gchristensen changed the topic of #nixos to: NixCon 2018 CfP is now open! https://nixcon2018.org/ || Share the output of nix-shell -p nix-info --run nix-info to help us help you. || https://nixos.org || Latest NixOS: https://nixos.org/nixos/download.html || Latest Nix: https://nixos.org/nix/download.html || Logs: https://logs.nix.samueldr.com/nixos/ || #nixos-dev, #nix-darwin, #nixos-aarch64, #nixos-chat, #nixcon
erickomoto has joined #nixos
seafood has joined #nixos
endformationage has quit [Quit: WeeChat 1.9.1]
statusbot has quit [Ping timeout: 265 seconds]
seafood has quit [Client Quit]
seafood has joined #nixos
cnu- has quit [Ping timeout: 256 seconds]
alexteves has quit [Remote host closed the connection]
<seafood> Instead of using nix-copy-closure is it okay just to scp across the files from /nix/store to a remote machine?
<seafood> The reason I’m asking is that I am trying to copy across one particular output which is 1.1G and nix-copy-closure is complaining about running out of memory: warning: dumping very large path (> 256 MiB); this may run out of memory
<emily> that warning is probably harmless
<emily> in my understanding
<seafood> emily: It’s not. It ran out of memory.
<emily> oh, ok :p
<samueldr> seafood: there's a solution floating around, give me a sec
drakonis has quit [Remote host closed the connection]
<{^_^}> nix#2206 (by nh2, open): importPaths: Don't copy imported NAR into memory.
<samueldr> I used it in the past
<samueldr> (not so long ago)
<seafood> samueldr: How hard would it be to install the latest version of Nix?
lukec has quit [Ping timeout: 256 seconds]
<samueldr> errr, on which platform?
<seafood> samueldr: So I copied across one of the outputs manually assuming that when I re-ran nix-copy-closure that it would detect that particular output existed on the remote machine and wouldn’t try to copy again. However, it didn’t detect this. Any idea why?
<seafood> samueldr: NixOS
<samueldr> though, seafood, the second command explains how to override nix on the target https://github.com/NixOS/nix/pull/2206#issuecomment-394130511
<samueldr> seafood: no idea
drakonis has joined #nixos
<seafood> Anyone here know about manually copying store paths across to a remote machine?
<clever> seafood: nix-copy-closure if you have ssh between them
<seafood> clever: See my problem enough. I’m getting OOM
<seafood> clever: See my problem *above* sorry
<seafood> clever: It would be really cool to know exacly how nix-copy-closure works
<seafood> Does it just copy files across? Or something more fancy?
<clever> seafood: it serializes the entire storepath as a NAR, held in a single std::string, which it then sends to the remote end
<clever> which must hold it in a single std::string
<clever> no compression
<clever> think of nar as being like tar
<samueldr> though, using the patch in the comment I linked should work in the situation AFAIK
<clever> seafood: one thing you could try: nix copy /nix/store/qrxs7sabhqcr3j9ai0j0cp58zfnny0jz-coreutils-8.29 --to local?root=/tmp/fakeroot/
<clever> seafood: that creates a new store at /tmp/fakeroot/nix/store/
<clever> you can then copy that to the remote machine, and reverse the copy with --from
<clever> but i'm not sure if it will help with memory usage any
<seafood> That’s an interesting idea.
<seafood> clever: Why doesn’t just copying files across work?
<clever> seafood: a second more extreme option, mount the target disk to /mnt/ (nfs?, rip it out and plug it in?), and then just --to local?root=/mnt/
<clever> and run that copy on a machine with more ram
<clever> seafood: nix tracks all store files in a database, along with their dependencies
<clever> and if you just scp your own things in, nix wont treat them as valid, and will delete them
<seafood> clever: How does it know?
<seafood> Time stamps?
<clever> when using the correct nix tools, it will register the path and hash of the contents
<clever> any file not listed in the db is deleted
<seafood> Oh, there’s a registry!
<clever> and if you modify any file, it will know its corrupt
<seafood> clever: Yep, fair enough!
fractalcat has joined #nixos
hxrts_ has joined #nixos
lukec has joined #nixos
mounty has quit [Ping timeout: 240 seconds]
imalison has joined #nixos
imalison has quit [Client Quit]
<clever> seafood: just be careful when looking in that db, you can break the entire store and have to reinstall the system
imalison has joined #nixos
<clever> its safer if you copy db.sqlite and then poke around on the copy
<tobiasBora> Hey,
<tobiasBora> Any idea why "netcat <ip> <port>" closes directly on nix, but works (i.e. keep the connection open and let me write stuff) on debian?
<clever> seafood: and an example of finding the direct deps of the coreutils from the gist: select path from ValidPaths where id in (select reference from Refs where referrer = 157219);
<clever> tobiasBora: run it under strace
mounty has joined #nixos
<tobiasBora> clever: not sure to see whats going on, (maybe a group issue?), but here is it: http://paste.debian.net/1033860
<tobiasBora> (only the last part)
jackdk has joined #nixos
<clever> tobiasBora: need more of the output
imalison has quit [Remote host closed the connection]
<tobiasBora> clever: http://paste.debian.net/1033861
<clever> tobiasBora: what about `netcat 127.0.0.1 1194` ?
<tobiasBora> clever: same problem. Do you need the strace?
<clever> tobiasBora: yeah
<clever> tobiasBora: and also `netstat -anp | grep 1194`
<tobiasBora> clever: http://paste.debian.net/1033863
init_6 has quit [Ping timeout: 256 seconds]
<tobiasBora> clever: http://paste.debian.net/1033864
<clever> tobiasBora: a: openvpn is listening on udp, and netcat is tcp
<tobiasBora> is it possible that it listen in ipv4, but request in ipv6?
<clever> tobiasBora: b: you have a 2nd instance of netcat that is listening on 1194 tcp
<tobiasBora> clever: yes, but I'm using only netcat
<clever> so the nc your running, is connecting to that 2nd netcat, not the openvpn
<tobiasBora> yes
<clever> and i cant see any clear reason why its doing that
<clever> maybe try socat?
<tobiasBora> it seems that strange things occurs because of ipv6, so is it possible that netcat in ipv4 would work?
<clever> [root@amd-nixos:~]# socat stdin tcp:127.0.0.1:80
<clever> GET / HTTP/1.0
<clever> HTTP/1.1 404 Not Found
<clever> socat lets you clearly specify tcp4: or tcp6:, or just tcp: to auto-detect
<clever> the GET request was typed by hand, and the server responded with 404
<tobiasBora> socat works
<clever> i prefer using socat now, since it can handle nearly every protocol
<tobiasBora> on ipv6 it fails with 2018/07/16 00:43:38 socat[28078] E connect(5, AF=10 [0000:0000:0000:0000:0000:0000:0000:0001]:1194, 28): Connection refused
<clever> yeah, the nc is listening only on ipv4
<clever> tcp 0 0 0.0.0.0:1194 0.0.0.0:* LISTEN 28015/nc
<tobiasBora> clever: the strange thing is that nc works on debian
<tobiasBora> but wait
<clever> thats the ipv4 wildcard ip
<clever> it sounds like a bug within the nixos build of netcat
zenspider has joined #nixos
<clever> tobiasBora: also, tunning tcp over tcp is horrible for performance, so openvpn should never be used over tcp
<tobiasBora> clever: yes I know. The only reason I could try to do that is if in China they block openvpn
<tobiasBora> I may then want to try some dirty things to "hide" it
<clever> tobiasBora: i also wrote my own vpn that is much simpler to manage
<tobiasBora> clever: really? which one is it?
<zenspider> is there a troubleshooting guide or faq or something? I just installed and while everything is in place, it isn't actually available
<clever> tobiasBora: services.toxvpn = { enable = true; localip = "a.b.c.d"; };
<tobiasBora> oh it's toxvpn ^^
<clever> tobiasBora: give each machine a unique ip, preferably in an unused private range, and then link the peers with toxvpn-remote
<zenspider> shit. wrong group. is there a nix pkg mgr channel?
<tobiasBora> clever: I guess I won't be able to use it on my android easily
<samueldr> zenspider: it's here
<tobiasBora> because I also want to set it up on my girlfriend phone, and she won't let me root it :P
<clever> tobiasBora: i dont have a proper android port yet, but if you happen to have linux in a chroot, it will probably work there
<clever> tobiasBora: android itself does support vpn's without rooting, but i havent modified toxvpn to use that
<samueldr> zenspider: which platform, which method of installation?
<tobiasBora> clever: I have, but not my girlfriend ^^'
<zenspider> osx. via curl | sh. users created and the lot. spotlight went nuts so I excluded /nix
<tobiasBora> clever: if I want to use toxvpn, I should run the above command on the client or the server?
<clever> tobiasBora: it doesnt really have a client or server, its fully p2p
<tobiasBora> and also, it's not too heavy if it needs to go though the tox network?
<zenspider> it looks like the /etc/bashrc trick doesn't take w/ my setup, but even if I source the setup code myself, I still don't have a nix-shell
<clever> tobiasBora: you would run toxvpn-remote on both peers, and tell them to connect to the other party
<clever> tobiasBora: and its basically just PM'ing ethernet frames thru the tox framework, lol
mekeor has quit [Ping timeout: 240 seconds]
<zenspider> a new shell has 5 NIX env vars, but doesn't have __ETC_PROFILE_NIX_SOURCED set
<tobiasBora> clever: so it needs basically the same port as tox I guess
<clever> zenspider: are you using bash?
<zenspider> yup
<clever> tobiasBora: yeah, toxvpn also has an option to change the port, but it also needs to reach the port the remote systems are using
<clever> zenspider: try source ~/.nix-profile/etc/profile.d/nix.sh
<tobiasBora> clever: do you know if toxvpn is detected in China ? ^^
<zenspider> I've manually added /etc/bashrc nix content to my setup
<clever> tobiasBora: no idea, but you could ask #toktok
<zenspider> clever: no such file or directory
<tobiasBora> clever: after I think to remember that some nodes are on port 443, so it may help
<zenspider> broken symlink to /nix/var/nix/profiles/per-user/ryan/profile
<zenspider>
<zenspider> the directory exists, but it is empty
<clever> zenspider: what about: source /nix/var/nix/profiles/default/etc/profile.d/nix.sh ?
<zenspider> all these files have a mtime of 0 ??
<clever> zenspider: 1
<zenspider> I get an error about MANPATH being used w/o being set. If I bypass that, the file sources
<zenspider> still no nix* cmds
<clever> zenspider: and does `which nix-env` show something now?
<clever> zenspider: what output did the install script give?
<zenspider> the top level install? lots I don't have it around anymore
<zenspider> think running it again will repair?
<clever> zenspider: what binaries are in /nix/var/nix/profiles/default/bin/ ?
<zenspider> looks like a full compliment
<zenspider> 12 of them
<clever> zenspider: try adding that to PATH
<zenspider> kk... running `nix-shell` (as is) gives me: error: getting status of '/Users/ryan/default.nix': No such file or directory
<clever> thats normal
bynne has joined #nixos
<clever> nix-shell reads the shell.nix or default.nix file
<zenspider> I don't remember the args it told me to use on the install msg
<clever> the installer doesnt tell you to run nix-shell
<zenspider> yes it did. at the end. said all terms needed to be restarted and then I could run some nix-shell thingy to verify or play or something
<clever> it said to source nix.sh
ajs124 has left #nixos ["Stream closed by us: Timed out waiting for stream resumption (connection-timeout)"]
<zenspider> I've never used nix before. Did I make this up? I didn't even know nix-shell existed...
<zenspider> ok. so at this point, I can manually patch my PATH, but stuff still seems out of place like the per-user stuff. How do I properly repair it?
<clever> zenspider: i'm guessing that you have some non-standard bash options set in your .bashrc or .bash_profile or such
<clever> zenspider: can you pastebin all of those files
<zenspider> that's not terribly practical... no. that's 38 files
<clever> zenspider: i suspect that you have something set that causes nix.sh to abort half way thru running, so you need to stop that MANPATH error from happening
<zenspider> commenting out set -u
<zenspider> is there a way to self-bootstrap or do I need to dl that whole tarball again? (I'm in a cafe)
jackdk has quit [Ping timeout: 260 seconds]
<clever> it may only be a problem in nix.sh, just re-source it
jackdk has joined #nixos
<zenspider> nope. same as above. sourcing nix.sh has no obvious effect
<Lisanna> is there any way in hydra to restart all the failed jobs in a jobset? e.g., if they failed for an impure reason, like the target machine running out of memory and the build timing out or something
<clever> zenspider: even if you spawn a new terminal window and source it there?
<zenspider> yup
<zenspider> bringing up a new shell has 5 different env vars defined including NIX_PROFILES
<clever> Lisanna: click on the eval#, and then open the actions menu
<zenspider> if I source that file, that one goes away
freeman42x[nix] has quit [Ping timeout: 256 seconds]
<Lisanna> clever I just see
<clever> zenspider: i'm not sure then, you may need to delete /nix/ and re-do the entire install
<zenspider> la NIX_USER_PROFILE_DIR -> empty
<Lisanna> clever I just see "Create a release from this eval" and "Create a jobset from this eval"
<zenspider> + $
<clever> Lisanna: there is a bug that the first eval in a jobset lacks the option to restart things
<clever> Lisanna: only the 2nd eval onward can have bulk restarts
<Lisanna> clever Oh, okay. That kind of sucks, since these are declarative jobsets based on something like github pull requests. Do you have more details on the bug?
<clever> Lisanna: not really, youll need to push a change of some kind that triggers a new eval, or just manually restart everything
<Lisanna> clever it's not filed in the hydra github issue tracker? Manually restarting everything is out of the question since I have hundreds of jobs per jobset, and pushing a change that triggers a new eval is a bit hacky and would probably make my users grumpy
<clever> Lisanna: yeah, it probably should be filed on the issue tracker
<clever> Lisanna: i also suspect its just a ui frontend, and if you can find the http request made when you restart failed jobs in a different eval, you can manually make that api call in the browser
<Lisanna> clever OK, I'll keep that in mind
bynne has quit [Quit: Page closed]
<Lisanna> clever https://github.com/NixOS/hydra/blob/dedcb76bedbb0c2fb43e18a5b7e58f3fcf2db0d6/src/root/jobset-eval.tt#L53 this is likely the bug right here. new evaluations show failed builds in a tab with a different label than in the 2nd eval. the first eval shows them all under "new jobs"
<clever> Lisanna: yeah, that would explain things
<zenspider> ok. painful... nuked nix entirely. started overy (I changed the install script to not clean up after itself and to reuse an existing tarball if it is sitting next to it)
<zenspider> SAME problem
<zenspider> it LOOKS like there are no errors in the install output tho
<clever> zenspider: can you pastebin the entire output from the installer?
<zenspider> ... other than service already loaded...
<zenspider> if I manually patch my PATH so I can run nix-shell and then run the nix-info cmd I get an error about the socket not existing
mahalel_ has joined #nixos
<disasm> sphalerite: just helping fresheyeball with his issue
<clever> zenspider: try restarting the daemon with launchctl and then see if that fixes nix-info
<disasm> fresheyeball: here's where I'm out thus far: nix-ssh@optina.wedlake.lan: Permission denied (publickey,keyboard-interactive) is showing in the system journal when I run nix-build. So... just need to figure out where it's expecting to find the private key
<disasm> clever sphalerite: either of you setup ssh binary cache with nix daemon?
<zenspider> oh god...
<zenspider> another 700mb to download in a cafe? :(
<clever> disasm: i'm guessing it uses the default ~/.ssh/id_rsa
<clever> zenspider: what paths is it downloading?
<zenspider> stuff like:
<zenspider> copying path '/nix/store/fvr8sb8ad6yjramxn4nqlyijmbhx3rk2-nix-info' from 'https://cache.nixos.org'...
<clever> zenspider: ah, so you simply didnt have nix-info installed yet
<disasm> clever: on root user?
<clever> disasm: yeah
daveo has quit [Remote host closed the connection]
<disasm> doh, wrong key, lol
blankhart has quit [Ping timeout: 240 seconds]
<zenspider> so /nix/var/nix/profiles/per-user/ryan/ is still empty and that I assume is the main problem?
<clever> zenspider: that is expected to be empty on a multi-user install
<zenspider> then where is the pathing supposed to be set?
<clever> zenspider: the default profile will have all of the programs, and when you run `nix-env -iA nixpkgs.something`, it will create the ryan dir
<clever> zenspider: it auto-creates that dir the first time you install something as the ryan user
<zenspider> I don't think that answers my question... I still don't know what on my system is broken. PATH isn't set properly. Who is supposed to be setting PATH?
<{^_^}> [nixpkgs] @dtzWill opened pull request #43594 → cryptominisat: 5.0.1 -> 5.6.3, enable "full", run tests → https://git.io/fNYKR
<clever> zenspider: i dont remember how its done on darwin, i dont do much with macs
thc202 has quit [Ping timeout: 260 seconds]
blankhart has joined #nixos
<zenspider> is there some sort of cleanup / uninstall ?
<clever> zenspider: not really
<disasm> zenspider: nix-darwin or normal nix?
<zenspider> disasm: not sure I know enough to know. I downloaded a binary tarball tho
<zenspider> I guess I only need to nuke the users at this point
<zenspider> but if a basic install still isn't working even after I make my bash setup more standard... I'm not sure I want to be a guinea pig for the rest of this.
tenten8401 has joined #nixos
blankhart has quit [Ping timeout: 244 seconds]
<tenten8401> Are there any nvidia optimus users here who have been unable to use the latest nvidia drivers?
<tenten8401> My tty just keeps rapidly flickering and only accepts like 25% of the keystrokes I send
<disasm> on darwin there is a cleanup script, 1 sec, lemme find it.
qwerty_asdf has quit [Quit: WeeChat 2.0]
acarrico has quit [Ping timeout: 240 seconds]
<drakonis> which nvidia drivers fyi
<drakonis> is it 396.18?
<clever> tenten8401: nix-store -qR /run/current-system | grep nvidia
<tenten8401> Whatever's in unstable
<tenten8401> Can't test it currently as I can't reboot with them enabled
slack1256 has joined #nixos
<clever> tenten8401: is ssh enabled?
<tenten8401> It was happening on another distro too
<tenten8401> I can still access the computer fine with Intel gfx, but I figured I'd ask to make sure it wasn't only me
blankhart has joined #nixos
Supersonic has quit [Disconnected by services]
Supersonic112 has joined #nixos
Supersonic112 is now known as Supersonic
<Lisanna> if a derivation A depends on another derivation B that has $out/nix-support/failed touched, will the build of derivation A still occur, albeit possibly being marked as failed in hydra?
<clever> Lisanna: i think hydra will just not start A
silver has quit [Read error: Connection reset by peer]
hxrts_ has quit [Ping timeout: 248 seconds]
blankhart has quit [Ping timeout: 268 seconds]
<disasm> zenspider: ah, that's what is... re-run the installer, it'll tell you the exact commands you need to run to uninstall nix, then you can reinstall
<Lisanna> clever alright. restarting all failed builds won't actually solve my problem then, because currently I don't actually have the derivations "failing" - so that I can generate a test report that depends on all of the individual test result builds. I guess the closest thing to what I would need then is an ability to completely delete an evaluation, or just bump one of the inputs to force a rebuild of everything
<Lisanna> impurities suck
slack1256 has quit [Remote host closed the connection]
<disasm> zenspider: as for the PATH, you should have /etc/profile.d/nix-daemon.sh. That's where the PATH is set when you start your shell.
<elvishjerricco> Now that GHC 8.4 is the default in nixpkgs, should GHCJS 8.2 be removed entirely? Previously, I only added both GHCJS 8.2 and 8.4 because GHC 8.2 was the default, but it was still desirable to have the newer GHCJS.
