<{^_^}>
#53436 (by samueldr, 5 days ago, open): nix-universal-prefetch: init at 0.1.0
orivej has quit [Ping timeout: 268 seconds]
<{^_^}>
[nixpkgs] @veprbl opened pull request #53787 → [PoC] fetchurl: use Software Heritage as a content addressable mirror → https://git.io/fhZ5Z
dermetfan has quit [Ping timeout: 258 seconds]
orivej has joined #nixos
<danbst>
samueldr: oh cool! I wondered always if it is possible to specify custom attributes when prefetching from command line
<samueldr>
yes and no
doyougnu has joined #nixos
<samueldr>
I had to resort to generating a nix expression since it looks like --arg[str] requires the function to accept the arguments directly to be passed
<samueldr>
e.g. fetchFromGitHub you cannot --argstr sha256 000000000...
<samueldr>
since it will be passed to either of fetchurl or fetchgit with the leftover args (unverified)
<{^_^}>
[nixpkgs] @dtzWill opened pull request #53788 → retdec: remove pycache from install dir → https://git.io/fhZ5c
shpx has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<samueldr>
only exported fetchers can be used; if `kodiDependency` was in pkgs, it would be possible to use it even if it wasn't listed
<danbst>
oh, right. So it is a good habit to expose ALL packages, even internal ones
<samueldr>
the way it is implemented is to list all pkgs attributes starting with `fetch`, but if somehow you have `bizarroFetcher` on pkgs, it will work since I'm not checking against the list when using it
<samueldr>
it just won't be listed
* samueldr
wonders
<danbst>
btw, do you know who are 19.03 release managers?
<samueldr>
yes, sphalerite and I are, sphalerite being the new one
<danbst>
I couldn't find this info. This should be somewhere in officials
<samueldr>
hmm, eh, it was announced during NixCon so there's a bunch of people that knows, but I think you're right, no other announcement
<samueldr>
hmmm, somehow `nix-universal-prefetch pythonPackages.fetchPypi --pname python-mimeparse --version 1.6.0` gives me different hashes than in the repos :/
dsiypl4 has quit [Ping timeout: 268 seconds]
<samueldr>
oh, base16 I think
<danbst>
samueldr: base32 encoding?
<samueldr>
base16 in the source, but the universal prefetch got me a base32 hash
<samueldr>
so yeah, confirmed that it will work on fetchers that aren't listed
endformationage has quit [Ping timeout: 268 seconds]
<clever>
nix supports both base16 and base32 in the sha256 field
<clever>
the nix-hash can also convert and hash things
<samueldr>
yeah, I realised the moment I pressed enter
countingsort has joined #nixos
ng0 has quit [Ping timeout: 256 seconds]
<{^_^}>
[nixops] @nh2 opened pull request #1078 → Start multi-user.target on deploy → https://git.io/fhZ5X
<{^_^}>
[nixpkgs] @danbst closed pull request #23505 → Add docFn to lib, to automatically generate documentation for lib functions → https://git.io/vyWA0
<tobiasBora>
and also I'm not sure to understand the "A list of extra domain names, which are included in the one certificate to be issued, with their own server roots if needed. "
<tobiasBora>
(for the extraDomain property)
growpotkin has quit [Quit: WeeChat 2.3]
<tobiasBora>
what is the server root? For example if it's a proxy should I add null ? or is it the same thing as webroot?
<ottidmes>
is there any alternative to nix-prefetch-url to automate determining the sha256? nix-prefetch-url does work for some sources, but not all, so how to deal with more complicated src attributes?
<ottidmes>
tobiasBora: from my understanding the extraDomains will be issued under the same name as the domain name you assign as the key in security.acme.certs.<key>, useful for e.g. subdomains, and the webroot is just the place the certificate information will be stored
<ottidmes>
tobiasBora: I used /var/www/challanges for webroot because that is what I saw in examples, but it can just be some directory of the webroot for your project
<tobiasBora>
ottidmes: ok, but what does "null" mean for an extraDomain root?
alex`` has quit [Quit: WeeChat 2.3]
thc202 has quit [Ping timeout: 272 seconds]
<tobiasBora>
ottidmes: and do you know if I can use the same webroot for two servers?
<tobiasBora>
two domains* (not settup as extraDomain)
<{^_^}>
[nixpkgs] @peti pushed to haskell-updates « hackage-packages.nix: automatic Haskell package set update »: https://git.io/fhZ5j
<{^_^}>
#53436 (by samueldr, 5 days ago, open): nix-universal-prefetch: init at 0.1.0
mkoenig_ has quit [Remote host closed the connection]
<samueldr>
ottidmes: an experimental, but totally working interface to all the other fetchers
<ottidmes>
samueldr: thanks, I will check it out
<samueldr>
it's not the best interface, but it's definitely workable
<samueldr>
(I'm still a fan of TOFU, and still use TOFU when adding things)
<samueldr>
,tofu
<{^_^}>
To get a sha256 hash of a new source, you can use the Trust On First Use model: use probably-wrong hash (for example: 0000000000000000000000000000000000000000000000000000) then replace it with the correct hash Nix expected.
<ottidmes>
tobiasBora: null implies it uses the same webroot I think (should probably just check the source) and I do not think you can share the webroot for two domains, when I tried it did not work
mkoenig has joined #nixos
<ottidmes>
tobiasBora: at which point I learned it was nothing special, it is just the directory it writes .well-known/acme-challenge/stuff to when doing the requesting and stuff
<ottidmes>
samueldr: I use TOFU as well, this is meant for mostly automated updates
<samueldr>
yeah, that's the main use case (for myself) for the universal prefetch
<samueldr>
it's why it *only* prints the hash
<tobiasBora>
ottidmes: ok great thank you!
<ottidmes>
samueldr: so besides the UI it basically just captures the error message and extracts the sha256 out of it?
<samueldr>
right
<samueldr>
still, no one had done it (AFAICT)
<danbst>
samueldr: not true, but I can't remember who exactly did this
<tobiasBora>
I've a question: I'd like to specify in a file firewall.allowedTCPPorts and firewall.allowedUDPPorts for all the ports I want to open
<tobiasBora>
but I'd like to organize this file by section: web, vpn... so in each section, both allowedTCPPorts and allowedUDPPorts are modified
kvda has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<tobiasBora>
so I'd like to put lot's of firewall.allowedTCPPorts in the file, unfortunately it's not possible as I get an error saying that this variable already exists
<tobiasBora>
I tried to do something like:
<tobiasBora>
UDPPorts = [];
<tobiasBora>
UDPPorts = UDPPorts + [ 80 ];
<tobiasBora>
UDPPorts = UDPPorts + [ 443 ];
<tobiasBora>
...
<tobiasBora>
but same problem
<tobiasBora>
so what is the solution to this issue?
<clever>
tobiasBora: all variables are immutable, so you need to either do: let http = 80; https = 443; tcpPorts = [ htth https ];
<tobiasBora>
clever: well that won't help to organize the file as I configure the ports in another file my_settings.nix
<{^_^}>
[nixpkgs] @volth opened pull request #53793 → ninja: re2c is not an optional dependency → https://git.io/fhZFU
<clever>
tobiasBora: you could also just use full nixos modules, imports = [ ./foo.nix ]; and then foo.nix contains, { networking.firewall.allowedTCPPorts = [ 80 443 ]; }
<clever>
and then just add as many things as you need to imports, it can also form a tree
<tobiasBora>
clever: I'm not sure to see how it helps, because it seems that I need to put both http and https "together", I cannot push other instructions in the middle. Maybe my file would be easier to understand: http://paste.debian.net/1059664
kvda has joined #nixos
<tobiasBora>
clever: I think I'll do that indeed. The goal was to put everything in a single file to have a single place with all open ports, but I guess it's not that important
<clever>
tobiasBora: also, there is no point in opening udp 80 or 443, http(s) is tcp only
<{^_^}>
[nixpkgs] @fpletz pushed to gcc-8 « blobfuse: fix build with gcc8 »: https://git.io/fhZFT
tilpner has quit [Ping timeout: 246 seconds]
<tobiasBora>
clever: I was wondering, no "websocket"-like stuff or video streaming use udp?
<clever>
websocket is done over the existing tcp socket
<clever>
streaming is typically done by downloading many small files in sequence
endformationage has joined #nixos
<clever>
or range based partial downloads
<clever>
you can check netstat to confirm what protocols something is listening on
<clever>
netstat -anp | grep 631
<tobiasBora>
clever: also, I don't get why because of immutability it's not possible to "increase" a variable/set in a fixed file. nixos already do that between files, what is different inside a fixed file?
<clever>
2 main problems with the example you linked
<tobiasBora>
clever: ok thanks for the clarification!
<clever>
first, you are defining a nixos option called UDPPorts, which doesnt exist
<clever>
so nixos will complain loudly and refuse to build at all
<clever>
it must not be in the config area of the file
<clever>
then it uses a few basic functions to extract only the tcp, and only the udp
<AK_>
clever: mpd also uses port 6000 and firewall is activated so does that help in that account?
<clever>
AK_: are you trying to access it from outside the machine?
