<nh2>
matthewbauer dtz Ericson2314: so I got quite far updating static-haskell-nix to the latest nixpkgs master. I now maintain 2 modes: One using pkgsMusl (as before), and one using pkgsStatic. The former remains the default, because with pkgsStatic still a lot more stuff fails to build. But pkgsStatic can also already build a lot of stuff now. I hope that is useful for somebody, with its cross-compilation abilities.
<Ericson2314>
nh2: awesome!
<Ericson2314>
I'm actually getting somewhere with multi-target GHC btw
<Ericson2314>
so I hope a lot of these experiments will become earlier
thc202 has quit [Ping timeout: 252 seconds]
<Ericson2314>
*easier
<nh2>
Ericson2314: that is really cool
<avn>
clever: I usually use docker to builds like this ;)
<nh2>
The sickest part of this work was getting this Cabal patch that adds `--enable-executable-static` into all the right places. That eats an enormous, unnecessary amount of time. I wish it had just been merged much faster, so that it would long be in GHC 8.6.
buffet_ has joined #nixos
buffet has quit [Ping timeout: 258 seconds]
<dtz>
:D
<dtz>
\o/
<avn>
clever: backing to chromium, I know how to split components (well, have ideas), but idk how to build remains using splitted parts built as .so
<nh2>
The `pkgsStatic` support added a whole new level of complexity to it, I can't wait to get rid of that patch.
mexisme_ has joined #nixos
<Ericson2314>
yeah cabal needs to learn about cross too
<Ericson2314>
I think i will do that after
jluttine has quit [Ping timeout: 255 seconds]
<Ericson2314>
GHC is in decent shape
<Ericson2314>
because so much of Cabal is hacking around GHC
<clever>
avn: the problem is that building electron under docker results in a binary that relies on /usr/lib, and i then need x11 working to run that binary
goibhniu1 has quit [Ping timeout: 268 seconds]
<nh2>
Now I'm working on getting the last newly-failing 10 Stackage exes to work (though some of them might also simply be new so they may not have failed before).
<nh2>
Also `language-bash-0.8.0` and `HPDF-1.4.10` are marked as broken in nixpkgs now, so I lost support for building `aura` and `tttool` statically, but in turn `xmonad` now builds statically.
<Ericson2314>
oo!
Matthieu_ has joined #nixos
<nh2>
matthewbauer Ericson2314 dtz: From my perspective the biggest request is that we change from `pkgsStatic` being an overlay that *disables* `.so` files to having an overlay that simply has both `.so` and `.a` files everywhere. Because that's what I need for `pkgsMusl`, to link people's stuff statically right now. What's now `pkgsStatic` should IMO be another overlay on top that then disables `.so`.
<avn>
clever: steam-run! ;)
selfsymmetric-mu has joined #nixos
<nh2>
e.g. pkgsStatic <- pkgsStaticOnly or so
<nh2>
or better:
<nh2>
pkgsMusl <- pkgsStatic <- pkgsStaticOnly
o1lo01ol1o has joined #nixos
o1lo01ol1o has quit [Client Quit]
<{^_^}>
[nixpkgs] @peti pushed to haskell-updates « hackage-packages.nix: automatic Haskell package set update »: https://git.io/fjliw
<{^_^}>
[nixos-weekly] @domenkozar pushed to master « fix macOS min requirement »: https://git.io/fjlPj
<{^_^}>
[nixos-weekly] @domenkozar pushed to production « fix macOS min requirement »: https://git.io/fjlXe
pareidolia has joined #nixos
o1lo01ol1o has quit []
mexisme_ has joined #nixos
tmaekawa has joined #nixos
tmaekawa has quit [Client Quit]
tmaekawa has joined #nixos
<nh2>
matthewbauer: obscenely, `postgresql-simple` and all apps that use it fail to build because it depends on `libpq`, which in nixpkgs is just `postgresql`, which depends on `systemd`, which doesn't build with musl. I guess that's why many distros ship libpq as a separate pckage
o1lo01ol1o has joined #nixos
sigmundv has quit [Ping timeout: 246 seconds]
mkoenig has quit [Remote host closed the connection]
<ryantm>
If you use nixos configurations to set up the password file it will always be world readable in the nix store. You can have a passwordFile point at a place you manually set up like in /var/lib/ldap or somewhere like that.
<tobiasBora>
ryantm: oh I see
<tobiasBora>
damn
<ryantm>
tobiasBora: NixOps has a feature to pass secret files out of band of the NixOS configuration
<tobiasBora>
ryantm: what's this secret feature :)
o1lo01ol1o has quit [Remote host closed the connection]
o1lo01ol1o has joined #nixos
<tobiasBora>
ryantm: does that mean that I need to use nixops?