<disasm> fresheyeball: and got it working!
cherrybl0ss0m_ has joined #nixos
cherrybl0ss0m_ has quit [Client Quit]
<disasm> fresheyeball: I created a new ssh key, put the public key in nix.sshServe.keys on the server I want to be the binary cache. Put the private ssh key in /root/.ssh/id_rsa on the client that's using it as a binary cache.
<disasm> make sure permissions are correct, and then nix-build something!
leotaku has quit [Ping timeout: 268 seconds]
jackdk has quit [Ping timeout: 240 seconds]
jackdk24 has joined #nixos
<{^_^}> [nixpkgs] @Kmeakin opened pull request #43596 → runelite: init at 1.6.0 → https://git.io/fNY6W
leotaku has joined #nixos
* clever heads off to bed
seafood has quit [Quit: seafood]
daftect[m] has joined #nixos
blankhart has joined #nixos
<{^_^}> [nixpkgs] @eadwu opened pull request #43597 → undervolt: init at 0.2.5 → https://git.io/fNY6o
sbdchd has quit [Remote host closed the connection]
lassulus has joined #nixos
astrofog has joined #nixos
tenten8401_ has joined #nixos
lassulus_ has quit [Ping timeout: 264 seconds]
tenten8401 has quit [Quit: Quit]
tenten8401_ is now known as tenten8401
<tenten8401> Anyone here have a system for automatically updating and rebuilding NixOS configs from a git repo?
<tenten8401> Figured I'd ask because it seems like something someone would do
blankhart has quit [Ping timeout: 260 seconds]
astrofog has quit [Quit: Quite]
blankhart has joined #nixos
seafood has joined #nixos
drakonis has quit [Remote host closed the connection]
stepcut has joined #nixos
<tenten8401> also, is there a way to automatically partition/encrypt a system on install?
<clever> tenten8401: this is a script i had made to automate some of my installs, luks is one of the options it supports
seafood has quit [Quit: seafood]
<tenten8401> oh sweet
<tenten8401> thanks
blankhart has quit [Ping timeout: 240 seconds]
<tenten8401> does that check if the device is already according to spec or does it nuke it every time? or is it just made to be used in the install environment
<clever> tenten8401: it always wipes it when you run justdoit
<tenten8401> alright
<tenten8401> I'll have to play around with it
<clever> that file is setup as a nixos module, meant to be added to the imports section of the installer media
<clever> you could either make a custom iso for it, use the netboot server (in the same dir), or just manualy add it to the imports of /etc/nixos/configuration.nix after booting a normal iso, and nixos-rebuild to make it work
<{^_^}> [nixpkgs] @Enzime opened pull request #43598 → mpv: add Cocoa support for macOS → https://git.io/fNYiq
hamishmack has quit [Ping timeout: 260 seconds]
qwerty_asdf has joined #nixos
hamishmack has joined #nixos
lostman has quit [Quit: Connection closed for inactivity]
iqubic has joined #nixos
b has quit [Quit: Lost terminal]
igo95862 has joined #nixos
hxrts_ has joined #nixos
stepcut has quit [Remote host closed the connection]
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
jackdk2429 has joined #nixos
jackdk24 has quit [Ping timeout: 244 seconds]
<{^_^}> [nixpkgs] @fpletz merged pull request #43591 → dbeaver: 5.1.2 -> 5.1.3 → https://git.io/fNYV3
<{^_^}> [nixpkgs] @fpletz pushed 2 commits to master: https://git.io/fNYPe
<{^_^}> [nixpkgs] @fpletz merged pull request #43592 → dbeaver: 5.1.2 -> 5.1.3 (18.03) → https://git.io/fNYVs
<{^_^}> [nixpkgs] @fpletz pushed 2 commits to release-18.03: https://git.io/fNYPv
jackdk2429 is now known as jackdk
<{^_^}> [nixpkgs] @fpletz merged pull request #43590 → gnomecast: init at 1.4.0 → https://git.io/fNYaD
<{^_^}> [nixpkgs] @fpletz pushed 2 commits to master: https://git.io/fNYPf
<{^_^}> [nixpkgs] @fpletz merged pull request #43588 → nginxModules: sorting of modules alphabetically → https://git.io/fNYaa
<{^_^}> [nixpkgs] @fpletz pushed commit from @Izorkin to master « nginxModules: sorting of modules alphabetically »: https://git.io/fNYPU
<{^_^}> [nixpkgs] @fpletz merged pull request #43582 → mariadb: 10.2.15 -> 10.2.16 → https://git.io/fNYzZ
<{^_^}> [nixpkgs] @fpletz pushed commit from @Izorkin to master « mariadb: 10.2.15 -> 10.2.16 »: https://git.io/fNYPs
blankhart has joined #nixos
<{^_^}> [nixpkgs] @fpletz merged pull request #43147 → nixos/nixos-option: don't abort in case of evaluation errors → https://git.io/fNvum
<{^_^}> [nixpkgs] @fpletz pushed 2 commits to master: https://git.io/fNYPc
<{^_^}> [nixpkgs] @fpletz merged pull request #43598 → mpv: add Cocoa support for macOS → https://git.io/fNYiq
<{^_^}> [nixpkgs] @fpletz pushed commit from @Enzime to master « mpv: add Cocoa support for macOS »: https://git.io/fNYP8
Ross has quit [Ping timeout: 240 seconds]
<{^_^}> [nixpkgs] @fpletz merged pull request #43447 → lollypop-portal: init at 0.9.7 → https://git.io/fNtKN
<{^_^}> [nixpkgs] @fpletz pushed 3 commits to master: https://git.io/fNYPz
Ross has joined #nixos
<{^_^}> [nixpkgs] @fpletz merged pull request #43410 → thunderbird, thunderbird-bin: 52.9.0 -> 52.9.1 → https://git.io/fNLEC
<{^_^}> [nixpkgs] @fpletz pushed 3 commits to master: https://git.io/fNYP2
<{^_^}> [nixpkgs] @fpletz merged pull request #43323 → shairport-sync: 3.1.7 -> 3.2 → https://git.io/fNkvA
<{^_^}> [nixpkgs] @fpletz pushed commit from @r-ryantm to master « shairport-sync: 3.1.7 -> 3.2 »: https://git.io/fNYPw
hxrts_ has quit [Quit: Leaving]
hxrts_ has joined #nixos
endformationage has joined #nixos
<{^_^}> [nixpkgs] @fpletz merged pull request #43170 → bliss: fix header location → https://git.io/fNvXT
<{^_^}> [nixpkgs] @fpletz pushed commit from @fragamus to master « bliss: fix header location (#43170) »: https://git.io/fNYPi
Jaunty has joined #nixos
Jaunty has left #nixos [#nixos]
worldofpeace has quit [Ping timeout: 240 seconds]
worldofpeace has joined #nixos
worldofpeace has quit [Client Quit]
worldofpeace has joined #nixos
igo95862 has quit [Remote host closed the connection]
wangoe has quit [Quit: WeeChat 2.0]
<{^_^}> [nixpkgs] @fpletz closed pull request #43428 → aerospike: init at 4.2.0.4 → https://git.io/fNtOE
<{^_^}> [nixpkgs] @fpletz reopened pull request #43428 → aerospike: init at 4.2.0.4 → https://git.io/fNtOE
<{^_^}> [nixpkgs] @fpletz merged pull request #43428 → aerospike: init at 4.2.0.4 → https://git.io/fNtOE
<{^_^}> [nixpkgs] @fpletz pushed commit from @kalbasit to master « aerospike: init at 4.2.0.4 »: https://git.io/fNYPx
vmandela has joined #nixos
sir_guy_carleton has quit [Quit: WeeChat 2.0]
sbdchd has joined #nixos
<Lisanna> in hydra, can I declaratively control when releases happen and what their constituents are?
<Lisanna> looking for an automatic alternative to Actions -> "Create a release from this evaluation"
<{^_^}> [nixpkgs] @ElvishJerricco opened pull request #43599 → Various GHCJS 8.4 fixes → https://git.io/fNYX3
sbdchd has quit [Ping timeout: 260 seconds]
fresheyeball has quit [Quit: WeeChat 2.0]
<Lisanna> I'm eyeing $out/nix-support/hydra-release-name but I'm not sure that that is exactly what I want
wchresta has joined #nixos
vasiliy_san has joined #nixos
<rotaerk> is there some way to capture the return value of the command run with nix-shell --command
<rotaerk> seems like nix-shell is just returning 1 regardless of what the command does
jackdk has quit [Ping timeout: 240 seconds]
daveo has joined #nixos
<daveo> how to show a derivation in the nix repl?
jackdk has joined #nixos
qwerty_asdf has quit [Quit: WeeChat 2.0]
freeman42x]NixOS has quit [Ping timeout: 260 seconds]
<Lisanna> rotaerk write the exit code to a file from within nix-shell and then read it back from the outside?
<MichaelRaskin> clever: tobiasBora: fresh enough Android does support non-root VPN services.
<Lisanna> daveo what do you mean show?
<daveo> pretty-print like show-derivation
<rotaerk> I suppose
<daveo> also I am doing the Nix Pills and ` source ~/.nix-profile/etc/profile.d/nix.sh` does not work for me. I am using NixOS
<Lisanna> daveo that's not really what nix repl is for, I don't think there's a function in there for that.
hxrts_ has quit [Ping timeout: 276 seconds]
<daveo> ok
<Lisanna> daveo you only need to source that on non-nixos sytems
trylist has joined #nixos
<Lisanna> on nixos your environment is already setup
<daveo> sounds good then
<Lisanna> to prove it to yourself, do "echo $NIX_PATH"
jensens has joined #nixos
`_ has quit [Quit: WeeChat 2.1]
<rotaerk> hmm if I'm running a nix-shell --command from within a sh script, is there some way for the script to detect that nix-shell itself failed, due to a nixpkgs, (not a failure of the command itself)
<rotaerk> a nixpkgs build failure *
orbekk has quit [Ping timeout: 268 seconds]
<Lisanna> rotaerk the command won't run if nix-shell fails to build the environment to run it in
<daveo> what is :l <nixpkgs> doing? what does :l mean? why is <nixpkgs> in angle brackets?
<Lisanna> so, you have that
endformationage has quit [Quit: WeeChat 1.9.1]
orbekk has joined #nixos
<rotaerk> what I'm currently doing is grep-ing the result of the command to see if it contains an error; I suppose I could also add some output to the command that wouldn't exist elsewhere, and grep for that
<rotaerk> to detect if it ran at all
srdqty has joined #nixos
srdqty has quit [Client Quit]
hamishmack has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
pluplog has joined #nixos
wchresta has quit [Remote host closed the connection]
mariatsji has joined #nixos
<daveo> btw I noticed during install that if I have tons of pkgs in my configuration.nix sometimes my ramdisk fills up. Is there a way around that?
<srk> daveo:
<srk> $ echo $NIX_PATH
<srk> /etc:nixpkgs=/etc/nixpkgs:nixos-config=/etc/nixos/configuration.nix
<srk> <nixpkgs> loads ^^
<srk> I've moved most of my desktop related packages to ~/.config/nixpkgs/ not to have too many in global configuration as I rebuild switch from master quite often
<{^_^}> [nixpkgs] @FRidh pushed 175 commits to staging-next: https://git.io/fNY1N
FRidh has joined #nixos
toby1851 has joined #nixos
nly has joined #nixos
trylist has quit [Ping timeout: 265 seconds]
<nly> hi, how do i change fcitx-anthy settings. Not fcitx's, anthy's. Input method, key table etc.
mariatsji has quit [Remote host closed the connection]
Orbstheorem has joined #nixos
adamCS has quit [Ping timeout: 268 seconds]
johanot has joined #nixos
johanot has quit [Remote host closed the connection]
<{^_^}> [nixpkgs] @thefloweringash opened pull request #43601 → ffmpeg: libvpx → https://git.io/fNYMc
hamishmack has joined #nixos
trylist has joined #nixos
iqubic has quit [Remote host closed the connection]
acowley has quit [Ping timeout: 245 seconds]
Khetzal has quit [Remote host closed the connection]
johanot has joined #nixos
Khetzal has joined #nixos
PolarIntersect has quit [Ping timeout: 260 seconds]
drewr has quit [Ping timeout: 276 seconds]
acowley has joined #nixos
PolarIntersect has joined #nixos
lopsided98 has quit [Remote host closed the connection]
<trylist> hey guys, can anyone point me to the docs on getting firefox to work like i expect a browser should? I can't even download right now
lopsided98 has joined #nixos
drewr has joined #nixos
toby1851 has quit [Read error: Connection reset by peer]
iqubic has joined #nixos
johanot has quit [Remote host closed the connection]
erickomoto has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<Lisanna> trylist you shouldn't have to do anything special to get firefox to work. What are you having trouble with?
orivej has joined #nixos
<Lisanna> You can't download firefox or you can't download files with firefox?
<{^_^}> [nixpkgs] @kalbasit closed pull request #43507 → bazel: test a real-world workspace that uses rules_go and rules_nodejs → https://git.io/fNmZi
<trylist> cant download files *with* firefox. addons either but I can deal with that later
toby1851 has joined #nixos
<Lisanna> trylist are you on nixos, or some other linux distro with nix installed?
<cocreature> trylist: what error are you running into when you try to download files?
<trylist> fresh nixos 18.03
<trylist> it seems like firefox is unable to modify anything on the system
<{^_^}> [nixpkgs] @adisbladis merged pull request #43587 → node-packages: update to latest (ran generate.sh) → https://git.io/fNYaC
<{^_^}> [nixpkgs] @adisbladis pushed 2 commits to master: https://git.io/fNYMS
<Lisanna> trylist when it tries to download it can't create the file?
<trylist> ls -la
<trylist> mt
<cocreature> maybe the permissions for your home directory got messed up somehow?
<cocreature> or you are running firefox as a different user?
<Lisanna> well, here's some ideas of some things you can check: do you need proxy configuration? does your user have a home directory? are you trying to download to a non-standard location?
nly has left #nixos ["Leaving"]
<Lisanna> also feel free to post your /etc/nixos/configuration.nix and we can see if something looks suspect
<trylist> i dont think so, I'm using i3, I just tried starting it directly from a shell and it still can't download or install any addons. the exact error is "could not be saved, because you cannot change the contents of that folder"
<trylist> shell instead of dmenu
<{^_^}> [nixpkgs] @xeji merged pull request #43527 → processing3: fix crash under XFCE, fix build in sandbox → https://git.io/fNmK1
<{^_^}> [nixpkgs] @xeji pushed 3 commits to master: https://git.io/fNYMd
<trylist> alright let me get a gist up
<cocreature> have you changed the download directory? about:preferences should show you where firefox is trying to save files (or whether it will always ask you)
<sorbet> Anyone know of good examples for NixOps where multiple machines are defined with a block of attributes shared between them? I think I'm struggling with the language, been trying to merge an attribute set with the function for each machine (with `//`). Seeing a clean example or better practice for that might help.
seafood has joined #nixos
<derped> Hey nly, as far as I know you also do that through fcitx.
<derped> Just open the configuration window and check out the Addon tab (currently don't have the anthy plugin installed) for addon specific settings.
<derped> For the keyboard layout you can simply set the input method and configure it to use the keyboard layout of your choice (all from the Input Method tab).
<Lisanna> sorbet don't really know of examples, but I could help you look at what you've got and give you some pointers
<sorbet> That would be really helpful. I'll clean this up and post what I have.
<Lisanna> sorbet just keep in mind that the nixops manual is misleading, you don't actually need a logical.nix and a physical.nix
<Lisanna> nixops does special merging magic on them before evaluating
<Lisanna> what nixops actually takes is an attrset with the keys defining the machine names and the values defining the nixos configuration, with a few nixops-specific options added-in like deployment
<Orbstheorem> How long does it take for a package merged 5 days ago into master to be available on nixos-unstable?
<trylist> man a bare fresh install is annoying
<trylist> I haven't changed the download dir cocreature
<trylist> it's pointed to the correct directory where I have permissions
<iqubic> cocreature: Why did you switch NixOS?
<cocreature> because I like nix? :)
<Lisanna> trylist there doesn't seem to be anything wrong with your configuration.nix
<Lisanna> trylist I assume you're logged in as user roderick?
<cocreature> trylist: maybe try setting it to “Always ask” and try a few different directories?
tzemanovic has quit []
<Lisanna> can you manually create files in the download directry? e.g., with touch?
<trylist> yep
MP2E has joined #nixos
<sphalerite> Orbstheorem: it can vary greatly
<trylist> I'm rebooting, let me see if that fixes it
seafood has quit [Quit: seafood]
<Orbstheorem> sphalerite: This is odd: After I run nix-channel --update, I get an unpacking channels message. But the git revision under /nix/var/nix/profiles/per-user/$user/channels/$name/.git-revision doesn't match with the one on `nixos.org/channels/nixpkgs-unstable/.git-revision` :(
<trylist> nope
<sphalerite> Orbstheorem: are you using nixos-unstable and not nixpkgs-unstable?
xy2_ has joined #nixos
<Lisanna> sorbet here's what I do. I have a global attrset with all the options that I want set for every machine, and then I merge them with recursiveUpdate. https://hastebin.com/epupugeweg.js
<sorbet> Lisanna: I actually just had a breakthrough... Realized it wasn't merging recursively, so the right side of `//` was overriding the left (instead of combining). Thanks for be willing to look, though.
<sorbet> Now to figure out how to make it recursive.
<Lisanna> so that file would be my default.nix
<Lisanna> sorbet the function you want is recursiveUpdate
<Lisanna> from nixpkgs.lib
<Lisanna> see my paste for an example
<sorbet> Ahh, that's great. Thank you!
<trylist> very strange, even with it set to always ask, it comes up with the error, doesn't give me the chance to pick
jensens has quit [Ping timeout: 240 seconds]
<trylist> ok, this is even weirder, I can right click and save the page itself, but downloads don't work
<Orbstheorem> sphalerite: `nixos-unstable https://nixos.org/channels/nixos-unstable`
<Orbstheorem> ups, I just realized x)
<Orbstheorem> what the difference between nixpkgs-unstable and nixos-unstable?
hyper_ch2 has joined #nixos
<{^_^}> [nixpkgs] @xeji pushed to master « aerospike: fix ofborg eval »: https://git.io/fNYDK
Have-Quick has joined #nixos
dramforever has joined #nixos
justbeingglad1 has quit [Ping timeout: 244 seconds]
justbeingglad has joined #nixos
justbeingglad has left #nixos [#nixos]
Have-Quick has quit [Quit: Have-Quick]
<trylist> ok, so the problem is that firefox doesn't have permissions for the tmp directory...
<iqubic> Orbstheorem: just the name. It's two names for the same thing
<trylist> I just chmodded the damn thing to 777 and it works, what am I missing about my setup then? One thing that's not in my configs is the subvolumes I have setup, one of which is on tmp
thc202 has joined #nixos
fendor has joined #nixos
justbeingglad1 has joined #nixos
dramforever has quit [Quit: Page closed]
<Orbstheorem> iqubic: Weird, chaing nixos-unstable to nixpkgs unstable gave me a more up to date version
toby1851 has quit [Ping timeout: 240 seconds]
<hyper_ch2> how did you change from nixos-unstable to nixpkgs unstable?
coot has joined #nixos
andreabedini has joined #nixos
<Orbstheorem> by running `nix-channel --remove nixos-unstable` `nix-channel --add https://nixos.org/channels/nixpkgs-unstable nixpkgs-unstable` `nix-channel --update`
<sphalerite> Orbstheorem: nixos-unstable needs nixos tests to pass before advancing.
<Orbstheorem> So, nixpkgs-unstable's test are still running?