<AK_>
no,
<clever>
AK_: the firewall allows all 127.0.0.1 traffic automatically
<AK_>
its running on 127.0.0.1 (not running but set to fly here)
<clever>
AK_: what error is it giving?
<AK_>
no error
<clever>
AK_: is it running?
<AK_>
clever: connection refused. no
<clever>
AK_: how did you configure it to run?
<AK_>
set to run on first connection recieved. (in other distros its something like systemd as user)
<tobiasBora>
clever: hum, clever... But you agree that I can't use the same method for example if I want to install, say, emacs on part 1 of the file, and, say, vim, on part 2 of the file, and configure both of them with "real" arbitrary instructions.
<AK_>
I even did reboot for the sake for mpd many times
cyounkins has quit [Remote host closed the connection]
<AK_>
after rebuild
<clever>
AK_: try doing another nixos-rebuild, and then systemctl start mpd.service
<tobiasBora>
clever: not sure to follow you here. the goal is exaclty to do everything from one file right? Do you mean you could change this file into a usable unique file that keep the structure (separate openvpn conf and wireguard)? http://paste.debian.net/1059696
<{^_^}>
[nixpkgs] @globin pushed to gcc-8 « llvm: add patch to fix build with gcc8 »: https://git.io/fhZFc
<AK_>
maybe I'm used to ss start/status mpd. lets check it now with suffix
<tobiasBora>
clever: oh, I mean I agree you code is valid, I'm just wondering if we can use similar trick for this new file that has two " environment.systemPackages" lines and that will therefore fail
<clever>
tobiasBora: oh, i didnt even notice that part
<tobiasBora>
(just trying to get some tricks here and there)
<clever>
tobiasBora: at that point, your better off just using modules properly
eadwu has quit [Ping timeout: 252 seconds]
<tobiasBora>
clever: ok thank you!
<clever>
tobiasBora: make a second file, that configures only wireguard, and add it to the imports section
<tobiasBora>
ok that's already what I have, so I will keep doing that. And I can use folders to "group" separate files anyway
<tobiasBora>
this file is just a random file, or extra-statsd has anything to do with my issue?
IRCsum has joined #nixos
<tobiasBora>
and yes this repo is full of magic secrets ;)
<clever>
its just a random service i enable on some machines
<clever>
so those machines have it listed in imports
goibhniu has quit [Ping timeout: 250 seconds]
<iqubic>
clever: What service is this?
cyounkins has joined #nixos
<iqubic>
I just joined, and I'm now intrigued.
<tobiasBora>
clever: I see, thanks ;)
<clever>
iqubic: extra-statsd is just a custom program i wrote, that reports a bunch of random things to statsd
<iqubic>
Ah. I don't use Statsd
freeman42x has quit [Ping timeout: 252 seconds]
kvda has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
eadwu has joined #nixos
pie_ has quit [Quit: Leaving]
doyougnu has joined #nixos
lassulus_ has joined #nixos
Lingjian has quit [Ping timeout: 268 seconds]
eadwu has quit [Ping timeout: 252 seconds]
lassulus has quit [Ping timeout: 240 seconds]
lassulus_ is now known as lassulus
kvda has joined #nixos
ensyde__ has joined #nixos
ensyde__ is now known as ensyde
neminis has joined #nixos
<neminis>
hello, i am just starting out with nix, is there an example somewhere of how to copy a file when nixos-rebuild is called? can i simply call "cp" somehow
<iqubic>
What file are you wanting to copy?
<neminis>
it's a vpn conf from my home i want to have some place else
<iqubic>
in general, there isn't an easy way to get nixos-rebuild to call the cp function for you. At least I don't think there is. Can someone more knowledgeable confirm or deny this?
<neminis>
i even tried : builtins.toFile "path" etc but…
<iqubic>
Yeah, I don't think that's going to work.
<clever>
neminis: what file do you want to copy where? and why?
<wedens>
there is environment.etc if you need to put something to /etc
<neminis>
i thought about using configuration.nix to copy a file, i wanted to find a command to copy several files from for example my $home to another home when creating a new user, and also import my vpn conf etc
<neminis>
so that when i declare a user, it would make some .config/files common in between users too
<clever>
neminis: home-manager is the usual way of doing that
<neminis>
okay thank you
<AK_>
clever: Jan 11 09:00:06 9y systemd[1]: Starting Music Player Daemon...
<AK_>
Jan 11 09:00:06 9y mpd[3945]: exception: Letter expected
<iqubic>
AK_: what is that? Why are you showing it to us?
<ldlework>
they are pinging clever
<clever>
AK_: cat /etc/systemd/system/mpd.service, and check to see if its ExecStart is passing valid arguments
<ldlework>
so ..
<AK_>
iqubic: That has $clever in it visible I think
<iqubic>
It does indeed. I must have missed that.
<iqubic>
Ignore me.
<ldlework>
/ignore iqubic
<wedens>
neminis: specifically, home.file from home-manager
<iqubic>
ldlework: you wouldn't dare.
ddellacosta has joined #nixos
<neminis>
home.file.".config/i3blocks/config".source = "${my-dotfile-dir}/i3blocks.conf" is a good example of the kind of things i want to do
ddellacosta has quit [Read error: Connection reset by peer]
kvda has quit [Read error: Connection reset by peer]
<AK_>
lemme check wherere is digit
<AK_>
;-)
<AK_>
There is last line (result of an extended config)
<AK_>
lemme remove it.
<ottidmes>
is it possible to override a src to give it sha = "0000000000000000000000000000000000000000000000000000"; I experimented with this, but it does not work: nix eval --raw "(with import <nixpkgs> { }; (($1).overrideAttrs (_: { sha256 = \"0000000000000000000000000000000000000000000000000000\"; })).drvPath)"
<iqubic>
no. I don't think so.
<alex_giusi_tiri>
would the package 'gsettings-desktop-schemas' be the one that provides the command `gsettings`?
<iqubic>
I assume so.
<clever>
,locate bin gsettings
<{^_^}>
Found in packages: glib.bin
<ottidmes>
iqubic: cool, it actually is possible, following the source I found out it was outputHash that I just needed to overwrite
<alex_giusi_tiri>
thanks. i just installed it, but the command is not present yet
<clever>
alex_giusi_tiri: its in the glib package
<alex_giusi_tiri>
oh sorry
<iqubic>
clever: I'm fairly certain that if you run a command that isn't installed, you are told which package it comes from.
<clever>
yeah, that should also work
<alex_giusi_tiri>
it seems that I already had glib installed
<alex_giusi_tiri>
... and `locate bin gsettings` did not output anything
<clever>
alex_giusi_tiri: at the shell, its `nix-locate bin/gsettings`
<alex_giusi_tiri>
that's strange
<clever>
from the nix-index package
<clever>
blame the bot for scrambling the syntax :P
rprije has joined #nixos
doyougnu has quit [Ping timeout: 240 seconds]
<alex_giusi_tiri>
i have just installed nix-index and it's now building the index database
<alex_giusi_tiri>
but I
neminis has left #nixos [#nixos]
<alex_giusi_tiri>
*but I'll just wait and try again (pressed enter instead of ')
<AK_>
clever: now everything is okay in conf.
<AK_>
mpd.socket is starting .
sheth has quit [Read error: Connection reset by peer]
<AK_>
mpd.socket: Failed with result 'service-start-limit: Failed with result 'service-start-limit-hit'.
ddellacosta has quit [Remote host closed the connection]
kvda has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
o1lo01ol1o has quit [Remote host closed the connection]
iqubic` has joined #nixos
Mateon3 has joined #nixos
iqubic has quit [Ping timeout: 268 seconds]
Mateon1 has quit [Ping timeout: 258 seconds]
Mateon3 is now known as Mateon1
counting1ort has joined #nixos
<alex_giusi_tiri>
ok, it finished, but `nix-locate bin/gsettings` only found 'glib.dev' and 'gnome2.GConf.out' as what I think would be the most relevant (the rest of the items have parentheses around them). i already have glib (and gsettings-desktop-schemas) installed; it's also strange that the MTP wiki says that I should also have the `gio` command with glib, but I don't... :-/
<clever>
alex_giusi_tiri: probably glib.dev, and glib installs only non-dev by default, you probably want `nix-shell -p glib`
countingsort has quit [Ping timeout: 268 seconds]
dramsocklo has quit [Quit: Lost terminal]
<alex_giusi_tiri>
thank you, that did it
<alex_giusi_tiri>
but is that only for a session? it doesn't work for a new shell
<alex_giusi_tiri>
or is it just in "nix-shell"
<alex_giusi_tiri>
?
nalbyuites has quit [Ping timeout: 250 seconds]
o1lo01ol1o has joined #nixos
<clever>
alex_giusi_tiri: only for that shell
<alex_giusi_tiri>
oh
<alex_giusi_tiri>
would I be able to make it available for the default bash shell? without entering nix-shell?
o1lo01ol1o has quit [Ping timeout: 268 seconds]
<clever>
alex_giusi_tiri: you could add glib.dev to your systemPackages
reinhardt has joined #nixos
<alex_giusi_tiri>
I have 'glib'. would it necessarily need to be 'glib.dev'?