<tobiasBora>
and also I really don't like the "Keys from deployment.keys are stored under /run/ on a temporary filesystem and will not persist across a reboot"
<tobiasBora>
if my server shutdowns, I'll simply lost ssh access if I have an LDAP authentication that requires a password
<tobiasBora>
(ok I can always keep a pure ssh connection)
<ryantm>
the /run/ thing is optional, you can put the deployment keys wherever you want.
<tobiasBora>
but the main problem is that I'm not always available when the server shutdowns and I don't want it to be unaccessible until I pick my laptop
<ryantm>
If you want to use the deployment keys feature, you have to use nixops, yes.
<tobiasBora>
and how do you avoid to put things in /run/?
<ryantm>
I never put my deployment keys in /run/ for the similar reasons.
o1lo01ol1o has quit [Ping timeout: 268 seconds]
<tobiasBora>
and so how do you change the default path of the deployment.keys?
___laika has joined #nixos
<tobiasBora>
and I'm not yet sure to see how it can help me in all possible ways.
<tobiasBora>
for example in the ldap case if I want to use the rootpwFile I need to have a file that looks like:
<ryantm>
tobiasBora: I think it's just deployment.keys.my-secret.path = "/var/lib/my-secret";
<tobiasBora>
rootpw mysecurepassword
o1lo01ol1o has joined #nixos
<tobiasBora>
which is not directly "mysecurepassword"
<tobiasBora>
hum...
<tobiasBora>
does that mean that I need two differents deployment.keys.my-secret, one for rootpwFile, and one for the normal password?
<ryantm>
I would just manually prepare the "mysecurepassword" file and have it available when you need to deploy your server.
freeman42x has joined #nixos
drakonis has quit [Quit: WeeChat 2.4]
<ryantm>
tobiasBora: Or put the text content of it into the .text attribute
<tobiasBora>
ryantm: well I need two files, one with "mysecurepassword", and one with "rootpw mysecurepassword" right?
o1lo01ol1o has quit [Ping timeout: 258 seconds]
<ryantm>
If you need two files, you need to have two deployment keys. Is two files a requirement of LDAP?
<tobiasBora>
I think so yes, one must start with rootpw. But i think two files should be fine
<tobiasBora>
the big question I have is the following:
Glider_IRC has joined #nixos
<tobiasBora>
what happens if a program does not/cannot accept a file as argument?
<tobiasBora>
to give an explicit example, in my ldap configuration I have declarativeContents =
<tobiasBora>
(that is used to declaratively setup the database)
<ryantm>
Either you have to make the whole file into a deployment key, or look to see if the file supports things like imports
<clever>
tobiasBora: the only way to deal with such config, is to rewrite the nixos module, to take a path, and run set at pre-start, to generate the real cfg
balsoft has joined #nixos
<tobiasBora>
ryantm: I'm not sure to see what you mean by support imports
<tobiasBora>
clever: hum... what is "run set at pre-start"? Do you have an example?
<clever>
tobiasBora: you would have to modify the ldap service, to run a sed command before starting the service
<clever>
tobiasBora: depends on if others can read your /nix/store/
<tobiasBora>
clever: ouu this is tricky ^^
alex``` has quit [Ping timeout: 252 seconds]
alex```8 has joined #nixos
slack1256 has joined #nixos
<tobiasBora>
clever: well everybody needs to have right permission on the nix store if they want to do things as simple as login?
<tobiasBora>
read permission*
<clever>
tobiasBora: yeah, but how many machines are you actually sharing with users you dont trust?
Supersonic has quit [Disconnected by services]
Supersonic112 has joined #nixos
<tobiasBora>
clever: well for now I'm the only one using my machine, I just want to learn for now how to deploy LDAP, but I'm would be surprised if nobody uses LDAP on nixos with untrusted users
Supersonic112 is now known as Supersonic
<tobiasBora>
I would be*
<tobiasBora>
Or I'm thinking about something else
<tobiasBora>
oh no does not work
<tobiasBora>
the light containers of nixos shares the same /nix/store right? :(
<tobiasBora>
first, I actually need to compile a few packages even with cache.nixos.org
teej has quit [Quit: Connection closed for inactivity]
<tobiasBora>
second, I think to remember some nasty details where if you push from your laptop on your raspberry pi, you first need to download everything on your laptop, and then send this to the raspberry pi
<tobiasBora>
is it still the case?
<clever>
yeah, you can never have a path without its deps
<{^_^}>
nixops#976 (by tobiasBora, 43 weeks ago, open): Add a way not to use the user's computer as a cache
<clever>
tobiasBora: once you have that closure, as long as you dont GC it, the next deploy will be faster
<clever>
if you enable rollback support in nixops, it will also root the closure
<tobiasBora>
but can I run nixops with localhost?