<sphalerite> nixpkgs-unstable is absolutely not recommendable for nixos, since it may break the bootloader or similar (this has happened in the past)
<Orbstheorem> (or failed?)
<sphalerite> !which channel
<Orbstheorem> I really needed qutebrowser 1.4.1 xD
<iqubic> What does that version have that you absolutely need?
<Orbstheorem> the inspector working ^^
<sphalerite> the most frequently updated channel you'd want to use for nixos is nixos-unstable-small
<sphalerite> but if you're not building your system from it, nixpkgs-unstable is also fine
<{^_^}> [nixpkgs] @vaibhavsagar opened pull request #43602 → ghc: 8.6.1-alpha1 -> 8.6.1-alpha2 → https://git.io/fNYyy
<Orbstheorem> And... I broke my system: https://paste.gnugen.ch/raw/xJ4k
<Orbstheorem> Help :(
<Orbstheorem> I added nixos-unstable-small and same error: https://paste.gnugen.ch/raw/MKLv
<sphalerite> don't worry, that's just your user env
<sphalerite> which version of nix are you using?
periklis has joined #nixos
<sphalerite> oh yeah, also for one-off use of a different channel you can also do something like `nix-env -f channel:nixpkgs-unstable -iA qutebrowser`
<Orbstheorem> nix 2.0 (normally)
<Orbstheorem> Though I still use nix-env, nix-store commands...
<iqubic> we all do.
<iqubic> Just run "nix --version"
<Orbstheorem> (yep, nix 2.0
<Orbstheorem> 2.0.4 *
<hyper_ch2> weird pastebin that will prompt to download the raw text file
<Orbstheorem> So, I panicked and ran `sudo nix-store --verify --check-contents --repair -j 8`
<iqubic> that's fine.
<iqubic> just let it run.
<Orbstheorem> which fixed a lot of files, but at the end says warning: not all errors were fixed
<Orbstheorem> I'm a little nervous by those corrupted files
winem_ has joined #nixos
<Orbstheorem> (Btw, installing qutebrowser from nixos and then retrying from nixpkgs-unstable worked)
<sphalerite> Orbstheorem: did it say "skipping suspicious writable file"?
<iqubic> that's an odd error.
<Orbstheorem> sphalerite: nope: https://paste.gnugen.ch/raw/5wfg
<Orbstheorem> It says cannot repair
<Orbstheorem> I'm running it again...
<sphalerite> ah right, yeah it can't repair stuff it doesn't know how to build or where to get
Tucky has joined #nixos
<sphalerite> it may be that this is just leftovers from that weird ~nix~case~hack bug
<sphalerite> in which case this is nothign to worry about, just a bit annoying
<iqubic> What was that buga/
jensens has joined #nixos
reinzelmann has joined #nixos
coot has quit [Quit: coot]
<Orbstheorem> > ~nix~case~hack bug
<Orbstheorem> ?
<Orbstheorem> Blog post explaining the bug somewhere? :D
<sphalerite> I don't know of one
<Orbstheorem> Results from the seconds run: https://paste.gnugen.ch/raw/qAb1
<Orbstheorem> Should I worry?
<sphalerite> no
<{^_^}> [nixpkgs] @vaibhavsagar opened pull request #43603 → aerospike: fix ofborg eval → https://git.io/fNY9t
xy2_ has quit [Ping timeout: 244 seconds]
<pie__> can i make nix make static versions of libraries for haskell availible?
<sphalerite> Orbstheorem: just delete that profile generation, then you should be able to delete the store path
orivej has quit [Ping timeout: 264 seconds]
<sphalerite> oh it's actually the drv that's corrupted
orivej has joined #nixos
spear2 has joined #nixos
<{^_^}> [nixpkgs] @peti merged pull request #43602 → ghc: 8.6.1-alpha1 -> 8.6.1-alpha2 → https://git.io/fNYyy
<{^_^}> [nixpkgs] @peti pushed 2 commits to master: https://git.io/fNY9Z
<hyper_ch2> Orbstheorem: how do you make that pastebin show the text in the browser?
<Orbstheorem> hyper_ch2: it should ask the browser to handle the text file, the mimetype is set to plain/text
civodul has joined #nixos
<hyper_ch2> it just prompts me for download
<Orbstheorem> Or are you asking how to have it rendered as html? in which case not implemented :P
<Orbstheorem> Oh, so your browser does not have a handle for plain/text
<sphalerite> Orbstheorem: it's sending the Content-Disposition: filename="-" header which tells the browser to download it rather than displaying it inline
<hyper_ch2> firefox and ie
<sphalerite> nothing to do with the mime type
<{^_^}> [nixpkgs] @peti merged pull request #43549 → haskell/network: 2.6.3.4 -> 2.6.3.6 (release-18.03) → https://git.io/fNmjl
<{^_^}> [nixpkgs] @peti pushed 2 commits to release-18.03: https://git.io/fNY9V
<Orbstheorem> Oh
<{^_^}> [nixpkgs] @peti merged pull request #43599 → Various GHCJS 8.4 fixes → https://git.io/fNYX3
<{^_^}> [nixpkgs] @peti pushed 7 commits to master: https://git.io/fNY9X
palo has quit [Ping timeout: 240 seconds]
<Orbstheorem> Bug :)
<Orbstheorem> sphalerite: Can you hint me on how to find the concerned generation
<Orbstheorem> ? :)
<sphalerite> maybe nix-store -q --roots '/nix/store/lr81czi3adq5r8ym7fm5n66wkqcr0sg6-user-environment.drv'
<sphalerite> oh or since it's a drv and doesn't really have anything depending on it strongly you could just try nix-store --delete '/nix/store/lr81czi3adq5r8ym7fm5n66wkqcr0sg6-user-environment.drv'
periklis has quit [Remote host closed the connection]
palo has joined #nixos
palo has quit [Changing host]
palo has joined #nixos
<sphalerite> nix-store --delete is safe, so it will fail if there's anything still using it
periklis has joined #nixos
Tehnix has joined #nixos
orivej has quit [Ping timeout: 260 seconds]
jackdk has quit [Ping timeout: 240 seconds]
telent has joined #nixos
<Orbstheorem> I tryed nix-store --delete, it told me it was still active
<sphalerite> try nix-store -q --roots to find what's keeping it active then
<Orbstheorem> what's `{memory:254}`?
<sphalerite> that means a process is still referring to it
<sphalerite> are you using sudo?
<sphalerite> if so, try just running the nix-store --delete command as your regular user
<{^_^}> [nixpkgs] @peti pushed to master « hackage-packages.nix: automatic Haskell package set update »: https://git.io/fNYQ4
<Orbstheorem> I'm not
<Orbstheorem> (I'm in nix trusted users
<Orbstheorem> I suppose I have to reboot then
<sphalerite> you don't need to be a trusted user to delete stale paths
<sphalerite> but yeah a reboot would probably be the easiest way. Or you just leave the path where it is, it won't actually do any harm
<Orbstheorem> Okay, so what are trusted users then?
<LnL> in my experience you have to start asking questions if somebody is trying to delete a specific store path :)
<sphalerite> LnL: deleting the specific store path was my idea, because it's a corrupted .drv
<LnL> ah ok
<sphalerite> Orbstheorem: trusted users can import arbitrary stuff to arbitrary paths in the nix store
<LnL> a trusted user is allowed to override potentially unsafe settings, like changing substituters or build hosts
<sphalerite> Orbstheorem: this means that for instance they can import a malicious sudo build to the path of a normal one to gain root access
<Orbstheorem> arbitrary paths includes overriding the hash prefix?
<LnL> sphalerite: hmm?
sigmundv has joined #nixos
<sphalerite> Orbstheorem: no I think the hash prefix still needs to be there
<sphalerite> LnL: nix-store --import and nix-store --restore are restricted to trusted users
<Orbstheorem> sphalerite: I thought that builders were run by nixblk which doesn't have any priviliges other than working in their build directory
<LnL> ah importing a closure
<sphalerite> actually not sure about --import, that might work for untrusted users if the stuff is signed
<sphalerite> Orbstheorem: yes, nixbld is unrelated
<Orbstheorem> Okay
<LnL> import uses prebuilt binaries, built somewhere else
<Orbstheorem> I still don't see the malicious sudo build attack model :(
<LnL> so if that's not signed with a key you trust it could be anything
<sphalerite> bottom line is: trusted users can get root
<Orbstheorem> Okay
<emily> hardware.cpu.intel.updateMicrocode works by setting boot.initrd.prepend. but as far as I can tell, although it's declared and assigned to, nothing else reads it, and therefore the feature is non-functional. am I missing something?
<sphalerite> emily: `nixos-option boot.initrd.prepend`
<sphalerite> emily: it's defined by <nixos/modules/system/boot/stage-1.nix>
<sphalerite> infinisil: shouldn't {^_^} have expanded that to a link? ^
<sphalerite> <stage-1.nix>
<rotaerk> huh. surprised there's not a citrix receiver package for nixos
<sphalerite> rotaerk: there is
<sphalerite> !unfree
<{^_^}> You cannot install your unfree software? See https://nixos.wiki/wiki/FAQ/unfree
<{^_^}> [nixpkgs] @xeji merged pull request #43603 → aerospike: fix ofborg eval → https://git.io/fNY9t
<{^_^}> [nixpkgs] @xeji pushed commit from @vaibhavsagar to master « aerospike: fix ofborg eval (#43603) »: https://git.io/fNY7z
<rotaerk> why doesn't it show up when I do: nix-env -qa '.*citrix.*'
<sphalerite> because it's unfree
<sphalerite> see the link above
<etu> rotaerk: If you haven't allowed unfree packages it doesn't show up in search
<Orbstheorem> Thanks for your help ! :)
<rotaerk> hmm could've sworn I already allowed unfree
<rotaerk> checking
<{^_^}> [nixpkgs] @peti pushed 2 commits to master: https://git.io/fNY76
<rotaerk> oh; didn't realize I had to *also* do it in my .config/nixpkgs/config.nix
<emily> sphalerite: yes, it is declared there, but I don't see anywhere it's actually used.
<emily> as far as I can tell, setting prepend just goes into a black hole and the microcode updates are wholly placebo >_>
<emily> but maybe the inherited "prepend" in initialRamdisk does something?
<emily> sorry, I still find Nix code quite hard to read ^^;
<sphalerite> emily: yep — it becomes an environment vairable for the builder
<sphalerite> no worries
igo95862 has joined #nixos
logzet has joined #nixos
<emily> ahh, I see
<emily> I just mentally skipped over the shell scripts when grepping nixpkgs
<sphalerite> oh actually no it doesn't directly go into the env
<sphalerite> but pkgs/build-support/kernel/make-initrd.nix uses it
trylist has quit [Ping timeout: 240 seconds]
<emily> "# !!! should use XML." (git blame: March 2008)
<sphalerite> :)
<sphalerite> we have a number of those things
<manveru> i love this one: https://github.com/NixOS/nix/blame/master/corepkgs/buildenv.nix#L10 from 11 years ago :)
__Sander__ has joined #nixos
<mpickering> infinisil: Did you considering renaming the idris.with-packages attribute to be consistent with the haskell naming scheme?
<mpickering> What does recurseIntoAttrs do?
graphene has quit [Remote host closed the connection]
<{^_^}> [nixpkgs] @udono opened pull request #43604 → Update tryton 4 8 → https://git.io/fNY5o
shreyansh_k has left #nixos ["Leaving"]
graphene has joined #nixos
boxofrox has quit [Quit: WeeChat 2.1]
<sphalerite> mpickering: determines whether nix-env's searching descends into the attrset
<sphalerite> so nix-env -q, nix-env -i without -A, etc
<sphalerite> s/nix-env -q/nix-env -qa/
<mpickering> So it's magical in some sense?
<sphalerite> yes
goibhniu has joined #nixos
igo95862 has quit [Quit: igo95862]
coot has joined #nixos
<sphalerite> and recurseIntoAttrs just adds this recurseForDerivations = true; to an attrset
leotaku has quit [Ping timeout: 244 seconds]
nschoe has joined #nixos
leotaku has joined #nixos
srdqty has joined #nixos
<{^_^}> [nixpkgs] @xeji merged pull request #43589 → xkbcomp: 1.4.0 -> 1.4.2 → https://git.io/fNYaK
<{^_^}> [nixpkgs] @xeji pushed commit from @yegortimoshenko to master « xkbcomp: 1.4.0 -> 1.4.2 (#43589) »: https://git.io/fNYd1
srdqty has quit [Client Quit]
<fgaz[m]> Myrl-saki:
<fgaz[m]> pong
<Taneb> Back to my struggles with getting Hydra working again at work...
<Myrl-saki> fgaz[m]: I forked your duplicity module, just in case you might be interested. I remvoed a lot of features though, specifically passwords and SSH.
johanot has joined #nixos
<Taneb> So, I'm deploying Hydra with nixops. I've got nix.useSandbox = false (for future reference). I'm using a git checkout to get a declarative jobspec that uses github pulls.
srdqty has joined #nixos
srdqty has quit [Client Quit]
<Taneb> First issue: on startup, the hydra-queue-runner user does not have permissions to write to /nix/var/nix/db/big-lock or the enclosing directory, causing it to fail.
<fgaz> Myrl-saki: yeah I saw the fork! Did you make it work?
<Taneb> This is fixed by adding those permissions but I think that might be the wrong solution (shouldn't it be using the nix daemon?)
<Myrl-saki> fgaz: Yep! The USING.org documents how to use it.
<fgaz> I remember I had some problems with ssh. Then I stopped working on it because of lack of time
<fgaz> let me take a look
<Taneb> Second problem: after fixing those permissions I get "error: access to path '/nix/store/ndk6x92g8bf6yfd43lphq7sksdr88rzr-github-pulls-sorted.json' is forbidden in restricted mode"
<Taneb> This is, I think, using the hydra and nixops from nixpkgs 18.09pre145919.adbd3ead271
Coyin has joined #nixos
<Myrl-saki> Lmao. I was clearly half asleep while writing that document.
<Myrl-saki> The generated directories as these contain the AWS keys to connect to the S3 instance, and the GPG keys to decrypt the backups
<{^_^}> [nixpkgs] @xeji merged pull request #43342 → harfbuzz: 1.8.1 -> 1.8.2 → https://git.io/fNkuE
<{^_^}> [nixpkgs] @xeji pushed commit from @r-ryantm to staging « harfbuzz: 1.8.1 -> 1.8.2 (#43342) »: https://git.io/fNYFC
<{^_^}> [nixpkgs] @jensbin opened pull request #43605 → bluemix-cli: 0.6.6 -> 0.8.0 → https://git.io/fNYFl
<Taneb> (it might be worth me thinking about pinning that to a stable)
<{^_^}> [nixpkgs] @xeji merged pull request #43569 → [18.03] gnome3.geary: 0.12.2 → 0.12.3 (cherry-picked from master) → https://git.io/fNYZ8
<{^_^}> [nixpkgs] @xeji pushed commit from @alexeymuranov to release-18.03 « gnome3.geary: 0.12.2 → 0.12.3 (#43569) »: https://git.io/fNYFu
<Taneb> Third problem, of unknown seriousness, hydra-queue-runner is giving me the warning "unknown setting 'secret-key'"
<fgaz> Myrl-saki: Did you try it with s3 only?
<{^_^}> [nixpkgs] @xeji merged pull request #43467 → jackett: 0.8.1209 -> 0.9.1 → https://git.io/fNthG
<{^_^}> [nixpkgs] @xeji pushed commit from @r-ryantm to master « jackett: 0.8.1209 -> 0.9.1 (#43467) »: https://git.io/fNYFy
philippD has joined #nixos
<Myrl-saki> fgaz: Yep. I'm thinking of readding SSH support on my free time though.
<fgaz> I'd ask you to make a pr, but the code is probably 90% yours now
<{^_^}> [nixpkgs] @domenkozar pushed to master « xz: enable optional static compilation »: https://git.io/fNYFd
<fgaz> Myrl-saki: oops, my path-string mistake was pretty bad..
<{^_^}> [nixpkgs] @peti pushed to master « Consistently pass versioned llvmPackages_x attributes to GHC. »: https://git.io/fNYFA
<Myrl-saki> fgaz: Added PR. :D Having the general idea was really helpful. I removed some GPG, passphrase and SSH stuff because I'm not really good with the first 2.
justbeingglad1 has left #nixos [#nixos]
<fgaz> Myrl-saki: me neither :-P It was way too hacky
<fgaz> Myrl-saki: Thanks for the pr!
<{^_^}> [nix] @Taneb opened pull request #2291 → nix-channel documentation: don't suggest deprecated function → https://git.io/fNYbc
<Myrl-saki> fgaz: No problem
joshua__ has quit [Quit: leaving]
Izorkin has quit [Ping timeout: 240 seconds]
Coyin has quit [Quit: Leaving]
<{^_^}> [nixpkgs] @MarcFontaine opened pull request #43606 → xlog: init at 2.0.15 → https://git.io/fNYNf
orivej has joined #nixos
Tehnix has quit [Remote host closed the connection]
phreedom has quit [Ping timeout: 250 seconds]
phreedom has joined #nixos
ajs124 has joined #nixos
MP2E has quit [Remote host closed the connection]
<vaibhavsagar> can I set a configureFlag with an interpolated variable in it?
<vaibhavsagar> it seems to be getting escaped, which I don't want
<adisbladis[m]> vaibhavsagar: Knock yourself out :)
<adisbladis[m]> vaibhavsagar: Escaped how?
<andi-> e.g $out is what he probably means?
<vaibhavsagar> yeah, it's showing up as \$out IIRC
<vaibhavsagar> e.g. I want to pass a value for --builddir
<andi-> try $(var) and/or \${var}
<{^_^}> [nixpkgs] @peterhoeg merged pull request #42787 → kmod-blacklist-ubuntu: Fix typo from commit "do not blacklist i2c_i801" → https://git.io/f4AOg
<{^_^}> [nixpkgs] @peterhoeg pushed 2 commits to master: https://git.io/fNYNj
sam__ has joined #nixos
derped has quit [Ping timeout: 268 seconds]
derped has joined #nixos
monotux has quit [Quit: The Lounge - https://thelounge.github.io]
<vaibhavsagar> how do I build a 32-bit package on x86-64?
<vaibhavsagar> I've tried pkgs.stdenv_32 but that doesn't seem to be enough
monotux has joined #nixos
<vaibhavsagar> *pkgs.stdenv_32bit
<vaibhavsagar> I'm getting lots of "i386:x86-64 architecture of input file `/tmp/nix-build-nhc98.drv-0/nhc98-1.22/lib/x86_64-Linux/Runtime.a(primIntFromInteger.o)' is incompatible with i386 output"
<adisbladis[m]> vaibhavsagar: How are you using this? You are probably mixing 64-bit stdenv and 32-bt
<sphalerite> vaibhavsagar: pkgsi686Linux
<vaibhavsagar> pkgs.stdenv_32bit.mkDerivation {...}
<vaibhavsagar> oh, I see
<sphalerite> vaibhavsagar: nix build nixpkgs.pkgsi686Linux.hello
<adisbladis[m]> vaibhavsagar: Yeah that's expected. All your inputs are still 64-bit
<vaibhavsagar> cool, let me try that
<vaibhavsagar> by inputs you mean buildInputs?