<clever>
yes
<alex_giusi_tiri>
ok, I'm trying it now. thank you :-)
<jackdk>
does `glib.all` work, or is that a convenience provided by some porcelain command?
<alex_giusi_tiri>
ok, it has worked. thank you, clever! :-) I'm going to bed now. thank you again.
<AK_>
clever: master I have made it working with --stdout option.
<AK_>
its using dots (old files)
<alex_giusi_tiri>
so, should packages like these always be installed for root? i thought that for a user profile would be sufficient.
<AK_>
dunno if that survive the reboot
Mateon1 has quit [Remote host closed the connection]
alex_giusi_tiri has left #nixos [#nixos]
Mateon1 has joined #nixos
<AK_>
so a package (my font end to mpd) ncmpcpp is available in nixpkgs but with less features and no options in nixos.org/nixos/options. Can I use enable those flags here in configuration.nix
<sphalerit>
drager: that depends on your desktop environment. I think plasma probably has built-in support for it but I don't think it's configurable via configuration.nix for exanple
<drager>
I see
hyper_ch2 has joined #nixos
kvda has joined #nixos
fendor has quit [Ping timeout: 240 seconds]
jasongrossman has joined #nixos
fendor has joined #nixos
<rnhmjoj>
i reviewed #53602. can anyone with commit access take a look?
<siers>
it took me a while to undrestand the ,escape'' fact too
<siers>
fgaz,
<fgaz>
siers: that's a weird syntax
<siers>
for sure
<fgaz>
siers: also, what if I have to escape '${0##*/}', quotes included?
<siers>
combine the rules
<siers>
> '''''''$0##*/}''
<{^_^}>
"''$0##*/}"
<siers>
oh wait
esmerelda has joined #nixos
<fgaz>
siers: (I do actually need that. I'm not breaking the escaping just because it's fun)
<fgaz>
(it is kind of fun though)
<{^_^}>
[nixpkgs] @vbgl opened pull request #53798 → coqPackages.QuickChick: init at 1.0.2 for Coq 8.8 → https://git.io/fhZxR
<fgaz>
> '' '''''${0##*/}' ''
<{^_^}>
"''${0##*/}' "
<fgaz>
> ' ''''${0##*/}' ''
<{^_^}>
error: syntax error, unexpected $undefined, at (string):215:1
<fgaz>
> ' '''${0##*/}' ''
<{^_^}>
error: syntax error, unexpected $undefined, at (string):215:1
<fgaz>
Any number of quotes does it wrong for one reason or another :-/
<siers>
funny, I can't guess it right either
<fgaz>
I think it's just impossible
<siers>
I don't think you can type out "'" with '' quoting
<srhb>
> ''${"'"}''${foo}${"'"}'' # clearly
<{^_^}>
"'${foo}'"
<fgaz>
EW
<srhb>
xD
<siers>
''${"'\${0##*/}'"}''
<fgaz>
It works tho
<siers>
> ''${"'\${0##*/}'"}''
<{^_^}>
"'${0##*/}'"
<siers>
there you go
<fgaz>
I think I'll stick with "-quoting since the script is ~100 chars :-P
<srhb>
fgaz: It can often be beneficial to just substitute in a string from somewhere else when you're doing crazy quotes
<srhb>
'' foo bar baz ${crazyQuotedThing} ... ''
<fgaz>
for sure
fendor has joined #nixos
griff_ has joined #nixos
<immae>
Hey there! How can I ask a derivation not to rebuild when one of its build dependency changes? For instance I have a php application that uses php, but I don’t need it to rebuild each time php changes, even though it’s dependent on php (composer) for building.
<symphorien>
Only if it is fixed output
fendor has quit [Ping timeout: 245 seconds]
<immae>
the output directory in the store is exactly the same
<immae>
only the sha changes
griff_ has quit [Quit: griff_]
__Sander__ has joined #nixos
mariel__ has joined #nixos
PLPD-Bot has joined #nixos
phry has joined #nixos
Makaveli7 has quit [Quit: Leaving]
ddellacosta has joined #nixos
<Taneb>
Is it possible/easy to migrate a hydra server to a different machine?
mzan has joined #nixos
fendor has joined #nixos
erictapen has joined #nixos
ddellacosta has quit [Ping timeout: 250 seconds]
shpx has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
fendor has quit [Ping timeout: 240 seconds]
<Taneb>
I can't figure out how the option services.nfs.server actually installs or starts any program
<Boomerang>
Taneb: it uses a postgresql database, no? You could try exporting it with pg_dump. And then follow the instruction for upgrading hydra, they allow for database migration
<{^_^}>
[nixpkgs] @delroth opened pull request #53802 → Use a deterministic seed for kernel RANDSTRUCT, and re-enable in hardened kernels → https://git.io/fhZhh
<Synthetica>
__monty__: looks like an undeclared dependency to me
<Synthetica>
(On mobile tho )
init_6 has joined #nixos
michas has joined #nixos
<betaboon>
chpatrick: `nix-env -i firefox`
eadwu has joined #nixos
<chpatrick>
betaboon: `error: selector 'firefox' matches no derivations`
<__monty__>
chpatrick: Hmm, my NIX_PATH points to .../root/channels, not the nixos/nixpkgs subdirectory.
<betaboon>
__monty__: according to his pastebin it does point to ../root/channels/nixos/nixpkgs
<michas>
Hi, wrote a nixos configuration for a physical host, which includes things like a hostname and a disk name. Now I want to test this config by writing a proper test. - Now the config runs in a VM, the disk name is not correct anymore and it's not allowed to have hostname, either. - What is the proper way to handle that? Do you know of a nice example?
<__monty__>
betaboon: Reread pls.
<__monty__>
chpatrick: Maybe irrelevant though. Since you *do* have that same path at the end of NIX_PATH.
<betaboon>
__monty__: ah you're not talking about nixpkgs= but the key-less part. thats the exactly like it is for me
<chpatrick>
__monty__ betaboon: I don't have /home/chpatrick/.nix_dexefpr/channels though...
<chpatrick>
I do have it on my laptop where it works
<chpatrick>
do you know what sets this up?
eadwu has quit [Ping timeout: 252 seconds]
<__monty__>
chpatrick: Have you tried nixpkgs. instead of nixos.? Since your NIX_PATH sets that up.
<Mic92>
siers: for android you need to be careful to not run gradle outside of the fhs chroot that is provided by android-studio or by the one that is from the wiki.
<Mic92>
siers: otherwise you might end up with artifcats in ~/.gradle that can cause problems
bgamari has joined #nixos
<Mic92>
android-studio provides also a built-in terminal for that.
<__monty__>
siers: That nix-shell command doesn't work for you? nix-shell -p android-studio --run android-studio?
<srhb>
etu: No, eval failed since the fifth.
<etu>
srhb: oh :(
<srhb>
etu: error: getting status of '/nix/store/2iaffglq3m8z07cyy9q30j8f9irfijlh-source/nixos/tests/tests': No such file or directory -- probably some test was activated in release.nix that wasn't before. Haven't checked though.
hedning has quit [Remote host closed the connection]
ng0 has quit [Remote host closed the connection]
ng0 has joined #nixos
lawlesseel has quit [Remote host closed the connection]
lawlesseel has joined #nixos
<michas>
After `nix-channel --update` now `nixops deploy` says `error: value is null while a set was expected, at /nix/store/l6rbhjvlj48zxn8984c8qzgxr0qwhd5g-nixpkgs-19.03pre165281.7d864c6bd63/nixpkgs/pkgs/top-level/default.nix:63:5`. - Any idea, what might be wrong here?
<mr_noobs>
Im trying to follow the manual for installing gitlab
<mr_noobs>
nixos-rebuild switch says error with acme
<mr_noobs>
INVALID ARGUMENT\2
orivej_ has quit [Ping timeout: 258 seconds]
init_6 has quit []
<makefu>
mr_noobs: sounds like the acme stuff didn't work for you. your server needs to be reachable via port 80 on the url you configured in gitlab
<makefu>
however gitlab should still work (just not with a working certificate)
<gchristensen>
with networking.wireless.networks.<name> will wpa_supplicant automatically join these networks?
ddellacosta has joined #nixos
<mr_noobs>
Hmmmm okay, so I need to open port 80
<mr_noobs>
thanks makefu
<mr_noobs>
I do need the ssl though for weechat
<AK_>
How do I clone the nixpkgs from github and do work there, install packages from the fork?
ddellacosta has quit [Ping timeout: 258 seconds]
<AK_>
I mean I wanna install some packages with extra funnctionality
<AK_>
I know forking, PRs etc
jah1234 has joined #nixos
polman has quit [Ping timeout: 246 seconds]
pie_ has joined #nixos
<ivan>
AK_: nix-env -f ~/nixpkgs -iA package
<mr_noobs>
hmmm I opened port 80 and it returns the same error, makefu
fusion809 has joined #nixos
<jah1234>
heya. new nixos user here. i cannot get xmonad to apply as my default wm. I've added services.xserver.windowManager.default = "xmonad"; to my configuration.nix. how to debug as to why this is not working? i'm lost here
<makefu>
mr_noobs: can you show the config for your girlab instance?
