<{^_^}>
[nixpkgs] @matthewbauer pushed 0 commits to always-static: https://git.io/fCViX
<samueldr>
tenten8401: since the phases are bash, into one level of indirection (nix) this makes it important to understand where nix ends and where bash starts; and in your particular case, quoting rules and escaping rules for heredocs and strings :/
kreetx has quit [Ping timeout: 256 seconds]
<samueldr>
as for the shebang, `#!/usr/bin/env bash`, it will be fixed in the fixup (I'm pretty sure)
<samueldr>
oh, your LD_LIBRARY_PATH then becomes an issue too
<tenten8401>
uhg
<gchristensen>
soon you'll be an expert packager :)
<tenten8401>
lol
tzemanovic has joined #nixos
andreabedini has joined #nixos
Supersonic112 has joined #nixos
Supersonic has quit [Disconnected by services]
etu has quit [Read error: Connection reset by peer]
Supersonic112 is now known as Supersonic
etu has joined #nixos
sir_guy_carleton has joined #nixos
fragamus has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
fader has joined #nixos
et4te has quit [Ping timeout: 276 seconds]
<sir_guy_carleton>
for any off you using NixOS on a desktop/laptop
<sir_guy_carleton>
what backup programs do you use?
<{^_^}>
[nixpkgs] @matthewbauer merged pull request #41485 → [RDY] Owamp : Get one way (network) latencies between synchronized computers → https://git.io/vhBIm
<{^_^}>
[nixpkgs] @matthewbauer pushed 3 commits to master: https://git.io/fCVPy
<gchristensen>
borgbackup
slack1256 has quit [Ping timeout: 264 seconds]
<{^_^}>
[nixpkgs] @matthewbauer merged pull request #41478 → Small improvements to the docker registry module → https://git.io/vh4Dl
<{^_^}>
[nixpkgs] @matthewbauer pushed 3 commits to master: https://git.io/fCVPS
andreabedini has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
andreabedini has joined #nixos
sbdchd has quit [Remote host closed the connection]
bpye has joined #nixos
sbdchd has joined #nixos
markus1189 has quit [Ping timeout: 268 seconds]
<bpye>
Hey, so having just managed to get my home server setup on Ubuntu using Docker Compose I've decided it's a mess, monitoring is hard as everything is very isolated, backups are hard for similar reasons. I have read a bit about NixOS before but I was wondering if anyone has used NixOS similarly before and has their config on GitHub or such?
jackdk has quit [Ping timeout: 264 seconds]
<sir_guy_carleton>
bpye: can't think off of anybody off the top of my head, but you might try the configuration collection on the NixOS wiki
<{^_^}>
[nixpkgs] @jb55 opened pull request #42318 → clightning: init at 0.6rc1 → https://git.io/fCVMB
simukis has quit [Read error: Connection reset by peer]
simukis has joined #nixos
<voidconf>
danke
jperras has quit [Ping timeout: 276 seconds]
andymandias has quit [Ping timeout: 264 seconds]
markus1189 has joined #nixos
kreetx has joined #nixos
reinzeldroid has joined #nixos
andymandias has joined #nixos
jb55 has joined #nixos
kreetx has quit [Ping timeout: 264 seconds]
<rizary>
when doing development/production of web app using postgresql, how do you guys setting the postgresql? I mean, should we make `default.nix` in `database` folder and connect it into our derivation as let say `buildInputs`?
voidconf has quit [Quit: leaving]
<rizary>
i'm seeing https://nixos.wiki/wiki/PostgreSQL but it seems the deployment is not made specifically for derivation. (Assuming `services.postgresql` is in `configuration.nix`)
markus1189 has quit [Remote host closed the connection]
srl295 has quit [Quit: Connection closed for inactivity]
sbdchd has joined #nixos
lassulus_ has joined #nixos
matthewbauer has joined #nixos
woodson has joined #nixos
lassulus has quit [Ping timeout: 248 seconds]
lassulus_ is now known as lassulus
markus1189 has joined #nixos
sbdchd has quit [Ping timeout: 264 seconds]
woodson has quit [Client Quit]
matthewbauer has quit [Ping timeout: 264 seconds]
Ridout has quit [Ping timeout: 256 seconds]
blankhart has quit [Read error: Connection reset by peer]
blankhart has joined #nixos
sir_guy_carleton has quit [Quit: WeeChat 2.0]
markus1189 has quit [Ping timeout: 256 seconds]
Fare has joined #nixos
inquisitiv3 has joined #nixos
markus1189 has joined #nixos
worldofpeace has quit [Ping timeout: 260 seconds]
andreabedini has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
kreetx has joined #nixos
fragamus has joined #nixos
adam-6520493 has joined #nixos
inquisitiv3 has quit [Ping timeout: 248 seconds]
kreetx has quit [Ping timeout: 260 seconds]
markus1189 has quit [Ping timeout: 256 seconds]
markus1189 has joined #nixos
jmeredith has quit [Quit: Connection closed for inactivity]
sbdchd has joined #nixos
reinzelmann has joined #nixos
stepcut has joined #nixos
pikajude has quit [Ping timeout: 256 seconds]
sbdchd has quit [Ping timeout: 264 seconds]
igo95862 has joined #nixos
jb55 has quit [Ping timeout: 264 seconds]
inquisitiv3 has joined #nixos
shachaf has quit [Ping timeout: 248 seconds]
Aexoden has quit [Ping timeout: 265 seconds]
johnhamelink has quit [Ping timeout: 276 seconds]
nocoolnametom has quit [Ping timeout: 276 seconds]
fragamus has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
asymmetric has joined #nixos
palo_ has joined #nixos
palo_ has quit [Changing host]
palo_ has joined #nixos
palo has quit [Ping timeout: 240 seconds]
blankhart has quit [Remote host closed the connection]
blankhart has joined #nixos
markus1189 has quit [Ping timeout: 256 seconds]
civodul has joined #nixos
<manveru>
isn't it funny that even in 2018, IRC can't do p2p transfers reliably? :)
<ldlework>
dcc doesn't work?
asuryawanshi has joined #nixos
asymmetric has quit [Ping timeout: 255 seconds]
<etu>
manveru: Have anyone even touched the specs for that in the past 20 years? ;)
<manveru>
apparently there's SDCC now, but no clue how i'd use that from irccloud ;)
* etu
guess that S stands for Secure
reinzeldroid has quit [Ping timeout: 255 seconds]
asymmetric has joined #nixos
johnhamelink has joined #nixos
markus1189 has joined #nixos
__Sander__ has joined #nixos
<hyper_ch2>
hmmmm, I have a git question: assuming I have a text file tracked in git. Now I want to overhaul some major parts but still leave original intact as long as the overhaul isn't done. So I branch out to e.g. "overhaul".... now I notice that the original text has some errors. I fix them directly in master and commit. But now I would also so see those fixes already in my "overhaul" branch. How to achieve that?
agander has quit [Ping timeout: 268 seconds]
<manveru>
hyper_ch2: you can `git checkout master nameofyourfile`
<manveru>
or `git rebase -i master`
<manveru>
(make sure you committed everything first)
<hyper_ch2>
manveru: could you explain in a bit more detail?
<manveru>
the first copies the file over from the master branch
<manveru>
the second inserts the master history before your commits in the other branch
Yaniel has quit [Remote host closed the connection]
<hyper_ch2>
hmmm, I'll have to try :) thx
Yaniel has joined #nixos
lanelet has quit [Quit: lanelet]
slyfox has quit [Ping timeout: 240 seconds]
<hyper_ch2>
branch names can also contain spaces and stuff right?
<hyper_ch2>
(ah, no spaces)
slyfox has joined #nixos
reinzeldroid has joined #nixos
<hyper_ch2>
manveru: why git checkout master filename? shouldn't you switch everything to master?
<manveru>
i thought you only wanted one file
<hyper_ch2>
manveru: what if change multiple files?
<manveru>
then you probably want to merge or rebase instead
asuryawanshi has quit [Remote host closed the connection]
<hyper_ch2>
manveru: ok, I have created a master and a branch and I'm in the branch right now.... but now i noticed I want to update something in master, so I checkout to master right. I do commit in master and then I checkout to branch again... once back in the branche, I just checkout master myfile... and then I do that rebase?
<hyper_ch2>
Mic92: I want to limit arc becuase of the VMs with Qemu so that I have enough free ram/cache.... but now I get modinfo: ERROR: Module zfs_arc_max=6442450944 not found.