<clever>
so it cant be GC'd
<clever>
you can configure nixops to manage the machine its running on
mexisme_ has quit [Ping timeout: 255 seconds]
lovesegfault has quit [Ping timeout: 264 seconds]
<tobiasBora>
so I guess the best solution for me is to run a deploy script that scp the whole configuration + nixops configuration in /root/nixosconf, and then run nixops deploy from it.
<clever>
at that point, why even use nixops? :P
<clever>
just use nixos-rebuild
<clever>
and rather then scp, just do a `git pull`
lovesegfault has joined #nixos
<tobiasBora>
actually I'm still wondering the purpose of nixops :P
<clever>
to manage a set of many machines remotely, and configure them to be able to refer to each-others IP's automatically
<clever>
and in some cases, auto-provision the hardware in the cloud
dedde1 has quit [Quit: Page closed]
logzet has joined #nixos
<tobiasBora>
about the git pull, you mean a git pull from the raspberry pi /etc/nixos/ folder that I would turn into a git repo?
<clever>
within the rpi, run a `git pull` in /etc/nixos, then nixos-rebuild switch
<tobiasBora>
and the thing is that if I want to setup permission carefully (especially for the keys), git pull is not enough
<tobiasBora>
that's why I'm using scp
<clever>
secrets would be copied in on a seperate file, that the git repo refers to
<clever>
and the secrets generally dont change much
endformationage has joined #nixos
<clever>
nixops automates secrets as well, deployment.keys will be scp'd over for you
reinhardt has joined #nixos
logzet has quit [Client Quit]
<clever>
but you need to modify the service files to be able to accept a secret that isnt in /nix/store/
<clever>
hence, the pre-start with sed
<tobiasBora>
even with nixops???
<clever>
yes
logzet has joined #nixos
<tobiasBora>
oh you mean if the module was poorly written
<clever>
yeah
<tobiasBora>
and yes, about nixops I still don't understand why it can do super powerful stuff with hundreds computers from the cloud, but cannot deal with this simple case that a few commands can solve ^^
<tobiasBora>
but anyway
<tobiasBora>
but for git I think to remember that the chmod is set to the chmod of the user
<clever>
tobiasBora: it deals with 100's of computers at once efficiently, by putting all 100 machines into a single derivation
<clever>
and then just running nix-build on it
<clever>
so the stuff that is reused 100's of times, is only built/downloaded once
<tobiasBora>
clever: yep. But if you have 100 pcs, you are likely to have a team. And you probably don't want to have each member of the team the have the derivation of the 100 machines. Does that mean that for teams they must work on a remove computer made especially for that purpose?
<{^_^}>
[nixpkgs] @worldofpeace pushed 2 commits to master: https://git.io/fjlXX
jasongrossman has joined #nixos
<tobiasBora>
interesting
o1lo01ol1o has quit [Ping timeout: 246 seconds]
balsoft has quit [Read error: Connection reset by peer]
balsoft has joined #nixos
mexisme_ has quit [Ping timeout: 255 seconds]
<tobiasBora>
clever: and I'm thinking, by using advanced permission, wouldn't it be possible to imagine that all the files that are not in ~/out are readable only by root?
<tobiasBora>
because users just need ~/out/bin and ~/out/lib-like folders, but they don't need read access to all the build process
<clever>
tobiasBora: the nix sandbox ensures you can only see things in /nix/store that you need to complete your build
<clever>
but after the build is done, it also ensures that everything in $out is world-readable
<clever>
and its getting late here
<clever>
i should get off to bed
<tobiasBora>
me too
<tobiasBora>
thanks a lot you two for your help
<tobiasBora>
and when you'll be back if you are still motivated, maybe you can explain me why we can't just open world-wide only the bin/lib/doc folders and keep all the paths with secrets configuration... secret
<tobiasBora>
thanks again and good night!
adamantium has quit [Ping timeout: 252 seconds]
balsoft has quit [Ping timeout: 255 seconds]
kaliumxyz has quit [Quit: leaving]
oida has quit [Remote host closed the connection]
oida has joined #nixos
___laika has quit [Quit: WeeChat 2.4]
freeman42x has quit [Ping timeout: 258 seconds]
jackdk has quit [Ping timeout: 258 seconds]
polman has quit [Read error: Connection reset by peer]
polman has joined #nixos
jackdk has joined #nixos
Rusty1 has quit [Quit: Konversation terminated!]