<makefu>
gitlab*
<symphorien>
jah1234: if you use lightdm for example it remembers you last choice and ignores this setting
polman has joined #nixos
<jah1234>
symphorien: I use, uh, no dm at all. :) I need to use one to get this working then? (I'm no Linux expert, but generally prefer to keep things as lean as possible)
<symphorien>
do you use startx ?
<jah1234>
no after enabling services.xserver (simply uncommenting lines in the default configuration.nix) it boots straight into a login screen and then to x
<ottidmes>
jah1234: by default it will go with lightdm, so unless you configured it not to use it, it probably still uses it. Very recently someone here also had problems with xmonad and using the sddm display manager solved the issue
<mr_noobs>
makefu: sure!
<jah1234>
dm = the login screen thing?
<symphorien>
yes
<jah1234>
ottidmes: right, i'll sddm
<symphorien>
otherwise, disable autologin, in the login screen, choose xmonad in the drop down selector of the dm, login, and reenable autologin
<jah1234>
(i'll try sddm)
<symphorien>
then the dm will remember your choice
<symphorien>
you can also disable all other wms
<ottidmes>
symphorien: I believe lightdm is broken with xmonad, there should be an issue about it
<symphorien>
ah ok
chpatrick has quit [Quit: Connection closed for inactivity]
<jah1234>
so actually it's not completely broken - if I run `xmonad` in xterm it starts. but having it as default appears broken
<jah1234>
symphorien: thanks for the work around, however i'm trying to got to a configuration.nix that is a simple as possible to spawn a new machine with (no manual intervention, which I assumed was what nixos was about :)), so I'm trying to work around that..
Baughn_ has quit [Quit: ZNC 1.6.2+deb1 - http://znc.in]
Baughn has joined #nixos
<mr_noobs>
makefu: Hmmm... maybe I don't have dns records for that, I only have REDACTED (I thought nginx would redirect that)
<makefu>
mr_noobs: you will need to make sure that git.REDACTED gets resolved by *the internet* (try `host git.REDACTED`
reinhardt has quit [Ping timeout: 250 seconds]
drakonis has joined #nixos
<tobiasBora>
I'm trying to learn how to deplay a centralised (SSO) sign-in for several services I have/plan to have (git, website, nextcloud...). I'm not sure yet if I should use CAS (implemenation by django cas server for example), OpenId (it's just that I don't know if it's a good idea as I don't want to allow people from other openid providers than me to enter in my services), or SAML. Has nixos some solution easier to
<tobiasBora>
use? For example I can't find any CAS server in nixos, any reason why?
<mr_noobs>
Hmmm the one with git doesnt
<mr_noobs>
just REDACTED does
<mr_noobs>
It works now!
<mr_noobs>
it was that!
<makefu>
you need to make sure that it does (CNAME or A record for git.REDACTED subdomain)
nikivi has quit [Quit: ZNC is awesome]
<makefu>
yay
<mr_noobs>
So, how do I make it so that I can do REDACTED/git or git.REDACTED?
<mr_noobs>
It is a free domain, so maybe there's that
shpx has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<mr_noobs>
And thanks a lot, makefu! What is the way to use those same certificates in other application, like weechat?
<{^_^}>
[nixpkgs] @joachifm merged pull request #53802 → Use a deterministic seed for kernel RANDSTRUCT, and re-enable in hardened kernels → https://git.io/fhZhh
<makefu>
mr_noobs: the certificates will be stored in /var somewhere, you can use the certificate by pointing the server to it. the REDACTED/git vs git.REDACTED thing is more difficult, not sure how to do it directly. i always use subdomains and quite dislike the subdirectory thingy
shpx has joined #nixos
<makefu>
maybe you could do a redirect in your nginx config from REDACTED/git to git.REDACTED (permanent redirect in location '/git' )
shpx has quit [Client Quit]
<tobiasBora>
also, what is the good way to deploy a django website in nix?
initiumdoeslinux has joined #nixos
bitnotri has joined #nixos
<initiumdoeslinux>
Hey, I accidentally failed the password set in `nixos-install` and noticed when I booted into nixos. How may I reset the root password, or is there a default? I am currently on the nixos boot medium again
jabranham has joined #nixos
<initiumdoeslinux>
I would hate to write the configuration again :)
griff_ has joined #nixos
<ottidmes>
initiumdoeslinux: mount your filesystem manually again, and then edit /etc/shadow manually
<ottidmes>
initiumdoeslinux: the mounted /etc/shadow, e.g. /mnt/etc/shadow
<initiumdoeslinux>
ottidmes: I see `root:!:1::::::`. Do I just produce a SHA-512 for the third field?
<ottidmes>
initiumdoeslinux: I believe just removing the ! should set it to the empty password
nikivi has joined #nixos
<initiumdoeslinux>
I'll test that
<mr_noobs>
makefu: Nice! I added a proxypass and a subdomain! Thanks a lot!
jah1234 has quit [Read error: Connection reset by peer]
o1lo01ol1o has quit [Remote host closed the connection]
<makefu>
and does it actually work? :D i was just guessing
<initiumdoeslinux>
ottidmes: That worked like a charm, thank you for taking the time to help out
o1lo01ol1o has joined #nixos
justanotheruser has quit [Ping timeout: 268 seconds]
<ottidmes>
initiumdoeslinux: it happened to me too a while back, hence I remembered the steps to take, happy it worked out
dsiypl4_ has joined #nixos
o1lo01ol1o has quit [Ping timeout: 252 seconds]
<mr_noobs>
makefu: well, kinda! I can access git.REDACTED and it does redirect https
dsiypl4 has quit [Ping timeout: 258 seconds]
<mr_noobs>
But also doing REDACTED brings me to the gitlab instance with some unsecure certs
<makefu>
mr_noobs: you can always forceSSL so you do not have to worry about not using ssl :)
<Dedalo>
I cannot set the speed of the X1 Carbon (6th gen) touchpad using `hardware.trackpoint.speed`. The value is ignored. I can set the sensitivity, but not the speed. If I try to do an `echo 255 | sudo tee /sys/devices/platform/i8042/serio1/serio2/speed`, I get a Permission denied.
hedning has joined #nixos
<mr_noobs>
Yeah, I used that in the end, but I was hoping some 404 not found while doing just REDACTED
<srhb>
Dedalo: trackpoint is the little red knob, isn't it?
o1lo01ol1o has joined #nixos
leotaku_ has joined #nixos
<Dedalo>
srhb: I'm not sure, I think trackpoint and touchpad are related. So I think it's both, the red knob and the pad. But I might be mistaken, and if I'm please let me know.
leotaku has quit [Ping timeout: 250 seconds]
iqubic` has quit [Ping timeout: 250 seconds]
<srhb>
Dedalo: I think it's only the red knob. I think you want to fiddle with the libinput settings or something like that.
drakonis has quit [Read error: Connection reset by peer]
<Mic92>
I have problems getting a hetzner server booted with my custom inird ssh. I want to debug the boot with qemu on the physical drive, but it fails find the initrd ? This is what I get from the log: https://gist.github.com/Mic92/34af6f7abc4a89fe21320dd7ccbe5d35 The qemu command is: qemu-system-x86_64 -drive file=/dev/sda -drive file=/dev/sdb -curses
<Mic92>
The bootloader is grub in that case.
<joepie91>
samueldr: FYI, I just got hit by the mystery "mount is masked" rebuild error
* samueldr
has no recollection of that being a thing
<{^_^}>
[nixpkgs] @mroi opened pull request #53805 → synergy: fix compilation on macOS → https://git.io/fhnJS
<joepie91>
samueldr: not ancient enough that the issue has composted away by itself, apparently :)
<Mic92>
samueldr: mhm. Do you know how I can get access to the grub console with qemu? In the curses ui I don't anything.
fendor has quit [Ping timeout: 258 seconds]
<samueldr>
Mic92: last time I did something like that I had qemu use the vnc output on 127.0.0.1 and used an ssh tunnel
<Mic92>
samueldr: sounds like a good idea
<samueldr>
Mic92: maybe try a -serial option, not 100% positive it will, but maybe it will work
<samueldr>
IIRC the -curse option does OCR, and it fails when not using the VGA font
<samueldr>
(e.g. our themed grub)
<samueldr>
joepie91: were you upgrading across major versions? probably not, I probably wasn't by the end of last april... maybe systemd had an upgrade?
<samueldr>
anyway, no idea, and it didn't happen since I guess
erictapen has joined #nixos
griff_ has quit [Quit: griff_]
griff_ has joined #nixos
<{^_^}>
[nix] @edolstra pushed 2 commits to 2.2-maintenance: https://git.io/fhnUe
o1lo01ol1o has joined #nixos
<siers>
I just found out that "stmt" in "with nixSet; # comment; stmt" won't see the values of nixSet! :D Man oh man.
<gchristensen>
whoa, what?
<siers>
Am I not right?
<siers>
well, you have to make into newlines, so it won't work with {^_^}
* gchristensen
plays
Dedalo has quit [Quit: WeeChat 2.3]
<wirew0rm>
any idea why nix would throw: "error: while setting up the build environment: unable to bind mount '<snip>-NetworkManager.conf.drv.chroot': Permission denied" ?