<adisbladis[m]> Yeah
<vaibhavsagar> I see
Izorkin has joined #nixos
<{^_^}> [nixpkgs] @xeji merged pull request #43171 → [staging] pango: 1.40.14 -> 1.42.1 → https://git.io/fNvXC
<{^_^}> [nixpkgs] @xeji pushed commit from @volth to staging « [staging] pango: 1.40.14 -> 1.42.1 (#43171) »: https://git.io/fNYps
simukis has joined #nixos
zenspider has left #nixos ["ERC (IRC client for Emacs 25.2.1)"]
Izorkin has quit [Quit: Miranda IM! Smaller, Faster, Easier. http://miranda-im.org]
Izorkin has joined #nixos
wucke13 has joined #nixos
tzemanovic has joined #nixos
orivej has quit [Ping timeout: 268 seconds]
Coyin has joined #nixos
Guanin has quit [Quit: Leaving]
booglewoogle has joined #nixos
<booglewoogle> hey! is anyone here using https://gitlab.com/MasterPassword/MasterPassword? it's a stateless password manager based on a really clever algorithm so I think it'd fit nicely with nixos, but I'm unable to get it to build
<etu> booglewoogle: And when someone manage to reverse your password through the algorithm all your passwords are leaked? Or someone manage to bruteforce your password?
<joepie91> etu: that's addressed in the FAQ
<joepie91> at least, the reversing thing
<etu> And if you want to change your "master password", do you have to change password on *all sites*? :p
<joepie91> yes
<etu> That's not handy :D
fleaz has quit [Ping timeout: 265 seconds]
<joepie91> a bigger problem is the lack of immediate feedback
<joepie91> the step of entering your password and the step of using the generated site password are distinct steps
<joepie91> so if you enter the wrong master password, you don't know that until you try to use the generated key
<joepie91> and even then you're not sure because you could've gotten something else wrong
alex`` has joined #nixos
<Taneb> Hmm, the version of hydra in nixpkgs hasn't been updated since November, but I think I need a fix from February
<etu> joepie91: wow, I hadn't even thought of that. Of course that's an issue as well. I'll just stick to pass anyways:)
<joepie91> etu: incidentally, it's for the same reason that I get annoyed by the common advice to "never tell your user whether they got the username or the password wrong, to avoid username disclosure"
<joepie91> this is massively confusing and frustrating to users, and I can count on none fingers the amount of sites that *also* successfully prevented user enumeration through other parts of the site
<joepie91> making the entire thing poijntless
<joepie91> pointless*
<etu> password recovery is often terrible
<joepie91> if you commit to actively preventing user enumeration throughout your site, and you can justify the associated inconvenience (eg. due to it being a high-security service), then by all means give vague error messages
<joepie91> but "don't tell your user what they got wrong" as general advice is just stupid and counterproductive :)
<joepie91> etu: backdoor-by-email, usually :)
<etu> or just login forms and setting passwords in general. Like sites that have a maxlength on login but not in settings of the password. (not looking at you paypal, not at all).
<toppler> Is everyone getting burned by this "fixed-point" typo?
<booglewoogle> hmm, if you've got a good master password and you're careful when typing it in, it seems like a good tradeoff compared to other password managers though?
<aminechikhaoui> Taneb: I think you can do something like imports = [ (builtins.fetchGit https://github.com/NixOS/hydra + "hydra-module.nix" )];
<aminechikhaoui> haven't tested that but afaik it should work
<joepie91> booglewoogle: password databases are relatively tiny; I don't find synchronizing them to be a particular challenge at all
<joepie91> etu: there's a handful of services that get password recovery right; the two that come to mind are Google and Runescape, bizarrely
<booglewoogle> i don't like lastpass for the fact that my passwords are sitting on cloud servers in the us and i don't like keepass for the fact that i'm dependant on having a certain file in local reach
<Taneb> aminechikhaoui: the hydra module lets you specify a derivation to use as the hydra package so I'm just making one that points to the most current commit today
<joepie91> etu: they ask you questions about your account usage that only you would be able to answer, even if somebody read all your public profiles; and the answers don't need to be perfect, just good enough to verify your identity
<joepie91> answer them right, and you get to set a new password
<srk> at the end it's all about the hardware you're running on, which is rarely trusted :(
<srk> or in?
<aminechikhaoui> Taneb: yeah that's also possible
<joepie91> booglewoogle: I'm not sure why the local file requirement is an issue?
<booglewoogle> say i'm visiting someone without my laptop and unexpectedly i want to login somewhere
<booglewoogle> that's the sort of thing i'm thinking about
<etu> I don't log in on untrusted computers
<srk> assume the worst - he's running keyloggers :)
<booglewoogle> yeah, that's another story of course. assume the computer is trusted but not my own
<joepie91> booglewoogle: I mean, just sync the file there? you're trusting the system anyway at that p;oint
<joepie91> point*
<etu> booglewoogle: I don't trust others computers :p
<booglewoogle> you mean over a cloud? then i'm back to the lastpass case though
<joepie91> no?
<joepie91> the point of eg. a keepass database being encrypted is that you *can* safely store it in untrusted storage
* etu syncs hiss pass storage with git over ssh that requires ssh-keys and his private gpg-key to open the files
fleaz has joined #nixos
<joepie91> but worst case, you can even use something like syncthing
<booglewoogle> hmm
<booglewoogle> yeah okay
<booglewoogle> i was assuming lastpass do have their databases encrypted without key knowledge
<booglewoogle> but you're right
<booglewoogle> yours would probably make for the best solution
<{^_^}> [nixpkgs] @davidak opened pull request #43608 → circleci: init at 0.0.4705-deba4df → https://git.io/fNOUG
sam__ has quit [Ping timeout: 260 seconds]
<sphalerite> I've been meaning to switch to pass for quite a while now
<sphalerite> I've got my yubikey set up for gpg, so I could even use the database on untrusted computers without giving up all the passwords. Modulo some gpg setup.
<etu> sphalerite: doit:)
<etu> pass-otp is amazing for otp secrets, like totp that most sites use
<sphalerite> etu: well keepassx has been good enough for me quite consistently even though pass would be better :p
<etu> and browserpass for browser integration (which also supports pass-otp and can tell you your secret when needed)
<sphalerite> I think keeping the otp secrets on the same machine that you're logging in on kind of defeats the point though?
<sphalerite> I mean, sure, it's convenient. But you are sort of circumventing the benefit of 2FA
xy2_ has joined #nixos
<etu> Well, when I loose my phone I want to be able to recover my accounts and change the OTP's on the sites
<joepie91> sphalerite: it does
<joepie91> same reason SMS 2FA is pointless for somebody who logs into a service on their phone
<emily> it defeats the point a bit less
<emily> they still need your laptop
<sphalerite> etu: that's what the recovery codes are for
<emily> not just your password
<joepie91> emily: if you are using a password manager, those are equivalent
<etu> sphalerite: Well, it's not ruining the entire point
<emily> passwords are usually compromised on the other end
<emily> but 2FA is a little pointless if you have a perfect password manager setup, in a sense?
<etu> sphalerite: If your password is leaked by the site they still might need your otp (unless that was leaked as well)
<joepie91> no, it still adds value even then
<emily> it's already something you have (the password db) + something you know (the master password)
<joepie91> proper 2FA that is
<joepie91> emily: that's a misinterpretation of what 2FA is about, unfortunately a very common one
<joepie91> emily: the point of 2FA is not arbitrarily classifications of have vs. know; the point is "need to compromise two separate environments"
<emily> *nods*
<joepie91> the "something you have" typically referred to eg. a physical dongle
<joepie91> which was a separate environment
* manveru will finally get his yubikey today
<joepie91> but if the "something you have" isn't really something you /have/ but rather something that lives in your main environment, 2FA doesn't help
<etu> In that sense I have 2FA everywhere since it needs my yubikey
<joepie91> or rather, it is not really 2FA
<etu> :)
<joepie91> etu: yep, a yubikey or similar dongle is proper 2FA
<joepie91> assuming it's an isolated environment ofc
<joepie91> a phone *can* also be proper 2FA, so long as you don't log in from that same phone
<etu> I'd say it's good enough
<etu> compared to most
<joepie91> so eg. an authenticator app on your smartphone while only logging in on your laptop is a proper 2FA setup
<etu> to have generated passwords in most places
<srhb> joepie91: I think that's a bit of an arbitrary distinction.
<emily> how often do you have to leave your yubikey in the computer for it to stop counting as a second factor? :3
<joepie91> it's not arbitrary at all? I just described where the difference comes from
<srhb> "Better 2fa" is less arbitrary.
<manveru> i used an auth app on my pebble so far, but that's a bit annoying to use
<joepie91> srhb: having an authenticator app on the same system that you log in from is no more 2FA than a second password is 2FA
<joepie91> you can still compromise an account by compromising a single system [other than the one the account exists on[
<joepie91> ]*
<etu> joepie91: I get your point
<etu> joepie91: But 2FA still add value
<srhb> joepie91: Passwords are often compromised not on your client system but on the target system. Regardless, it's not a clear cut. I can just define "system" as the application instead. Or for completely paranoid cases, the system is my entire workplace, or the server room, or ...
<srhb> Anymoo.
andreabedini has quit [Ping timeout: 244 seconds]
<joepie91> srhb: if a password is compromised on the target system, then any 2FA system becomes irrelevant, because *the target system is compromised and they have access to your stuff anyway*
<etu> It's an interesting topic, but it doesn't belong in here so much :p
periklis has quit [Ping timeout: 248 seconds]
silver has joined #nixos
graphene has quit [Remote host closed the connection]
wucke13 has quit [Quit: WeeChat 2.0]
wucke13 has joined #nixos
graphene has joined #nixos
Neo-- has quit [Ping timeout: 240 seconds]
<Taneb> Right, hydra master needs nix 2 to build (it uses builtins.fetchGit in like line 2)
wchresta_ has joined #nixos
wchresta_ has quit [Client Quit]
<Taneb> So instead I'm just passing in {nixpkgs = <nixpkgs>;}, which I'm unhappy with
Izorkin has quit [Ping timeout: 240 seconds]
<booglewoogle> etu: i didn't even know about pass, just checked that out! could you point out the advantages over keepass?
cryptomonoid has joined #nixos
<etu> booglewoogle: I've never used keepass, but pass is simple command line with gpg-encrypted files and no magic involved
<booglewoogle> fair enough. i think that's what i'm gonna roll with then
<aminechikhaoui> booglewoogle: I think the other nice advantage is the git support
<aminechikhaoui> so it can easily be used in a team for example
<wucke13> One big pro about pass: there is various integrations for it, for example using a browserplugin I can use pass in conjunction with both chromium and firefox
<sphalerite> booglewoogle: I use keepassx but want to migrate to pass because then I can use my yubikey for it. Also no pesky GUI
<booglewoogle> oh yeah, those are really cool. sphalerite: doesn't keepassx have a cli?
<sphalerite> not that I know of.
<booglewoogle> okay, that'd disqualify keepassx for me, too
<mkaito> is there a particular reason there is no wxPython package for python3?
sbdchd has joined #nixos
alexteves has joined #nixos
<etu> mkaito: It's set as disabled in <wxPython/3.0.nix>
<etu> infinisil: The file-lookup seems to be broken ^
<mkaito> I suppose that has something to do with the version of it. From some cursory googling, it seems what you want for python3 is wxpython 4.0
srhb has quit [Ping timeout: 256 seconds]
sbdchd has quit [Ping timeout: 248 seconds]
init_6 has joined #nixos
<mkaito> well, guess I'll have to figure that one out, because the app I'm trying to package requires wxpython AND python 3.6
<mkaito> fun
iyzsong has joined #nixos
<{^_^}> [nixpkgs] @jluttine closed pull request #33236 → dattobd: init at 0.10.3 [WIP] → https://git.io/vbAKP
Aexoden has quit [Quit: No Ping reply in 180 seconds.]
Aexoden has joined #nixos
<sphalerite> oh huh
derped has quit [Remote host closed the connection]
<wucke13> teozkr: good to know
<sphalerite> well I still want to switch to pass probably eventutally. :p
<etu> teozkr: o/
<teozkr> hey etu
coot has quit [Read error: No route to host]
orivej has joined #nixos
<manveru> how does pass work with browser forms?
<hyper_ch2> it doesn't
<mkaito> manveru: there's a browser extension that needs a local http server. pass itself is incapable of interacting with a browser. I think it's called browserpass.
<manveru> ok... so about the same as keepass
Izorkin has joined #nixos
<mightybyte> disasm: Hey, how did you set up the cache server you were helping fresheyeball with?
<mkaito> manveru: I installed it and have never used it, because I just use passmenu instead.
<hyper_ch2> I use pass and qtpass and the android app
<hyper_ch2> sphalerite: now it's a good time to switch to pass :)
<sphalerite> hyper_ch2: but I have better things to do, like applying for jobs :)
<sphalerite> (anybody hiring? 😉)
Negi has joined #nixos
<{^_^}> [hydra] @Ma27 opened pull request #576 → Fix constraint violation in Jobset update → https://git.io/fNOmL
<hyper_ch2> why that? aren't Sergej and Larry procastrating before your apartment and ask you to become their employee?
<manveru> sphalerite: xing is hiring in bcn :)
<sphalerite> manveru: bcn?
<hyper_ch2> booglewoogle: pass can also be tracked in git
<manveru> barcelona
<hyper_ch2> sphalerite is in bcn?
<sphalerite> oooh barcelona sounds cool :D
<sphalerite> hyper_ch2: I'm not, but I'm currently living in Glasgow and planning to move to the european mainland
<hyper_ch2> sphalerite: they didn't go independant
<sphalerite> manveru: hmmm… chances of getting a job at xing without being on xing? xD
<manveru> sphalerite: easy :)
<manveru> it's only used in DACH really
<hyper_ch2> people still use xing? oO
<hyper_ch2> and does sphalerite even know what DACH is?
<manveru> hehe
<sphalerite> hyper_ch2: Germany Austria Switzerland I believe? :)
<manveru> xing is still bigger than linkedin here
<hyper_ch2> (hint: it's not a roof)
<hyper_ch2> sphalerite: wow, now you have surprised me
<sphalerite> manveru: any nix stuff going on at xing?
<manveru> not much yet
<hyper_ch2> manveru: you work at xing?
<manveru> i'm working hard on it
<ma27> manveru: so there's a chance that xing will use nix internally?
<Enzime> manveru: what browser do you use?
<manveru> Enzime: firefox
<manveru> ma27: well, our team uses it, but it's not a company-wide thing yet
<Enzime> manveru: not sure how good this is
* etu prefers browserpass over passff
<hyper_ch2> why would you even want to integrate it into the browser? I'm glad, pass is not integraed in the browser :)
<sphalerite> manveru: any positions in your team? ;)
<manveru> sphalerite: we're still looking for a backend dev
<manveru> two, actually, so chances would be good
<hyper_ch2> --> proficient in php/html/js/css ?
<manveru> no, this project is mostly go
<manveru> others use ruby/rails or scala and some elixir
srhb has joined #nixos
xy2_ has quit [Ping timeout: 240 seconds]
<joepie91> hyper_ch2: correct browser integration has a security benefit; it makes phishing a non-issue by autofilling on the correct domain only
<hyper_ch2> malicious browser integration grabs all your data
<{^_^}> [nixpkgs] @ttuegel opened pull request #43609 → Emacs package updates → https://git.io/fNOmp
rihards has joined #nixos
<joepie91> sure? but the question is why you would want to integrate it into your browser, and this is why :P
coot has joined #nixos
<hyper_ch2> :)
<gchristensen> easy, don't run other integrations
<gchristensen> or as I was saying in #nixos-chat, let's just give up on computers
<ma27> what's wrong with the pass CLI and some xdotool script? %)
<hyper_ch2> computers just create problems that we wouldn't have without them :)
<ma27> gchristensen: yeah, let's do something with wood :P
<joepie91> ma27: it doesn't do the thing I described
daveo has quit [Remote host closed the connection]
<gchristensen> the worst thing I ever did was get secrets worth protecting
<etu> ma27: pass-menu (dmenu wrapper iirc)
<sphalerite> ma27: you end up accidentally doing it on IRC
<hyper_ch2> gchristensen: what secret? How to transmute lead into gold?
<etu> ma27: I run kdeconnect, I don't want to copy-paste passwords. Because it syncs to my phone's clipboard etc.
<ma27> sphalerite: that's a good point though :D
<hyper_ch2> kde connect syncs clipboard to phone clipboard?
<etu> yes
<etu> It's very handy
<hyper_ch2> what phone do you have? android?
<etu> yes
<hyper_ch2> ok....
knupfer has joined #nixos
<etu> Using the free software kdeconnect app on android and kdeconnect service on desktop I sync some notifications, can transfer files, etc
<hyper_ch2> I just use syncthing for transfering files :)
<gchristensen> hyper_ch2: fountain of youth :(
<hyper_ch2> but then, I'm just an average computer user and not a power user like you :)
<hyper_ch2> gchristensen: I'm not interested in that.... :)
<sphalerite> etu: are you using plasma as well or does kde connect work outside it too? It does seem very cool, but I've always been a bit reluctant to try it just because I don't know if/how well it will work in my i3 setup
xy2_ has joined #nixos
<etu> sphalerite: I use kdeconnect in gnome, it pretty much works but isn't integrated at all. There's a gnome shell extension called gsconnect that seems to be very cool but hard to package. There has been more than one failed attempt to do this and there's an upstream issue regarding this here: https://github.com/andyholmes/gnome-shell-extension-gsconnect/issues/91
<sphalerite> etu: what sort of integration is missing?
<etu> sphalerite: Pretty much everything here: https://www.omgubuntu.co.uk/2018/05/ubuntu-18-10-gsconnect-extension-by-default, some stuff works, like notifications. But that's about it.
Negi has quit [Quit: WeeChat 2.2]
xy2_ has quit [Ping timeout: 240 seconds]
jperras has joined #nixos
booglewoogle has quit [Remote host closed the connection]
jperras has quit [Ping timeout: 248 seconds]
silver_ has joined #nixos
jtojnar has quit [Remote host closed the connection]
jtojnar has joined #nixos
jensens has quit [Ping timeout: 240 seconds]
freeman42x]NixOS has joined #nixos
silver has quit [Ping timeout: 256 seconds]
xy2_ has joined #nixos
igo95862 has joined #nixos
jtojnar has quit [Ping timeout: 264 seconds]
<Ankhers> gleber_: ping
<srhb> Hum. Does TAG+="uaccess" not work on NixOS?
<srhb> For udev rules, that is.
<gchristensen> srhb: works for me, for my u2f device
<srhb> gchristensen: Strange. gpg --card-status doesn't see to work for me except as root.
* srhb boggles
<gchristensen> what kind of gpg card?
<srhb> yubikey neo
<gchristensen> ah
<srhb> Maybe I'm misinterpreting the error message...
<gchristensen> I'm not sure, maybe I had to restart for it to work properly? I don't remember exactly, but my nitrokey and yubikey both work for gpg, and my yubikey works for u2f
<srhb> gchristensen: Thanks :)
<srhb> gchristensen: Running pscd does it. I thought scdaemon would be fine as long as the udev rule from hardware.u2f.enable was there. Thanks again. :)
<gchristensen> ahh cool
<{^_^}> Channel nixpkgs-unstable advanced to https://github.com/NixOS/nixpkgs/commit/f1fbf818c4a (from 13 hours ago, history: https://channels.nix.gsc.io/nixpkgs-unstable)
<{^_^}> [nixpkgs] @jfrankenau opened pull request #43610 → nixos/display-managers: fix loading of module-x11-publish → https://git.io/fNOGD
rprije has quit [Ping timeout: 264 seconds]
graphene has quit [Read error: Connection reset by peer]
graphene has joined #nixos
<typetetris> Do I get prebuilt binary packages only for 18.03 or for unstable too?
<disasm> mightybyte: server: https://github.com/disassembler/network/blob/master/optina/default.nix#L55 client: https://github.com/disassembler/nixos-configurations/blob/master/machines/sarov.nix#L67 The key listed on the server needs generated on the client as root user.
