<gchristensen>
a proper solution is to use `jq -r '.[0].Layers | .[]' image/manifest.json` as the list of parents, and fall back to the parent ID key if that isn't available
thc202 has quit [Ping timeout: 260 seconds]
<boomshroom>
I'm a native English speaker and I have a very hard time with double letters. The fact that the root word only has 1 p, along with the suffix sometimes being "er" and sometimes being "or" doesn't help
<boomshroom>
English often doubles the last letter when adding suffixes. There's really no rhyme or reason for most of what happens in English.
<boomshroom>
Still doesn't solve my problem though. ;)
grumble has quit [Read error: Connection reset by peer]
gurmble has joined #nixos
gurmble is now known as grumble
<manveru>
boomshroom: i'd ask on the forum
<DigitalKiwi>
wow am I the only one that didn't find rawtaz rude I thought they were nice about it
<{^_^}>
[nixpkgs] @peti pushed to haskell-updates « hackage-packages.nix: automatic Haskell package set update »: https://git.io/fAh0s
<elvishjerricco>
/r/NixOS, but it's fairly dead over there
grumble has quit [Quit: Freenode looks forward to seeing you at the freenode #live conference, in Bristol on November 3rd and 4th. Check it out at https://freenode.live or join #live or read the /motd for more info!]
<adisbladis>
I guess in these more pathological cases you just have to create layers by hand
grenade has quit [Ping timeout: 264 seconds]
slack1256 has joined #nixos
<{^_^}>
[nixpkgs] @ento opened pull request #47414 → aws-env: init at 0.4 → https://git.io/fAhwz
<kandinski>
currently upgrading to 18.09, binary caches working, all good!
<kandinski>
(I thought only speaking up when something doesn't work and I require help was churlish, so here's to everything working perfectly :champagne_glass:)
Anton-Latukha has joined #nixos
grenade has joined #nixos
doyougnu has joined #nixos
doyougnu has quit [Ping timeout: 245 seconds]
Rusty1 has quit [Quit: Konversation terminated!]
sb0 has joined #nixos
sb0 has quit [Remote host closed the connection]
wpcarro has joined #nixos
phreedom_ has joined #nixos
phreedom has quit [Ping timeout: 256 seconds]
endformationage has quit [Quit: WeeChat 1.9.1]
andreabedini has joined #nixos
klntsky has quit [Remote host closed the connection]
klntsky has joined #nixos
<sphalerite>
kandinski: \o/
utdemir has quit [Remote host closed the connection]
<Myrl-saki>
sphalerite: Still runs too fast, apparently.
<Myrl-saki>
Sep 27 16:18:40 myrl-lappy bnsg7dxghggm81nvk9xinmdy0yygran9-unit-script-wpaHook-start[9588]: Failed to connect to non-global ctrl_ifname: (nil) error: No such file or directory
Sigyn has quit [Quit: People always have such a hard time believing that robots could do bad things.]
<Purple-mx>
that wouldnt make sense, but its in the nix repo
<srhb>
Purple-mx: Hmm? That wouldn't make sense how?
<johanot>
srhb: So.. I beleive my real question is: If I set a single custom key in "nix.binarycachepublickeys", will the key of cache.nixos.org still be trusted? (by some magic) :)
<srhb>
johanot: Yes, I believe so.
<Purple-mx>
then all nix binaries could become unsafe with a lost key
<johanot>
srhb: So.. It can never be revoked? :D
<srhb>
Sure, we just have to release a new Nix!
<srhb>
But feel free to test whether I'm wrong :-P
adamt has joined #nixos
<Purple-mx>
I took the key out of nix.conf several times and the nixos.org cache didnt check out
<srhb>
Then I'm clearly wrong. :)
<andi->
it is a `listOf` attribute so it should append any other keys to the list.
<adamt>
Also johanot would like to point out that was his idea, not mine. :P
<srhb>
Suuure
<johanot>
adamt: oh just.. stop :P
<tobiasBora>
Hello,
<srhb>
adamt: johanot: Maybe raise an issue on the nixos homepage repo?
<srhb>
I can't find the sources for the cache front page directly, but that would be a place to start.
<Purple-mx>
good question thou
<Purple-mx>
we could also setup something for different people to compare their builds
<tobiasBora>
I'd like to know, when I install a new app, and reboot, KDE system does not take into account the new .desktop file that appears in /run/current-system/sw/share/applications, *even if I reboot*. However, once I run "kbuildsyscoca5", the menu is updated. Shouldn't "kbuildsyscaco5" be run automatically?
<srhb>
Purple-mx: Hmm? What do you mean? Bitwise?
<Purple-mx>
yea since they should be identical
<srhb>
They're not.
<srhb>
It would be interesting to know how much they're not, though.
<Purple-mx>
well, not all packages
<srhb>
We can take bets. I'd say 80% of all packages are bitwise non-deterministic :P
<Purple-mx>
certainly, the statically compiled simple things are
<symphorien>
Purple-mx: there is nix-build --check for this (if I understand what you mean correctly)
<srhb>
Debian probably knows better.
<Purple-mx>
80% of packages I have no interest in :)
georges-duperon has quit [Ping timeout: 252 seconds]
<Purple-mx>
most of nixpkgs is just bload
<srhb>
Opinions, opinions... ;)
<Purple-mx>
but my gf likes vscode, so I cant complain
<Purple-mx>
I still plan to build a minimal fully static base sys
<Purple-mx>
like oasis
<srhb>
Why static?
rauno has joined #nixos
<Purple-mx>
or stali
<Purple-mx>
its faster, and why not
Sigyn has joined #nixos
* srhb
shrugs
<srhb>
I guess, if you have the disk space :)
<Purple-mx>
someone here is doing it, I remember him/her reporting some amazing benchmarks
<Purple-mx>
well, oasis builds the entire OS in under 10mins
<Purple-mx>
its pretty small
<srhb>
I live in the dark ages with tiny harddrives, so statically linking my system would be a largeish problem.
<Purple-mx>
there aint no electron/chrome in it!
jperras has joined #nixos
<Purple-mx>
how small is tiny
<Purple-mx>
my workstation has 200gb ssd
<srhb>
Yeah, same here.