slack1256 has quit [Remote host closed the connection]
polman has quit [Read error: Connection reset by peer]
___laika has joined #nixos
___laika has quit [Client Quit]
Mateon3 has joined #nixos
Mateon1 has quit [Ping timeout: 255 seconds]
Mateon3 is now known as Mateon1
endformationage has quit [Ping timeout: 268 seconds]
polman has joined #nixos
palo1 has joined #nixos
glasserc has quit [Ping timeout: 255 seconds]
palo has quit [Ping timeout: 245 seconds]
palo1 is now known as palo
zupo has joined #nixos
glasserc has joined #nixos
tbenst_ has joined #nixos
tbenst has quit [Read error: Connection reset by peer]
polman has quit [Read error: Connection reset by peer]
polman has joined #nixos
zupo_ has joined #nixos
zupo has quit [Ping timeout: 255 seconds]
cfricke has joined #nixos
balsoft has joined #nixos
<cizra>
So I added a new package, it's sitting in a pull request. Next I want to experiment with another person's PR, see if it fixes my issue. How do I merge them together? Cherry-pick my commits onto the other guy's PR, temporarily? Sounds like a hassle, especially considering merge conflicts.
develCuy_ has quit [Quit: No Ping reply in 180 seconds.]
hyper_ch2 has joined #nixos
<cizra>
Can I somehow extract my changes to the packages/services into a separate out-of-tree location and tell NixOS to always load them thence?
<balsoft>
cizra: Depends on what you mean by "changes to the packages/services"
<balsoft>
cizra: If you mean your own services and packages definitions and uses, then yes, it's easy -- just do `imports = [ ./path/to/my/modules ]`
<lightbulbjim>
cizra: To build from your own tree you can do `nix-build /path/to/your/nixpkgs -A myderivation` for a single derivation or `nixos-rebuild switch -I nixpkgs=/path/to/your/nixpkgs` to rebuild everything.
<balsoft>
If you mean directly altering the texts of definitions, then you need to fork nixpkgs
dansho has quit [Ping timeout: 268 seconds]
knupfer has joined #nixos
<cizra>
lightbulbjim: That's exactly what I'm doing, but it restricts me to having just one nixpkgs repository.
<cizra>
balsoft: I did, and here it is, waiting for approval: https://github.com/NixOS/nixpkgs/pull/61546 -- but I want to move on and try something else, not remain on that fork forever. What can I put to ./path/to/my/modules?
<{^_^}>
#61546 (by cizra, 14 hours ago, open): libfprint: added a fork for Lenovo ThinkPad
dansho has joined #nixos
<balsoft>
Ah, I see
<balsoft>
As a quick-and-dirty solution, you can move your package to an overlay and then the module will use your package instead of the default one
<balsoft>
And when the PR gets merged, you can abandon the overlay
___laika has joined #nixos
<cizra>
I googled around a bit, but couldn't really find any newb guide in style "click here type this".
zupo_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
balsoft has quit [Ping timeout: 268 seconds]
alp has joined #nixos
<{^_^}>
[nixpkgs] @FRidh pushed 116 commits to staging-next: https://git.io/fjl1R
<LnL>
cizra: that's how you import nixos modules, overlays are a separate thing
zupo has joined #nixos
<LnL>
nixpkgs.overlays = [(import overlay.nix)];
orivej has joined #nixos
carboa has quit [Ping timeout: 256 seconds]
wangoe has joined #nixos
balsoft has joined #nixos
balsoft has quit [Client Quit]
balsoft has joined #nixos
nckx has quit [Ping timeout: 264 seconds]
nckx has joined #nixos
johanot has joined #nixos
goibhniu1 has joined #nixos
<cizra>
LnL: OK, now it eats the /etc/nixos/configuration.nix, but the extra parameter for the service isn't found.
<LnL>
service?
<cizra>
Yeah, I'm trying to add a parameter for fprintd to use ThinkPad-specific packages: services.fprintd.package = pkgs.fprintd-thinkpad; # https://github.com/NixOS/nixpkgs/pull/61546
<{^_^}>
#61546 (by cizra, 16 hours ago, open): libfprint: added a fork for Lenovo ThinkPad
<cizra>
LnL: The packages are importable to configuration, though! This is a giant step forward.
knupfer has quit [Remote host closed the connection]
knupfer has joined #nixos
balsoft has quit [Read error: Connection reset by peer]
balsoft has joined #nixos
<LnL>
ah, that file is a nixos module so that would go in imports
balsoft has quit [Quit: Konversation terminated!]
balsoft has joined #nixos
<cizra>
augh, it used to be too little, now it's too much. error: The option `services.fprintd.enable' in `/nix/var/nix/profiles/per-user/root/channels/nixos/nixos/modules/services/security/fprintd.nix' is already declared in `/home/elmo/stuff/nix-libfprint-overlay/nixos/modules/services/security/fprintd.nix/fprintd.nix'.