<etu> typetetris: In general most packages are in the binary cache
<etu> typetetris: for unstable as well
<etu> typetetris: Sometimes build failures and timeouts can cause issues
<etu> typetetris: But it's quite rare
<typetetris> doing some stuff with haskell.packages.ghc843 in 18.03 and it seems to compile the whole haskell ecosystem from scratch. Maybe my checkout of 18.03 is too old?
schjetne has joined #nixos
<makefu> fyi: There is now an `official` nixos channel for the german community #nixos-de (previously it was #krebs). Feel Free to join
Neo-- has joined #nixos
cryptomonoid has quit [Ping timeout: 240 seconds]
<MichaelRaskin> sphalerite: single-machine 2FA with even a minimal privilege separation raises the bar quite a bit. Collect-then-use phishing stops being a complete gameover, for example.
phreedom has quit [Ping timeout: 250 seconds]
<typetetris> How can I check whats my checkout of 18.03 ? (I used nix-channel --update and didn't do a own repo clone.)
cryptomonoid has joined #nixos
phreedom has joined #nixos
<{^_^}> [nixpkgs] @Enzime opened pull request #43612 → mpv: build and install macOS App Bundle → https://git.io/fNOZX
cryptomonoid has quit [Remote host closed the connection]
cryptomonoid has joined #nixos
<etu> typetetris: nix-info should tell you that
aarvar has quit [Ping timeout: 264 seconds]
hxrts_ has joined #nixos
cacatoes has quit [Ping timeout: 256 seconds]
igo95862 has quit [Read error: Connection reset by peer]
igo95862 has joined #nixos
<{^_^}> [nixpkgs] @NeQuissimus pushed to master « linux: 4.18-rc4 -> 4.18-rc5 »: https://git.io/fNOce
spear2 has quit [Ping timeout: 264 seconds]
knupfer has quit [Ping timeout: 244 seconds]
derped has joined #nixos
igo95862 has quit [Ping timeout: 244 seconds]
igo95862 has joined #nixos
<{^_^}> Channel nixpkgs-unstable advanced to https://github.com/NixOS/nixpkgs/commit/6e76a618fb5 (from 7 hours ago, history: https://channels.nix.gsc.io/nixpkgs-unstable)
igo95862 has quit [Client Quit]
bongsun has joined #nixos
cryptomonoid has quit [Ping timeout: 276 seconds]
jperras has joined #nixos
spear2 has joined #nixos
<srhb> typetetris: I believe all the sets only build haskell *packages* from haskellPackages
<srhb> typetetris: For 18.03, that means ghc822
<srhb> (Well, for unstable too, yet...)
<Mic92> Is it possible to detect strict nix evaluation without making the evaluation break?
<srhb> Mic92: Thinking out loud, if you could throw an exception from something that should only be partially evaluated into a form that does not trigger the exception, and then catch that...?
cnu- has joined #nixos
<srhb> Do we have tryEval even? :-P
halfbit has joined #nixos
<infinisil> I think it only evals the result of the evaluation strictly, not everything inbetween
<infinisil> Which makes me think you can't detect it
<infinisil> Mic92: XY problem?
iyzsong has quit [Ping timeout: 256 seconds]
<Mic92> infinisil: I was wondering, if code that has passed a strict evaluation test, could later behave differently.
<Mic92> In that case I have to always use strict evaluation on untrusted code.
knupfer has joined #nixos
<infinisil> ^^ Yeah it only does the strict thing with the result
<Mic92> infinisil: ok. I actually mean restricted evaluation, not strict evaluation
<Mic92> restrict-eval true
<infinisil> Oh lol
acarrico has joined #nixos
xy2_ has quit [Ping timeout: 240 seconds]
cryptomonoid has joined #nixos
<Taneb> Getting back to Hydra, the latest commit on master doesn't build with nix1 without some trickery, as it opens with a use of builtins.fetchGit, which was added in nix2
<Taneb> It uses this to fetch a version of nixpkgs, which feels... off.
<{^_^}> [nixpkgs] @bkchr opened pull request #43613 → kde-frameworks: 5.47 -> 5.48 → https://git.io/fNO4c
<{^_^}> [nixpkgs] @bkchr opened pull request #43614 → kde-applications: 18.04.2 -> 18.04.3 → https://git.io/fNO4B
wpcarro has joined #nixos
<Taneb> Specifically, Hydra's release.nix has the parameter "nixpkgs ? builtins.fetchGit { url = https://github.com/NixOS/nixpkgs-channels.git; ref = "nixos-18.03"; }
<infinisil> What's so bad about that?
<Taneb> Well, it doesn't work with nix1, for a start
<Taneb> Which maybe isn't so bad but it's frustrating for me
<infinisil> Once a new version is out people will start using it :)
<infinisil> nixpkgs has fought hard to stay compatible with Nix 1.x
wpcarro has quit [Remote host closed the connection]
wpcarro has joined #nixos
<Taneb> Yeah, I know that's my problem (I'm stuck on it for a while at work for Reasons)
<gchristensen> what kinds of reasons?
<Taneb> gchristensen: stupdi ones
<gchristensen> politics?
<Taneb> We rely on the package signing behaviour
<gchristensen> oh?
<Taneb> For more stupid reasons that I'm fuzzy on the details
stepcut has joined #nixos
<Taneb> Basically, it'd be slightly harder than trivial to switch to Nix 2
<gchristensen> how can I get you on nix2?
<gchristensen> how can I _helP_ get you on nix2?
wpcarro has quit [Remote host closed the connection]
<Taneb> By waiting for someone to remind me why exactly we're stuck on it
wpcarro has joined #nixos
<gchristensen> hehe
<andi-> you wrote Reasons up there ;)
<Taneb> Second issue with that release.nix is I'm launching Hydra with nixops and the machine description takes a "pkgs" argument which I think is normally something like "import nixpkgs {}" and it's hard to go back to nixpkgs from that
cryptomonoid has quit [Ping timeout: 248 seconds]
tzemanovic has quit []
reinzelmann has quit [Quit: Leaving]
hxrts_ has quit [Remote host closed the connection]
<Taneb> When I try to use Nix 2, things look like this: https://i.imgur.com/Bxl0Nec.png
dbmikus has joined #nixos
<gchristensen> Taneb: I believe that is indicating either the client or nix-daemon are running nix1
<Taneb> Oh, the daemon is totally running nix1, that's fair enough
<Taneb> Another issue with hydra: with the latest commit on master, the webserver fails with Can't locate CatalystX/RoleApplicator.pm in @INC (you may need to install the CatalystX::RoleApplicator module)
dbmikus_ has joined #nixos
hyper_ch2 has quit [Quit: Page closed]
sbdchd has joined #nixos
dbmikus has quit [Ping timeout: 264 seconds]
wpcarro has quit [Remote host closed the connection]
<Taneb> Hang on, I think I had a commit that fixed this when I was trying to get stuff working last week
wpcarro has joined #nixos
<emily> is there a convenient way to pull up a path like <nixpkgs/a/b.nix> in an editor? like nix edit but for file references instead
<gchristensen> you could write a script to help out
sbdchd has quit [Ping timeout: 240 seconds]
kirchner has joined #nixos
<emily> *nods* just checking I wasn't missing an existing thing
wpcarro has quit [Ping timeout: 265 seconds]
acarrico has quit [Ping timeout: 244 seconds]
<kirchner> hello! i'm trying to get a development environment for a rails application in nixos. i was able to create a gemset.nix using bundix and included it into the default.nix using bundlerEnv. but when i run `bundler exec rails server` within the nix-shell environment bundler cannot seem to find the bundles. anyone have an idea? :)
<logzet> Damn, I actually forgot to enable encryption when I installed nixos :/
<kirchner> my default.nix looks something like `with import /home/kirchner/src/github.com/nixos/nixpkgs {}; let gems = bundlerEnv { name = "rubyenv"; inherit ruby; gemdir = ./.; }; in stdenv.mkDerivation { name = "rails"; buildInputs = [ gems ]; }`
<logzet> Time to back up the config and $HOME and reinstall…
knupfer has quit [Remote host closed the connection]
<kirchner> i then start the shell with `nix-shell default.nix` and run `bundler exec rails server` which quits telling me that a bundle is missing (but which is contained in the gemset.nix)
knupfer has joined #nixos
wpcarro has joined #nixos
obadz has quit [Ping timeout: 244 seconds]
acarrico has joined #nixos
obadz has joined #nixos
wpcarro has quit [Ping timeout: 244 seconds]
Izorkin_ has joined #nixos
Izorkin has quit [Read error: Connection reset by peer]
<disasm> logzet: yeah, been there done that :)
<{^_^}> [nixpkgs] @gebner pushed to master « cvc4: fix homepage url »: https://git.io/fNO2T
<mightybyte> disasm: Why does the key need to be generated as root?
<tenten8401> Sorry if this is a question that's answered somewhere, but I couldn't seem to find it where I looked. How do packages make their way into nixos-unstable from nixpkgs? is there like a series of tests they go through, or do they just get pushed automatically every now and then?
knupfer has quit [Ping timeout: 265 seconds]
<logzet> tenten8401: iirc unstable is based on master, so packages from there will eventually land in unstable
<tenten8401> is there a schedule or do they just make it in whenever?
<goibhniu> tenten8401: http://howoldis.herokuapp.com/ describes how the channel updates happen
<tenten8401> ahh alright, I remember seeing that before but I couldn't find it again
camsbury has quit [Remote host closed the connection]
shd[m] has joined #nixos
sir_guy_carleton has joined #nixos
<logzet> One quick question: Does https://nixos.org/nixos/manual/index.html#sec-luks-file-systems work on UEFI?
<emily> yep
<logzet> Wouldnt the efi partition be encrypted?
<emily> nope, you leave /boot unencrypted FAT-32
<logzet> So cryptsetup luksFormat /dev/disk/by-uuid/3f6b0024-3a44-4fde-a43a-767b872abe5d from the example does not make the whole disk encrypted?
<disasm> mightybyte: my understanding is it's the root user the nix-daemon uses to login to the other host
<init_6> whole but not boot
<init_6> for full hard drive use some usb as boot
<mightybyte> disasm: Ahh, ok.
<mightybyte> disasm: How do I push stuff to that cache from other machines?
camsbury has joined #nixos
<logzet> I am fine with leaving /boot unencrypted, I'm just in the progress of understanding the setup procedure
knupfer has joined #nixos
<{^_^}> [nixpkgs] @FRidh pushed 28 commits to staging-next: https://git.io/fNOVJ
<init_6> encrypted boot dosend not accept by uefi
<init_6> and yep defective by design
camsbury has quit [Ping timeout: 240 seconds]
<{^_^}> [nixpkgs] @FRidh pushed 130 commits to staging: https://git.io/fNOV0
wpcarro has joined #nixos
<{^_^}> [nixpkgs] @xeji merged pull request #43601 → ffmpeg, ffmpeg-full: enable libvpx on Darwin → https://git.io/fNYMc
<{^_^}> [nixpkgs] @xeji pushed 3 commits to master: https://git.io/fNOV9
<{^_^}> [nixpkgs] @xeji merged pull request #43605 → bluemix-cli: 0.6.6 -> 0.8.0 → https://git.io/fNYFl
<{^_^}> [nixpkgs] @xeji pushed 2 commits to master: https://git.io/fNOVF
<{^_^}> [nixpkgs] @xeji merged pull request #43522 → orage: "/usr/share/zoneinfo" -> "${tzdata}/share/zoneinfo" → https://git.io/fNmae
<{^_^}> [nixpkgs] @xeji pushed 4 commits to staging: https://git.io/fNOwJ
<d1rewolf_> guys, what's the security story with nixos? I'm thinking about switching from ubuntu to nix full time, but I guess the one nice thing about ubuntu is that it's patched fairly quickly when security vulns are found.
<d1rewolf_> How does nixos compare?
drewr has quit [Ping timeout: 240 seconds]
<gchristensen> according to a user of nixos in production in financial services, NixOS security patches are regularly available faster than Debian, and almost always faster than RedHat
drewr has joined #nixos
camsbury has joined #nixos
rihards has quit [Ping timeout: 260 seconds]
matthewbauer has joined #nixos
<tenten8401> + you have the added benefit of being able to rollback if one of those patches messes something up (but they usually don't)
<{^_^}> [nixpkgs] @dtzWill closed pull request #43594 → cryptominisat: 5.0.1 -> 5.6.3, enable "full", run tests → https://git.io/fNYKR
<d1rewolf_> gchristensen, ok, thank you. can you share the user in the financial space out of curiosity? or is there a list of production uses of nix somewhere?
dbmikus_ has quit [Quit: WeeChat 2.1]
dbmikus has joined #nixos
<gchristensen> I don't think I can, sorry
cryptomonoid has joined #nixos
<d1rewolf_> gchristensen, no worries. thanks ;)
knupfer has quit [Ping timeout: 260 seconds]
<logzet> disasm: I actually wanted to start working on it when I noticed, but reinstalling early seems the right way. I'm so dumb ^^
johanot has quit [Quit: Leaving.]
knupfer has joined #nixos
<{^_^}> [nixpkgs] @benley opened pull request #43616 → git: optionally build gnome-keyring and libsecret credential helpers → https://git.io/fNOrF
<mkaito> has anyone had a crack at building wxPython 4.0 on nixos?
vasiliy_san has quit [Quit: Connection closed for inactivity]
erickomoto has joined #nixos
cryptomonoid has quit [Ping timeout: 260 seconds]
spear2 has quit [Quit: Leaving]
<gchristensen> what does it mean when `nix repl` tells me "got unknown message type 6g74732f78696e2f from Nix daemon"?
kirchner has quit [Remote host closed the connection]
<clever> gchristensen: did you ctrl=c at one point?
<gchristensen> I did
<clever> gchristensen: that desyncs the nix protocol
<gchristensen> oh man
<gchristensen> thanks, clever :)
<clever> its normally not an issue, because nix-build/nix-instantiate dies shortly after
vmandela has quit [Quit: Leaving]
<gchristensen> ,unknownMessageType = if you ctrl-c in nix-repl and you see "got unknown message type..." you have to exit and re-start `nix repl`.
<gchristensen> ,unknownMessageType
<gchristensen> how do I do this
<clever> ,
<clever> i think it was ,foo=bar
<gchristensen> ,unknownMessageType=if you ctrl-c in nix-repl and you see "got unknown message type..." you have to exit and re-start `nix repl`.
<gchristensen> ,unknownMessageType
<gchristensen> init_6: help
<gchristensen> infinisil: help
<clever> ,library
<clever> i think the bot is just offline
<gchristensen> !-A
<{^_^}> You'll usually want to use nix-env -i with -A. It's faster and more precise. See https://nixos.wiki/wiki/FAQ/nix-env_-iA for details.
<gchristensen> ok cool
<{^_^}> [nixpkgs] @dtzWill opened pull request #43617 → hub: 2.4.0 -> 2.5.0 → https://git.io/fNOK9
Coyin has quit [Quit: Leaving]
sigmundv has quit [Ping timeout: 240 seconds]
<tenten8401> is there a way to revert to the nvidia drivers from nixos-18.03 while using nixos-unstable as a channel?
<tenten8401> some of you might remember my optimus issue from the other day where it'd just flicker rapidly and not do anything unless I used only the intel GPU
humanoyd has joined #nixos
<Ankhers> How does nix decide what the sha256 of a package should be? I just downloaded the tar and checked its hash and it was different from what is in my package definition.
<tenten8401> Ankhers: I'd use nix-prefetch-url to get the sha256
<tenten8401> I don't know how it decides but that always seems to produce a reliable hash for me
<tilpner> Ankhers - The tar format is not deterministic, so one generally unpacks it before hashing
<tilpner> tenten8401 - I didn't have your exact issue, but environment.variables.__GLVND_DISALLOW_PATCHING = "1"; fixed mine
telent has quit [Ping timeout: 268 seconds]
<tilpner> (Also Optimus problems with unstable)
<tenten8401> tilpner: what was the issue you were seeing if you don't mind?
<{^_^}> [nixpkgs] @vcunat pushed 2 commits to staging-next: https://git.io/fNO6l
<tilpner> I don't remember the exact error, it's been too long
<tilpner> There was segfaulting, and a weird X protocol error
<tenten8401> I'll give it a go
knupfer has quit [Remote host closed the connection]
<tilpner> Remember to logout/restart
knupfer has joined #nixos
civodul has quit [Quit: ERC (IRC client for Emacs 26.1)]
<tenten8401> just rebuilt and restarted, still flickering rapidly
dbmikus has quit [Ping timeout: 260 seconds]
<tilpner> Huh, that was fast
<tenten8401> yeah, it's got an SSD in it + all the packages were already up to date
<manveru> does anyone have a U2F PAM config they can share? i'm not sure what service i need to enable
<Ankhers> tenten8401, tilpner: Thanks.
<{^_^}> [nixpkgs] @FRidh opened pull request #43618 → release-staging: a release set for the staging branch → https://git.io/fNO6x
<logzet> Is there a chance that the recommendation in the nixos manual to run cryptsetup luksFormat with an UUID is wrong? I tried that first and the command failed (IO error while encrypting keyslot), tried /dev/sdaX and it worked. I also noticed that the UUID changed each time. For reference: https://nixos.org/nixos/manual/index.html#sec-luks-file-systems
knupfer has quit [Ping timeout: 268 seconds]
<tenten8401> manveru: never used it before but I'd imagine you just set hardware.u2f.enable = true and security.pam.enableU2F = true
<tenten8401> uhh, there's also security.pam.services.<name?>.u2fAuth
<tenten8401> I'm not sure
<manveru> yeah, but somewhere i have to specify which key can login, right?