<Purple-mx>
thats big I find
<Purple-mx>
I used to live in 16gb for a while
<Purple-mx>
not with nixos thou
<srhb>
Indeed. Right now my store is 100GiB. Can't really imagine what would happen if most things were statically linked. But maybe it's okay for the base system, though I'd be surprised if it were that much faster. I've never investigated the impact though.
<Purple-mx>
less context switching
<srhb>
How so?
<Purple-mx>
load only one binary
<srhb>
I mean, aren't all the context switching shimmed in via the magical kernel loader anyway?
jperras has quit [Ping timeout: 246 seconds]
<Purple-mx>
nothing is free
<adisbladis>
tobiasBora: That would require some dark magic. Maybe we should have a systemd unit that is injected for every user logging in with KDE that does that?
<Purple-mx>
cheap, certainly
<srhb>
Hmm. I don't know enough about this to say one way or the other, but I'm surprised and don't really understand where any extra context switches would be coming from.
<srhb>
Anymoo, this is probably a topic for #nixos-chat
<adisbladis>
tobiasBora: Iirc it is being run on system activation
<adisbladis>
tobiasBora: But that does not affect the current desktop session
<tobiasBora>
adisbladis: well on my case even after reboot I still didn't have any update
<adisbladis>
tobiasBora: Does your user has isNormalUser set?
<rauno>
adisbladis, before u suggested to use go2nix for package generation, not sure but somewhy it doesnt add any dependencies to deps.nix :)
sigmundv has quit [Remote host closed the connection]
<adisbladis>
rauno: Follow the readme in the repo. It's not entirely intuitive imho
sigmundv has joined #nixos
<Phlogistique>
Is there a pre-canned way to produce a tar.gz of (a closure + a set of symbolic links to the interesting paths, stored in, say, /usr/local/...)
tg has quit [Excess Flood]
<Phlogistique>
something like 'find result -type f | while read f; do mkdir -p fhs/usr/local/$(dirname $f); ln -s $(realpath $f) fhs/usr/local/$f; done; tar caf portable-install.tar.gz -C fhs . $(nix-store -qR result)'
philippD has joined #nixos
<srhb>
Phlogistique: Hmm. I think the easiest way would be to buildEnv first and then tar that up.
<Phlogistique>
srhb: I'll look into what buildEnv does, thanks
<srhb>
Then you'd just have to traverse the dependencies in Nix itself.
DigitalKiwi has joined #nixos
<srhb>
Speaking of buildEnv, does anyone know which side wins if you have a conflict and ignoreCollisions?
<teto>
srhb: the dark side ? dunno sry :/
<Phlogistique>
unrelated question: is there a way to check the version of Nixpkgs from my Nix code?
<tobiasBora>
Hum... Also I've a question, why does "nix-shell -p python2
<tobiasBora>
" works, but not "nix-shell -p python2 -p bash --run "bash""?
<infinisil>
,dnw
<{^_^}>
"Does not work" isn't very helpful: What doesn't work? What's the error?
<infinisil>
(unless I'm missing context here)
<tobiasBora>
(in the second I have a bash with strange start/end, the python executable is not found, and all usefull tab completion sutff are disabled anyway)
<tobiasBora>
infinisil: yes, I was writting it ;)
<srhb>
tobiasBora: You're probably 1) losing the path that you'd get from not using --run bash and 2) getting fun nesting of PS1
<tobiasBora>
srhb: I don't understand why I lose the path. If I use "python" instead of "bash" it founds the exec, so what's wrong with bash?
<srhb>
Actually I'm not quite sure how you're losing path. Probably some bash init scripts
<srhb>
tobiasBora: wfm :) Except the fun PS1 mangling. Don't nest it like that. :)
<srhb>
What you're doing doesn't really make sense to me anyway. What are you actually trying to achieve?
rauno has quit [Ping timeout: 245 seconds]
<srhb>
nix-shell already gives you a bash(Interactive)
<tobiasBora>
srhb: Well I guess I'm trying to understand what nix-shell does. For me, nix-shell setups a given set of paths/closures/libraries provided the -p options, an then run the program given in "--run"
<srhb>
(Which, if you used that, would probably fix PS1 anyway, but I don't see why you'd want to specify that manually)
<srhb>
tobiasBora: Yep, that's the case.
<tobiasBora>
srhb: well I'll for sure use the "nix-shell -p python" method, but I'd like to understand also why the other method fails
<tobiasBora>
srhb: so what's the fundamental difference between --run bash, and nothing?
<srhb>
tobiasBora: Again I'm not sure why your PATH is wrong, that must be some local bash setup on your side
<srhb>
tobiasBora: Nothing really, but you're getting a different bash than you expect.
<tobiasBora>
srhb: my bashrc is empty ^^
<srhb>
I do guess you may be skipping some shellHooks
asymmetric has joined #nixos
<tobiasBora>
hum...
<tobiasBora>
and also why is there this PS1 nest problem?
<srhb>
because you're using bash instead of bashInteractive
<tobiasBora>
srhb: what? bash and bashInteractive are not the same?
<tobiasBora>
Then why don't I have this problem when I type directly "bash" on my console?
<srhb>
tobiasBora: the executable is named bash in both packages
<srhb>
tobiasBora: try exchanging -p bash with -p bashInteractive
<{^_^}>
[nixpkgs] @domenkozar pushed commit from @dezgeg to nixos-tests-debug « Add ssh backdoor to VM tests infrastructure. »: https://git.io/fAhxg
Synthetica has joined #nixos
sb0 has quit [Quit: Leaving]
<{^_^}>
[nixpkgs] @domenkozar opened pull request #47418 → Add ssh backdoor to VM tests infrastructure. → https://git.io/fAhxX
<srhb>
tobiasBora: I don't know about your PATH issue though. That's a bit surprising to me. But I don't know exactly what you're disabling when you use --run like that. It might work with --command instead
<etu>
It says green at the top but there's a big bunch of timeouts
oida has quit [Remote host closed the connection]
<srhb>
etu: Um, yes...
oida has joined #nixos
<srhb>
And if we look closer, there's a bunch of timeouts
<srhb>
This does appear to be a bug.
simukis has joined #nixos
<etu>
And possibly a dangerous one I'd say
<srhb>
etu: Yep, thanks for the heads-up.