<bbsl>
Im trying to use fetchGit to download a repo with git in a shell.nix (for nix-shell) but now that Iv done that Id like to build what was in said repo with pip but I cant figgure out how to access what I fetched: https://pastebin.com/00riABkR id like to run something like "pip install -e lala" in the shell hook
<{^_^}>
[nixos-org-configurations] @edolstra pushed to master « Update provisioner IAM policy »: https://git.io/fWbko
philippD has joined #nixos
jtojnar has quit [Ping timeout: 256 seconds]
markus1189 has joined #nixos
<bbsl>
ok I figgured it out if anyone ever wonders about this, you can refer to the attrs you assign in your mkDerivation from the shell as $attrs
blankhart has quit [Ping timeout: 240 seconds]
nschoe has joined #nixos
asuryawanshi has joined #nixos
<mpickering>
Is there a way to see the "type" of a function?
reinzeldroid has joined #nixos
<mpickering>
or at least how many arguments it is expecting?
<manveru>
nope
<manveru>
every function only takes one argument
<mpickering>
ok, that's technically true
<LnL>
heh, that's not a good excuse tho :p
<manveru>
:D
<mpickering>
I have wasted so many hours because there is no static type checking..
<manveru>
i still don't think you can do a ton of introspection into functions
<mpickering>
"value is a function while a set was expected" error
<manveru>
yeah :(
<mpickering>
not very helpful when you can't even inspect the type of anything...
phdoerfler has joined #nixos
<teto1>
mpickering: I feel your pain
jtojnar has joined #nixos
<__monty__>
mpickering: Dhall-to-nix is obviously the solution ; >
crmlt has joined #nixos
<bbsl>
ya I wish nix el was a a bit more discoverable from a editor say or that it had some website where you could search for functions and the docs of said functions
orivej has quit [Ping timeout: 260 seconds]
<mpickering>
my error was that I was overriding an attribute but gave it a different type by accident
asuryawanshi has quit [Remote host closed the connection]
asuryawanshi has joined #nixos
crmlt has quit [Remote host closed the connection]
andreabe_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
markus1189 has quit [Ping timeout: 256 seconds]
markus1189 has joined #nixos
jensens has joined #nixos
blankhart has quit [Ping timeout: 248 seconds]
blankhart has joined #nixos
sbdchd has quit [Ping timeout: 240 seconds]
der has joined #nixos
jensens has quit [Remote host closed the connection]
jaeckel has quit [Ping timeout: 268 seconds]
reinzeldroid has joined #nixos
agander has quit [Ping timeout: 276 seconds]
Guest69711 is now known as jbetz
der has quit [Client Quit]
agander has joined #nixos
markus1189 has quit [Ping timeout: 264 seconds]
markus1189 has joined #nixos
<leons>
I've got 7.3 installed in my user env but need gcc 4.9 for one specific project. Therefore I'd like to start a shell like this: `nix-shell -p gcc49`. While this evaluates, I'm still stuck with the 7.3 version.
<leons>
I know for nix dervivations there is overrideCC, but how is this done in a nix shell?
m0rphism has quit [Quit: WeeChat 1.9.1]
<LnL>
nix-shell -p is a bit magic
mkoenig_ has quit [Remote host closed the connection]
<Twey>
I haven't updated my system.stateVersion… ever
<Twey>
trace: warning: The option `system.stateVersion' defined in `/etc/nixos/configuration.nix' has been renamed to `system.nixos.stateVersion'.
tzemanovic has joined #nixos
<Twey>
system.stateVersion = "16.09";
<JasonGrossman>
Twey: Right. That's a warning about a change of name.
<Twey>
Is it safe to bump it?
<JasonGrossman>
Twey: So you almost certainly want to change the name, but leave the value the same.
<JasonGrossman>
Bump the name but not the value!
reinzeldroid has joined #nixos
<Twey>
Does the value just stay the same forever now?
<JasonGrossman>
Yes, probably.
<JasonGrossman>
It *might* not, if a system database format changes, but there's no need to worry about that in advance. It's just a backstop safety thing.
<Twey>
And there's no penalty associated with that?
<JasonGrossman>
Right, none.
<JasonGrossman>
It's only the format in which a bit of system data is stored.
<JasonGrossman>
(And I think the format for 16.09 is the same as the latest format anyway.)
<Twey>
I'd have assumed the state format changed for a reason
<Mic92>
Twey: you can read the changelog to know what will change, if you upgrade stateVersion
<JasonGrossman>
It DIDN'T change (I think). Its NAME changed.
<JasonGrossman>
The warning says "has been renamed to". That's all.
<Twey>
Oh, no, I know the warning is fine
<Mic92>
higher stateVersions will receive different postgresql versions for example.
markus1189 has quit [Ping timeout: 268 seconds]
<Twey>
It just drew my attention to the fact that this was set in 2016 and never changed
<manveru>
anyway, i'll leave it without modifying PATH for now, can always make a wrapper later
periklis has quit [Ping timeout: 264 seconds]
markus1189 has joined #nixos
andymandias has joined #nixos
<joko>
Hey, is it possible to remove an attribute from a set? E.g. I have somewhere a nix file that I import and I want to remove an attribute from there
<{^_^}>
[nixpkgs] @manveru opened pull request #42325 → Gnome-latex: init at 3.28.1 → https://git.io/fWbaA
<{^_^}>
[nixpkgs] @Ekleog opened pull request #42326 → opensmtpd package and module: add nixos test → https://git.io/fWbax
nschoe has quit [Ping timeout: 276 seconds]
<manveru>
alright, hope that PR is good... i'm really not sure about the buildInputs/nativeBuildInputs separation on that one
logzet has joined #nixos
markus1189 has quit [Remote host closed the connection]
markus1189 has joined #nixos
mmercier has quit [Quit: mmercier]
steell has joined #nixos
asymmetric has joined #nixos
alphor has quit [Ping timeout: 256 seconds]
Neo-- has quit [Ping timeout: 256 seconds]
alphor has joined #nixos
<infinisil>
I wonder if there's a way to test whether something should be in buildInputs or nativeBuildInputs
<hodapp>
anyone know much about this "FindOpenGL prefers GLVND" etc. warning at https://lpaste.net/2959919034646134784? I am running into this with 2 CMake builds, but the software appears to work okay
<etu>
infinisil: I usually put it in buildInputs and then test the thingy and if it doesn't work I'll put it in nativeBuildInputs and test again. If it work I'm fine with it :p
<infinisil>
Wait no, i don't see how that could work
<infinisil>
Why would it break?
<hodapp>
hm, I see there's libglvnd but no packages outside of mesa/bumblebee/primus/nvidia-x11 use it
sbdchd has joined #nixos
reinzeldroid has joined #nixos
blankhart has quit [Ping timeout: 255 seconds]
<etu>
infinisil: I'm not having an understanding that is deep enough for me to understand the difference, but sometimes I've experienced that python packages needs propagatedBuildInputs (was the thing I was thinking about before)
<infinisil>
Oh yeah that's something different
<etu>
infinisil: The nativeBuildInputs I think about as "build time dependencies" and buildInputs I think about as "runtime dependencies"
raynold has quit [Quit: Connection closed for inactivity]
<infinisil>
Yeah right, but you can't test that you chose the correct one without actually cross compiling afaik
kreetx has joined #nixos
pie_ has joined #nixos
sbdchd has quit [Ping timeout: 245 seconds]
<hodapp>
there's no good way I can think of to test that something in nativeBuildInputs only needs to be in buildInputs, short of just trying it
steell has quit [Ping timeout: 264 seconds]
<gchristensen>
sometimes you even need the same thing in both nativeBuildInputs and buildInputs
<hodapp>
is nativeBuildInputs *not* available at build time?
<hodapp>
otherwise why would you need both?
<gchristensen>
it is, but it has to do with the architecture for which the package is built for ... I don't know, its a bit magic and I don't quite grok it.
<hodapp>
huh
<gchristensen>
stuff in buildInputs: provides a tool you execute during build time.
<gchristensen>
nativeBuildInputs: provides a library linked to, iirc, during usage
<gchristensen>
afaik
<hodapp>
I guess that makes sense if you are cross-compiling
blankhart has joined #nixos
<hodapp>
as buildInputs and nativeBuildInputs are then completely different architectures
<gchristensen>
right
<gchristensen>
and you may need to execute a bin from foopkg and also link to foopkg
<jD91mZM2>
Oh crap, apparently I've mixed up buildInputs/nativeBuildInputs
<gchristensen>
I might be wrong X)
<gchristensen>
_I_ might have them mixed up
aexoxea has joined #nixos
<etu>
gchristensen: I think it's the other way around than you wrote
<etu>
think nativeBuildInput as "native" as in the host building the derivation
<gchristensen>
I believe you :)
<etu>
Not native as in host running it
<etu>
I wish there would be better terminology for this
<etu>
:D
<etu>
Less confusing that way
schoppenhauer has joined #nixos
<infinisil>
nativeBuildInputs = buildHostDeps
<jD91mZM2>
Phheewwwwwwwwww
<infinisil>
buildInputs = runHostDeps
<hodapp>
o_O
bbsl` has joined #nixos
markus1189 has quit [Ping timeout: 256 seconds]
<gchristensen>
everybodyJutsUsex86Deps
<etu>
But the propagateBuildInputs, that's confusing me very much :D
<gchristensen>
that one is no magic
<infinisil>
Oh the propagated ones nobody understands I'm pretty sure
reinzeldroid has quit [Ping timeout: 264 seconds]
<LnL>
lol
<etu>
gchristensen: Then you explain it in plain English please :D
<infinisil>
I tried to really get into the magic once, but I still didn't grok it
<jD91mZM2>
propagated = All dependencies of dependencies etc also require these packages
bbsl has quit [Ping timeout: 245 seconds]
<jD91mZM2>
So if x depends on y and y depends on (propagated) z, x depends on z.