<manveru> ah, found it
iqubic` has joined #nixos
logzet has quit [Ping timeout: 240 seconds]
iqubic has quit [Ping timeout: 240 seconds]
logzet has joined #nixos
fendor has quit [Ping timeout: 256 seconds]
iqubic` is now known as iqubic
shabius has quit [Quit: Leaving]
__Sander__ has quit [Ping timeout: 276 seconds]
wpcarro has quit [Remote host closed the connection]
wpcarro has joined #nixos
__Sander__ has joined #nixos
ixxie has joined #nixos
xAFFE has joined #nixos
shabius has joined #nixos
wpcarro has quit [Ping timeout: 256 seconds]
<{^_^}> [hydra] @Taneb opened pull request #577 → Fix perl dependencies → https://git.io/fNOPS
xAFFE has left #nixos ["Error from remote client"]
xAFFE has joined #nixos
wpcarro has joined #nixos
wpcarro has quit [Remote host closed the connection]
wpcarro has joined #nixos
Sonarpulse has quit [Ping timeout: 276 seconds]
daniel has joined #nixos
FRidh has quit [Read error: Connection reset by peer]
winem_ has quit [Ping timeout: 240 seconds]
daniel is now known as Guest50115
doyougnu1 has joined #nixos
dbmikus has joined #nixos
FRidh has joined #nixos
binaryphile has quit [Ping timeout: 260 seconds]
jtojnar has joined #nixos
<orivej> How can I launch a nix-shell with clang 6 and libcxx 6? I want "c++" to be a clang 6, and "$NIX_CXXSTDLIB_COMPILE" to include only libc++-6. (The latter is not trivial on darwin where by default it contains libc++-5.)
wpcarro has quit [Ping timeout: 244 seconds]
<orivej> I have found a way: nix-shell -E 'with import <nixpkgs> { }; llvmPackages_6.libcxxStdenv.mkDerivation { name = "a"; }'
goibhniu has quit [Ping timeout: 264 seconds]
logzet has quit [Remote host closed the connection]
<aminb> has anyone tried installing swaywm 1.0-alpha on NixOS?
philippD has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
<aminb> (by primeos[m])
<infinisil> gchristensen: oh, i guess my new changes were a bit unstable.. Will fix in abit
<infinisil> As much as I love Haskell, I really hate how so many functions aren't total, I'll also count its exception system to that, ugh
<gchristensen> yes, that seems like a very obvious and painful wart
nightmared has joined #nixos
Tiez has joined #nixos
<sphalerite> use a non-standard prelude that doesn't have exceptions 😎
Guest50115 has quit [Ping timeout: 276 seconds]
lambdamu has joined #nixos
ajs124 has left #nixos [#nixos]
<maurer> infinisil: I'm guessing you mean total-or-infloop
<maurer> because if you actually want all your functions to be total, it becomes very very hard to write anything
<gchristensen> having `head` always work would be a nice start
Judson has joined #nixos
Judson is now known as Guest3332
<nyanloutre[m]> hi
binaryphile has joined #nixos
alex`` has quit [Quit: WeeChat 2.1]
worldofpeace has quit [Remote host closed the connection]
ajs124 has joined #nixos
ajs124 has left #nixos [#nixos]
worldofpeace has joined #nixos
logzet has joined #nixos
init_6 has quit [Ping timeout: 240 seconds]
endformationage has joined #nixos
alex`` has joined #nixos
Sonarpulse has joined #nixos
humanoyd has quit [Quit: WeeChat 2.1]
doyougnu1 has quit [Ping timeout: 264 seconds]
hxrts_ has joined #nixos
<{^_^}> [nixpkgs] @aneeshusa opened pull request #43620 → vagrant: update deps for 2.1.2 → https://git.io/fNOyQ
<{^_^}> [nixpkgs] @volth opened pull request #43621 → xfce.gtk-xfce-engine: fix build when withGtk3=true → https://git.io/fNOyx
<{^_^}> [nixpkgs] @volth opened pull request #43622 → libxklavier: 5.3 -> 5.4 → https://git.io/fNOSL
<{^_^}> [nixpkgs] @oxij opened pull request #43623 → trivial: cleanups → https://git.io/fNOSm
ajs124 has joined #nixos
<{^_^}> [nixpkgs] @oxij opened pull request #43624 → treewide: either fix or disable tests → https://git.io/fNOS8
<{^_^}> [nixpkgs] @volth opened pull request #43625 → xfce4-13.xfce4-screenshooter: 1.9.1 -> 1.9.2 → https://git.io/fNOSu
worldofpeace has quit [Quit: worldofpeace]
<{^_^}> [nixpkgs] @volth opened pull request #43626 → xfce4-13.xfce4-power-manager: 1.6.0 -> 1.6.1 → https://git.io/fNOSM
worldofpeace has joined #nixos
<{^_^}> [nixpkgs] @oxij opened pull request #43627 → treewide: simplify some dependency cycles → https://git.io/fNOS9
wpcarro has joined #nixos
<{^_^}> [nixpkgs] @volth opened pull request #43628 → xfce4-13.xfce4-panel: 4.13.2 -> 4.13.3 → https://git.io/fNO9k
<infinisil> maurer: Maybe I'll rewrite it in Idris, which will help with totality checks :D
<nschoe> Hi everyone, I have been fighting an issue with Qt and nixOS today. This was a hard battle, I'm wounded and I'm about to give up. I'd like to know if I can bounce some ideas off someone's mind, see if he/her can help me go a little bit further ^^ This is related to this issue: https://github.com/NixOS/nixpkgs/issues/40706 =D
<MichaelRaskin> #40706
sk8forether has joined #nixos
wpcarro has quit [Remote host closed the connection]
<infinisil> (restarted it, I need to fix it crashing) #40706
<{^_^}> https://github.com/NixOS/nixpkgs/issues/40706 (by lucas8, open): Broken cmake file with Qt5.10 full
<nschoe> Basically, I can cmake-compile my Qt project if I have `qt5.qtbase` in my shell.nix's `buildInputs`, but *not* if I have `qt5.full` instead
wpcarro has joined #nixos
<MichaelRaskin> infinisil: by the way, do full URLs work for title-fetching by bot?
<nschoe> Ho and by the way I have tried with the lates `master` commit of nixpkgs, (which is now Qt 5.11) and I have the same issue.
<infinisil> MichaelRaskin: Yup: https://github.com/NixOS/nixpkgs/issues/40706
<infinisil> ...
<nschoe> infinisil, xD :)
<infinisil> Oh it crashed again, I'll try to fix it asap
<MichaelRaskin> infinisil: thanks
<disasm> aminb: let myoverlay = (builtins.fetchTarball https://github.com/me/my-overlay/archive/master.tar.gz); in nixpkgs.overlays = [ myoverlay ];
<MichaelRaskin> nschoe: I think qtfull doesn't have setup-hooks
<MichaelRaskin> Probably not intended for packaging, only for local development
<nschoe> MichaelRaskin, thanks for answering. So about setup hooks, indeed, 'default.nix' doesn't have a 'setupHook' whereas 'qtbase.nix' does.
<infinisil> Whaaaat, is github down ?????
<nschoe> But when I look at the qt-base-setup-hooks.sh, I don't find anything interesting (or maybe I'm blind)
<nschoe> infinisil, yes, for me too.
<nschoe> MichaelRaskin, what do you mena "probable not intended for packaging, only local dev"?
<nschoe> You mena qtbase or qtfull?
<nschoe> Also, at the moment I don't have any packaging: I'm just entering a shell.nix with a simple `buildInputs = [ pkgconfig cryptopp qt5.full cmake gdb ]`.
<nschoe> Do you have any idea?
<MichaelRaskin> nschoe: qtfull looks like a local-dev environment
<orivej> nschoe: setup hooks won't help here. Qt5GuiConfig.cmake in qt5.full has to be patched to support the layout of files in our Qt packages.
<MichaelRaskin> On its own
cryptomonoid has joined #nixos
__Sander__ has quit [Quit: Konversation terminated!]
<nschoe> MichaelRaskin, okay, but what's a local-dev environment. Isn't that precisely what I'm doing with my shell.nix?
<nschoe> orivej, okay, but I fail to understand how.
<MichaelRaskin> I wonder if the correct way is to add to qt.full in some other way
<nschoe> orivej, how come the plugins, like Qt5GuiConfig.cmake doesn't appear in the same place whether its atbase or atfull that's "building" it.
<MichaelRaskin> Ouch
tenten8401 has quit [Quit: Konversation terminated!]
graphene has quit [Remote host closed the connection]
<nschoe> Quite new to nix's inner workings tbh, so I took this opportunity to learn more. But I've been at it like 10 hours today ^^
shabius has quit [Quit: Leaving]
graphene has joined #nixos
<orivej> nschoe: the issue is that Qt CMake files (specifically lib/cmake/Qt5Gui/Qt5GuiConfig.cmake) expects that all Qt plugins are installed in the same directory, but Nixpkgs install qtbase and qtimageformats in different directories (/nix/store/*qtbase* and /nix/store/*qtimageformats*)
<nschoe> orivej, what I fail to understand is that qtfull "depends" on qtbase, as it as a "qtbase = callPackage", so... when building qtfull, it will build qtbase, and then the .cmake file will be patched so that the plugins directory corresponds to... qtbase, so.. we're screwed for qtfull, no?
<nschoe> orivej, okay. But why does it work when I have only `qtbase` in my `buildInputs`?
reinzelmann has joined #nixos
<nschoe> What you said is still true: the plugins are in two different directories.
<orivej> nschoe: please show your error
<nschoe> orivej, https://paste.ofcode.org/Ut9aqizwg33rpALHNLZDMM this is when I run `cmake ..` and I have `qt5.full` in my `shell.nix`'s `buildInput`.
<orivej> > then the .cmake file will be patched so that the plugins directory corresponds to... qtbase — it is not a matter of replacing one directory with another; currently Qt5GuiConfig.cmake looks for plugins in just one directory (/nix/store/*qtbase*) but we should make it look for them in all possible directories
<{^_^}> error: syntax error, unexpected THEN, at (string):159:1
<{^_^}> [nixpkgs] @volth opened pull request #43629 → xfce4-13.libxfce4ui: propagate libICE libSM → https://git.io/fNO92
shabius has joined #nixos
<orivej> nschoe: this error happens because Qt5GuiConfig.cmake looks for all "Qt5Gui_*Plugin.cmake" files in its directory, and qt5.full has more files in its lib/cmake/Qt5Gui than qt5.qtbase. in particular, it has Qt5Gui_QICNSPlugin.cmake, Qt5Gui_QVirtualKeyboardPlugin.cmake which. currently they can not be used
magnetophon has joined #nixos
cryptomonoid has quit [Ping timeout: 240 seconds]
<nschoe> orivej, oh ok
<nschoe> orivej, so it's not that ICNS works when I put `qtbase` and doesn't when I put qtfull, it's that this file is not present in `qtbase` at all I see.
<orivej> yes
<nschoe> hum okay
<nschoe> So basically, right now qtfull should not be used?
takeda has joined #nixos
<nschoe> I should add the needed qt plugins one by one in the `buildInputs` as I need them, right?
<{^_^}> [nixpkgs] @volth opened pull request #43630 → exo: 0.11.5 -> 0.12.2 → https://git.io/fNO99
kerrhau has joined #nixos
kerrhau has quit [Changing host]
kerrhau has joined #nixos
<orivej> nschoe: no, this will not help. we will have to fix Qt in Nixpkgs. actually Qt has provisions for plugins in different directories: https://github.com/qt/qtbase/blob/5.11/mkspecs/features/data/cmake/Qt5BasicConfig.cmake.in#L347 but currently we are not using (we use line 349 instead)
<infinisil> MichaelRaskin: Now it should work, github is back up: https://github.com/NixOS/nixpkgs/issues/40706
<{^_^}> #40706 (by lucas8, open): Broken cmake file with Qt5.10 full
<infinisil> Works for all github repos
<MichaelRaskin> #40706
<{^_^}> https://github.com/NixOS/nixpkgs/issues/40706 (by lucas8, open): Broken cmake file with Qt5.10 full
<MichaelRaskin> Nice approach to expand/contract
<infinisil> expand/contract?
<MichaelRaskin> Short reference gets full URL, full URL gets a short abbreviation
kiloreux has joined #nixos
<infinisil> Ah yes, it's a bijective function between the 2 :D
<{^_^}> [nixpkgs] @xeji closed pull request #43620 → vagrant: update deps for 2.1.2 → https://git.io/fNOyQ
<takeda> is there an equivalend of fetchTarball that similarly to fetchurl check hash (of the archive not its contents) and works with cleanSource? I basically want a command that would extract archive to a directory, because before I start the actual build I just wanted to analyze the contents of the archive
<nschoe> orivej, hum okay that's where the CMAKE_PLUGIN_DIR comes from!
<nschoe> orivej, unfortunately, line 347 is gibebrish to me :/ I'd be happy to submit a PR fixing this, but I have not a clue how this would work.
<orivej> nschoe: err, on the other hand line 347 may not be useful after all. this needs more investigation. I'll try to fix #40706 (this is your error) this week
<{^_^}> https://github.com/NixOS/nixpkgs/issues/40706 (by lucas8, open): Broken cmake file with Qt5.10 full
<nschoe> Uh, well okay, thanks ^^ I'm a bit sad that I could not do it myself, I spent th eday on this :/
<nschoe> Phew you were right: just using `qtbase` doesn't work much more: I can compile with `cmake` and `make`, but when I try to launch the app I've got the nasty "This application failed to start because it could not find or load the Qt platform plugin "xcb""
jperras has quit [Ping timeout: 240 seconds]
<orivej> nschoe: this is a different error, and since your application has compiled, you probably don't depend #40706 to be fixed. See https://github.com/NixOS/nixpkgs/issues/30551#issuecomment-346319767 and the context for the error with xcb
<{^_^}> https://github.com/NixOS/nixpkgs/issues/40706 (by lucas8, open): Broken cmake file with Qt5.10 full
matthewbauer has quit [Remote host closed the connection]
<orivej> nschoe: basically, you either have to ensure that exactly the same Qt is (1) installed in the system profile (if any), (2) installed in your local profile (if any), (3) used for building your project, or you need a linked workaround.
<nschoe> orivej, well I don't know what I did but it seems to work now. I'll read the thread you gave me in any case. In case I have this error again
<nschoe> orivej, okay that's good to know. But isn't a nix-shell supposed to clean the environemment variables to avoid those issues?
<orivej> nschoe: only when you run with the "--pure" argument
<nschoe> Okay, and should we do that when developping Qt projects?
<orivej> nschoe: please try, I have not tested this
matthewbauer has joined #nixos
<nschoe> Okay
<nschoe> Well the "issue" right now is that I don't have the problem anymore: the application is launching so ... ^^
erickomoto has quit [Ping timeout: 265 seconds]
<orivej> ok, but does it launch in nix-shell --pure (you don't have to rebuild it, just try to launch it)?
<nschoe> le me try
alex`` has quit [Ping timeout: 240 seconds]
<nschoe> nope: I've got "qt.qpa.plugin: Could not find the Qt platform plugin "xcb" in ""
<nschoe> This application failed to start because no Qt platform plugin could be initialized. Reinstalling the application may fix this problem."
<nschoe> Not the same issue, but I guess it's close.
<nschoe> Note that I have `qt5.qtbase` in the `buildInputs`, not `qt5.full`.
<shapr> does gabriel gonzalez ever visit here?
<nschoe> orivej, with `qt5.full` and `--pure` the application launches. I have a bunch of warnings/errors on the terminal, and the cursor looks weird, but the application is launching.
<nschoe> No tsure if this helps.
<typetetris> I tried to get a nix-shell with hoogle and some libraries and tried `nix-shell -E 'with import <nixpkgs> { }; haskell.packages.ghc843.ghcWithHoogle(p: with p ; [ gi-gtk haskell-gi-base base ])'` but some of the tests in build process fail and so it fails. Can I disable the tests somehow? I just want to browse some documentation with hoogle.
<clever> typetetris: that drops you into a shell suitable for building ghc with packages, not using ghc with packages
<clever> typetetris: so you need to put that whole ghcWithHoogle into the buildInputs of another derivation, and wrap some of the haskell packages with haskell.lib.dontCheck to turn off the tests
alex`` has joined #nixos
jperras has joined #nixos
<orivej> nschoe: thanks! cleary --pure can not be recommended for launching Qt applications. (qt5.qtbase does not let the app launch because qt5.qtbase.bin output that contains the base plugins does not have a "bin/" directory, and the cursor may looks weird because --pure unsets your XCURSOR_PATH environment variable)
<typetetris> clever: Thanks. I understood, what you said, but I don't know how to do that.
<clever> typetetris: nix-shell -p 'with import <nixpkgs> { }; haskell.packages.ghc843.ghcWithHoogle(p: with p ; [ gi-gtk haskell-gi-base base ])'
<nschoe> orivej, hum ok.
<clever> typetetris: -p will insert the argument into the buildInputs of a derivation, so you can use it
<clever> typetetris: which derivation fails tests?
<nschoe> orivej, qhy doesn't qt5base have a "bin" directory?
<manveru> orivej: i think you need $QT_PLUGIN_PATH and $QTWEBKIT_PLUGIN_PATH
<manveru> though i'm not sure where they originate
<orivej> manveru: either this, or "${qt5.qtbase.bin}/bin" in your PATH: https://github.com/NixOS/nixpkgs/issues/30551#issuecomment-345141502
<typetetris> clever: builder for '/nix/store/yb2vx30vz5mzvhmmvxdzcyg6ws9s362l-extra-1.6.4.drv' failed with exit code 1
<typetetris> clever: sadly I don't see its attribute path
<clever> typetetris: can you pastebin more of the error?
<tilpner> Anyone using Rust nightly from nixpkgs-mozilla with buildRustPackage? It can't find std/core :/
<typetetris> clever in a moment, I tried the command with `-p` again. If it fails again, I paste the error.
pluplog has quit [Read error: Connection reset by peer]
<orivej> nschoe: because qt5.qtbase binaries are moved into its qt5.qtbase.dev output. (if we want better support for Qt in nix-shell --pure, Nixpkgs should create an empty "${qt5.qtbase.bin}/bin" directory)
<nschoe> ok
<nschoe> this is ... weird, but ok :)
<nschoe> orivej, do you know how/where I can have the list of "modules" I can add in CMakeLists's `qt5-use-modules()`?
<nschoe> Because right now `cmake` works but `make` fails because it doesn' find `QGraphicsSvgItem`. I thought adding `Svg` inside this CMakeLists `qt5_use_modules()` would work. Obviously not ^^
lonokhov has joined #nixos
<{^_^}> [nixpkgs] @aepsil0n opened pull request #43631 → pythonPackages.parsy: init at 1.2.0 → https://git.io/fNO7n
<orivej> nschoe: you can grep for "add_library" in qt5.full (or qt5.qtbase) lib/cmake/ directory: all these libraries can be used with qt5_use_modules. However, Svg should be enough for QGraphicsSvgItem. what is the error?
sir_guy_carleton has quit [Quit: WeeChat 2.0]
<nschoe> ok nvd I switched to target_link_libraries(), and used find_package Qt5Svg.
<nschoe> orivej, seems the error was that I had not used find_package(At5Svg)
<{^_^}> [nixpkgs] @peti pushed 4 commits to master: https://git.io/fNO72
<{^_^}> [nixpkgs] @peti merged pull request #43444 → idris: Recurse into attrs, fix build and remove unneeded overrides → https://git.io/fNtaN
<typetetris> clever: Now I get a different error. Some haskellpackage in the dependencytree is to old and doesn't now about Semigroup class. (quickcheck-instances).
<typetetris> clever: Or perhaps ListLike ... but that I think is more haskell then nix now.
<clever> nix-shell -E 'with import <nixpkgs> {}; ((haskellPackages.override { overrides = self: super: { tasty = haskell.lib.doJailbreak super.tasty; }; }).callCabal2nix "serokell-util" ./. {}).env'
<clever> typetetris: this is an example of something i did last week, loading a cabal file, with overrides to disable version constraints on tasty
<manveru> so nice, now i can login my computer via yubikey :)
<gchristensen> nice!
<clever> and the .env at the end drops me into an env suitable for building the package described by that cabal file
<manveru> also works with sudo, but not `slock` yet
<manveru> time for a PR
orivej has quit [Ping timeout: 240 seconds]
<typetetris> clever: so serokell-util.cabal is loaded? Hmm, If I naivly specify hoogle as a build-depend in the cabal file, wouldn't I get hoogle the library and no hoogle the server in the resulting environment? (All I want to do is browse gi-gtk's docu with hoogle, which only builds with ghc843 on my nixos 18.03, maybe you have an alternative for that?)
<{^_^}> [nixpkgs] @jfrankenau opened pull request #43632 → mpv: use wrapper for scripts and add mpris script → https://git.io/fNO50
<aminb> disasm: thanks! would i put that in my /etc/nixos/configuration.nix ? and that'll be all?
Xiro` has left #nixos ["ERC (IRC client for Emacs 25.3.1)"]
<clever> typetetris: nix-shell -p 'haskellPackages.ghcWithHoogle (ps: [ ps.gi-gtk ])'
<clever> typetetris: this should work
chris| has quit [Quit: ZNC 1.6.5 - http://znc.in]
<gchristensen> I have this machine saying "hash mismatch importing path ....glibc... expected hash: sha256:0000...000, got: sha256:...somethingelse... -- any ideas?
chris| has joined #nixos
<typetetris> clever: doesn't ghc822 has a bug, which is triggered by gi-gtk, if overloading isn't turned off or so. The resulting error message: https://pastebin.com/cH6BRb7H
<clever> gchristensen: was this db.sqlite loaded from a closure expore?