<srhb>
I'll write up an issue.
<srhb>
Best case it's due to restarts
<etu>
srhb: Thanks :)
<srhb>
And tested really was okay at some point. But then I believe latest-finished should jump back in time.
Wharncliffe has joined #nixos
<azazel>
srhb: restarts? care to explain it better?
<adamt>
the colouring of the job id's on hydra is awful. The good one is just this silly red/green colour :P
<srhb>
azazel: Not really, I'm a bit fuzzy on Hydra's interpretation of "latest-finished" when restarts are involved, and I'd rather not misinform you :)
<etu>
srhb: Link the issue here when you've written it so I can subscribe to it:)
<azazel>
srhb: ok, nevermind
<etu>
adamt: There's also the blue one which seems to be "haven't failed yet"
<{^_^}>
[nixpkgs] @xeji merged pull request #47416 → remove Perl 5.22 and 5.24 (end-of-life upstream few months ago) → https://git.io/fAhNq
<tobiasBora>
srhb: ohh I understand, now it works great
<tobiasBora>
srhb: and I don't know why I can't reproduce the PATH issue
<tobiasBora>
I guess I just though there were an issue because I couldn't tab complete
georges-duperon has quit [Ping timeout: 252 seconds]
<srhb>
Ah, that makes more sense.
<{^_^}>
[nixpkgs] @domenkozar pushed commit from @dezgeg to nixos-tests-debug « Add ssh backdoor to VM tests infrastructure. »: https://git.io/fAhp1
<tobiasBora>
srhb: thank you very much for your help!
<srhb>
tobiasBora: Welcome
<srhb>
etu: You're etu on github as well, right?
<tobiasBora>
I'm also thinking, why doesn't nix provide a way to run "/bin/env python"? Because it means that when I download a python script, I need to modify the shebang everywhere in the source, and it looks really dirty, especially when you want to distribute a code to other people/distros
<etu>
srhb: yea:)
<adamt>
tobiasBora: e.g. #!/usr/bin/env python
<etu>
tobiasBora: nix has a /usr/bin/env, so you can write your own scripts like that. And for packages we patch the shebangs with a command called patchShebangs, you can find use of it in many places in nixpkgs :)
<wirew0rm>
one thing that tends to confuse me is finding derrivations. https://nixos.org/nixos/packages.html#, nix search and command-not-found all seem to use different data sources/semantics.
<srhb>
wirew0rm: iirc nix search searches whatever nixpkgs is on your NIX_PATH, command-not-found uses some specific database generated (maybe on hydra?) by necessity, and packages.html uses the latest release as a source.
<srhb>
When in doubt, I'd prefer nix search.
<wirew0rm>
ah and i forgot locate in this channel ^^
iyzsong has joined #nixos
<vdemeester>
gchristensen: on `buildLayeredImage` (and `buildImage`) are only generating a docker image tarball (that can be loaded in a docker daemon), right
<vdemeester>
?
<srhb>
wirew0rm: You can get that feature locally (mostly) using the nix-index package
kiloreux has quit [Ping timeout: 245 seconds]
<Jetien>
Are there some helper functions that allow you to use callPackage on IFDs?
<Myrl-saki>
Jetien: What do you mean by that?
<Jetien>
Myrl-saki: I want to refactor (callPackage ./foo/default.nix {}) to (f <expr> {}) where <expr> = import "${someDerivation}"/default.nix ... Come to think of it... wouldn't a solution be to drop the "import" and then f=callPackage ?
<Myrl-saki>
Jetien: I don't think you can callPackage a URL.
<Jetien>
More simply is (callPackage ./foo/default.nix {}) equivalent to (callPackage "${someDerivation}/default.nix" {}) ?
<srhb>
Jetien: assuming that ./foo is relative to the store path of someDerivation, yes
<Myrl-saki>
A URL is equivalent to a string, FWIW.
<Myrl-saki>
Rather, a URL *is* a string.
<Myrl-saki>
Er, wait, I got side-tracked there.
<Jetien>
hehe :)
<Myrl-saki>
Jetien: And yeah, that's correct.
<Myrl-saki>
Wait, is it?
<Myrl-saki>
Let me check.
<srhb>
Jetien: I'm not sure what you're asking. I think it's "can I callPackage a nix file I fetched with some fether" -- and the answer is yes.
<Twey>
Myrl-saki: Path literals are actually copied/expanded to strings in the parse phase, I think
<Twey>
So paths don't exist in the language at run time
<Twey>
They're just absolute strings
<Twey>
I remember reading that somewhere
<Myrl-saki>
Twey: I don't think so.
<Myrl-saki>
Oh wait, you might be right.
<Myrl-saki>
Twey: Though, to make one thing clear, I believe that there are path types.
<{^_^}>
[nixpkgs] @domenkozar pushed commit from @dezgeg to nixos-tests-debug « Add ssh backdoor to VM tests infrastructure. »: https://git.io/fAjv8
<Myrl-saki>
But I think they only differ in the result of "${x}"
<Twey>
Myrl-saki: No, I misremembered, it's just the relative path to absolute path translation that happens at parse time
<Twey>
But it remains a path value
<Myrl-saki>
Right.
<Twey>
« If the file name is relative, i.e., if it does not begin with a slash, it is made absolute at parse time relative to the directory of the Nix expression that contained it. »
<Myrl-saki>
Ah.
<Myrl-saki>
I wonder how that relates with things like nix repl.
<Twey>
§15.1
<Twey>
Yeah
<Myrl-saki>
Twey: Also, I love how clean that statement is, actually. By having that statement, `--arg x ./.` theoretically doesn't require special parsing.
<azazel>
noo, really 18.09 will come out wit nix 1.x?
<infinisil>
No
<infinisil>
It's just the minimum required Nix version for evaluating nixpkgs
<azazel>
ah
<azazel>
sorry for the noise
<srhb>
It'll come with Nix 1 in the sense that you can choose to use nix1 :P
Wharncliffe has quit [Ping timeout: 260 seconds]
<cyris212>
Is there a simple way to get pip working on nixos?