<LnL>
in general just don't use it
<infinisil>
jD91mZM2: except it's only like 1 level deep in some cases, not transitive
<infinisil>
Which is why i don't get it
<woffs>
so w depending on x does not depend on z
phdoerfler has joined #nixos
<LnL>
it's often used incorrectly imho
* jD91mZM2
forgets everything he thought he knew
jarlg has joined #nixos
andreabedini has joined #nixos
<infinisil>
I might just have messed up in my tests though
<jD91mZM2>
They should be renamed to dependencies, hostDependencies and recursiveDependencies IMO. Well, apart from the fact that they're not recursive apparently
<infinisil>
I'd love for someone to put together a clear example of what propagated exactly does
<jarlg>
I need some kernel module headers for C, and I'm trying `nix-shell -p linux.dev` which does provide the headers but I need to add them manually with -I to gcc. But then I get conflicting definitions with glibc.. Any suggestions?
<infinisil>
jarlg: write a proper nix file for building your thing
reinzeldroid has joined #nixos
johanot has joined #nixos
<jarlg>
infinisil: Alright. :)
blankhart has quit [Ping timeout: 255 seconds]
snape has joined #nixos
snape has left #nixos ["ERC (IRC client for Emacs 26.1)"]
johanot has quit [Quit: Leaving.]
<joko>
infinisil: so, I'm trying networking.hosts = builtins.removeAttrs config.networking.hosts [ "x.x.x.x" ]; and I am obviously getting "infinite recursion encountered"
<joepie91>
joko: config options are merged by a custom merging implementation, and are in principle add-only; there are a few methods like lib.mkDefault though to tell the merging implementation how to handle merges, and it's possible that there's also a 'remove an item' indicator
<joepie91>
(the merging is handled on a nixpkgs level, not by Nix itself)
Wharncliffe has quit [Quit: Lost terminal]
<joko>
joepie91: I am reading lib/modules.nix of nixpkgs, but I am not sure if there is a merging strategy which removes attributes that are set by other files
<infinisil>
joko: Ah yeah you can't do that by default, the only way to get this in general is to not include the module that adds the thing you don't want
leo60228 has joined #nixos
<leo60228>
Am I missing something, or is there no PDF printer in nixpkgs?
<leo60228>
I can't find CUPS-PDF (which I found from googling) or cups-pdfdistiller (which I found in a tutorial, though for all I no they're the same thing).
<infinisil>
I can't help with printing myself though, not using it
<leo60228>
I set up my HP Inkjet without issues already, I'm trying to find a PDF printer. It looks like Gutenprint *might* support this, but I installed it and it's not appearing in the CUPS configuration page.
<symphorien>
leo60228: the gtk printing dialog offers "print to a file"
<leo60228>
i use kde. does this matter, or am i being stupid?
<symphorien>
no idea
<symphorien>
maybe try any gtk app to check
<leo60228>
it appears
<leo60228>
the thought that this is an xy problem *also* appears
<leo60228>
what i actually need to do is scale down all pages in an (unevenly sized) pdf to be the same size as a given page
<bpye>
Is there a good monitoring solution if I chose to run nixOS on a server? I'm using netdata currently but it seems netdata and NixOS are ideologically somewhat incompatible, though it seems you can make it work...
jensens has quit [Remote host closed the connection]
<hodapp>
wow, why does cachix installation involve building so much?
jensens has joined #nixos
andymandias has quit [Ping timeout: 260 seconds]
<Baughn>
bpye: What do you need to monitor, and how soon?
<Baughn>
I've been working (slowly) on getting machine statistics into a Prometheus module, but that's mostly for the sake of giving people a better overview of their own system.
<Baughn>
CPU statistics, memory, SMART status, etc etc.
reinzeldroid has quit [Ping timeout: 260 seconds]
andreabedini has joined #nixos
<infinisil>
The only thing I'm monitoring on my server is network traffic amount (it's really just that) with vnstat which has been working well
<Baughn>
So, Prometheus (w/node-exporter) can do that. NixOS already has them, even if it isn't quite as automated as I'd like it.
<jtojnar>
why are packages encouraged to use `stdenv.lib` instead of `lib` but modules the converse?
<Baughn>
Assuming you have a functioning MTA on your system.
<Baughn>
Or... any system.
<bpye>
Baughn Yeah it looks like I should be able to just point that at gmail or fastmail or something and have it work
tenten8401 has joined #nixos
<tenten8401>
Anyone know if there's a way I can evaluate nix expressions via the command line? For instance if I wanted to do "services.whatever.enable = true;" without rebuilding the entire system config?
<{^_^}>
[nixpkgs] @NeQuissimus opened pull request #42330 → linux: Switch to schedutil governor → https://git.io/flF06
<Baughn>
In principle. Be aware that gmail doesn't offer a true RFC-compliant interface.
<M-dpetranek>
How do I raise the max open file limit for a non-root user? I can't seem to set the hard limit above 4096 with `ulimit -Hn 40960` => ulimit: open files: cannot modify limit: Operation not permitted
<tilpner>
tenten8401 - If that doesn't work, nix-instantiate --eval -E 'with import <nixpkgs/nixos> {}; config.services.whatever.enable'
<M-dpetranek>
If I open a root shell I can change it to whatever I want, but I don't want to run stuff as root
<Baughn>
M-dpetranek: You can change the security.pam.loginLimits setting.
<tenten8401>
yeah, looks like that only inspects currently running options
agander_ has joined #nixos
<bpye>
Baughn Yeah I know that gmails IMAP sucks. I'm currently using an old free google apps account but I am thinking about moving to fastmail or maybe mailbox.org
<Baughn>
tenten8401: There's no way to change the config settings of a running system without rebuilding the system config.
<tenten8401>
ah dang
<Baughn>
tenten8401: ...but everything you *don't* change is cached, so it shouldn't be a massive procedure. My own extremely heavyweight config still takes less than a minute to build.
<tenten8401>
well, I left my NixOps configuration at home and forgot to gitlab it before I went
<tenten8401>
and I'm gonna be away for around a week
<Baughn>
bpye: I mean the mail submission protocol. It always sets the From address to that of your account, ignoring what you pass it.
xorkle has joined #nixos
<Baughn>
Understandable, but not RFC-compliant.
<Baughn>
tenten8401: Ah... unfortunately there's no way to recover that from a running system, unless you explicitly add it.
<tenten8401>
yeah, I figured.
agander__ has quit [Ping timeout: 256 seconds]
<Baughn>
You might be able to make use of nixos-option to recover some of it, but not the file per se.
<bpye>
Baughn Oh i didnt know it did that, If you have a Google apps account it will still do it or can you set to other addresses under your domain?
<maurer>
manveru: nativeBuildInputs = software which will run on the non-pi computer, but will not generate code
<bpye>
I guess I'll try setting up nixos in a VM then hopefully it should be simple enough to copy my config over..
<manveru>
maurer: yeah, i just have no clue which parts that are gonna be
<manveru>
ideally there should be some way to figure this out after the build is finished, right?
<maurer>
You can only infer some of it from the completed build
<maurer>
ldd will tell you which things the resulting binary was directly linked against - anything in that list should go in normal dependencies
<maurer>
manveru: Alternatively, you can try just putting everything in normal dependencies, and moving items to nativeBuildInputs, or depsBuildTarget or depsBuildBuild as appropriate
<manveru>
seems like it failed as i thought :)
<maurer>
(if the build completes with it in buildInputs, it's probably going to be fine)
<maurer>
manveru: Are you adjusting an existing nixpkgs derivation?
<maurer>
yeah most of those should be regular buildInputs
<maurer>
pkgconfig should be a nativeBuildInput
<manveru>
yeah, i just need a fool-proof way to distinguish, which is why i'm cross-compiling to test it :)
<maurer>
intltool should be a nativeBuildInput
<maurer>
as should itstool
<maurer>
I'm pretty sure everything else is a regular buildInput
<maurer>
So, unless you're dealing with compilers/jits/plugins, the easy rule of thumb is this: Does this package run on the machine doing the build, or the machine running the software?