<cizra>
... but removing the 'enable' option seems to help.
<LnL>
now you have 2 modules for fprintd active which is probably not what you want
Profpatsch has quit [Ping timeout: 245 seconds]
<LnL>
add disabledModules = [ "services/security/fprintd.nix" ]; to disable the upstream one which will allow you to replace it with your own (including the enable option, etc.)
<vid>
Curious to know if anyone here develops Electron apps within a nix-shell? I'm hitting a lot of ENOENT issues and was wondering if there isn't already a guide out there with some recommendations on how to get this going...
<{^_^}>
[nixpkgs] @c0bw3b pushed 2 commits to release-18.09: https://git.io/fjlyC
<hyper_ch2>
I see that nixos has packaged "refind" but I don't see any nixos options for it.
Makaveli7 has joined #nixos
dontobey has quit [Ping timeout: 252 seconds]
ayerhart_ has quit [Read error: Connection reset by peer]
dontobey has joined #nixos
ayerhart has joined #nixos
Glider_IRC has joined #nixos
mkoenig has joined #nixos
rauno has quit [Ping timeout: 268 seconds]
dontobey has quit [Ping timeout: 264 seconds]
dontobey has joined #nixos
grumble has quit [Quit: Well, would you look at the time. I've almost missed my ambiguous, non-existent appointment that I have scheduled just when I start to lose interest in my current conversation.]
pie_ has joined #nixos
grumble has joined #nixos
<sphalerite>
hyper_ch2: by the looks of it, it's used for the installer images, but that's all
<sphalerite>
I'm sure a PR adding support for using it as a bootloader for installed nixos systems would be welcomed
pie_ has quit [Ping timeout: 255 seconds]
<hyper_ch2>
sphalerite: looking forward to your PR then :)
<avn>
Folks, where we have lm-sensors config in nix?
<{^_^}>
[nixpkgs] @gebner opened pull request #61588 → neovim: use lua on aarch64 → https://git.io/fjlyp
domogled has quit [Ping timeout: 244 seconds]
mexisme_ has quit [Ping timeout: 246 seconds]
gal_bolle has quit [Quit: Konversation terminated!]
Jackneill has quit [Ping timeout: 255 seconds]
raduom has quit [Ping timeout: 245 seconds]
erictapen has joined #nixos
carboa has quit [Ping timeout: 256 seconds]
fusion809 has quit [Remote host closed the connection]
<m1cr0man>
Hi folks! Trying to get remote connection to libvirt working. I'm getting the following certificate error: `Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory` I'm not sure how to fix this in the context of nixos. I've installed cacert as a systempackage and set security.pki.certificateFiles to pull the ca-bundle from that pkg. I've also tried setting libvirt to not use tls but it seems to have no effect. Any
<m1cr0man>
help appreciated.
domogled has joined #nixos
Jackneill has joined #nixos
balsoft has quit [Quit: Konversation terminated!]
balsoft has joined #nixos
sigmundv has joined #nixos
schjetne has joined #nixos
acarrico has joined #nixos
Ariakenom has joined #nixos
vid has joined #nixos
eyJhb is now known as eyJhb
<{^_^}>
[nixpkgs] @gebner merged pull request #61588 → neovim: use lua on aarch64 → https://git.io/fjlyp
globin has quit [Remote host closed the connection]
toppler`` has quit [Ping timeout: 245 seconds]
ThatDocsLady has joined #nixos
globin has joined #nixos
toppler`` has joined #nixos
nefix has joined #nixos
civodul has joined #nixos
<nefix>
Hello! I need to build a custom derivation of the dotnet-sdk that includes some files that are in a git repo. How am I supposed to do this? I was thinking of overriding the installPhase, but I have no clue how to copy the files there
rprije has quit [Ping timeout: 245 seconds]
<lc_>
Hi, why might I be getting lots of ldd not found errors even though these things are buildInputs
linarcx has quit [Quit: WeeChat 2.4]
<lc_>
libgtk-3.so.0 => not found
dansho has quit [Remote host closed the connection]
<jomik>
aanderse: Legend. Thank you :D I tried the google thing, but it seemed unable to find anything useful, probably due to it being 2 letter things I googled :D
<aanderse>
np
nD5Xjz_ has joined #nixos
nD5Xjz has quit [Ping timeout: 246 seconds]
<aanderse>
did you want more help with the nix derivation itself, or are you still WIP on that?
Glider_IRC has quit [Remote host closed the connection]
<jomik>
Yeah. Just need it to build first of all tho.. I believe I can just pass it a build date that fits when I actually made the nix expression.