<wedens>
is there some existing implementation of pinning emacs packages and updating via script or something? I guess it'll involve reading/modifying json as a "lockfile"
<{^_^}>
[nixpkgs] @vcunat pushed to staging « dns-root-data: the old KSK is dead! »: https://git.io/fhnUI
<Mic92>
samueldr: vnc kind of worked but my keyboard is not working. Do I need a special option for that?
Dedalo has joined #nixos
<wirew0rm>
i'm trining to nixos-install from my current installation to a new drive (dmcrypt + btrfs (store is a btrfs subvolume))
<{^_^}>
[nixpkgs] @vcunat pushed to staging-18.09 « dns-root-data: the old KSK is dead! »: https://git.io/fhnUt
<siers>
gchristensen, maybe I was too quick to save and try it out in the shell, but it does work
<siers>
sorry to disappoint anyone
<Dedalo>
fixed, the problem was that the value must be between 0 and 1, and I was using 2.0, read this on a wiki
<gchristensen>
oh thank goodness :)
o1lo01ol1o has quit [Ping timeout: 250 seconds]
<samueldr>
Mic92: no special option, though it's possible you need to use the `qwerty-us` option to get the right key locations even after doing a loadkeys in the console
<Mic92>
samueldr: so you mean a kernel module with such a name?
o1lo01ol1o has joined #nixos
<Mic92>
no
<Mic92>
but do I need a profile or kernel module?
johann__ has joined #nixos
<samueldr>
Mic92: I don't know, I don't think anything special has to be done... though the keymap might be wrong unless your local keymap for the vnc client is set to qwerty-us
<samueldr>
but I could be wrong; it's probably using atkbd or whatever the right modules are for PS/2
<Dedalo>
I have a still a problem and it's related to the cpu throttling. I get messages like "Core temperature above thresold", etc. How to I fix this? I'm already using the X1 Carbon fix in the hardware nix repo, the one with all the available laptop configuration. Any idea?
bitnotri has quit [Remote host closed the connection]
kisonecat has quit [Ping timeout: 268 seconds]
<ottidmes>
samueldr: do you have a link to the issue/PR about the new hash mismatch error?
Acou_Bass has quit [Quit: byeeeeeeeeeeeeeee]
<samueldr>
ottidmes: remember yesterday when I pasted a wrong link? I think that wrong link was the commit :)
<bitnotri>
So guys I setup NixOS with grub and os-prober and it detects my Archlinux but I've got a kernel panic when I want to boot it. At first it was set up without a separate partition so /boot was on /dev/sda2 and I guess nixos grub screwed it up. How do I repair?
fendor has joined #nixos
<rain1>
hi
<rain1>
i accidentally locked myself out of my nixos lol. but I just added my password back to nixos config and that fixed it
kisonecat has quit [Quit: leaving]
ddellacosta has joined #nixos
kisonecat has joined #nixos
babic has quit [Ping timeout: 240 seconds]
<rain1>
what command should I use to do C programming? like bringing autoconf and all that into scope?
kisonecat has quit [Client Quit]
kisonecat has joined #nixos
<bigvalen>
I don't suppose anyone's tried to make up Nixos packages for HP's smart update tools ?
__Sander__ has quit [Quit: Konversation terminated!]
chessai has joined #nixos
dermetfan has quit [Ping timeout: 250 seconds]
tzemanovic has joined #nixos
agander_ is now known as agander
mariel__ has quit [Ping timeout: 252 seconds]
alex`` has joined #nixos
<{^_^}>
[nixpkgs] @AmineChikhaoui opened pull request #53808 → allow extending PYTHONPATH for datadog-agent → https://git.io/fhnT0
anon2039845 has joined #nixos
PtivalGalois has joined #nixos
Ariakenom has joined #nixos
<PtivalGalois>
hey everyone, I'm having the "ld: symbol(s) not found for architecture x86_64" on many packages (using nix as package manager under MacOS/Mojave). Is this a known issue?
ixxie has joined #nixos
Mic92 has quit [Quit: WeeChat 2.3]
civodul has quit [Quit: ERC (IRC client for Emacs 26.1)]
<wirew0rm>
weird... if I mount my ne system on /mnt instead of $HOME/mnt everything works again ...
<rain1>
Can i get /bin/bash in nixos?
<PtivalGalois>
rain1: you should be able to get it at `/usr/bin/env bash`, which is more portable?
sigmundv_ has quit [Ping timeout: 272 seconds]
o1lo01ol1o has joined #nixos
johann__ has joined #nixos
o1lo01ol1o has quit [Remote host closed the connection]
o1lo01ol1o has joined #nixos
<{^_^}>
[nixpkgs] @yegortimoshenko pushed to yegortimoshenko-patch-1 « ghc844: update hash for d8495549ba9d194815c2d0eaee6797fc7c00756a patch »: https://git.io/fhnTN
<gchristensen>
yikes, ofborg should have caught this
<rycee>
teto: I'm mainly using Thunderbird. If I were to switch it would probably be to some Emacs thing with a notmuch backend. I'm using gmane a lot through and Thunderbird is quite convenient because its decent support for usenet.
kisonecat has joined #nixos
Tucky has quit [Quit: WeeChat 2.2]
ddellacosta has joined #nixos
<{^_^}>
[nixos-homepage] @edolstra pushed to master « Nix 2.2.1 released »: https://git.io/fhnkM
i1nfusion has joined #nixos
qushu has quit [Ping timeout: 272 seconds]
mr_noobs has quit [Quit: WeeChat 2.2]
mr_noobs has joined #nixos
griff_ has quit [Quit: griff_]
<{^_^}>
[nix] @edolstra pushed 0 commits to refs/tags/2.2.1: https://git.io/fhnkH
<jabranham>
🎆
<{^_^}>
[nixpkgs] @gnidorah opened pull request #53811 → gamemus: init at 2017-12-03 → https://git.io/fhnkb
<rain1>
what do you do about the ~/.files on nixos?
agander has quit [Read error: Connection reset by peer]
<rain1>
do you track any of them in nix config somehow?
<gchristensen>
says you, clever :)
<ottidmes>
,home rain1
<ottidmes>
hmm, nope, not sure what the name was for the bot, but on the top of my head, home manager or you could create a systemd service that symlinks your stuff
<infinisil>
,home-manager ?
<{^_^}>
?: home-manager allows you to manage your per-user configuration similarly to NixOS' configuration.nix: https://nixos.wiki/wiki/Home_Manager
kisonecat has quit [Ping timeout: 245 seconds]
<rain1>
interesting!
periklis has quit [Ping timeout: 268 seconds]
<ottidmes>
infinisil: actually I remembered it wrong, there was no special home entry rather it was declarative that mentioned home-manager, but yeah, that one works too, it just does not show any alternatives
<infinisil>
,declarative
<{^_^}>
There are multiple ways of managing declarative profiles. 1) Attrset, compatible with imperative use of nix-env https://git.io/fAQHW ; 2) buildEnv, providing more control over the paths that are linked into the profile https://git.io/fp0aU ; 3) home-manager, providing nixos-like config for your ~ https://github.com/rycee/home-manager
<infinisil>
This one does seem to show alternatives
<dcol>
open a context might be? My thinking is some symlink not working in the chroot environment, but stracing is not giving me much..
<dcol>
Hi, I'm trying to create a derivation for a binary blob that comes delivered in a .deb. I've gone the route of using buildFHSEnv to create a chroot, and things have been going pretty smooth until this runtime error hits me: "Could not create GL context". When this happens it seems like my window manager is trying to create a window then quickly closes it. Anyone know openGL in Nix well, and what the implications of not being able to
<ivan>
dcol: are you on NixOS or another Linux?
<dcol>
ah yeah, NixOS. sorry forgot to say
ashkitten has quit [Quit: WeeChat 2.2]
<__monty__>
Isn't there infrastructure specifically for .debs/
<__monty__>
*?
<rnhmjoj>
dcol: try running glxinfo in the FHS env to see if it detects the driver
ashkitten has joined #nixos
<{^_^}>
[nixpkgs] @veprbl pushed to release-18.09 « adv_cmds: switch url to use https »: https://git.io/fhnIw
<rnhmjoj>
dcol: do you have libGL or mesa in the packages?
<mr_noobs>
hey makefu: I already set up ssl on weechat and have my gitlab running! Thanks a lot for your help!
<dcol>
rnhmjoj: libGL, yes. not mesa, not sure how I include it tbh
<mr_noobs>
Nixos can be daunting, and it is taking way too long to grasp even the basics' but I'm loving it!
<mr_noobs>
My next step is trying to package NewsBlur or freshrss, but I think that will take me too much hahaha I don't really get nix-shell still (though at least, thanks to sphalerite I believe, I know of its use/existance)
agander has joined #nixos
<dcol>
but you gave me a good idea. I'll try to follow the general structure of the chroot used for steam! thanks
ferriswheel has joined #nixos
<rnhmjoj>
dcol: just tried this and seems to work. `pkgs.buildFHSUserEnv { name = "test"; multiPkgs = pkgs: with pkgs; [ libGL glxinfo ]; }`
AK_ has left #nixos [#nixos]
<dcol>
interesting. that's basically the same structure, except I have some more packages.