<maurer>
If it's the machine doing the build, put it in nativeBuildInputs
<maurer>
if it's the machine running the softwrae, put it in buildInputs
<adisbladis[m]>
These should be nativeBuildInputs: wrapGAppsHook, pkgconfig, intltool, itstool
<adisbladis[m]>
Pretty much everything else is a buildInput
<tenten8401>
Anyone know if there's a way to get oVirt running under NixOS?
Twey has joined #nixos
hyper_ch2 has quit [Ping timeout: 260 seconds]
<hodapp>
tenten8401: I am running it myself but would have to wait till I get home to see how I did it
adisbladis has joined #nixos
stepcut has quit [Remote host closed the connection]
<M-dpetranek>
Baughn: that looks promising, but when I tried setting it I couldn't log in - after entering my password it would boot me back out to the display manager
<M-dpetranek>
I set it to this: security.pam.loginLimits = [ { domain = "username"; item = "nofile"; type = "hard"; value = "unlimited"; } ];
<adisbladis>
Peaker: Yes, makes sense :)
<tenten8401>
hodapp: when do you think you'll be back home? I'll see if I can check back around that time
blankhart has quit [Read error: Connection reset by peer]
<Peaker>
adisbladis, how do I know what URL to change to for ghc 8.4.3 ?
blankhart has joined #nixos
<hodapp>
might not be till tonight (~9 hours) but I may be home sooner for a bit
<hodapp>
Peaker: how is lamdu?
<Peaker>
hodapp, that's what I'm trying to get to build in nix :-)
<hodapp>
ooh :)
<maurer>
Peaker: That works, but it might be good to make that an optional argument in your derivation, e.g. {nixpkgs ? import (builtins....
<Peaker>
hodapp, it's making steady progress
<adisbladis>
Peaker: You can also add a sha256 which makes the source fetching a fixed output derivation (among other things will cache the tarball differently)
<Peaker>
maurer, I am a total nix noob - I don't yet know what I'm doing there, only got some contribution nix files that broke with the upgrade to ghc 8.4.3
<maurer>
Peaker: You write a function with potentially inherited arguments by doing {arg, arg2, arg3}: body
<maurer>
Peaker: You can use a ? to indicate a default value
<maurer>
so {nixpkgs ? someexpr}: body
<maurer>
will produce a function which can be passed a value for nixpkgs, but which otherwise will use someexpr to get it
agander_ has quit [Ping timeout: 245 seconds]
<Peaker>
does that mean nixpkgs gets "someexpr" if unspecified?
<Peaker>
ah ok
<maurer>
Yeah, so basically if unspecified, you'll get your known working nixpkgs value that you've set there
reinzeldroid has quit [Ping timeout: 240 seconds]
<maurer>
but if specified, it'll try to build with whatever nixpkgs was specified
<hodapp>
Peaker: at a guess, could you search for a git revision which uses 8.4.3 and turn that to an archive URL?
<hodapp>
pinning versions isn't something I've done much of in Nix, at least not with something as central as GC
<hodapp>
s/GC/GHC/
__Sander__ has quit [Quit: Konversation terminated!]
igo95862 has joined #nixos
<Peaker>
hodapp, for example, the newest nixpkgs master?
<hodapp>
no idea. does newest nixpkgs master use 8.4.3?
tenten8401 has quit [Ping timeout: 260 seconds]
samrose has quit [Quit: Page closed]
igo95862_ has joined #nixos
<tilpner>
> haskell.compiler.ghc843.version
<{^_^}>
"8.4.3"
<Baughn>
Use `git log` on the appropriate directory, search for the version number?
igo95862_ has quit [Client Quit]
igo95862 has quit [Ping timeout: 276 seconds]
agander has joined #nixos
reinzeldroid has joined #nixos
asymmetric has quit [Remote host closed the connection]
asymmetric has joined #nixos
doyougnu has joined #nixos
<M-dpetranek>
does anybody know why setting security.pam.loginLimits to [ { domain = "dan.petranek"; item = "nofile"; type = "hard"; value = "unlimited"; } ]; would prevent logging in?
humanoyd has quit [Quit: WeeChat 2.1]
inquisitiv3 has joined #nixos
<{^_^}>
[nixpkgs] @FRidh opened pull request #42332 → llvm_6: add patch to fix missing header → https://git.io/flFif
asymmetric has quit [Remote host closed the connection]
asymmetric has joined #nixos
blankhart has quit [Ping timeout: 256 seconds]
<bebarker>
Do folks that develop software that also has a derivation on nix somehow use the existing nix derivation to get an appropriate nix-shell, or is some degree of changing the nix expression warranted? Example: I see "curl" is an argument to a nix expression, but when I do nix-shell -p <my_software_package>, curl is not in the environment, which would suggest trying to manually build the software in this nix-shell would likely fail
pie_ has quit [Ping timeout: 255 seconds]
<LnL>
nix-shell -p is different from a development shell
<electrocat>
bebarker: curl might be a build time dependency not required at runtime
<electrocat>
'nix-shell -p <package>' only gives you everything to run <package>
endformationage has joined #nixos
iyzsong has quit [Read error: Connection reset by peer]
<bebarker>
electrocat, makes sense - is there a way to also bring in the build time dependencies to the environment? seems like that would be super convenient for devs
<edef>
ie it goes into a build env for a fake package that has foo as a dependency
reinzeldroid has quit [Read error: Connection reset by peer]
reinhardt has joined #nixos
<mpickering>
Is there a recommended way to distribute an overlay?
<bebarker>
edef, oh awesome, looks like the -f isn't needed (or doesn't work with my nix-shell version)
halfbit has joined #nixos
mmercier has quit [Quit: mmercier]
<edef>
whoops, yeah, you're right
<bebarker>
edef, so maybe nix-shell '<nixpkgs>' -A singularity --pure is ideal for the actual build, though maybe leave off --pure in another terminal for dev work
<edef>
yeah
reinhardt has quit [Ping timeout: 264 seconds]
<{^_^}>
[docker] @peti pushed to master « README.md: manual uploading is no longer necessary »: https://git.io/flFPj
jb55 has quit [Quit: WeeChat 2.1]
jb55 has joined #nixos
civodul has quit [Quit: ERC (IRC client for Emacs 26.1)]
<M-dpetranek>
ok, mystery solved. for some reason you can't set the value to unlimited, I just chose a high number instead
blankhart has joined #nixos
Izorkin has quit [Read error: Connection reset by peer]
<illegalprime[m]>
hey! I'm trying to get into kde dev and that means compiling a bunch of different kde packages on nixos! I thought NixOS would be awesome for this since I can keep my kde install and still compile the new stuff. For instance compiling `plasma-workspace` is fine except that all the packages I'm pulling in are older versions compared to what I need. I can change the line in CMakeLists.txt that sets the min
<illegalprime[m]>
version:`set(KF5_MIN_VERSION "5.45.0")`. But that isn't super clean. What's the best way to do this?
sbdchd has joined #nixos
reinzeldroid has joined #nixos
<dmj`>
Whats the build user name on osx, I’m trying to fetch a private repo, but it can’t read my ssh-config-file
Izorkin has joined #nixos
sbdchd has quit [Ping timeout: 264 seconds]
erasmas has joined #nixos
goibhniu has quit [Ping timeout: 245 seconds]
<illegalprime[m]>
i guess is there a way to keep a bunch of up to date kf5 packages around separate from my main machine?
<nh2[m]>
after `source env-vars`, should I be able to run just `buildPhase`? It says command not found for me
<infinisil>
illegalprime[m]: What's exactly the problem/question?
<infinisil>
Don't quiet get it
<infinisil>
nh2[m]: buildPhase should be automatically available in a nix-shell
<nh2[m]>
infinisil: I'm not in a nix-shell, I used --keep-failed, cd'd into the build directory, and ran `source env-vars`
<nh2[m]>
env-vars has a a `declare -x buildPhase="ninja ....`
<illegalprime[m]>
infinisil: kf5 apps in the stable channel are too outdated to be used as buildinputs for some of the latest upstream kf5 apps. Is there a way to reference packages from the unstable channel just for one derivation?