Glider_IRC has joined #nixos
<aanderse>
jomik: with the link i provided it builds, you just need to *install* it now
<jomik>
Yeah
<aanderse>
hence the question about if you've ever used a custom installPhase or not
<aanderse>
:)
FRidh has quit [Ping timeout: 244 seconds]
<jomik>
Oooh. Nevermind. It does create a `lslint` binary. So I can just install that..
abcrawf has quit [Remote host closed the connection]
silver has joined #nixos
silver_ has joined #nixos
FRidh has joined #nixos
abcrawf has joined #nixos
ym555 has joined #nixos
esmerelda has quit [Ping timeout: 258 seconds]
<jomik>
aanderse: So I got it built https://git.io/fjl9S and it works, thanks :) Just a quick check, did I miss anything in that? :p
Ariakenom has joined #nixos
<aanderse>
jomik: looking good. if you were going to submit a PR for inclusion in nixpkgs i would suggest: change name ... to pname = "lslist";, consider using a release tag from github instead of the corresponding commit hash, and pass all inputs required to the derivation instead of using pkgs and lib
<jomik>
Ooh, is name automatically using version to name the package?
esmerelda has joined #nixos
<aanderse>
yes if you set pname then name = "${pname}-${version}"; is taken care of for you
<nefix>
So I'm trying to copy some files to a custom derivation. So far I have this: https://paste.ofcode.org/Ki3R5TksXEUPDqNiZrUtVP I know it's not the way it should be done but I don't know how else do it. Could someone please give me a hand? Thanks!
<jomik>
the BUILD_DATE is slightly annoying tho - because it is sort of a lie, since the user builds it when they install ...
<aanderse>
jomik: yeah the nixpkgs manual *might* say something about setting that to epoch or something, you'd have to check
<{^_^}>
[nixpkgs] @flokli opened pull request #61589 → nixos/mysql: don't run parts of mysqld.service as root → https://git.io/fjl9d
mkovacs has joined #nixos
<jomik>
Can't seem to find something on that. I guess I can toss a PR and point it out, some clever person may know how to handle that then .. :D
acarrico has joined #nixos
<jomik>
Now the only thing I still want packaged is Firestorm. aszlig gave me his WIP (which he abandoned) https://git.io/fjl9x But I have no clue how to continue with the error it gives.. :(
o1lo01ol1o has joined #nixos
<rembo10_>
Hi - it seems like the broadcom-sta module isn't building on kernel 5.1.2
ym555 has quit [Read error: Connection timed out]
<rembo10_>
I found this patch that seems to fix it, but I'm not exactly sure how to create one for nix
o1lo01ol1o has quit [Remote host closed the connection]
<rembo10_>
It seems like quite a simple change but I could use some guidance
i1nfusion has quit [Remote host closed the connection]
<srhb>
rembo10_: Have you seen boot.kernelPatches?
<srhb>
Oh, is it an out-of-tree driver? Meh.
i1nfusion has joined #nixos
<srhb>
Then I guess you'll want overrideAttrs on that and patch it.
tilpner has quit [Quit: WeeChat 2.4]
<srhb>
rembo10_: If you read through the drv with `nix edit nixpkgs.linuxPackages_5_1.broadcom_sta` it should give you a good idea how to patch it.
silver_ has quit [Quit: rakede]
<rembo10_>
Ah, ok great. Thanks!
<rembo10_>
I want to create a pull request
ottidmes has joined #nixos
<srhb>
rembo10_: Great :) Then you can just edit that file directly in checked out branch and PR that.
<mkovacs>
hi all! i'm trying to patch CGAL (so that i can continue working before the new release with fixes comes out). to that end, i copied CGAL's derivation from nixpkgs into my own project (so that i can extend the derivation with a `patches` section). the problem is that the derivation fails to build. seems like the CMake file it generates has some invalid paths
<mkovacs>
the errors look like this:
<mkovacs>
CMake Error at /nix/store/dxsxakms7a5w96w2ghfifr9a3m0lii38-cgal-4.14/lib/cmake/CGAL/CGALConfig.cmake:87 (include): include could not find load file: /nix/store/dxsxakms7a5w96w2ghfifr9a3m0lii38-cgal-4.14//nix/store/dxsxakms7a5w96w2ghfifr9a3m0lii38-cgal-4.14/lib/cmake/CGAL/CGAL_SetupBoost.cmake
rotaerk_ has quit [Ping timeout: 245 seconds]
waleee has quit [Quit: WeeChat 2.4]
<ottidmes>
if I want to include an option for the Ubuntu LiveCD on my NixOS boot loader menu, can I put this LiveCD (its big, 2G) on my ZFS and still have it accessible from by Grub? I thought I read Grub can handle ZFS, what about systemd boot, does it also support ZFS like that?