<gchristensen> maybe
<clever> gchristensen: the hashes are missing from that export, you need to `nix-store --verify --check-contents` to hash everything
<gchristensen> beautiful, thank you so much clever
<clever> typetetris: you can also switch to haskell.ghc824.packages.ghcWithHoogle to change the ghc version
Xiro` has joined #nixos
<gchristensen> :? that didn't do it. its still 0's
Mateon3 has joined #nixos
<typetetris> clever: yeah I tried ` nix-shell -p 'haskell.packages.ghc824.ghcWithHoogle (ps: [ ps.gi-gtk ])'` but now ListLike is too old again or something. Thanks for your time, maybe I try on nixos-unstable and then maybe I try to dig a little deeper.
<gchristensen> despite verify emitting lines about fixing the missing hash
<clever> gchristensen: did you run it on the source or destination?
<gchristensen> I ran it on the remote builder
<clever> typetetris: haskellPackages just worked with the latest nixos-unstable
<gchristensen> I'll check the builder too
<clever> gchristensen: try it on the local system as well, just incase
<gchristensen> the client* sounds good
Mateon1 has quit [Ping timeout: 244 seconds]
Mateon3 is now known as Mateon1
<{^_^}> [nixpkgs] @jfrankenau opened pull request #43633 → pulseeffects, lightdm-gtk-greeter, gxmessage, viking: depend on hicolor-icon-theme → https://git.io/fNOdl
Neo-- has quit [Ping timeout: 260 seconds]
<gchristensen> ehh its still 0s clever, I'll just use a different builder for now
<{^_^}> [cabal2nix] @peti pushed 2 commits to master: https://git.io/fNOFk
<{^_^}> [nixpkgs] @jfrankenau opened pull request #43634 → split2flac: init at 122 → https://git.io/fNOFI
<{^_^}> [cabal2nix] @peti pushed 0 commits to refs/tags/v0.10.1: https://git.io/fNOFt
<{^_^}> [nixpkgs] @vbgl opened pull request #43635 → ocaml-4.07: 4.07.0+rc1 -> 4.07.0 → https://git.io/fNOFm
<{^_^}> [cabal2nix] @peti pushed 0 commits to refs/tags/v0.10.1: https://git.io/fNOFW
<nbathum> Hi I'm a noob, trying to define a package from local git repo. I'm using `src = fetchGit ./.;` When the source is copied, they seem to all have a timestamp of '0' or something, which seems to cause an issue with the makefile targets
<{^_^}> [cabal2nix] @peti pushed to master « cabal2nix.cabal: bump version number to 2.10.1 for the upcoming release »: https://git.io/fNOF0
<{^_^}> [cabal2nix] @peti pushed 0 commits to refs/tags/v2.10.1: https://git.io/fNOFE
<LnL> it's epoch 1, but yes everything copied to the store will loose it's timestamps
<clever> gchristensen: next thing to do would be to open db.sqlite in the sqlite3 repl and confirm the hash in the db
<nbathum> ahh okay
<LnL> clever: isn't there a command to print that
reinzelmann has quit [Quit: Leaving]
<clever> LnL: oh yeah, let me check
<clever> [root@amd-nixos:~]# nix-store --query --hash /run/current-system
<clever> sha256:0mbiapybw5sscf854pjik5k8f6j25aar2qaf7k45ny4l0d4a9z3j
<clever> LnL: yep
<LnL> ah you found it already, couldn't remember what it was :)
wpcarro has quit [Remote host closed the connection]
<LnL> and nix-hash --base32 --type sha256 /nix/store/<path> to calculate the current one
nschoe has quit [Ping timeout: 245 seconds]
<LnL> (unless it's a single file)
wpcarro has joined #nixos
civodul has joined #nixos
coot has quit [Quit: coot]
<nbathum> hrmm, okay, maybe its due to git submodules?!
<nbathum> in the temporary build folder, the submodule directory is not present
<LnL> you can't enable submodules with fetchGit
<{^_^}> [nixpkgs] @FRidh merged pull request #43623 → trivial: cleanups → https://git.io/fNOSm
<{^_^}> [nixpkgs] @FRidh pushed 3 commits to master: https://git.io/fNObH
<LnL> it downloads/copies a single git repository
<nbathum> oh, okay
<gchristensen> you can do src = ./. though
<nbathum> oh, nice okay
wpcarro has quit [Ping timeout: 244 seconds]
<disasm> aminb: yup
<LnL> yeah, using a path will copy over everything, disadvantage is that this also includes things that are in your gitignore while fetchGit wouldn't
<worldofpeace> samueldr: ping :)
<nbathum> I can live with that for this use case. I'm just trying to get some experience with making packages
<nbathum> thanks
lambdamu has quit [Remote host closed the connection]
wpcarro has joined #nixos
<samueldr> worldofping hi
<samueldr> ;)
<LnL> nbathum: it's also possible to filter out certain stuff yourself with filterSource, if copying everything causes issues or unintended rebuilds
Guest50115 has joined #nixos
<samueldr> worldofpeace: unless it's to engage in idle conversation, you can directly ask me things, worst will happen is that I will not answer if I'm AFK :)
wpcarro has quit [Remote host closed the connection]
wpcarro has joined #nixos
stanibanani has joined #nixos
johanot has joined #nixos
<johanot> disabledModules doesn't seem to work for me when I try to disable "services/networking/bird.nix", upon build I still get "services.bird2.enable is already declared in ..." Does it have anything to do with how the bird-module is constructed? i.e. self-importing 3 dynamic modules, bird, bird6 and bird2?
stanibanani has quit [Ping timeout: 268 seconds]
<kiloreux> I am trying to install a package with cmake (fluentbit). But I am stuck with this error
<worldofpeace> samueldr: I just wanted to get your attention :P . You recently did stuff for #43536 and I currently trying to write the nixos module for the elementary-greeter. I think I did it right'ish https://gist.github.com/worldofpeace/e0c11e166b047e10a1978c2657317251 but when I test it in a vm it just starts the default greeter.
<kiloreux> file INSTALL cannot copy file
<kiloreux> "/tmp/nix-build-fluentbit-0.13.4.drv-0/fluent-bit-0.13.4/init/fluent-bit.service"
<kiloreux> to "/lib/systemd/system/fluent-bit.service".
<{^_^}> https://github.com/NixOS/nixpkgs/pull/43536 (by samueldr, open): [WIP]: lightdm-web-greeter (3.0.0rc2)
<kiloreux> About not being able to copy file to systemd
<kiloreux> anyone knows the solutions for it ?
<samueldr> worldofpeace: https://gist.github.com/5b1532aff933b806664d25686c70ebab I was using this to test, FWIW
<samueldr> (build.sh only works when cd-ed into the right directory)
<gchristensen> garbas: around?
Tiez has quit [Quit: WeeChat 2.1]
<{^_^}> [nixpkgs] @qolii opened pull request #43637 → linux-hardkernel: 4.14.47-139 -> 4.14.55-146. Additionally, use vendo… → https://git.io/fNOAS
<worldofpeace> samueldr: I'll try that to see if what I was doing was causing problems.
<samueldr> worldofpeace: I think you are now required by law to bush your nixpkgs with a WIP commit so I can test :)
<samueldr> push*
lambdamu has joined #nixos
<{^_^}> [nixpkgs] @pSub merged pull request #43568 → percona-toolkit: init at 3.0.11 → https://git.io/fNYOG
<{^_^}> [nixpkgs] @pSub pushed 2 commits to master: https://git.io/fNOxf
<worldofpeace> samueldr: heh, I've uploaded my branch to my fork, but I haven't commited the staged changes yet. You should see a commit there in a few though :)
<{^_^}> [nixpkgs] @jtojnar pushed to master « gnome3.gnome-sound-recorder: init at 3.28.1 »: https://git.io/fNOxq
Guest50115 has quit [Ping timeout: 265 seconds]
isidore has joined #nixos
<typetetris> how do I list the closure of some store path again?
cryptomonoid has joined #nixos
<typetetris> clever: Thanks. With an updatet nixos-unstable it did work!
<clever> typetetris: nix-store -qR
<worldofpeace> samueldr: hmm, do you know how to get the journal output of the vm?
<samueldr> worldofpeace: serial tab at the top, this gives you a console that should be logged as root
<samueldr> (if you used my configuration.nix)
<samueldr> then, journalctl
Thra11 has joined #nixos
<samueldr> DO KNOW that lightdm does NOT store its log in journald
<samueldr> look under /var/log, seat-0.log is where your greeter probably logged
<worldofpeace> oh yeah forgot that
<worldofpeace> yep
wpcarro has quit [Remote host closed the connection]
<aminb> disasm: awesome, thanks again!
wpcarro has joined #nixos
<jtojnar> worldofpeace: I recommend enabling SSH in the VM and running it with `env QEMU_NET_OPTS="hostfwd=tcp::2222-:22" ./result/bin/run-*-vm`
<worldofpeace> samueldr: hmm so it executed the greeter, but the seat log is empty
<worldofpeace> jtojnar: hi, why ssh in the vm?
<{^_^}> [nixpkgs] @pSub pushed to master « aha: add myself (pSub) as maintainer »: https://git.io/fNOpu
<samueldr> jtojnar: the serial console in the (new?) qemu interface is surprisingly useful
wpcarro has quit [Ping timeout: 240 seconds]
<jtojnar> samueldr, worldofpeace: I find SSH more convenient because of copy-paste
<samueldr> especially since in that case it's not a copy of your whole system, it's a minimal case
<worldofpeace> jtojnar: ahh copy paste
<samueldr> ah, selection clipboard works right, so I never had to do the other clipboard in it :)
<jtojnar> samueldr: oh, cool did not know that I could select it
<samueldr> I said (new?) since I don't remember it working that way in the past
<jtojnar> samueldr: I think it came with the GTK switch
ambro718 has joined #nixos
<jtojnar> (or maybe it was there but now it is visible in GUI)
Guest50115 has joined #nixos
johanot has quit [Ping timeout: 268 seconds]
<worldofpeace> so if I can't get this do anything in a few momments you'll see that wip commit :D
<{^_^}> [nixpkgs] @dtzWill opened pull request #43639 → curl: 7.60.0 -> 7.61.0 → https://git.io/fNOpA
<samueldr> `elementary` branch?
<{^_^}> [nixpkgs] @pSub pushed to master « toilet: add myself (pSub) as maintainer »: https://git.io/fNOhe
cryptomonoid has quit [Ping timeout: 240 seconds]
<worldofpeace> yep, just don't look to hardly or cringe out loud :P
<samueldr> eh, make it work, then make it right :)
rembo10_ has joined #nixos
<worldofpeace> ^
<{^_^}> [nixpkgs] @pSub pushed to master « mmake: fix description »: https://git.io/fNOhZ
wpcarro has joined #nixos
magnetophon has quit [Remote host closed the connection]
magnetophon has joined #nixos
<worldofpeace> jtojnar: I should be using just wrapGAppsHook but with the gtk theme and icon theme in there too?
<jtojnar> GTK theme is now built-in to GTK
<jtojnar> and different ones should be picked up from environment
<worldofpeace> I think it needs the elementary-gtk theme in there
<worldofpeace> wait nvm I'm already doing that :)
johanot has joined #nixos
orivej has joined #nixos
wpcarro has quit [Ping timeout: 244 seconds]
<{^_^}> [nixpkgs] @pSub pushed to master « doit: add myself (pSub) as maintainer »: https://git.io/fNOhN
johanot has quit [Ping timeout: 244 seconds]
<dmj`> Is there an environment variable present I can use to detect whether or not I’m engaged in a nix-build
<dmj`> similar to how IN_NIX_SHELL is set
<worldofpeace> jtojnar: currently the hook is only wrapping one executable(io.elementary.greeter-compositor) and not io.elementary.greeter
<{^_^}> [nixpkgs] @jfrankenau opened pull request #43641 → libmysofa: init at 0.6 and enable in ffmpeg-full → https://git.io/fNOjK
<dmj`> clever: ping
Lisanna has quit [Quit: Lisanna]
telent has joined #nixos
<jtojnar> worldofpeace: I think the issue is that the file is insttalled to $out/sbin
<jtojnar> which is not wrapped
<worldofpeace> yeah and sbin is linked to bin?
<rembo10_> I'm trying to wrap my head around the nix channels, and NIX_PATH. Basically I've cloned the repo, and have made some changes that haven't been merged into master yet, so I want to use my own fork when I run nixos-rebuild, or nix-env as my user..... what's the best way to do that?
<rembo10_> I saw in the manual to symlink that folder to ~/.nix-defexpr but then doing `nix search` it still uses the upstream channel
<rembo10_> Or
<rembo10_> I'm just trying to fingure out how everything interacts
<worldofpeace> jtojnar: samueldr: It's pushed btw
johanot2 has joined #nixos
<jtojnar> worldofpeace: some setup hook moves sbin contents to bin
<jtojnar> and then creates the symlink
<jtojnar> we either need to run the sbin move hook before wrapGAppsHook
<worldofpeace> was thinking of that
<jtojnar> or change wrapGAppsHook to apply to sbin
FRidh has quit [Quit: Konversation terminated!]
<{^_^}> [nixpkgs] @Infinisil merged pull request #42748 → nixos/neo4j: Update module, make compatible with neo4j 3.4 → https://git.io/f4b5I
<{^_^}> [nixpkgs] @Infinisil pushed 2 commits to master: https://git.io/fN3eR
<worldofpeace> the first way would look nicer
<jtojnar> not sure if it is possible though
<kalbasit> the unstable channel is 579 commits behind master, how is it built? is it scheduled or manual?
<jtojnar> we would need a way to create ordering on setup hooks
<jtojnar> (fixupOutputHooks in this case)
<samueldr> kalbasit: there's a good overview at the top here http://howoldis.herokuapp.com
<worldofpeace> kalbasit: the nfs tests seem to be failing so... if they didn't the channel would advance
<kalbasit> samueldr: nice, thanks for the link
<kalbasit> worldofpeace: oh I see, thx for the heads up
pie___ has joined #nixos
<worldofpeace> Best thing to do is to check if there's a bug with nfs already reported in nixpkgs for nfs or report it
<worldofpeace> jtojnar: I wrapped it now
devx has quit [Quit: . .. ...]
devx has joined #nixos
pie__ has quit [Ping timeout: 260 seconds]
jperras has quit [Ping timeout: 265 seconds]
<{^_^}> [nixpkgs] @stefano-m opened pull request #43642 → Update VLC to version 3.0.3 → https://git.io/fN3vd
<worldofpeace> yep, that's just silly right now
Lisanna has joined #nixos
aanderse has joined #nixos
<aanderse> if i had a wildcard cert and several boxes i was managing with nixops what would be the "best" way to deploy my wildcart certs to those boxes? keeping in mind i will be creating new boxes which also need that wildcart cert at some point, so having the cert automatically show up on the box is preferred
<nbathum> What is the proper way to express a runtime dependency on ld.so, the dynamic linker? something like adding "binutils" package to `buildInputs`?
<infinisil> ,runtimeDeps
<{^_^}> In order of preference: Patch source OR ((if it uses PATH -> wrap with new $PATH) AND (if it uses dlopen, (patchelf --set-rpath in postFixup OR wrap with new LD_LIBRARY_PATH)))
<worldofpeace> jtojnar: this constant https://github.com/elementary/greeter/search?q=Constants.CONF_DIR&unscoped_q=Constants.CONF_DIR needs to be changed I think
<infinisil> That might be a bit complicated to follow ^^, but buildInputs certainly doesn't work
<nbathum> infinisil: ahhh thanks, time to do some more reading I suppose
<infinisil> nbathum: Well the best guides to runtime dependencies I know of is what {^_^} just said :)
<infinisil> s/guides/guide
<nbathum> yeah, I'm planning to look through nixpkgs repo and see some examples :D
<samueldr> LD_LIBRARY_PATH being a last resort IIRC
<jtojnar> worldofpeace: that should be fine, the module will create the files in /etc
<infinisil> samueldr: Yeah, which is why it's listed after patchelf
<infinisil> where listed = ordered OR
<samueldr> (just wanted to hammer in that detail :))
<worldofpeace> jtojnar: just saw that I was doing that already
logzet has quit [Ping timeout: 240 seconds]
Izorkin_ has quit [Read error: Connection reset by peer]
<infinisil> You know what, let's make a tool, nix-debug, which you can give a nix derivation and a resulting binary. It then runs the built binary, parses the error message and figures out what to do to get rid of it
logzet has joined #nixos
<infinisil> Using e.g. nix-index to find files, emit a patchphase with patchelf / makeWrapper
Izorkin has joined #nixos
<infinisil> That would be rather fancy
<worldofpeace> ooohh
<clever> infinisil: a script to do most of this already exists
drakonis has joined #nixos
<clever> <patchelf-hints.sh>
<worldofpeace> clever++
<nbathum> clever: oh, didn't know about that
<manveru> Mic92: thanks for fixing my shit
<clever> infinisil: and that part of your bot is dead
<{^_^}> clever's karma got increased to 11
<dmj`> cleverrrr
<clever> ah, just lagging a bit
<dmj`> clever: there you are
<dmj`> clever: is there an equivalent to IN_NIX_SHELL for nix-builds ?
<infinisil> (Not sure where this lag comes from)
<samueldr> infinisil: internet?
<clever> dmj`: if IN_NIX_SHELL isnt set, then its probably a nix build
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
hl is now known as hl[m]
drakonis has joined #nixos
<infinisil> clever: Neat, needs some nix-indexification and more automation to get it a bit nicer
<infinisil> samueldr: The lags didn't happen before my changes yesterday
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
<dmj`> clever: can I override a derivation and set an environment variable?
isidore has quit [Quit: WeeChat 2.2]
<infinisil> Oh actually I think I know why
<clever> dmj`: all attributes of a derivation become env vars during the build
drakonis has joined #nixos
<aanderse> anyone have ideas on shipping ssl certs via configuration.nix?
<infinisil> samueldr: (It's single threaded now because of $reasons, but also a channel update runs on that thread every minute, which takes some time)
<clever> aanderse: i would just switch to lets encrypt, let the machines auto-generate their own certs
<dmj`> clever: yea that’s what I thought, I think the issue is that I’m not setting it on `env`
<dmj`> in the haskell packages infra
<aanderse> clever: i'm trying to move some boxes at work to nixos and they have a wildcard cert they paid for via godaddy, letsencrypt isn't an option
<clever> aanderse: youll probably want to look at deployment.keys in the nixops manual then
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
drakonis has joined #nixos
coot has joined #nixos
<aanderse> clever: yeah i was wondering if that was the "proper" solution. i had read the docs but wasn't sure if that was the best fit
<aanderse> thx for advice
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
drakonis has joined #nixos
ntqz has joined #nixos
aarvar has joined #nixos
<nbathum> whats weird is that this application half works... and readelf -d on the various libs and plugins it builds all seem... correct
<jtojnar> worldofpeace: yes
<worldofpeace> jtojnar: ahh validation
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
drakonis has joined #nixos
<{^_^}> [nixpkgs] @dtzWill opened pull request #43643 → lua5_3: 5.3.4 -> 5.3.5 → https://git.io/fN3Ub
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
drakonis has joined #nixos
<jtojnar> worldofpeace: these session files are weird, I am not sure how do RequiredComponents work
<worldofpeace> jtojnar: I hope gnome-session has documentation
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
drakonis has joined #nixos
<worldofpeace> jtojnar: weird the greeter can't find wingpanel...
<jtojnar> cool, there is a manpage
<worldofpeace> yay!
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
<dmj`> clever: why won’t fetchurl automatically extract my tarball ;_;
drakonis has joined #nixos
<jtojnar> worldofpeace: but it still does not explain what being required means
<worldofpeace> jtojnar: hmm it's looking for other desktop files which makes sense
<Lisanna> dmj` use fetchzip
<dmj`> Lisanna: does it work w/ tarballs ?