<nh2[m]>
but I can't run it, I can't `eval` it, (fails with syntax error), but I can `echo $buildPhase`
<infinisil>
nh2[m]: chromium doesn't define a buildPhase, but defines the lower level buildCommand directly
matthewbauer has joined #nixos
fendor has quit [Remote host closed the connection]
<infinisil>
,ask reardencode
<{^_^}>
reardencode: Just ask your question. It's the best way to know if anybody can help.
fendor has joined #nixos
reinzeldroid has quit [Ping timeout: 265 seconds]
<reardencode>
in short, I have a gulp-based node project that I'm trying to get a development shell on - node2nix seems to work fine to facilitate `nix-build -A package` but when I try to do `nix-shell -A shell` gulp fails because node2nix seems to try to run the `npm rebuild` and `npm install` steps in $out without copying all of $src (including the gulpfile) over
<reardencode>
trying to figure out what the intention behind the way `node2nix` generates the `shell` expression was so I can get it working.
smallville7123 has joined #nixos
fendor has quit [Ping timeout: 245 seconds]
roni has joined #nixos
jb55 has joined #nixos
kreetx has quit [Ping timeout: 248 seconds]
jperras has joined #nixos
inquisitiv3 has quit [Remote host closed the connection]
<tilpner>
stranger___ - - If that doesn't work, nix-instantiate --eval -E 'with import <nixpkgs/nixos> {}; config.boot.extraModulePackages'
<stranger___>
tilpner: thank you much!!!
tzemanovic has quit [Ping timeout: 265 seconds]
<hodapp>
hm, no one bundled yafaray into nixpkgs yet either!
<hodapp>
guess I could do that while I'm already doing luxcorerender & appleseed...
<tilpner>
hodapp++
<{^_^}>
hodapp's karma got increased to 3
<hodapp>
tilpner: do you do 3D graphics? :P
<infinisil>
stranger___: Or similarly `nix-instantiate --eval '<nixpkgs/nixos>' -A config.boot.extraModulePackages`
<tilpner>
Hardly anymore, but I used to play around a lot with Blender and various renderers
<hodapp>
tilpner: I used to do POV-Ray. I have used Blender numerous times for various things but had a hard time learning it and making it stick.
<hodapp>
but the Cycles renderer that they rolled out 6-7 years ago is quite good
<tilpner>
infinisil - I usually suggest the -E variant, because it's easier to massage the output into a consumable format. E.g. adding builtins.length or map (p: p.name)
<infinisil>
True dat
matthewbauer has quit [Remote host closed the connection]
<tilpner>
I still use Blender to edit videos and create icons c.c
<hodapp>
huh, neat
<tilpner>
"Why are you pathtracing a 64x64 logo?"
<hodapp>
I need to pick it up again for some modeling
<tilpner>
"I don't know GIMP"
<hodapp>
https://imgur.com/a/Kyvm1Hh - that is a render I did from a test scene in Appleseed, and the quality of that render knocks my socks off
<hodapp>
I messed with the materials a little bit but not much
<{^_^}>
[docker] @peti pushed to setup-ci « travis.yml: verify that the generated image works »: https://git.io/flF5f
<tilpner>
Looks good, but 2h5m :/
<hodapp>
yeah, it's CPU-only
<tilpner>
That's the part I don't miss
<hodapp>
Cycles and LuxCoreRender both can do GPU
<infinisil>
I once made a raytracer myself, hold on I'll find a pic of the result
<tilpner>
Yeah, if only CUDA worked... :c
<hodapp>
Lux at least uses OpenCL
<hodapp>
but I'm told that cinema-quality raytracers still largely are CPU-only (and Appleseed is aiming right at that sort of thing)
<hodapp>
and it partly makes sense... raytracing is very task-parallel but divergent and I think path tracing is the same deal
<tilpner>
infinisil - Buggy pathtracers are pretty too: https://tx0.co/1g
<infinisil>
tx0.co doesn't render png's very nice..
<stranger___>
tilpner: btw what will happen if you import <nixpkgs/nixos> on non-nixos? :P
<tilpner>
stranger___ - It will complain about missing nixos-config. If you provide one, it will work just fine
<stranger___>
ah nice
orivej has quit [Ping timeout: 240 seconds]
<tilpner>
You can build and deploy a NixOS system from a system that's not NixOS
jperras has quit [Ping timeout: 256 seconds]
<jD91mZM2>
Does nixos-rebuild ever upgrade stuff even if you don't pass `--upgrade`?
<jD91mZM2>
Because it just started rebuilding a bazillion packages
<tilpner>
Depends on where you get packages, it can upgrade them
blankhart has quit [Ping timeout: 255 seconds]
<tilpner>
E.g. if you put (import fetchTarball master {}).hello into your systemPackages
<jD91mZM2>
They're from the nixos channel. Well, most of them
reinzelmann has joined #nixos
<tilpner>
If they're all from nix-channel-managed sources, that should not happen
<jD91mZM2>
It's been standing for hours because my internet connection is so incredibly slow currently
chaker`` has quit [Ping timeout: 240 seconds]
jperras has joined #nixos
Twey has quit [Ping timeout: 256 seconds]
<bpye>
Does nixops work well with baremetal machines, it looks like it should manage the whole config remotely?
<stranger___>
tilpner: cool. and what is the neat way to check whether it's a nixos distro or not? i mean to use check in shell script
<tilpner>
stranger___ - if [ -e /etc/NIXOS ]; then
<tilpner>
bpye - I'm not using nixops, but I've had no problems deploying to laptops (so... baremetal?)
grp has joined #nixos
<{^_^}>
[nixpkgs] @ookhoi opened pull request #42337 → google-authenticator-failed-to-use-libqrencode - use libqrencode 4 → https://git.io/flFF2
Ariakenom has quit [Read error: Connection reset by peer]
asuryawanshi has joined #nixos
asuryawanshi has quit [Remote host closed the connection]
asuryawanshi has joined #nixos
justanotheruser has quit [Ping timeout: 264 seconds]
smallville7123 has quit [Quit: rosa]
<stranger___>
tilpner: thx. is it possible to also bring nixpkgs in addition to nixpkgs/nixos to that expression? so i could access both configuration and packages in same expression
<remo>
hello folks, I seek your help I'm kind of desperate. I have two EC2 NixOS instances in a VPC in the same subnet. nix-copy-closure (of any path) from one to the other, hangs for about 10 minutes before dying with error: unexpected end-of-file. Funny thing is, I can ssh into it no problem. Any idea what could be causing this?
FareTower has joined #nixos
Fare has quit [Ping timeout: 268 seconds]
inquisitiv3 has joined #nixos
schoppenhauer has quit [Ping timeout: 245 seconds]
<inquisitiv3>
I'm reading section 4.2 in the Nix pills. Do I understand it correctly that the whitespaces surrounding the `-` character has significance?
<inquisitiv3>
So is `a-b` a variable name, while `a - b` mean "subtract b from a"?
<joepie91>
inquisitiv3: yeah
<LnL>
remo: what version of nix?
<inquisitiv3>
joepie91: Thanks!
<joepie91>
inquisitiv3: or well, 'variable' isn't really the right term; 'binding', or more generically, 'identifier'
<joepie91>
Nix doesn't exactly have variables as such
<PolarIntersect>
hey y/all
logzet has quit [Ping timeout: 276 seconds]
<PolarIntersect>
I did a ` nixos-rebuild switch --upgrade ` and now the password entry on boot for decrypting my root device doesn't work unless I use an ezternal keyboard
<inquisitiv3>
joepie91: I'm not familiar with the terms "binding" and "identifier". Seen the terms used before, but I don't know what they are.
<PolarIntersect>
seems like my laptop keyboard driver isn't loaded at stage 1 or something?...
<remo>
LnL: on `from` machine nix (Nix) 2.0.2, on `to` machine nix (Nix) 2.0
<remo>
LnL: if I nixops deploy an instance to a different VPC, it works. Also i tried nix-copy-closure of the smallest path
<PolarIntersect>
Okay. Well, now I'm confused. Something must have been messed up w/ initrd. I ran sudo nix-collect-garbage -d && sudo nixos-rebuild switch --upgrade ` and it replaced initrd and fixed it
<LnL>
remo: hmm ok, are you using ssh keys with command="..."?
justanotheruser has joined #nixos
<remo>
LnL: no. my command is this: `NIX_SSHOPTS="-vvvvvvvvvv -i ./tsdb-rsa.pem" nix-copy-closure --to root@10.110.10.125 /nix/store/wq1wx8n3i23l35dz210as4wxm8xqphjx-microlens-0.4.8.3.drv -vvvvvvv`
<bebarker>
I admit I'm kind of a fan of https://nixos.org/nixos/packages.html#, but it doesn't seem to be updated too frequently. But, I'm not sure what the update procedure is
<{^_^}>
[nixpkgs] @ookhoi opened pull request #42339 → 18.03-google-authenticator-failed-to-use-libqrencode - use libqrencod… → https://git.io/flFhV
<LnL>
remo: probably not then, in authorized_keys you can make that key only usable for nix builds with command="nix-store --serve --write" ssh-rsa AAAAB3Nza... nix@builder
<joepie91>
inquisitiv3: a 'binding' is the Nix term for what looks like a property of an object or a declaration in a `let ... in ...` block
<joepie91>
inquisitiv3: 'identifier' is a more general term that's used between languages to mean a 'name' that can point at a variable, a property name, a binding, or whatever passes for a 'data pointer' in a given language
<bpye>
nmbd doesnt give anything meaningful before it dies either
<joepie91>
inquisitiv3: Nix' rules for what constitutes an identifier are a little broader than many other languages, which is where the weird a-b / a - b syntax ambiguity comes from; unlike in most other languages, identifiers in Nix can contain dashes
<LnL>
remo: what if you run ssh root@foo -- nix-store directly?