<cyris212>
I always get "Can't connect to HTTPS URL because the SSL module is not available."
<azazel>
cyris212: read the python section in the nixpkgs manual
<cyris212>
azazel: thx
<azazel>
cyris212: there is a nix-shell nix to run in an "hybrid" setup like yours
<azazel>
srhb: I've jumped the 2.x bandwagon and I stopped caring about "nix --help" last line :-P
<srhb>
azazel: I use the nix command-style for some things and not others
<tobiasBora>
adamt: Ok i got it, I needed to explicitely install python2/3. Any idea if it's possible to change the default interpreter for the command "python"?
<tobiasBora>
etu: ok thank you!
<srhb>
tobiasBora: If you install python3, python --version is python3
<srhb>
tobiasBora: If you install python2 and 3, python is python2, because it has a higher priority.
<srhb>
If you wish the have both installed and have python be python3, alter the priority of python3 to be higher than that of python2 (or alter python2 to be lower than python3)
johanot has joined #nixos
<tobiasBora>
srhb: oh you have package priority?? Interesting. I found "nix-env --set-flag priority" for nix-env, but I'm using nixos-rebuild switch and I can't find how to change priority
<tobiasBora>
or maybe it depends on the order of the expressions?
<gchristensen>
tobiasBora: if you have python2 and python3 installed at the same time, according to Python's rules, `python` _must_ be `python2`
<tobiasBora>
srhb: And python3 is 0? then why is python2 selected by default?
<gchristensen>
because of the rule ^
<tobiasBora>
gchristensen: ok good to know. I'm doing that more to learn how to do that in nix ;)
<srhb>
gchristensen: I don't think so? Where is that rule?
<gchristensen>
tobiasBora++
<{^_^}>
tobiasBora's karma got increased to 1
<tobiasBora>
gchristensen: thanks ;)
<tobiasBora>
gchristensen++
<{^_^}>
gchristensen's karma got increased to 29
<tobiasBora>
srhb++
<{^_^}>
srhb's karma got increased to 20
<tobiasBora>
clever++
<{^_^}>
clever's karma got increased to 27
<tobiasBora>
I like that ^^'
<tobiasBora>
sphalerite++
<{^_^}>
sphalerite's karma got increased to 26
<tobiasBora>
sorry for spam
<gchristensen>
"for the time being, all distributions should ensure that python, if installed, refers to the same target as python2, unless the user deliberately overrides this or a virtual environment is active."
<srhb>
gchristensen: I mean, where do you think we implement this aside from meta.priority?
<tobiasBora>
gchristensen: and if I want to "deliberately overrides", how should I do that in nix?
<gchristensen>
nowhere
<gchristensen>
don't install python2 :)
<srhb>
Indeed
<srhb>
So the answer is "because python2 is -100, so python3 with 0 has lower priority"
<tobiasBora>
and if I want python2 ?^^
<srhb>
tobiasBora: If you set python3 to eg. -200, it'll win
<tobiasBora>
srhb: ohhh
<tobiasBora>
you mean that higher priority is lower priority
<infinisil>
> lib.highPrio
<{^_^}>
attribute 'highPrio' missing, at (string):195:1
<srhb>
Higher number = lower priority
<gchristensen>
kind of unintuitive :)
<infinisil>
> lib.hiPrio
<{^_^}>
<LAMBDA>
* tobiasBora
hit the face on the screen
<tobiasBora>
hits*
patrl has joined #nixos
<infinisil>
> deepEval (lib.hiPrio {})
<{^_^}>
{ meta = { priority = -10; }; }
<infinisil>
python2 should really be -5 or so, such that this function can override it
<infinisil>
Or hiPrio should be -1000
<srhb>
But then we'd be making it easy to break the rule!
<srhb>
:P
<infinisil>
That's a point
<srhb>
Yes, and I agree. :P
sir_guy_carleton has joined #nixos
<tobiasBora>
ok, so -300 works great. thank you!
<tobiasBora>
now let's remove the rule gchristensen :P
jkarni has joined #nixos
<gchristensen>
:D
<srhb>
tobiasBora: Expect the things you download to break on version compatibility instead now, though :P
<tobiasBora>
srhb: yes, that's why I removed this rule, I finished my exercice, don't need it anymore!
<srhb>
Hehe
<Twey>
I think the manual isn't correct re builtins.toPath
<jkarni>
are there examples of using (haskell's) stack inside nixos? I've come across stack2nix, stackage2nix and other examples, but every solution I've tried fails in some way
<Twey>
« Convert the string value s into a path value. The string s must represent an absolute path (i.e., must start with /). The path need not exist. The resulting path is canonicalised, e.g., builtins.toPath "//foo/xyzzy/../bar/" returns /foo/bar. »
<{^_^}>
[nixpkgs] @Mic92 pushed commit from @griff to release-18.09 « nixos/rspamd: Preserve runtime directory when using socket activation »: https://git.io/fAjOC
iyzsong has quit [Ping timeout: 272 seconds]
Dedalo has joined #nixos
jasongrossman has joined #nixos
<{^_^}>
[nixpkgs] @peti pushed 5 commits to haskell-updates: https://git.io/fAjOM
<{^_^}>
[nixpkgs] @peti pushed to haskell-updates « all-cabal-hashes: update to Hackage at 2018-09-27T00:15:48Z »: https://git.io/fAjOx
<adamt>
I'm testing nix-serve now. It seems to work, until I enable nix.requireSignedBinaryCaches, which causes errors like "warning: substituter 'https://nix-cache.dbc.dk' does not have a valid signature for path '/nix/store/lyvgswd1nplqix8izq2mdylcplb1i6p0-ceph-13.2.1'". nix-serve doesn't say anything in the logs, and the generated narinfo seems to be signed by us
<adamt>
I even generated a new set of keys, with the same result
<gchristensen>
is the signature trusted by Nix on that computer?
alex`` has quit [Quit: WeeChat 2.2]
<adamt>
I added it to binaryCachePublicKeys in the form "nix-cache.dbc.dk-1:4npBH1Tha35M3v2Ajy7x5GkjClSG97cfqfBHqCtoiW8=" -- should the name of the key be stripped away?