<clever>
dcol: 90% of the time buildFHSEnv is the wrong tool for the job
q6AA4FD has joined #nixos
<clever>
dcol: you usually get much better results with patchelf
<dcol>
clever: hmm yeah, maybe I will give it another go. I mean I've used patchelf for normal derivs, but I wasn't sure how to go about it when all I had was this binary blob.
freeman42x has joined #nixos
Dedalo has quit [Quit: WeeChat 2.3]
chessai has quit [Ping timeout: 246 seconds]
Dedalo has joined #nixos
ilya-fedin has joined #nixos
MichaelRaskin has joined #nixos
<{^_^}>
[nixpkgs] @vcunat pushed to master « boehmgc: avoid mass rebuild due to the parent commit »: https://git.io/fhnLv
<{^_^}>
[nixpkgs] @vcunat pushed to release-18.09 « boehmgc: avoid mass rebuild due to the parent commit »: https://git.io/fhnLk
Synthetica has quit [Quit: Connection closed for inactivity]
ris has joined #nixos
tzemanovic has quit [Remote host closed the connection]
tzemanovic has joined #nixos
tzemanovic has quit [Remote host closed the connection]
tzemanovic has joined #nixos
tzemanovic has quit [Remote host closed the connection]
tzemanovic has joined #nixos
tzemanovic has quit [Remote host closed the connection]
tzemanovic has joined #nixos
tzemanovic has quit [Remote host closed the connection]
kisonecat has quit [Ping timeout: 245 seconds]
tzemanovic has joined #nixos
Ariakenom_ has joined #nixos
tzemanovic has quit [Remote host closed the connection]
tzemanovic has joined #nixos
tzemanovic has quit [Remote host closed the connection]
tzemanovic has joined #nixos
Ariakenom has quit [Ping timeout: 245 seconds]
<MichaelRaskin>
What went wrong with Haskell packages to break both Darcs and Cachix?
tzemanovic has quit [Remote host closed the connection]
doyougnu has joined #nixos
W1lkins_ has joined #nixos
aleph- has joined #nixos
W1lkins- has joined #nixos
W1lkins has quit [Read error: Connection reset by peer]
i1nfusion has quit [Remote host closed the connection]
i1nfusion has joined #nixos
<ilya-fedin>
I added the PDS-mq patch to the kernel and it was recompiled, but zfs is not, as a result, the system does not boot when trying to launch the last generation. Why it's so and how to make zfs recompile when recompiling the kernel?
W1lkins_ has quit [Ping timeout: 246 seconds]
W1lkins- has quit [Client Quit]
<Dedalo>
I'm using an HiDPI display and I'm trying to scale Spotify because it's too small. I read that I can use `spotify --force-device-scale-factor=1.5`. I have tried to make an alias called spotify but it does not work. I have seen also there is a file `prefs` in the `.config` dir. Someone of you with the same problem?
<__monty__>
Dedalo: What does "It doesn't work." mean? Are you trying to use the alias from a shell script for example?
<__monty__>
MichaelRaskin: Good question, been having a spot of trouble myself.
<ottidmes>
Dedalo: if you are OK with their web interface, there is https://open.spotify.com their web interface, then you can just use the scaling support of the browser
<MichaelRaskin>
ilya-fedin: intuitively I would expect you need to define the modified kernel, then install all the extra modules (especially ZFS) from (linuxPackagesFor modifiedKernel)
W1lkins has joined #nixos
<ivan>
Dedalo: or you can edit the wrapProgram in spotify/default.nix to add the argument
W1lkins has quit [Client Quit]
W1lkins has joined #nixos
<slyfox>
TIL new nix-2.2.1 release hard-depends on something called libeditline (0 public releases)
<ilya-fedin>
boot.kernelPatches = [
<ilya-fedin>
extraConfig = ''
<ilya-fedin>
patch = ./v4.20_pds099j.patch;
<ilya-fedin>
name = "PDS-mq";
<ilya-fedin>
{
<ilya-fedin>
RT_GROUP_SCHED? n
<Dedalo>
__monty__: I have added an alias in enviroment.shellAliases like follows: `"spotify" = "spotify --force-device-scale-factor=1.5";`
<ilya-fedin>
This is how I set up, but zfs is not recompiled
<Dedalo>
ivan: but is this a permanent solution or I will have to do every update?
<ilya-fedin>
samueldr, {^_^}, Exactly, I forgot, I just have a late night
<Dedalo>
ottidmes: I know but I would prefer to run the Electron app on its own
<ivan>
Dedalo: if you maintain a patched nixpkgs you can just rebase your patches
<ivan>
alternatively you could submit a PR to nixpkgs that fixes the DPI issue for everyone perhaps by dividing the current DPI by 96
<Dedalo>
ivan: with an option to enable it?
<Dedalo>
like `spotify.scale = 1.5;`?
chessai has joined #nixos
<MichaelRaskin>
ilya-fedin: hmm, this could be a limitation of the current NixOS module…
<ivan>
hmm actually I don't know how to wrapProgram with some extra code that picks the DPI at runtime
<ivan>
Dedalo: that would be kind of suboptimal but maybe it would get accepted if there is no better way
<ilya-fedin>
MichaelRaskin: Is there any way to workaround this?
<MichaelRaskin>
Probably, but not sure what is the exact syntax
<MichaelRaskin>
Well, you can do what I initially said and just override the kernel package directly
<ilya-fedin>
Ok, I'll try
<ilya-fedin>
Thank you
ixxie has quit [Ping timeout: 258 seconds]
<MichaelRaskin>
Or you could try extracting the resulting kernel package from the configuration, and apply linuxPackagesFor to it
<MichaelRaskin>
In any case you want to apply linuxPackagesFor to the properly patched kernel, and the only thing that changes is how you configure the kernel build itself
<Dedalo>
ivan I will see what I can do, I'm still a newbie with the nix language. Moved from macOS a couple of weeks ago. But I will definitely need to learn more about the language.
<makefu>
MichaelRaskin: that is great to hear!
<MichaelRaskin>
makefu: what do you mean?
<makefu>
wupps, i meant mr_noobs :)
worldofpeace has joined #nixos
<symphorien>
slyfox: you can replace it with readline if you wish so
<{^_^}>
[nixpkgs] @gnidorah opened pull request #53813 → midisheetmusic: put timidity in PATH also → https://git.io/fhnLP
kisonecat has joined #nixos
<catern>
is there any formal definition/guidelines somewhere of what is to be considered unfree software in Nixpkgs?
<MichaelRaskin>
I think that as long as DSFG/FSF/OSI agree on a piece of software being free/unfree, we follow this consensus
<clever>
most of the time, if you can see the source, its "free"
<clever>
synergy is the only exception ive seen so far, you have to pay (once) for the windows version, yet the source is on github, and nixpkgs can build it just fine
<MichaelRaskin>
Well, there are too many counterexamples
<catern>
sure sure
<catern>
MichaelRaskin: yeah but what about things that FSF says is free, which DFSG says is nonfree?
<catern>
hmm, well it looks like we say gfdl is free
<clever>
and then there are funny licenses like zfs, where you can build it yourself, but you cant ship built binaries, i think
<MichaelRaskin>
«You can legally redistribute modified source and binaries from it» is usually close enough
<MichaelRaskin>
ZFS is not about funny single licenses, it is about uselessness without combination of two different licenses
<clever>
my general idea when modifying something ive found online, i just put my changes onto a public github repo, and say 'thats enough'
oldandwise has joined #nixos
<gchristensen>
CDDL is opensource, but not compatible with GPL
<MichaelRaskin>
Approximally the entire QNX system is under source-publically-available-but-you-cannot-run-it-commercially
<simpson>
catern: I think that, if something is sufficiently shiny, say ZFS, then people will ignore innocent-seeming legal issues in favor of whether the source tarballs are available. At the same time, there's at least one project that comes to mind, grsecurity, whose availability and legality are completely at odds in the other direction.
<MichaelRaskin>
catern: I think as long as modifying the source and then doing some binary editing and then distributing the result «for any purpose» is OK, we end up considering the package free
<catern>
so since we say GFDL is free, we are probably following the FSF
<catern>
MichaelRaskin: we shouldn't be making our own judgement on this, we should just follow the FSF's guidance
<catern>
which are probably currently doing
<MichaelRaskin>
I think in reality _either_ FSF or OSI calling the license free without reservations is good enough for us
<MichaelRaskin>
But I am not sure there any major corner cases
kisonecat has quit [Ping timeout: 272 seconds]
<MichaelRaskin>
ilya-fedin: maybe you also need to add any previously passed kernelPatches (your probably don't want to override by replacing)
sary has quit [Ping timeout: 258 seconds]
<ilya-fedin>
How?
frickler1 has joined #nixos
i1nfusion has quit [Remote host closed the connection]
i1nfusion has joined #nixos
frickler1 has left #nixos [#nixos]
uaquhuliuh has joined #nixos
<MichaelRaskin>
I think there is something like linux.kernelPatches
<drakonis>
MichaelRaskin, the debian folks don't think so
<drakonis>
freebsd shouldn't be taken as gospel for anything licenses because they're strictly "gpl is evil"
<MichaelRaskin>
ilya-fedin: I don't think packageOverrides are needed
<MichaelRaskin>
Drakonis: when I mentioned FreeBSD I just meant that with BSD license, the combined work has some unambiguous option for distribution
<ilya-fedin>
MichaelRaskin: So what needed then?