<joepie91>
bpye: fwiw, I use NixOps exclusively for managing non-magically-instantiated servers (ie. dedicated servers, per-month bog-standard VPSes, etc.)
<joepie91>
bpye: deployment.targetHost is the magic option to point NixOps at an existing NixOS system
<PolarIntersect>
:o
<PolarIntersect>
joepie91: Where do you run NixOS servers?
<joepie91>
PolarIntersect: as in, what providers?
<PolarIntersect>
ya
<remo>
LnL: looking at the debug output I get `debug1: Sending command: nix-store --serve --write` then a few more lines seemingly saying the the command was accepted, eventually `packet_write_wait: Connection to 10.110.10.125 port 22: Broken pipe`. If I run `ssh -i tsdb-rsa.pem root@10.110.10.57 -- nix-store` i get `error: no operation specified`
<inquisitiv3>
joepie91: Thanks! I understand what the term "identifier" means. But your explanation of what a binding is flew little over my head.
<joepie91>
PolarIntersect: currently I have 3 servers that I've NixOS-ified; all newly acquired ones, at Afterburst, Hetzner, and Ho-ost; but I have a pile of other VPSes/servers at other providers that still have to be migrated over to NixOS (and, in some cases, away from OpenVZ towards QEMU/KVM), eg. at RAM Host, RamNode, SecureDragon, OVH, anyNode, etc.
<inquisitiv3>
Btw, why isn't `let` expressions allowed in the Nix REPL?
<PolarIntersect>
Do those services offer nixos? or do you do some hax to make it work
<PolarIntersect>
I tried making one of mine into NixOS but the only way I can maybe do it is rescue mode, and I don't know that's possible
<joepie91>
inquisitiv3: so if you do `let foo = bar; in bar` then the `foo = bar` part is a binding; it 'binds' the `bar` expression to the `foo` identifier in the `let ... in` scope... similarly, when you do `{ foo = bar; }` it 'binds' the `bar` expression to the `foo` identifier in the 'attribute set' (object) that you create there
pie_ has quit [Ping timeout: 256 seconds]
FareTower has quit [Ping timeout: 264 seconds]
justanotheruser has quit [Ping timeout: 260 seconds]
<Baughn>
inquisitiv3: They are. Try to write "let a = 2; in a", it'll work.
<bpye>
joepie91 Thanks, that looks like it's probably what I'm wanting
<inquisitiv3>
joepie91: Now I understand it.
<joepie91>
PolarIntersect: varies by provider; with smaller providers you can generally just ask them to add an ISO for NixOS... that's how I've done it with Afterburst (which is a VPS). Ho-ost uses a different panel that lets you upload your own ISOs (also a VPS). for Hetzner (dedicated), I've just rented a lantronix spider for 2 hours, as the first 3 hours are free, and lantronix spiders have an 'ISO proxy' feature where it can emulate an optical drive that
<joepie91>
points back at an ISO on your own system
<LnL>
remo: strange, are both hosts running 2.0.2?
<Baughn>
PolarIntersect: NixOps natively supports installing to Hetzner machines, although not with ZFS (last I checked). You can usually do a cross-install from a supported Distro, e.g. Debian.
<remo>
no. from host is 2.0.2, to host is 2.0
<joepie91>
Baughn: iirc that was a nixos-infect hack though
<joepie91>
although I've been told that supposedly you should be able to netboot through their rescue system as well
<Baughn>
Was it? Hum.
<inquisitiv3>
Btw, what is a "attribute"? I've seen the terms "attribute sets" and just "sets", and I assume that they're the same thing?
<joepie91>
and like, nixos-infect *works*, but I still prefer a clean installation :)
<Baughn>
I installed NixOS by booting the Hetzner-supplied (Debian) system, and then booting the NixOS install CD through qemu with the physical disks connected to it.
<Baughn>
That wouldn't work if they used UEFI, I think, but they don't.
<joepie91>
inquisitiv3: an 'attribute set' is quite literally a set of 'attributes' (key/value mappings, like illustrated above); it's similar to what might be called an object or hashmap in other languages, although with Nix being immutable the characteristics are a little different
<Baughn>
s/system/rescue system/
<remo>
LnL: the fact that deploying to a different vpc works confuses me. What confuses me the most is that I can simply ssh into the `to` machinem but i can nix-copy-closure to it, and afaiu nix-copy-closure is just ssh
<joepie91>
inquisitiv3: 'sets' are a more general concept that I don't believe Nix has, so if you see 'sets' in Nix, then it probably refers to attribute sets
<joepie91>
Baughn: yeah, I think that's what somebody told me
<LnL>
remo: well the commands don't seem to be failing so maybe there's an incompatibility with the protocol, I hope not tho
<nh2[m]>
infinisil: thanks! How would I go about executing the `buildCommand` directly after I've sourced `env-vars`?
<joepie91>
but I only found out after having used a spider :)
<LnL>
remo: what about rsyncing some actual data
<inquisitiv3>
Baughn: Why does the Nix pills say "Note: ignore the foo = "strval" assignment, special syntax in nix-repl" in section 4.3? Or was it introduced after the pills was written?
<joepie91>
I'd imagine that they eventually figured out that having a tech walk to and from the server to connect it would take more than the 15 minutes it's in use
<Baughn>
I haven't used them that long, if so.
<joepie91>
:p
<remo>
LnL: I'll try
<joepie91>
nh2[m]: right. my OVH box is a kimsufi server, and I _think_ they allow ISO upload through the panel
<joepie91>
although I'm unsure
<joepie91>
cross that bridge when I get there etc.
<inquisitiv3>
joepie91: When you say "object" you mean a regular object in an OO-language like Java? Or does it have another meaning in the context of functional programming?>
<joepie91>
inquisitiv3: more 'object' in the sense of JS
<joepie91>
I think Python calls it a dict?
<joepie91>
don't think Java really has an equivalent, but Java is a little weird anyway in its object model
<joepie91>
although, it may have Maps
<inquisitiv3>
joepie91: So an "object" is the equivalent to a dictionary in Python?
<joepie91>
which are sorta kinda the same? ish?
<joepie91>
inquisitiv3: in the context that I'm using it here, yes
<joepie91>
terminology varies by language :P
<joepie91>
'object' also has a different definition that's more language-independent (the OOP definition) but that's not the one I'm using here
<inquisitiv3>
Why can't there be a standard for these terms?
<nh2[m]>
wow interesting, all messages from user `remo` don't appear in my IRC client (the matrix IRC bridge). remo, if you can read this, if you're out of memory, the issue that some other user linked you links to some PR that I made that might fix your problems
<Baughn>
Java has everything. of course that includes maps.
<joepie91>
inquisitiv3: well, there are standards... several of them :D
<bpye>
Tempted to move from DO VPS to a Hetzner box... it's about 4x the cost but going from a 1GB RAM VPS to a box with 16 or 32GB of memory is tempting...
<LnL>
nh2[m]: wut
<joepie91>
inquisitiv3: more seriously, often the details vary by language, so while things may look similar between languages from a distance there can still be big differences in how you work with them
<Baughn>
bpye: Look at cloud.hetzner.com too
<bpye>
Hm, looks like I need to package the drivers for my printer, does NixOS have a good way to deal with RPM packages?
<remo>
nh2[m]: i can read you, not sure what you mean
<bpye>
Thankfully all the binaries inside are static linked
<Baughn>
bpye: Of sorts. The rpm binary is packaged, so you can extract files from rpms in a reasonable manner. There are a few examples.
<inquisitiv3>
joepie91: I don't know how dictionaries works, just how to use them. :P
<philippD>
I'm currently using nix to build pdfs using pandoc. This works great except for one issue: I have to pull depend on texlive.combined.scheme-full which is huge. Not only does this make the first build on a system extremly small but more importantly it effectively keeps me from using travis-ci to build it. Is there a standard way of selecting what te
<philippD>
xlive packages I want to use instead of using the predifend schemes?
kreetx has joined #nixos
<LnL>
remo: he's referring to the memory issue I linked earlier, but as far as I can tell that's probably not the problem here
<nh2[m]>
bpye: you can use use the Hetzner Cloud offerings if you want something comparable to DO
<joepie91>
inquisitiv3: well, 'key-value mapping with unique keys' is probably the closest universal definition here that applies to all of the stuff I've mentioned
<Baughn>
bpye: Of course the preference is to use the source code rather than the rpm, but that isn't always feasible.