<adamt>
*nix.binaryCachePublicKeys
<srhb>
adamt: does nix show-config show that key?
Rusty1 has joined #nixos
alex`` has joined #nixos
<srhb>
I like the -1 convention. Is that meant to be an "oops"-counter? :P
<adamt>
srhb: Yes, but it's a bit weird: trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= nix-cache.dbc.dk-1:4npBH1Tha35M3v2Ajy7x5GkjClSG97cfqfBHqCtoiW8= cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
<adamt>
that cache.nixos.org-1 shows up first and last
<adamt>
srhb: Yes, it's an officially recommended oops-counter
<srhb>
adamt: Probably added it to the default list.
<srhb>
Looks right to me
<adamt>
Ah yeah, we hardcoded the pubkey from cache.nixos.org in our own configs as well earlier, should be save to stop doing that.
<srhb>
Well, at this point it does sound like the signature is not valid, because your settings look correct.
alex`` has quit [Client Quit]
<adamt>
I wonder whether nix-serve caches the generated sigs for the NAR's
<Taneb>
I know, I'm just annoyed that I'm hitting the problems
<srhb>
Taneb: Trailblazing! Think of all the cheap internet points from easy dontCheck PRs! :-)
<Taneb>
:P
<Taneb>
hindent is more than a dontCheck, I'm afraid
<srhb>
Aww
<Taneb>
I think it needs a newer version?
<srhb>
Ah well, that should be fairly simple too :)
astronavt has joined #nixos
astronavt_ has joined #nixos
sir_guy_carleton has quit [Quit: WeeChat 2.0]
astronavt has quit [Ping timeout: 252 seconds]
iyzsong has quit [Read error: Connection reset by peer]
sir_guy_carleton has joined #nixos
<Taneb>
hindent is a false alarm, I forgot I was overriding it
<srhb>
Taneb: Here's a suggestion from my overrides: When I do an override, I gate it on the version as it was _when I made the override_ and throw if that's no longer the case
<srhb>
That way my overrides report when they're probably out of date
<Taneb>
srhb: how would I do that?
kiloreux has quit [Ping timeout: 250 seconds]
<srhb>
if super.package.version != ... then throw ... else normal override
<Taneb>
Ah, neat :)
<Taneb>
Thanks for the the suggestion!
kiloreux has joined #nixos
<srhb>
Welcome
aminechikhaoui has joined #nixos
sir_guy_carleton has quit [Ping timeout: 272 seconds]
<{^_^}>
#40816 (by nyanloutre, 18 weeks ago, open): electrum and electron-cash: add support for btchip library
kiloreux has joined #nixos
Twey has quit [Ping timeout: 260 seconds]
<maurer>
hodapp: Jupyter has had OCaml, Haskell, and JS support at minimum (there may be others) for a while. I saw a PR landed which seemed to add configurability to services.jupyter, but it hasn't made it to the manual yet
jperras_ has quit [Read error: Connection reset by peer]
<maurer>
so I was seeing if someone had a concrete config before I went and tried to read the module itself to figure out how to configure it
<hodapp>
maurer: it's the configurability I was interested in
Twey has joined #nixos
<nyanloutre[m]>
Or if anyone is willing to review a new Python module it should be fine too
<lewo``>
vdemeester: umoci seems promising, but there is not a lot of activity on it... this is why I would prefer to try with buildah
<vdemeester>
lewo``: well umoci is mostly one guy (alex) where buildah is several RedHat engineers 👼
<lewo``>
vdemeester: do you know if umoci is used somewhere? becuase it looks like more a poc
<vdemeester>
I think it's used in some opensuse project (should ping alex to be sure of what I'm saying :D)
orivej has joined #nixos
<vdemeester>
I know there is also people looking into it as it's rootless (so it's a pretty good candidate to use in some envs where you can't require root privileges)
<lewo``>
yes, I agree it's a better candidate than buildah
obfusk has joined #nixos
waleee has joined #nixos
averell has quit [Quit: .]
<maurer>
hodapp: It looks like the configurability is there, but you'd have to write the definitions for anything ohter than the ipython kernel at the moment
vandenoever has joined #nixos
<gchristensen>
"nix-shell now uses bashInteractive from Nixpkgs, rather than the bash command that happens to be in the caller’s PATH. This is especially important on macOS where the bash provided by the system is seriously outdated and cannot execute stdenv’s setup script." should nix put bashInteractive ahead of the other bash in the PATH?
jperras has joined #nixos
graphene has quit [Remote host closed the connection]
<maurer>
Well, it appears to be a moot point (how to configure kernels properly) since ihaskell doesn't build at the moment since zeromq is erroring out
<teto>
maurer: There is some doc for the jupyter module. If you look into issues, you can find how I configured the haskell kernel. I have written some to improve both the module and haskell kernel but still WIP
jperras has joined #nixos
jperras has quit [Read error: Connection reset by peer]
asymmetric has quit [Ping timeout: 252 seconds]
<maurer>
teto: I saw that, but ihaskell itself does not build at the moment because zeromq is test-failing on some setopts calls
jperras_ has joined #nixos
<maurer>
I've left off for now
fendor has quit [Quit: Leaving]
fendor has joined #nixos
<{^_^}>
[patchelf] @reidpr opened pull request #159 → Overwrite soname in place if there is room → https://git.io/fAj2Y
graphene has quit [Remote host closed the connection]
<{^_^}>
[nixpkgs] @xeji pushed commit from @dywedir to master « arc-theme: fix `config.allowAliases = false` evaluation (#47427) »: https://git.io/fAjVQ
jperras_ has quit [Quit: WeeChat 2.2]
pi3r has quit [Ping timeout: 252 seconds]
<{^_^}>
[nixpkgs] @roberth opened pull request #47430 → Add Nixpkgs functions for adding overlays ad-hoc → https://git.io/fAjwi
<judson>
Hm. I'm trying to set up a Rails app (which feels only slightly quixotic) on a test server. I'd like at some point to integrate the work with NixOS modules...