<mkovacs>
what am i doing wrong?
tilpner has joined #nixos
realrokka_ has quit [Ping timeout: 252 seconds]
<ottidmes>
mkovacs: you should post your patches, the path is obviously wrong, but without your changes, not sure what you are doing wrong
<mkovacs>
@ottidmes this is before applying any patches
ee1943 has quit [Read error: Connection reset by peer]
<rembo10_>
So in my patch, for the broadcom_sta module, I need to specify the kernel version in that patch, correct? So it only applies to versions >= 5.1.2?
<mpickering>
does anyone know if it's possible to build a statically linked ghc using nix? The docker image which just contains GHC is nearly 4gb big. A GHC binary on its own is only 200mb
<ottidmes>
mkovacs: seems to require digging into the source code of CGAL and patch the relevant cmake files
jasongrossman has quit [Ping timeout: 246 seconds]
<ottidmes>
mpickering: a small static binary produced by GHC, yes, clever did this I believe
<mkovacs>
ottidmes: what's strange is that this derivation for CGAL works fine when it's coming from nixpkgs
Supersonic has quit [Ping timeout: 264 seconds]
<mpickering>
ottidmes: I'm talking about GHC itself
<ottidmes>
mkovacs: you sure they are the same versions?
tunnels has joined #nixos
mexisme_ has joined #nixos
gxt has quit [Ping timeout: 252 seconds]
Matthieu_ has quit [Ping timeout: 245 seconds]
<ottidmes>
mpickering: then I got no idea, sorry
ckoparkar has joined #nixos
<mkovacs>
ottidmes: yes, it's the exact same .nix file
<tunnels>
why do i get an error when configuring the desktop in kde plasma 5 which says something like Namespace 'org.kde.plasma.wallpapers.image' has already been used for type registration
<tunnels>
i can't copy the error message to the clipboard
o1lo01ol1o has joined #nixos
Supersonic has joined #nixos
<ottidmes>
mkovacs: I meant that when you said "CGAL works fine when it's coming from nixpkgs", I assumed that you meant when you install it on your system, and then there are multiple factors involved that could explain the difference
<mkovacs>
ottidmes: i see, i'll double-check. thanks for helping!
lunik1 has joined #nixos
iyzsong has joined #nixos
<Taneb>
Is there an Official way to move an outlink?
<Taneb>
(as in nix-build --outlink name)
<ottidmes>
mkovacs: just for your information, I copied your GCAL/default.nix on my 19.03 install and it build without issue
Makaveli7 has quit [Quit: WeeChat 2.4]
tunnels has quit [Quit: Page closed]
Makaveli7 has joined #nixos
dslegends has quit [Read error: Connection reset by peer]
Matthieu_ has joined #nixos
<ottidmes>
Taneb: you probably have to create an additional GC root to it with nix-store --add-root --indirect and then remove the old GC root
<{^_^}>
[nixpkgs] @zimbatm opened pull request #61591 → Sylk: init at 2.1.0 → https://git.io/fjlHN
fendor has joined #nixos
rotaerk has joined #nixos
halfbit has joined #nixos
Tucky has joined #nixos
<mkovacs>
ottidmes: what command did you run? i'm thinking i might be doing something wrong here. i'm executing nix-build from the repo root without arguments
v0|d has quit [Ping timeout: 246 seconds]
<mkovacs>
ottidmes: i just checked, and the two derivations try to build the same versions - the hashes before the cgal-4.14 part are matching, except one fails...
<ottidmes>
mkovacs: I did run the following (but I made sure my <nixpkgs> exactly matches that what is used by nixos-rebuild): nix-build --expr 'with import <nixpkgs> { }; callPackage ./default.nix { }'
<mkovacs>
ottidmes: i forgot to mention that i'm on Ubuntu, not NixOS
<mkovacs>
weirdly enough, if i run that command, it works
<mkovacs>
(from inside the CGAL directory, i assume)
<ottidmes>
ye[
<ottidmes>
*yep
<ottidmes>
so what command did you run that failed and from where?
<mkovacs>
i'm running nix-build without any arguments from the repo root
<gchristensen>
btw y'all, we are moving Flake development to NixOS/nix under the "flake" branch, and existing open issues are moving over to the NixOS/nix tracker
<gchristensen>
and an RFC is on its way
FRidh has joined #nixos
<cizra>
I'm trying to build a PR, but it fails with: mkdir: cannot create directory ‘/nix/store/kpqyl91p6rqi9c1hnkmqjsrphcj1dgha-python3-3.7.3/lib/python3.7/site-packages/PyQt5’: Permission denied
<cizra>
Is it fixable by, say, deleting something or collecting garbage or something?
jomik has quit [Ping timeout: 258 seconds]
<averell>
no, how are you building that PR? manually in a shell? then you could set a different $out
<cizra>
nix-build -A qutebrowser, or sudo nixos-rebuild switch -I /path/to/pr
<averell>
mhhkay, that is more strange then, does part of that path exist already?