<drakonis>
right
<MichaelRaskin>
ilya-fedin: I don't remember what exactly the syntax is, but basically you can set custom kernelPackages
<MichaelRaskin>
You want to define linux_latest_patched (via your override + preserving preexisting patches in case some appear), linuxPackagesFor linux_latest_patched, then use this lp_p for kernelPackages and for extraModulePackages
<ilya-fedin>
:hmm:
<uaquhuliuh>
hi people. my goal is to set up `home-manager` for a specific user by fetching his `home.nix` from a git repo and run `home-manager switch` through a `userActivationScript`. this opens a more fundamental question I was not able to answer for myself: `home-manager` tries to run `nix-build` - but how to access it from the environment of a `userActivationScript`?
<uaquhuliuh>
`home-manager` is just a package, so within the script I do `${pkgs.home-manager}/bin/home-manager`. but where does `nix-build` live at that stage?
jabranham has quit [Quit: ERC (IRC client for Emacs 27.0.50)]
sigmundv_ has quit [Ping timeout: 250 seconds]
Xiro` has joined #nixos
sary has joined #nixos
<ilya-fedin>
https://pastebin.com/ukWt8muT `error: attribute 'extend' missing, at /nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/system/boot/kernel.nix:39:31`
hedning has joined #nixos
tzemanovic has joined #nixos
npmccallum has joined #nixos
[Leary] has joined #nixos
Lears has quit [Ping timeout: 268 seconds]
<ilya-fedin>
How to include linuxPackagesFor from all-packages.nix?
<clever>
> pkgs.linuxPackagesFor
<{^_^}>
<LAMBDA>
<ilya-fedin>
clever: lol
<clever>
the pkgs set is defined in all-packages.nix
<ilya-fedin>
https://pastebin.com/UQnBZiA3 `error: undefined variable 'linux_latest_patched' at /etc/nixos/configuration.nix:77:80`
<ilya-fedin>
How to correctly refer to linux_latest_patched?
<clever>
ilya-fedin: you want to stick a pkgs. before that
<clever>
i believe
oldandwise has quit [Quit: leaving]
hedning has quit [Quit: hedning]
hedning has joined #nixos
<ilya-fedin>
Where?
<clever>
on line 77 of configuration.nix
<ilya-fedin>
I have linux_latest_patched in packageOverrides, it is not in pkgs
<clever>
packageOverrides adds things to pkgs
Mic92 has joined #nixos
<ilya-fedin>
But it is all in one packageOverrides call, it does not have time to add to pkgs. And if I stick pkgs, it writes the same error.
<ilya-fedin>
I need something like this.linux_late_patched
<clever>
ilya-fedin: you want rec then, pkgs: rec {
<MichaelRaskin>
Well, you could add a «rec»
<gchristensen>
can I tell git to push to many places when I `git push master`?
<gchristensen>
I'm in a nightmare scenario where I have to push to 3 remotes :|
<betaboon>
gchristensen: but don't just add multiple push-urls to the origin-remote. create a new one, maybe call it "all". so you dont get confused in the future XD
<W1lkins>
whenever I've had multiple named remotes I've just used `git remote | xargs -L1 git push --all`
<ilya-fedin>
Thank you all, leave it for the night for compilation
<clever>
tilpner: nice, ive been using 2 pushes for an old repo, for ages
civodul has joined #nixos
<W1lkins>
but that seems like a more reasonable solution, so ty tilpner
<ilya-fedin>
By the way, I specified nix.maxJobs = 5, but the kernel is still compiled with -j2
<ilya-fedin>
Why?
<gchristensen>
maxJobs is simultaneous separate nix builds
<MichaelRaskin>
gchristensen: I think you can say in .git/config something like a section remotes.group_name
<clever>
ilya-fedin: first, maxJobs is nix level jobs
<clever>
ilya-fedin: second, changes like that only take effect after nixos-rebuild finishes
<tilpner>
Do you want nix.buildCores?
<clever>
probably
<ilya-fedin>
clever: I added nix.maxJobs on previous rebuild
<ilya-fedin>
tlipner: yes> thank you
Lears has joined #nixos
[Leary] has quit [Read error: No route to host]
Sophos[m] has joined #nixos
<gchristensen>
yarrr I have a .drv gc rooted, but I'm able to delete paths it depensd on
<clever>
gchristensen: outputs or other drv's?
<gchristensen>
outputs
<clever>
gc-keep-derivations = true
<clever>
gc-keep-outputs = true
<clever>
gchristensen: one of these in nix.conf
<gchristensen>
I'd better traverse the drv and pin input's outputs separately
<clever>
gc-keep-outputs would probably recursively root every input
<clever>
even the bootstrap tools
<gchristensen>
blah I'm too tired to sort this out, and my ld-linux for running my binary was GC'd away.
<sphalerite>
gchristensen: note that it doesn't ensure that all the paths exist, but creates gc roots for them anyway so that if they at some point start to exist they won't be gc'd
tzemanovic has quit [Remote host closed the connection]
<adamanti`>
question: is there any futurist plans to remove bash or to make bash non-default from nixos, replaced with some other more functional language type of shell?
<simpson>
adamanti`: Not really. What did you have in mind?
<adamanti`>
Oh I am sure I am not the first to wonder. That is all
<MichaelRaskin>
Given the tradeoffs, I wouldn't expect anything too far from POSIX shell to become the default
pie_ has joined #nixos
<adamanti`>
E.g. some people use turtle or shelly instead of writing bash scripts
<gchristensen>
what are those?
pie_ has quit [Remote host closed the connection]
<LnL>
haskell
pie_ has joined #nixos
<MichaelRaskin>
Unlike Guix, we don't even try to move the package builders from bash
<gchristensen>
wow
<LnL>
and not that I know of and I personally think it would be a mistake
<gchristensen>
adamanti`: I'm not sure avoiding bash would get us anything. do you think it would?
<MichaelRaskin>
I think shell is imperative enough that basing a shell on Haskell is counterproductive for anything not considering Haskell their _main_ programming language
<sphalerite>
idk you can write pretty shelly programs in haskell I'd think
<{^_^}>
[nixpkgs] @dywedir pushed commit from @r-ryantm to master « yarn: 1.12.3 -> 1.13.0 »: https://git.io/fhnq2
<nh2>
with node2nix, can I generate a derivation that puts in all _dependencies_ of my project, and then another derivation that adds another package (my own) on top?
<nh2>
I'm asking because right now, every time I change any file in my package, it rebuilds the entire node_modules derivation, which takes 4 minutes, totally unworkable
<MichaelRaskin>
Oh well, a real programmer can write FORTRAN in any language?
<gchristensen>
MichaelRaskin: god bless 'em
<LnL>
exactly, and whatever advantage you get won't weigh up to the fact that everybody knows bash
<Dedalo>
I can't see protected content, for example Amazon Prime videos, but I have checked Chromium settings "Allow sites to play protected content (recommended): is enabled. What am I missing?
<nh2>
in my experience, nobody really knows bash and people just code mistakes all the time
tilpner has joined #nixos
<sphalerite>
^
<adamanti`>
^
<MichaelRaskin>
Also, what about not breaking POSIX too much by default
<sphalerite>
you're not breaking POSIX by not *using* sh
<gchristensen>
eh, its fine, its all sandboxed and captured inside an expr
<gchristensen>
if the build doesn't work it doesn't work. it isn't like its cascading badness throughout the system
<nh2>
90% of people don't even know about `set -e` which is totally mandatory to get even the most reasonable behaviour
<MichaelRaskin>
sphalerite: it is specified as user environment, too, so it's a good question if you are expected to default to something shell-like
<sphalerite>
yeah set -e isn't very reasonable :')
<sphalerite>
(not that set +e is either)
<MichaelRaskin>
nh2: if you say 90% of people, I can say «90% of people will fail FizzBuzz even if given language choice»
<LnL>
nh2: thing is, that doesn't matter for most package definitions
pie_ has quit [Ping timeout: 240 seconds]
<LnL>
if everybody would have to write an stdenv I'd totally agree
<MichaelRaskin>
LnL: are you about login shell or package builder shell?
orivej has quit [Ping timeout: 258 seconds]
<LnL>
about nobody really knows bash
<MichaelRaskin>
Depends on the threshold of knowledge
<nh2>
it was just a counterexample to "most people know shell". I think we spent a total of ~1000 hours across multiple companies on the linker problem in nixpkgs because the bash script that filtered gcc flags was accidentally quadratic, and that was not obvious at all, and the fix took mutliple weeks until it was correct and only a few people who knew bash very well could work on it.