<judson>
Rails needs a Javascript executor at runtime though (right?). For building the app, I've used `buildInputs = [ nodejs ]`, but Node should also be on the path for running the server.
<judson>
Should I a) have the module add nodejs to systemPackages? b) add node to the systemd PATH argument? c) do something with the Rails app package to put node always in its env?
<manveru>
judson: usually you'd add nodejs to the gem that needs it
<manveru>
i think most use libv8, so should work already :)
<judson>
Hm. That's definitely the right tack to take.
<judson>
Meaning, most folks use the libv8 gem for JS stuff?
<manveru>
yeah
<judson>
The error I'm too is "There was an error while trying to load the gem 'uglifier'. Gem Load Error is: Could not find a JavaScript runtime."
lebel has quit [Ping timeout: 252 seconds]
<manveru>
i guess they don't then... i thought uglifier was a node package
kiloreux_ has joined #nixos
<judson>
Simplest thing for me might be to add libv8 to the Rails app. Which works for me, but not for Nix-agnostic projects.
<judson>
I think it is also a Ruby gem.
<judson>
Why we can't have nice things.
<manveru>
yeah, so just add nodejs to the PATH of that gem, there's plenty of examples in the linnk
lebel has joined #nixos
<manveru>
something like `gemConfig = defaultGemConfig // { uglifier = attrs: { buildInputs = [ nodejs ]; }; };` in your bundlerEnv should work
<judson>
Yeah. For purposes of experiement I'll need to merge something into the gem-config, but that should be easy.
<judson>
Yep yep/
<manveru>
and i'd appreciate a PR so nobody else hits this :)
<judson>
There are going to be several :)
<manveru>
cool
<judson>
Deploying Rails was one of the use cases that brought me to Nix in the first place. Then I stopped using Rails :D
<{^_^}>
[nix] @grahamc opened pull request #2455 → nix-shell: add bashInteractive to the start of the PATH, set SHELL → https://git.io/fAjrP
<manveru>
yeah... haven't had to deal with much rails for almost a year now :D
wpcarro has quit [Ping timeout: 240 seconds]
<judson>
The related thing I've been thinking about: the nginx module has builtins for proxypass stuff. Setting up similar for Apache isn't difficult. But it'd be nice to have proxied webapps add to a "rendevous" module, and let the operator decide if proxying happens on apache on nginx or what.
<judson>
Make sense?
<judson>
Alternatively, I've also got a little "staticWeb" module that could get blended together into a "websites" thing with e.g. proxy = true;
<manveru>
like a list of all apps running HTTP on non-port-80?
<{^_^}>
[nix] @grahamc closed pull request #1483 → WIP nix-shell: Use bashInteractive from <nixpkgs> → https://git.io/v7IHU
<judson>
That you want your web server to front for.
Henson has quit [Read error: Connection reset by peer]
<exarkun1>
if I set `nixpkgs.overlays` to include an overlay then I get infinite recursion in part of the overlay definition. maybe my overlay is busted? this is my first one.
<{^_^}>
[nixpkgs] @disassembler pushed 2 commits to master: https://git.io/fAjX1
<buckley310>
kernel: .gnome-shell-wr[3759]: segfault at 20 ip 00007f526ff047bd sp 00007fffe39b0190 error 4 in libmutter-2.so.0.0.0[7f526fdf0000+18f000]
DigitalKiwi has quit [Ping timeout: 250 seconds]
lostman has joined #nixos
<lostman>
hi all. I'm having issues with nixops+libvirtd. It's copying the closure from my host laptop with my user's UID (ubuntu+nix, not nixos) and VM is broken due to wrong permissions of /nix/store. Any ways to fix this? I needed to ssh, remount /nix/store, fix permissions, restart, but that's not a good way
thibm has joined #nixos
<Myrl-saki>
Is there a way to "defer ./."?
<infinisil>
Myrl-saki: Not sure what you mean
<Myrl-saki>
I'm thinking of doing something like `f (trace ./.)` to found out where f is declared.
<Myrl-saki>
On second thought, that might not actually make much sense.
asymmetric_ has quit [Remote host closed the connection]
<infinisil>
You can get definition lines of attributes via builtins.unsafeGetAttrPos
<infinisil>
But I see what you mean by defer ./. now
<infinisil>
There is no reliable and easy way I'm afraid
<azazel>
i don't... what "where is used" means? accessed? modified?
<Myrl-saki>
azazel: accessed.
<infinisil>
Nix is immutable, there's no modifying
<infinisil>
Simplest way is to just grep
sigmundv has joined #nixos
<infinisil>
But that's not what you're looking for I guess
<infinisil>
A bit more complicated is putting traces all over the place and to put a `throw "..."` in config.foo.bar
<infinisil>
Then when execution stops, you'll have somewhat of an idea
Dedalo has joined #nixos
<infinisil>
There's a way to add a trace when any package from pkgs is evaluated
<infinisil>
I just played around with this idea a bit some days ago. It should be possible to generate a ranking of attributes using that, which would be very useful for a number of purposes
sigmundv has quit [Ping timeout: 240 seconds]
<Myrl-saki>
infinisil: How'd you do it?
catid has joined #nixos
<infinisil>
Haven't really done it yet, hold on, doing it now though
<catid>
Hello! Doing some C++ development, and CMake is saying "cannot find -lx264" though the package is installed system-wide. I must be missing something basic - How do I make installed libraries available to CMake?
<{^_^}>
[nixpkgs] @xeji closed pull request #47370 → Added TEXMF variable to environment for tex wrappers, fixes #19279 → https://git.io/fAxCD
<symphorien>
,library catid
<{^_^}>
catid: Don't install libraries through nix-env or systemPackages, use nix-shell instead. See https://nixos.wiki/wiki/FAQ/Libraries for details.
<catid>
+1
<symphorien>
try to build inside nix-shell -p libx264 cmake, catid
<symphorien>
cmake must be specified with the libs and not installed globally because it enables some magic so that cmake sees the deps. Same for pkgconfig by the way.
<catid>
I can put those parameters into default.nix in the project folder to avoid having to type them out right?