<inquisitiv3>
So I guess that helps me understanding attributes by not having any preconceptions regarding how they work.
<nh2[m]>
oops
<nh2[m]>
too late
<bpye>
Baughn: Yeah unfortunately it's a stupid proprietary printer driver
<joepie91>
I think I just imperatively shoved a ppd into my cups
<inquisitiv3>
joepie91: So if I understand you correctly an "attribute" is a binding in an attribute sets?
<joepie91>
to get the printer at $hackerspace to work
<Baughn>
philippD: Something like that?
<inquisitiv3>
set*
<joepie91>
because I couldn't be bothered packaging it :P
<joepie91>
inquisitiv3: pretty much, yeah
<nh2[m]>
bpye: I use Hetzner Cloud with nixops (have a PR out there), works quite well; I first needed to do a nixos-inplace conversion upfront though. But soon that will also be a thing of the past once I or somebody else manages to use clever's kexec approach for it in nixops
<Baughn>
philippD: But creating custom latex collections takes forever, so I'm using scheme-full anyway because the download is faster.
<bpye>
Baughn: Yeah, I don't use NixOS there yet though :)
<Baughn>
philippD: If you're using latex more actively than me, it might be worth it. :P
<bpye>
Want to switch my home server first, I have less moving parts. I just need samba, cups and backups to work and I can switch
<nh2[m]>
bpye: what do you like about the external firewall? Does it give you some feature you're missing with nixos's firewall?
<bpye>
My VPS needs PostgreSQL, Node, a reverse proxy, Miniflux... Then I can switch that.
<bebarker>
what's the suggested way to enable doCheck with nix-build - I imagine this would be possible if I knew how to specify overrides to nix-build on the command line
<bpye>
nh2[m]: Na, it just lets me manage firewall rules in a way that I am confident I haven't screwed it up, currently my VPS is on Ubuntu Server + Docker
<philippD>
Baughn: I'm experimenting with nix and was trying to use it for every task I could. I should really spend more time on actually writing my thesis instead of playing with the buildsystem ;)
<joepie91>
bpye: fwiw, firewall management is quite easy in NixOS so long as you don't need complex rules
<phry>
so I just copied a random file to /etc/nixos/configuration.nix and I have no backup. do I have any hope?
<inquisitiv3>
joepie91: Thanks! I'll make sure to read it :)
<Baughn>
philippD: You'll always have the option of shrinking the input set later on.
<nh2[m]>
bpye: which part are you worrying about screwing up? If it's just allowing ports, I've found NixOS's quite easy, it's literally specifying the allowed port numbers in a list
<Baughn>
Scheme-full is around 500MB. In some context that's nothing, in others it's a lot.
<bpye>
joepie91: Yeah it seems pretty cool, kinda unfortunate that it seems a bit hit or miss if a service will have a way to punch through, though setting a port allowed is easy.
<joepie91>
how do you mean?
<tilpner>
philippD - You could combine Baughns suggestion with cachix to get the best of both worlds
<Baughn>
cachix is what, now?
<bpye>
It seems there are a handful of services with a service.xyz.openFirewall config
<nh2[m]>
bpye: of course if you want to have private networking, where you have more ports allowed *between* your servers than externally, then you'll have to do a more sophisticated setup (e.g. using a vpn software like tinc)
<joepie91>
bpye: ah, in the sense that it isn't consistent whether a service is exposed by default?
<nh2[m]>
Baughn: cachix.org
<bpye>
joepie91: Yeah exactly
<joepie91>
right, that is true; I think we're currently erring on the side of caution in nixpkgs
<joepie91>
but don't quote me on that
<Baughn>
nh2[m]: Ah. That seems... scary.
<bpye>
nh2[m] Thankfully I'm not there at the moment, though I might want to have some sort of VPN between my home server and my not-home server eventually
<Baughn>
philippD: Absolutely doable, just maybe not worth the time.
<joepie91>
nh2[m]: speaking of which, the tinc article on the wiki desperately needs updating :)
<joepie91>
it describes a lot of manual steps that aren't necessary
<bpye>
Does tinc work if one side has a non-static IP?
<joepie91>
hmm.
<joepie91>
I think so, but not sure
<nh2[m]>
Baughn: which part is scary?
orivej has joined #nixos
<joepie91>
bpye: quick google suggests it'll work so long as you don't have a ConnectTo line for the dynamically-addressed system
<joepie91>
which would make sense
<joepie91>
simply don't configure an address for the dynamic peer and expect the dynamic peer to connect to the static peer
<remo>
LnL: rsync asks for root password and won't accept it. I think I might call it a day unless you have anything else I could try.
<nh2[m]>
joepie91: I don't know the wiki article, but on https://github.com/nh2/nixops-gluster-example/ I have a fully automated nixops setup that deploys tinc (among a couple other things; one can just delete those if one is only interested in tinc)
<philippD>
Baughn: I don't know. Wouldn't it be possible to scan the latex file for used packages and generate a nix expression from it? ... And call it latex2nix?
<inquisitiv3>
gchristensen: I got a suggestion for solving some of my issues with the NixOS installation.
<joepie91>
nh2[m]: right. I ended up figuring stuff out myself yesterday
<joepie91>
lol
<Baughn>
nh2[m]: The front page says you'd use a <name>.cachix.org domain.
<joepie91>
I do have a working tinc setup now, though!
<LnL>
remo: right, you need -o to pass ssh flags scp might be easier
<bpye>
Oh, and am I better puttign nixOS on my ZFS pool as root, or is it more robust to stick NixOS on a different disk and just use the ZFS pool for application level stuff?
stepcut has joined #nixos
<joepie91>
we have a whole wiki article on NixOS + ZFS I think
<Baughn>
nh2[m]: What stops an intrepid cracker from using this to break into your system? I mean, maybe there is something, but...
<bpye>
Yeah I saw that joepie91, it seems reasonable
<nh2[m]>
all my Hetzners use this approach; I have all ports forbidden in the NixOS firewall except the external (e.g. HTTPS), and then just whitelist all ports on the tinc interface
<Baughn>
remo: Are root SSH logins enabled on your system?
<bpye>
I just wonder if it's possible I'll end up in a broken situation?
<remo>
LnL: I can scp just fine when I pass the .pem certificate
<Baughn>
remo: They're disabled for password logins by default. (And this is a good thing. Use an SSH key instead.)
<joepie91>
nh2[m]: I use it for metrics collection primarily
kreetx has quit [Quit: Lost terminal]
<joepie91>
but over time I might run other services over it too
<Baughn>
bpye: No, root-on-ZFS for NixOS is about as safe as it can get.
<Baughn>
bpye: It's well supported, and should just work.
<bpye>
Baughn That's good to know. Most other distros seem to break on ZFS if you're not too careful.
<nh2[m]>
Baughn: you mean "what stops somebody else to upload into your cache"? You own that `<name>` so only you can upload there
<Baughn>
bpye: That's still kinda true. You do need to use mountpoint=legacy for everything.
<Baughn>
nh2[m]: Imagine a DNS hijack.
<remo>
Baughn: they might be. this is the ami-5e2b75b5, 18.03 nixos
<nh2[m]>
joepie91: yeah that's also why I got it initially, many logging solutions just assume private networking. But now I'm happy to have it for other things as well; for example glusterfs has full SSL and client keys, but they recently accidentally coded a bug that would just allow any SSL cert to authenticate, so I was happy I was running that over tinc as well
<Baughn>
remo: Unless password logins are explicitly enabled in configuration.nix, they're disabled.
<nh2[m]>
Baughn: if you can be DNS hijacked, then using cache.nixos.org is also not safe
<nh2[m]>
Baughn: of course you also still have signed packages in both cases, but I'm assuming you're meaning meaning unsafe for something that's not related directly to packages contents?
<remo>
Baughn: got it
<Baughn>
nh2[m]: cache.nixos.org uses cryptographic signatures on a key that's baked into the OS, though.
<nh2[m]>
meaning meaning -> meaning
lanelet has quit [Quit: lanelet]
<Baughn>
So the problem is solvable. I'm just wondering if it's *solved*.
<nh2[m]>
if you use cachix, you sign all uploaded packages with your privkey, and you add the corresponding pubkey next to cache.nixos.org's pubkey
<stepcut>
When I build the foundation library with ghc822 everything works, but when I try to build it with ghcjs, it fails because it can't find `sys/inotify.h`. Now clearly, the ghcjs code isn't actually going to be able to use inotify -- but I just need the library to build -- which it does on ubuntu
<stepcut>
I am not quite sure how to track down why ghc can find sys/inotify.h but not ghcjs -- I think it is provided by libc? To add further complication, I am doing this all on darwin
AluisioASG has joined #nixos
<Baughn>
philippD: Using scheme-mediun instead of scheme-full is probably a good start, by the way.