<nh2>
In any language that has a proper, easy to understand concept sets or maps, this wouldn't have happened
<MichaelRaskin>
For many thresholds, bash is better known than any alternative
<MichaelRaskin>
Well yes, when you need maps, shell becomes less attractive
<MichaelRaskin>
Of course, for any core part of Nixpkgs «a few weeks» sounds like «really fast» to me
<{^_^}>
[nixpkgs] @herrwiese opened pull request #53817 → ham: init at 20180212.9c5a3894 → https://git.io/fhnqD
doyougnu has quit [Ping timeout: 258 seconds]
<nh2>
MichaelRaskin: I find a few weeks quite a lot to implement a "removeDuplicatesFromList" function correctly in better then O(n²)
<MichaelRaskin>
For it per se, yes, sure
<LnL>
the stdenv is very complex, while nicer that wouldn't change by using another language
<clever>
nh2: i have a pr to nix to improve its speed
<clever>
nh2: lib.sublist is a major bottleneck in the lib.unique implementation
<clever>
moving sublist to native massively improves the speed
abaiste has quit [Read error: Connection reset by peer]
abaiste has joined #nixos
abaiste has quit [Max SendQ exceeded]
<nh2>
I think many parts would be a lot easier. For example, I wrote the correct version of that bash script in C++ in ~3 hours, because C++ has sets. That's not to say I don't appreaciate the effort of those that fixed the bash script eventually, but their smarts could have been used on other things
rtjure has quit [Ping timeout: 268 seconds]
<gchristensen>
we should probably do that
abaiste has joined #nixos
abaiste has quit [Max SendQ exceeded]
abaiste has joined #nixos
abaiste has quit [Max SendQ exceeded]
abaiste has joined #nixos
abaiste has quit [Max SendQ exceeded]
<nh2>
clever: ah, so that's another accidentally-quadratic case?
abaiste has joined #nixos
abaiste has quit [Max SendQ exceeded]
<MichaelRaskin>
It's worse, it is about Nix expressions themselves
<clever>
nh2: look at the nix source for lib.sublist, its horid!
samrose has joined #nixos
<clever>
nh2: its recursively fetching one element and ++'ing lists together
Dedalo has quit [Quit: WeeChat 2.3]
<clever>
so getting the 2nd thru 100th element of a 100 element list, involves nearly 100 list concats
<clever>
each one, involves a memcpy of the entire array of `class Value`
<nh2>
ai
<clever>
my builtins.sublist, is a single memcpy, of the range in question
<clever>
(without bounds checking, so it can segfault)
<clever>
(need to finish the PR)
Dedalo has joined #nixos
<clever>
lib.unique, is also recursive, it will just do [ 1stelement ] ++ lib.remove 1stelement (sublist all-but-first)
<clever>
so, for a 100 element list, with no dups, that in the area of 100*100 list concats, that grow with every operation
<clever>
nh2: i discovered this, when i tried using snack on cardano-sl, just the nix eval alone, for one cabal file, took over 48 hours, and i gave up on it :P
<clever>
nh2: while that 48+ hour eval ran, i was able to find, and fix, enough bugs, that i got the same eval to <30 seconds
tilpner has quit [Quit: WeeChat 2.3]
<clever>
it was literally faster to rewrite half of snack and add a primop to nix, then it was to wait for the eval
rtjure has joined #nixos
i1nfusion has quit [Remote host closed the connection]
i1nfusion has joined #nixos
i1nfusion has quit [Remote host closed the connection]
<nh2>
clever: I hope that at some point we will manage to somehow do a full performance review of nixpkgs to weed out all issues of that kind. It's so common: At the original creation of the function, somebody thought "this quick-n-dirt approach will do for a while", and then it was never replaced by something reasonable until lots of people have spent many hours waiting on stuff
<clever>
,profiling
<{^_^}>
Use NIX_COUNT_CALLS=1 and/or NIX_SHOW_STATS=1 to profile Nix evaluation
<clever>
nh2: oh, i also had to patch these profiling functions, to support json output
i1nfusion has joined #nixos
<gchristensen>
I've long wanted a nix flamegraph
<gchristensen>
not of bin/nix but of the nix expr
<clever>
and that allows comparing call-counts between iterations
<Myrl-saki>
nh2: The only thing permanent in this world is temporary hacks.
i1nfusion has quit [Remote host closed the connection]
<clever>
gchristensen: nix-count-calls probably could help
coot has joined #nixos
<clever>
gchristensen: ive also wanted to extend it, to include time spend in nix exprs
i1nfusion has joined #nixos
<simpson>
nh2: Meh. Such things never happen; what we could do instead is have specific performance goals.
tilpner has joined #nixos
<clever>
calls to 379 functions: 948 'chooseDevOutputs' at /nix/store/4rq3vfnl8pyvy7xg2z29862s7badfcv1-nixos-19.03pre158246.6141939d6e0/nixos/lib/attrsets.nix:465:22
<clever>
gchristensen: just evaling pkgs.hello results in 948 calls to chooseDevOutputs!
<{^_^}>
[nixpkgs] @gnidorah opened pull request #53818 → update most packages I maintain → https://git.io/fhnmJ
strobelight has quit [Read error: Connection reset by peer]
abaiste has joined #nixos
abaiste has quit [Max SendQ exceeded]
strobelight has joined #nixos
hedning has quit [Quit: hedning]
erictapen has quit [Quit: leaving]
adamanti` has quit [Ping timeout: 250 seconds]
random_yanek has quit [Read error: No route to host]
random_yanek has joined #nixos
shpx has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
aleph- has quit [Ping timeout: 246 seconds]
o1lo01ol1o has quit [Remote host closed the connection]
C0rn3j has joined #nixos
o1lo01ol1o has joined #nixos
i1nfusion has quit [Remote host closed the connection]
i1nfusion has joined #nixos
trevthedev has joined #nixos
Dagger2 is now known as Dagger
Makaveli7 has quit [Quit: Leaving]
<djahandarie>
I have a derivation which produces some directories. I want a new derivation which produces a single one of those subdirectories as its output. Is there some helper to do this or am I stuck writing the full thing on my own?
silver has quit [Read error: Connection reset by peer]
<djahandarie>
Or rather, the contents of the subdirectory.
o1lo01ol1o has quit [Remote host closed the connection]
hyperfekt has joined #nixos
<hyperfekt>
Is there a reason I usually see mkdir -p used to create $out? shouldn't the store path always exist already?
ilya-fedin has quit [Quit: Connection closed for inactivity]
<clever>
hyperfekt: for $out itself, -p isnt needed, if the dir is known to not-exist
<clever>
hyperfekt: but, `mkdir foo` will fail, if foo already exists, and when your in post install hooks and such, that can become a pain
<clever>
and i just -p mkdir all the time out of habbit
<hyperfekt>
clever: You say if it already exists - I assume that means nix-build builds in a temp directory then?
<tilpner>
hyperfekt: $out can also be a file, so it can't be pre-created with mkdir
<clever>
nix garantees that $out wont exist when a build starts
<tilpner>
> runCommand "foo" ''date > $out''
<{^_^}>
<LAMBDA>
<clever>
but other parts of the build script may have made it on you
<hyperfekt>
clever: Alright, I see. Thanks :)
<hyperfekt>
tilpner: Yeah, I was just wanting to be sure nix-build --check or something like that doesn't fail just because the directory already exists.
<clever>
hyperfekt: --check will run it inside a sandbox, with that path absent
<clever>
i'm not entirely sure what it will do when sandboxing is off
<clever>
this has even caused some build failures, due to paths being absent
<clever>
glibc has split outputs, and .doc can be GC'd if nothing depends on the docs
<tilpner>
Oh, didn't think about --check. Maybe I should be using -p after all
<clever>
/bin/sh depends on the libs (libc itself)
<clever>
some builds may want the docs, and if binary caches are disabled, it has to rebuild all of glibc
<clever>
and $out cant exist during the build, so glibc itself is missing
<clever>
therefore, /bin/sh cant find its libc, and system() fails!
eadwu has quit [Ping timeout: 252 seconds]
knupfer has joined #nixos
kisonecat has quit [Ping timeout: 258 seconds]
worldofpeace has quit [Remote host closed the connection]
erasmas has quit [Quit: leaving]
h91wka_ has joined #nixos
drakonis has quit [Read error: Connection reset by peer]
<h91wka_>
realized that the problem is much deeper. I totally get the idea behind this patch. Builds should be isolated and reproducible. However, vanilla rebar3 already provides these properties! Typically, your rebar3 dependencies are locked, and `rebar.lock' file essentially serves the same role as `fetchHex' nix function does, except it's automated, streamlined and compatible with the upstream.
<simpson>
h91wka_: Welcome to Nix.
<simpson>
Even if rebar3 does all of this, Nix is not negotiable.
adamanti` has joined #nixos
jujjj has joined #nixos
<MichaelRaskin>
h91wka_: basically, this is an example of Nix not trusting language-specific package managers when they promise their dot-locks are isolation
<h91wka_>
So, in my opinion (and in any professional Erlanger's opinion) wrapping hex packages into nix derivation doesn't add any value. Also hex package database currently contains 43,248 package versions, and I'm pretty sure no one is going to create derivations for all of those
adamanti` is now known as adamantium`
<h91wka_>
And I already see that the nix derivations are out-of-date. The last patch is from 2017...
<simpson>
Right, most of those versions are likely quite old, and nixpkgs generally wants to carry only a snapshot of the latest mutually-compatible versions of packages.