<symphorien>
yes: libs in buildInputs and cmake/pkgconfig in nativeBuildInputs
Twey has quit [Ping timeout: 252 seconds]
<symphorien>
(nativeBuildInputs is for things executed when building, buildInputs if for things executed when running the result)
<infinisil>
I'll experiment some more with it to generate an attribute importance mapping
georges-duperon has quit [Ping timeout: 252 seconds]
<drewr>
I'm running nix-shell and getting an outdated version of gcc; how can I pin or otherwise get the latest?
Dedalo has quit [Ping timeout: 252 seconds]
<nek0>
hi folks
fresheyeball has joined #nixos
graphene has quit [Remote host closed the connection]
<samrose__>
weird that when logged in as uid 1000, nixos tries to run nix-shell commands as user 1001 I traced this to a file /nix/store/3ch9lc8by88b2xx16cnyx5lrdl9lfxc2-stdenv/setup when this line gets called https://github.com/NixOS/nixpkgs/blob/master/pkgs/stdenv/generic/setup.sh#L771 the env var is not set by default for $NIX_BUILD_TOP and so it seems to try and default to uid 1001
<fresheyeball>
anyone out there gotten liquid haskell to run with nix?
graphene has joined #nixos
graphene has quit [Remote host closed the connection]
graphene has joined #nixos
<nek0>
anyone willing to walk me through a problem I have? I want to create a derivation for the krita gmic plugin, gmic-qt. I have a basic derivation, but it fails at the unpackPhase, because the downloaded sources are in folders with the same name.
<buckley310>
so I'm running 18.09/gdm/nvidia. looking at the 18.09 repo, "services.xserver.displayManager.gdm.wayland=true" is the default, but if I manually set it to false in my config, the rebuild dies saying nvidia does not support wayland... is it supposed to work like that? it even works fine if i manually set it to true...
<{^_^}>
[nixpkgs] @jpotier opened pull request #47435 → renoise: add mpg123 to runtime deps → https://git.io/fAjSV
fenedor has joined #nixos
<buckley310>
im debugging a gdm crash issue and thought statically disabling wayland would be a good first step...
<hodapp>
oh, is wayland support newly available in 18.09?
<buckley310>
i guess, actually let me check on my non-nvidia machine...
Thra11 has quit [Ping timeout: 240 seconds]
fendor has quit [Ping timeout: 240 seconds]
<buckley310>
it looks like on my intel graphics machine that the login screen is wayland but the user session is xorg
<schmittlauch[m]>
nDuff: thanks, I'll take a look at it later.
<buckley310>
even if you do not select the "on xorg" session
<kiloreux_>
How can I override ImageMagick attributes in this situation?
amine has joined #nixos
<colemickens>
jtojnar: thank you very much for the work on Meson! I need it for the upcoming Sway 1.0.
<colemickens>
I think I actually pulled it and used it to build just Sway for myself. Worked well :)
norfumpit has quit [Quit: norfumpit]
amine has quit [Client Quit]
<cransom>
kiloreux_: that is indeed super old. if you are using that specifically, it you'd need overrideDerivation i think.
amine has joined #nixos
asymmetric has joined #nixos
amine is now known as aminechikhaoui
aminechikhaoui has quit [Client Quit]
amine has joined #nixos
amine has quit [Client Quit]
<kiloreux_>
cransom, I checked the docs for it but it's still not clear how I could override something like fetchurl in this specific example ?
amine has joined #nixos
amine is now known as aminechikhaoui
Ericson2314-work has quit [Read error: Connection reset by peer]
doyougnu has quit [Quit: WeeChat 2.1]
aminechikhaoui has quit [Client Quit]
amine has joined #nixos
amine has quit [Client Quit]
amine has joined #nixos
amine has quit [Client Quit]
<symphorien>
kiloreux_: myImagemagick = import <oldnixpkgs/pkgs/applications/graphics/ImageMagick> { fetchurl = whatever; inherit (oldnixpkgs) a b c d; } I imaging
amine has joined #nixos
<symphorien>
where oldnixpkgs = import <oldnixpkgs> {};
amine has quit [Client Quit]
aminechikhaoui has joined #nixos
aminechikhaoui has quit [Client Quit]
mayhewluke has quit [Ping timeout: 246 seconds]
orivej has joined #nixos
<kiloreux_>
I am getting this "file 'old/pkgs/applications/graphics/ImageMagick' was not found in the Nix search path"
<kiloreux_>
Even though I have "old" declared.
mayhewluke has joined #nixos
<Ralith>
what does it mean when `nix copy --from s3://blahblahblah /nix/store/blah` gives "path is not valid"?
<cransom>
kiloreux_: i'm super curious why you are trying to resurrect this particular imagemagick
<symphorien>
you can use nix-instantite to print the path <old> evaluates to
jasongrossman has quit [Ping timeout: 245 seconds]
<symphorien>
and then use find to find the folder
<clever>
symphorien: you probably just want oldnixpkgs.imagemagick
<Ralith>
it's really annoying how nix S3 support implicitly creates buckets by default
<symphorien>
clever: kiloreux_ wants to override fetchurl
<Ralith>
very difficult to tell when you've mistyped a name
<kiloreux_>
cransom, haha sure. I am moving all of our packages to use nix. And some of them are really old (this version). But so many customers depend on them. So I can't use a new version and as you know you can't specify versions in nix dependencies.
<cransom>
kiloreux_: why not take the current imagemagick package and make a new attribute with the version you need?
<kiloreux_>
And how can I be able to change dependencies versions ? (libjpeg for example, libpng .....) ?
<kiloreux_>
clever, And how can I put that inside my derivation ?
<clever>
kiloreux_: run it manually, outside the derivation
<clever>
to use a modern nix to download the file
<kiloreux_>
I am confused. Sorry.
<clever>
the problem is with downloading a fixed-output derivation
<clever>
you can just run nix-prefetch-url to download it
<kiloreux_>
I understand that. So when I will try to run nix-env -f stupid.nix -iA old_imgick. It will use this old tarball ?
jonreeve has joined #nixos
<clever>
yeah, because its acting on the hash of the tarball, and doesnt care how it was downloaded
<colemickens>
Does each versioned release get an animal?