<nh2[m]>
Baughn: so from what I can tell, conceptually, cachix.org should be exactly as safe as cache.nixos.org, if you trust the owner of cachix.org. Given that the owner of cachix.org has push rights to nixpkgs, the only remaining difference should be whether you think that one of cache.nixos.org/cachix.org is better operated / has less security bugs than the other
<Baughn>
Righto. That's good.
<remo>
LnL: thank you for your help, I'll continue the ordeal tomorrow
<Baughn>
remo: Do you by chance know a Dual?
rihards has quit [Quit: rihards]
<remo>
Baughn: no, don't even know if that's a name eh
rihards has joined #nixos
<nh2[m]>
remo: ah finally, I can now read your messages
<nh2[m]>
remo: so I may not have fully kept up with your problem, but if your problem is that the 18.03 AMIs result in `out of memory` when you're using nixops, there is a solution
<nh2[m]>
remo: the solution is: Tell nixops to use the 17.09 AMI for the initial deployment of the machine. In your config for the machine, configure the machine to use the version of nix from my PR (https://github.com/NixOS/nix/pull/2206). Then everything should work
<nh2[m]>
remo: I will put out a branch for you, one moment
<philippD>
Baughn: nope, I have tried all schemes. Full is the only one that works
<Baughn>
philippD: Define "works". Any of the lesser ones may require you to explicitly add dependencies that were included in full.
<remo>
nh2[m]: dont think thats the problem. I have two VPCs in my AWS. If a nixops deploy from one to the other it works, if I use the same subnetId/securitygroup then nix-copy-closure hangs. Which makes me think that either the routingtable or securitygroups are blocking, but I can ssh just fine so what gives. Even when I nix-copy-closure the smallest path it hangs. Regardless, I'm gonna try what you suggested and deploy an 17.03 ami
<philippD>
Baughn: scheme-full is the only one that provides all dependencies out of the box
reinzeldroid has quit [Ping timeout: 248 seconds]
<Baughn>
philippD: Yes. That's why it's called full.
hph^ has quit [Ping timeout: 256 seconds]
jensens has quit [Ping timeout: 240 seconds]
<{^_^}>
[nixops] @nh2 opened pull request #972 → DO NOT MERGE: Nix 2 out of memory workaround → https://git.io/flbUL
<nh2[m]>
remo: ah OK, then I missed something. What I propose should not fix hangs, only the explicit `out of memory` error from nixops. In any case, here's my workaround branch: https://github.com/NixOS/nixops/pull/972
smallville7123 has joined #nixos
<remo>
nh2[m]: no problem. thanks a lot for doing the branch for me anyway
jperras has quit [Ping timeout: 256 seconds]
jperras has joined #nixos
stepcut has quit [Remote host closed the connection]
jD91mZM2 has quit [Quit: WeeChat 2.0]
<inquisitiv3>
joepie91: I come up with another question regarding attributes. Are attributes only bindings in attribute sets, or are the term applicable also applicable for bindings in other situations?
pSub has joined #nixos
pSub has quit [Changing host]
pSub has joined #nixos
stepcut has joined #nixos
<joepie91>
inquisitiv3: only in attribute sets
pSub has quit [Read error: Connection reset by peer]
<joepie91>
inquisitiv3: I suspect that most people would even just understanding 'bindings' as the thing in `let ... in ...` blocks and not attribute sets
<joepie91>
even though they are internally called bindings as well iirc
fragamus has joined #nixos
<fragamus>
Hi I have a binary I downloaded and I want to open a shell with that binary on the PATH
<fragamus>
There’s got to be a good way to do this
agander_ has joined #nixos
blankhart has joined #nixos
smallville7123 has quit [Quit: rosa]
<inquisitiv3>
joepie91: So a binding in an `let ... in ...` block also an attribute?
<clever>
infinisil: it may also be an XY problem, ./foo gives file not found
<infinisil>
He'll show up again I'm pretty sure, he asked this like 3 times today
<clever>
yeah
rihards has quit [Quit: rihards]
troydm has quit [Quit: What is Hope? That all of your wishes and all of your dreams come true? To turn back time because things were not supposed to happen like that (C) Rau Le Creuset]
simukis has quit [Ping timeout: 256 seconds]
FRidh has quit [Quit: Konversation terminated!]
justanotheruser has quit [Read error: Connection reset by peer]
Ariakenom has joined #nixos
agander_ has quit [Ping timeout: 245 seconds]
<eliasp>
when installing a pkg manually using `nix-env -i foo`, is it "recorded" in some file, similarly e.g. to /var/lib/portage/world on Gentoo?
<tilpner>
eliasp - Yes, in ~/.nix-profile/manifest.nix
omarty has joined #nixos
<eliasp>
tilpner: thx a lot
stranger___ has quit [Quit: Connection closed for inactivity]
<{^_^}>
[nixpkgs] @ElvishJerricco opened pull request #42349 → Fix null deps in ghcWithHoogle → https://git.io/flbGh
xy2_ has quit [Ping timeout: 245 seconds]
smallville7123 has joined #nixos
rardiol1 has joined #nixos
Dezgeg has quit [Ping timeout: 256 seconds]
<elvishjerricco>
Anybody have an example of copying files deployed with `deployment.keys` in nixops to persistent locations? I'm not too well versed in systemd
<gchristensen>
I don't copy them, I refer to them in place
seanparsons has quit [Quit: ZNC 1.6.5 - http://znc.in]
seanparsons has joined #nixos
<gchristensen>
but ... your use case is valid for sure
<elvishjerricco>
gchristensen: Yea they need to be persistent because these machines reboot unattended quite often. But, I just found `deployment.keys.<name>.destDir`, which seems to let you save the keys to persistent locations rather than memory. Is that correct?
<gchristensen>
ln -sfn ${keyFile} ${destDir}/${name} looks like it still lives in /run
Mateon1 has quit [Ping timeout: 264 seconds]
Mateon3 is now known as Mateon1
knupfer has quit [Ping timeout: 265 seconds]
<elvishjerricco>
gchristensen: Oh so the destDir is just a symlinked location? Odd
pie_ has quit [Read error: Connection reset by peer]
tmaekawa has quit [Client Quit]
dmc has joined #nixos
zaibitsu has joined #nixos
justanotheruser has quit [Ping timeout: 265 seconds]
ndowens04 has joined #nixos
<ndowens04>
hey gchristensen
<elvishjerricco>
Well that's disappointing. Removing `deployment.keys` entries does not delete the files. I guess that's a good reason for them to be in /run :/
<ndowens04>
fpletz: sup? Remember me lol finally got my own place and internet again
<bpye>
If I want to use a couple docker containers on NixOS to smooth my transition, is there any way to have this managed in my configuration.nix or do I need to manage these myself?
trevthedev has quit [Quit: WeeChat 2.0]
igo95862 has quit [Quit: igo95862]
<{^_^}>
[nixpkgs] @Pneumaticat opened pull request #42355 → autokey: init at 0.94.1 → https://git.io/flhbJ
<h0_>
Hi guys I'm trying to add a patch to my kernel but the options don't make it very clear
<h0_>
from my understanding, you set boot.kernelPatches in the configuration file but the patch I'm trying to apply is a diff not a package
silver has quit [Read error: Connection reset by peer]
asuryawanshi has quit [Ping timeout: 264 seconds]
silver has joined #nixos
<{^_^}>
[nixpkgs] @Ma27 opened pull request #42356 → nixos/thefuck: move init scripts to `programs.*.interactiveShellInit` → https://git.io/f8TeN
<elvishjerricco>
h0_: If you have the diff in `foo.patch`, then you can do `boot.kernelPatches = [{ name = "foo"; patch = ./foo.patch; }];`
<elvishjerricco>
NixOS has the easiest freakin kernel manipulation :P
jperras has joined #nixos
<h0_>
Ok awesome thanks
kyren has quit [Ping timeout: 240 seconds]
<pikajude>
hello
<pikajude>
i'm using tinc exec $SHELL to try to enter a nix-shell for my project, but although I specify network == 2.7.0.0 in the cabal file, network 2.6 is in the build environment
<pikajude>
what am i doing wrong
blankhart has joined #nixos
jperras has quit [Ping timeout: 264 seconds]
<PolarIntersect>
yo
<pikajude>
hi
<PolarIntersect>
Does anyone here know why my bluetooth device wouldn't be detected? :o
<PolarIntersect>
Bluetooth is enabled in my configuration