<Lisanna> dmj` yes
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
<dmj`> Lisanna: also fetchTarball is a primop?
<dmj`> would fetchTarball suffice?
<Lisanna> dmj` can also use that
drakonis has joined #nixos
<clever> dmj`: why do you need fetchurl to unpack?
<dmj`> clever: I’m getting a tarball
wpcarro has joined #nixos
<clever> dmj`: the default unpackPhase will unpack it for you
<dmj`> clever: that’s if I set the src to my tarball
<dmj`> clever: I need to fetch 3 tarballs
<Lisanna> In hydra I've been giving each jobset one scheduling share. Would hydra behave differently if I gave each jobset 100 shares?
<clever> dmj`: you can run the unpackFile function on the tarball to unpack it
<Lisanna> despite each jobset having the same relative number of shares?
<Lisanna> relative percentage*
<dmj`> clever: I used fetchZip recommended by Lisanna and passed stripRoot = true
<dmj`> it seemed to unpack
<worldofpeace> jtojnar: so basically it starts gala and a bunch of gnome-settings-daemon stuff at `libexec/gsd-*`
<jtojnar> worldofpeace: but the desktop files are in datadir/share/applications, where as the g-s-d desktop files are in /etc/xdg/autostart
jperras has joined #nixos
<jtojnar> I do not see how could it know about them unless it also checks D-Bus session bus or something
drakonis has quit [Read error: error:1408F10B:SSL routines:ssl3_get_record:wrong version number]
drakonis has joined #nixos
drakonis has left #nixos [#nixos]
<jtojnar> worldofpeace: "Note that any item that you specify in RequiredComponents needs to have its corresponding .desktop file in /usr/share/applications/."
<worldofpeace> jtojnar: and seems that all of these get installed at /etc/xdg/autostart too -> https://github.com/elementary/session-settings/tree/master/autostart
<Lisanna> Oh man, yeah, setting schedulingshares = 1 for all my jobsets was really bottlenecking things
<jtojnar> oh, this is cool https://en.wikipedia.org/wiki/X_session_manager, I recall I played with session restore when I discovered Linux but it never worked well
<clever> jtojnar: i have noticed xfce sometimes restores my xterm and pavucontrol windows on login
<dmj`> Lisanna, clever: thanks
<Lisanna> oh god... now hydra has exploded and is using all 72 cores
<Lisanna> time to adjust the nice levels
ixxie has quit [Ping timeout: 240 seconds]
<worldofpeace> jtojnar: but I can't even get the greeter to start yet
<{^_^}> [nixpkgs] @flokli opened pull request #43644 → ksonnet: init at 0.11.0 → https://git.io/fN3IJ
magnetophon has quit [Remote host closed the connection]
magnetophon has joined #nixos
simukis has quit [Quit: simukis]
<tobiasBora> Hello,
Ross has quit [Quit: ZNC - http://znc.in]
<tobiasBora> I'd like to see the generated configuration
<tobiasBora> of openvpn
<tobiasBora> any idea where it's suppose to read it?
<tobiasBora> I tried to go in the openvpn folder (thanks to which/readlink), but I don't find any configuration file
<dmj`> why is fetching private repos from github w/ nix a huge pain in the ass?
<{^_^}> [nixpkgs] @eadwu opened pull request #43645 → glava: adjust syntax in patchelf command → https://git.io/fN3I4
<clever> tobiasBora: read the .service files in /etc/systemd/system/
<clever> dmj`: builtins.fetchGit can use your ssh agent
<tobiasBora> clever: good point, thanks!
ambro718 has quit [Quit: Konversation terminated!]
Ross has joined #nixos
<typetetris> I am trying to gi-gtk for some trivial haskell program, but If I create a fileChooserButton and click it, I get a strange error about gsettings schemas missing and my program terminates :( Do I need to specify some additional dependency for that to work? (the internet mentions that gsettings-desktop-schemas need to be installed ...)
johanot2 has quit [Remote host closed the connection]
troydm has quit [Quit: What is Hope? That all of your wishes and all of your dreams come true? To turn back time because things were not supposed to happen like that (C) Rau Le Creuset]
troydm has joined #nixos
<Lisanna> oh man, it was the nar compression that was killing my server
hxrts_ has quit [Ping timeout: 256 seconds]
MP2E has joined #nixos
civodul has quit [Quit: ERC (IRC client for Emacs 26.1)]
Ross has quit [Quit: ZNC - http://znc.in]
<dmj`> clever: I’m trying it
<dmj`> clever: /nix/var/nix/profiles/per-user/root/channels:ssh-config-file=/Users/dmj/.ssh/config
<dmj`> clever: Can't open user config file /Users/dmj/.ssh/config: Permission denied
<dmj`> yay
<clever> dmj`: builtins.fetchGit does not use <ssh-config-file>
<dmj`> clever: I’m using fetchGitPrivate
<dmj`> should I not be?
<clever> dmj`: that one is more complex to use
<clever> dmj`: thats why i said to use the builtins one
<dmj`> clever: ok I switched to the built-in one and it says "git@github.com: Permission denied (publickey)"
Ross has joined #nixos
<dmj`> clever: do I have to give nixbld access to my github key?
<clever> dmj`: no
<clever> the whole point of the builtin one is that you dont have to do that
<clever> dmj`: and if you `ssh git@github.com` what does it say?
<dmj`> clever: Hi dmjio! You've successfully authenticated, but GitHub does not provide shell access.
alex`` has quit [Quit: WeeChat 2.1]
<clever> dmj`: what is the content of ~/.ssh/config ?
<dmj`> clever: it’s empty
<dmj`> clever: but I can still clone git clone the repo I want in a shell w/ the ssh url
<clever> dmj`: what about `ssh-add -l` ?
<dmj`> clever: there are no identities
<clever> dmj`: run ssh-add on the path to your private key
<clever> then try the nix build again
<dmj`> clever: still same
<clever> dmj`: this is how you allow the ssh agent to work inside a nixbld user
<dmj`> clever: I thought the point was that it was supposed to just work, why not use fetchGitPrivate in this case
<clever> dmj`: yeah, i'm not sure why it isnt working for you
<dmj`> clever: how would I go about debugging this?
<dmj`> clever: my only assumption is that nixbld is looking at the wrong key?
hamishmack has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<clever> dmj`: builtins.fetchGit doesnt use nixbld
<clever> dmj`: run execsnoop in another terminal while its fetching, and pastebin the output
Guest50115 has quit [Ping timeout: 268 seconds]
<dmj`> clever: I’m on darwin
<clever> dmj`: execsnoop is a darwin tool
cryptomonoid has joined #nixos
<dmj`> clever: I didn’t think dtrace was avaialble
<dmj`> clever: dtrace: system integrity protection is on, some features will not be available
<dmj`> clever: dtrace: invalid probe specifier
<dmj`> just ran `sudo execsnoop -c nix-build`
alexteves has quit [Remote host closed the connection]
<clever> you need to turn off system integrity protection
qwerty_asdf has joined #nixos
<dmj`> clever: csrutil disable
<dmj`> clever: "csrutil: failed to modify system integrity configuration. This tool needs to be executed from the Recovery OS."
<clever> dmj`: you have to reboot into the recovery OS to do that
<dmj`> clever: if I do that I’ll see the message, "This is an unsupported configuration, likely to break in the future and leave your machine in an unknown state."
<dmj`> clever: is there a better way to debug this?
<clever> dmj`: switch to a better OS? :P
<clever> dmj`: what if you run nix-build with -vvvvv ?
<dmj`> clever: changing an os due to an ssh configuration problem seems like a heavyweight solution :)
<buckley310> so I'm attempting to run "gcc -m32 thing.c". does anyone have a quick one-liner to make this work? I eliminated at least one error with "nix-shell -p pkgsi686Linux.glibc pkgsi686Linux.binutils" but still doesnt compile :\
<clever> buckley310: nix-shell -E 'with import <nixpkgs> {}; pkgsi686Linux.stdenv.mkDerivation { name = "name"; }'
<clever> buckley310: the above will give you a gcc that is 32bit only, along with 32bit glibc
<clever> so you can just ignore the -m32 stuff
<buckley310> ahhh okay let see...
<buckley310> perfect :D thx
<dmj`> clever: that’s a lot of ‘v’s :)
<dmj`> clever: it seems to be executing under a nixbld user
<clever> dmj`: can you pastebin the output?
cryptomonoid has quit [Ping timeout: 244 seconds]
<clever> dmj`: and what is the content of /nix/store/8b5d4v9qilhdpn698qw3jq8n1x5iq0j5-postal-4ce8f5e.drv ?
<jtojnar> typetetris: you need to add ${gtk3}/share/gsettings-schemas/${gtk3.name} to XDG_DATA_DIRS environment variable
<jtojnar> wrapGAppsHook will do that for you
<clever> dmj`: that is not from builtins.fetchGit
coot has quit [Quit: coot]
<dmj`> clever: it should be
<dmj`> nixpkgs.fetchgit { url = “git@github.com …” }
<clever> dmj`: its very clearly not
dbmikus has quit [Ping timeout: 264 seconds]
<clever> dmj`: nixpkgs != builtins
<typetetris> jtojnar: Thanks. I added gtk3, gnome3.defaultIconTheme and wrapGAppsHook as executableSystemDepends, which fixed it too. Now I get a bunch of errors about dconf :( .... I need a key-value-store running to get a file chooser dialog ... grgrgr (sorry for visible frustration).
<dmj`> clever: oh
<dmj`> clever: I don’t have builtins.fetchgit
<clever> dmj`: builtins.fetchGit
<dmj`> omg
<typetetris> clever: Thanks.
<clever> dmj`: Git not git
<dmj`> clever: it doesn’t take a sha?
<jtojnar> typetetris: I think you should only get warnings when you do not have dconf daemon
<clever> dmj`: it does
<dmj`> clever: of the format ssh://git@github.com:user/repo.git ?
<typetetris> jtojnar: Yes, it works.
<clever> dmj`: builtins.fetchGit { url = "ssh://git@github.com/nixos/nixpkgs"; }
matthewbauer has quit [Ping timeout: 240 seconds]
<dmj`> clever: dmj@github.com: Permission denied (publickey).
<clever> dmj`: you need to set the user to git
<dmj`> that doesn’t look like my username though ...
<clever> refer to the example i just gave
<{^_^}> [nixpkgs] @dotlambda merged pull request #43631 → pythonPackages.parsy: init at 1.2.0 → https://git.io/fNO7n
<{^_^}> [nixpkgs] @dotlambda pushed 3 commits to master: https://git.io/fN3mg
<dmj`> builtins.fetchGit { url = "ssh://github.com/nixos/nixpkgs (username: git)"; }
<dmj`> clever: that?
<clever> 2018-07-16 19:32:40 < clever> dmj`: builtins.fetchGit { url = "ssh://git@github.com/nixos/nixpkgs"; }
<clever> that
<dmj`> my IRC client is changing it for some reason
<dmj`> to (username: git)
<dmj`> clever: can you add spaces so I can read it properly
<clever> dmj`: i resent the above msg over hangouts
knupfer has joined #nixos
<dmj`> clever: thanks
<elvishjerricco> dmj`: When using ssh to clone from github, the only user is git. Github.com figures out the user based on the directory you're trying to clone
hamishmack has joined #nixos
<dmj`> clever: it worked, you’re a hero
<dmj`> clever: thanks a ton
<clever> dmj`: in addition to a better OS, you may also want an irc client that doesnt mangle everything :P
<dmj`> clever: yea, this is definitely a first :)
<clever> oh, how does this render? `builtins.fetchGit { url = "ssh://git@github.com/nixos/nixpkgs"; }`
<dmj`> clever: ^
<clever> ah, much better
<dmj`> clever: :)
<dmj`> elvishjerricco: thanks!
<dmj`> fetchgit vs. fetchGit
<dmj`> will never make that mistake again
<dmj`> The nix user guide doesn’t even have a url example either
<dmj`> for when using builtins.fetchGit
<clever> it can accept both a string and a set containing a url field
<clever> `builtins.fetchGit "ssh://git@github.com/nixos/nixpkgs"` is identical to what i gave before
tzemanovic has joined #nixos
<clever> but then you cant set the rev
bollu has quit [Killed (adams.freenode.net (Nickname regained by services))]
Guest2436 has joined #nixos
lonokhov has quit [Ping timeout: 264 seconds]
lostman has joined #nixos
<lostman> hi all. i have a derivation that puts files in `/usr/bin` and `/usr/lib` and `/usr/include`. I'm trying to write a nix-shell expression that'd drop me in a shell where those are available. I tried `env = buildEnv { paths = buildInputs }` and variations of thereof but could get it to work. any ideas how to deal with this?
graphene has quit [Remote host closed the connection]
<{^_^}> [nixpkgs] @domenkozar closed pull request #40557 → haskell generic-builder: add doHpack (defaults to false) → https://git.io/vp5ni
graphene has joined #nixos
<srhb> lostman: Literally /usr/...? That's not possible, normally.
<srhb> lostman: All paths must be /nix/store/xxxx...-yourderiv/bin etc.
<lostman> @srhb so one thing at a time... let's say I create `$out/usr/bin/exe`. I expected that `buildEnv { paths = [ "${myderivation}/usr/bin" ] }` would expose it to nix-shell. But that doesn't seem to do anything
<worldofpeace> buildFHS?
<srhb> lostman: Ah, that's fine.
<srhb> lostman: You probably want to use mkDerivation with your shell.nix instead of buildEnv.
<srhb> lostman: But it should probably be $out/bin, not $out/usr/bin
<lostman> @srhb yeah I have `mkDerivation { name = "env"; buildEnv = ... }` in `shell.nix`. It does work if I copy files to `$out/bin`. but can I somehow make it work if I copy them to `$usr/bin`?
<srhb> lostman: you could set PATH manually, or use shellHook
joelpet has quit [Remote host closed the connection]
<infinisil> lostman: Why do you not want to use $out/bin/?
<clever> lostman: if you do echo $buildEnv inside the nix-shell, what do you see?
<lostman> `$buildEnv` is not defined in `nix-shell`
<clever> lostman: can you gist the nix file your using?
init_6 has joined #nixos
<lostman> infinisil: might try that. ultimately this derivation is a part of bigger whole that builds a docker image. so files to to `/usr/...` in the docker image. but I suppose I should put them in `$out/bin` `$out/include` in the derivation. what about something like `/usr/share` though? where do I put docs?
<clever> lostman: the docker image scripts automatically put the $out/bin/ stuff in $PATH for you, so you dont have to think about /usr
<clever> lostman: and share is $out/share/
<lostman> ah ok, I'll try to update that and see
<elvishjerricco> Is it possible to get pywal to just spit out config files rather than set everything on the fly?
orzo has quit [Ping timeout: 260 seconds]
<qwerty_asdf> elvishjerricco: i guess you could use pywal as a module
<catern> was kde4 removed from Nix?
timon37 has quit []
init_6 has quit []
<gchristensen> yea
* maurer shakes cane
<maurer> Back in my day, we used KDE3 because KDE4 wasn't stable yet
<andi-> thats not too long ago IIRC
<gchristensen> I remember that...
<andi-> I used KDE3 for a while... It felt much nicer and more fluent before everyone started doing compositing...
* andi- feels old
rprije has joined #nixos
jtojnar has quit [Read error: Connection reset by peer]
<gchristensen> it was like almost a decade ago
jtojnar_ has joined #nixos
jtojnar_ is now known as jtojnar
<andi-> wow
orzo has joined #nixos
thelostlambda has quit [Remote host closed the connection]
<catern> and where are the qt wrappers?
<catern> I assume: qt.qpa.plugin: Could not find the Qt platform plugin "xcb" in ""
<catern> indicates that I need to wrap my application?
lassulus_ has joined #nixos
jluttine has quit [Ping timeout: 240 seconds]
lassulus has quit [Ping timeout: 240 seconds]
lassulus_ is now known as lassulus
logzet has quit [Remote host closed the connection]
wpcarro has quit [Remote host closed the connection]
wpcarro has joined #nixos
<dhess> Anyone around who has a working NixOps container config posted on GitHub or GitLab or similar?
<dhess> The NixOps docs on containers are... poor.
wucke13 has quit [Quit: WeeChat 2.0]
<gchristensen> andi-: you struck me as more of an xmonad or i3 user
<catern> ah I see I have to install it
<hodapp> I miss WindowMaker
wpcarro has quit [Ping timeout: 244 seconds]
jackdk has joined #nixos
jluttine has joined #nixos
wpcarro has joined #nixos
<domenkozar> dhess: maybe clever has some
<samueldr> it still works, and has had a bit of updates
wpcarro has quit [Remote host closed the connection]
doyougnu has joined #nixos
wpcarro has joined #nixos
genesis has quit [Ping timeout: 256 seconds]
neeasade has joined #nixos
<manveru> is there some way to use the result of filterSource to pass each resulting file to a derivation?
<domenkozar> manveru: each separately?
<manveru> yeah
sigmundv has joined #nixos
<manveru> seems like filterSource results in a path, not a list :|
<manveru> i tried with readDir, but then i can't turn them into paths again
<domenkozar> ./ + foo
<manveru> uh
<domenkozar> well
<domenkozar> / + foo
<domenkozar> iKnowRight
jperras has quit [Quit: WeeChat 2.1]
<manveru> i'm not sure that works...
wpcarro has quit [Ping timeout: 244 seconds]
Forkk has quit [Ping timeout: 240 seconds]
<manveru> like, i can get this:
<manveru> > with builtins; map (n: ./. + n) (attrNames (readDir ./.))
<{^_^}> access to path '/var/lib/nixbot/state/nixpkgs' is forbidden in restricted mode
<manveru> oh well
<manveru> but just `/` seems to be a syntax error
<samueldr> paths can't end with a slash IIRC
<manveru> exactly
<dhess> domenkozar: hmm nothing obvious in his repos, anyway.
<manveru> and then i end up with `dirfile` instead of `dir/file`
<samueldr> + "/${n}"
<samueldr> at least, I had to do that a couple of times
<{^_^}> [nixpkgs] @dezgeg pushed to master « ibniz: init at 1.18 »: https://git.io/fN3GB
genesis has joined #nixos
<samueldr> (if there's a cleaner way, do tell!)
<manveru> hm
<manveru> that... works
<manveru> thanks :)
<kiloreux> I am trying to install a package with cmake (fluentbit). But I am stuck with this error
<kiloreux> file INSTALL cannot copy file
<kiloreux> "/tmp/nix-build-fluentbit-0.13.4.drv-0/fluent-bit-0.13.4/init/fluent-bit.service"
<samueldr> I think it's to do with how both paths are normalized without ending and starting slashes ?
<kiloreux> to "/lib/systemd/system/fluent-bit.service".
<kiloreux> About not being able to copy file to systemd
<kiloreux> anyone knows the solutions for it ?
telent has quit [Ping timeout: 264 seconds]
tzemanovic has quit [Remote host closed the connection]
Sonarpulse has quit [Ping timeout: 240 seconds]
tzemanovic has joined #nixos
ericsagnes has quit [Ping timeout: 240 seconds]
tzemanovic has quit [Read error: Connection reset by peer]
tzemanovic has joined #nixos
<samueldr> kiloreux: you may need to patch the CmakeLists.txt
<qwerty_asdf> Hi, I have a package (qutebrowser specifically) that requires a script to be run in order to pull in the lang. dict. I can go in the directory (nixos/<hash>/qutebrowser ..) and run it
<kiloreux> samueldr, would be so kind to tell me how I could do that ?
<qwerty_asdf> but is there a better way via the configuration file?