<kiloreux_>
clever, Thank you.
<kiloreux_>
Too bad I got other dependencies that just went down now :/
<jonreeve>
Does anyone know how to make a nix expression that contains both pre-built Nixpkgs packages and custom expressions from pypi? I'm having a hell of a time getting a Python dev environment set up.
<kiloreux_>
So this path isn't a choice.
<infinisil>
colemickens: Yup, chosen by the release managers :)
<colemickens>
Jellyfish, for 18.09, it seems. Cute, I like it. :)
<symphorien>
kiloreux_: a hackish alternative may be to modify the old nixpkgs to have fetchurl= (import <new> {}).fetchurl in all-packages.nix
<colemickens>
Is there a logo for nixos-unstable? Or maybe it's the unadorned logo...
<symphorien>
this way all packages in the old nixpkgs will have the new fetchurl
<symphorien>
modify as in "clone and edit the file".
<emily>
if I wanted to expose some of a PAM module's optinos in security.pam.* but right now it's just an enableFoo option, should I change this into foo.enable, foo.option etc., or is it OK to just make fooOption, fooOtherOption if there's only a couple?
<emily>
(and if I should move it to a new option, how do I perform the aliasing/rename/deprecation/whatever that needs to be done there?)
<kiloreux_>
Can't think of an alternative way to get that version. I tried writing expressions for all the dependencies for the derivation but it won't work due to imagemagick not detecting libraries.
<{^_^}>
[nix] @grahamc opened pull request #2456 → Update docs to describe how s3:// URLS does in fact support endpoint, region, and profile for upload → https://git.io/fAjpV
YaZko has joined #nixos
georges-duperon has joined #nixos
<YaZko>
Hi everyone. A naive question: I just updated my OS X to Mojave, and the nix commands seems to no longer be in my path, my beloved nix-shell in particular. Is it expected and is there a script I should re-run, or did something go south? My /nix seems to be intact
shabius has quit [Read error: Connection reset by peer]
aminechikhaoui has joined #nixos
shabius has joined #nixos
<gchristensen>
YaZko: do you have a /etc/bashrc~previous?
aminechikhaoui has quit [Client Quit]
Thra11 has quit [Ping timeout: 246 seconds]
aminechikhaoui has joined #nixos
<YaZko>
gchristensen: I do yes!
aminechikhaoui has quit [Client Quit]
<YaZko>
And indeed, it contained what I needed. Thanks a lot!
<gchristensen>
:)
aminechikhaoui has joined #nixos
asymmetric has quit [Ping timeout: 252 seconds]
<YaZko>
Ouh, running nix-shell returns an error though: dyld: Library not loaded: /usr/lib/system/libsystem_network.dylib
drewr has quit [Remote host closed the connection]
<emily>
ok, I found mkRenamedOptionModule on my own, but not sure how to apply it to the PAM configuration since there's the whole thing where the options are set up per PAM service
<lostman>
Just repeating my question from earlier... still looking for answers! I'm having issues with nixops+libvirtd. nixops is copying the closure from my host machine with my user's UID (ubuntu+nix, not nixos) and the VM ends up broken due to wrong permissions in /nix/store (e.g. sudo owned by my host's user, which doesn't exist, rather than root). Is there any way to fix this? I needed to ssh, remount /nix/store, fix permissions, and
<lostman>
restart, but that's not a good way.
YaZko has joined #nixos
booglewoogle has quit [Quit: Leaving]
<clever>
lostman: how is nixops doing the copy? nix-copy-closure doesnt support uid's
<lostman>
clever: not sure. looks like it copies path over ssh `copying path '/nix/store/dm6y6npbpcca3y40jkin8cackiks49dk-system-path' to 'ssh://root@192.168.122.25'...`
<clever>
thats either nix-copy-closure or `nix copy`, neither one supports uid's
<lostman>
clever: somehow it ends up as UID 1000 which the UID on my host
<azazel>
with the new ssh:// uri it should be nix copy
<YaZko>
Mmmh, on my journey to reinstall nix with Mojave, I have an issue when running the installation script:
<YaZko>
error: cannot connect to daemon at '/nix/var/nix/daemon-socket/socket': No such file or directory
<YaZko>
Would anyone know what’s the issue here?
<YaZko>
I also get right after “/var/folders/(..)/nix-2.1.2-x86_64-darwin/install: unable to register valid paths”
<clever>
YaZko: you may need to reboot after removing nix
<azazel>
wasn't it advised to upgrade nix before upgrading to mojave?
<YaZko>
clever: Oh, ok thanks
<azazel>
anyway I'm not a MacOS expert
<YaZko>
azazel: Apparently, it was. But I did not think beforehand :(
YaZko has quit [Quit: YaZko]
graphene has quit [Remote host closed the connection]
<lostman>
clever: should I file a bug report for this?
<clever>
lostman: if we can get more details on what is happening, yeah
graphene has joined #nixos
<lostman>
clever: sure. what kind of details? what can I do to investigate?
<clever>
lostman: is nix-daemon running in the vm?
<{^_^}>
[nixpkgs] @Ericson2314 pushed 3 commits to release-18.09: https://git.io/fxek9
<{^_^}>
[nixpkgs] @dtzWill opened pull request #47446 → patch-shebangs: use isScript to safely check for shebang start → https://git.io/fxekH
<camsbury_>
hi guys - using callCabal2nix on my package to automatically build a derivation, but looking to add a non-haskell dependency after the fact... I know that callPackage is run inside of callCabal2nix, so it seems a bit tricky
<camsbury_>
I just want to put a standard nix packages in the runtime & build deps
Anton-Latukha has quit [Remote host closed the connection]
<camsbury_>
so I'm trying to do overlays to add a nixpkgs level package to a haskell package created with callCabal2nix
<camsbury_>
and currently attempting to add pkgs.pcre to the buildInputs for haskell
<camsbury_>
if anyone knows the quick way to do that off the top of their head, that would be great, for now just doing it in an override of haskellPackages in my overlay.nix
<clever>
camsbury_: non-haskell packages go into librarySystemDepends