<cizra>
/nix/store/zracigqmjvybwpyvpk4g52iajs6ksp31-python3-3.7.3/lib/python3.7/site-packages/ exists, but not PyQt5
<ottidmes>
mkovacs: I did take a look, reproduced the error, without explicitly overwriting GCAL to 4.14 it takes 4.13 and with that it builds fine, it seems related to how cmake works, so unfortunately I cannot help you there
<averell>
completely different store path though, so it doesn't really matter
<averell>
oooh, i see it's trying to put something into the python derivation
Makaveli7 has quit [Quit: WeeChat 2.4]
<cizra>
averell: Sorry, bad copypaste. /nix/store/kpqyl91p6rqi9c1hnkmqjsrphcj1dgha-python3-3.7.3/lib/python3.7/site-packages/ also exists.
<averell>
ok, yeah but i still misread. you're not building python, but your package is trying to write to the python output path, right?
<cizra>
averell: Well, it's not MY package, but you appear to be right. I'm just trying to get qutebrowser to run.
realrokka has joined #nixos
<mkovacs>
ottidmes: thanks for taking a look! i've posted an issue on nixpkgs. can you take a look and maybe give advice on how to improve the description? https://github.com/NixOS/nixpkgs/issues/61357
<{^_^}>
#61357 (by mkovacs, 4 days ago, open): Derivation fails, seems to be location-sensitive
<averell>
what channel are you on? hydra shows 19.03 and master green builds, so it should just be there, unless you have other inputs somehow.
<tobiasBora>
do you know what suddently made it work?
tilpner has joined #nixos
<mkovacs>
ottidmes: I gotta go. Thank you for your help. I'll try to improve the issue description somehow and ivestigate the CMake stuff. Have a good one!
<ottidmes>
mkovacs: its not so much being location sensitive, its not mentioned your paths anyway in the errors, I am almost sure it has to do with how cmake works and that the 4.14 contains chances to the relevant cmake files that result in the error, let me just verify this by taking the default.nix of 4.13, if it does build fine, it shows that it has to do with chances made in 4.14
<averell>
cizra: is that in the pyqtwebengine build or the qutebrowser itself? the PR also has this --no-dist-info note, because of a very similar problem
Tucky has quit [Ping timeout: 268 seconds]
<cizra>
averell: pyqtwebengine, I think
<cizra>
averell: lemme try that no-dist-info
camsbury has joined #nixos
<cizra>
averell: Oh wait, it's already in there.
<averell>
yes, to prevent writing in that directory i think. but not sure :)
<cizra>
well, it sure didn't fix the build for me.
<ivan>
if nixpkgs built Signal-Desktop from source it could be made to use a font other than Roboto
<ivan>
(plz shave my yak)
<tilpner>
ivan: PRs to build a binary package from source are usually appreciated
<gchristensen>
+1
<ivan>
cool
<ivan>
there's some yarn2nix going on in riot-desktop and maybe doing that will work
detran has quit [Ping timeout: 268 seconds]
<Ankhers>
Can someone either try explaining `callPackage' and `withPackage' to me, or point me in the direction of some docs for the concepts?
<tilpner>
Ankhers: callPackage imports an expression and calls it with the argument it expects
<tilpner>
(It also adds an .override attribute so it can be re-imported with different arguments later)
aswanson has joined #nixos
<tilpner>
I have never encountered withPackage. If you meant python.withPackages, it builds a wrapper around python where the specified packages are available
<tilpner>
They are not comparable at all, one calls expressions, the other builds a wrapper
<zeta_wolf>
clever: what is wrong and how do i fix this?
toppler`` has quit [Ping timeout: 258 seconds]
<regnat[m]>
<sevanspowell "These are my nix files and error"> I'm not sure that's your issue, but I think the `lib` files for openssl are in `openssl.out` which isn't the default output
Guanin has joined #nixos
knupfer has joined #nixos
jomik has quit [Ping timeout: 252 seconds]
<clever>
zeta_wolf: just use chgrp, not /bin/chgrp
toppler`` has joined #nixos
_e has quit [Quit: WeeChat 2.4]
halfbit has quit [Ping timeout: 252 seconds]
vid has joined #nixos
<zeta_wolf>
clever: do i need to remove /bin/ for both chgrp and chmod?
<zeta_wolf>
tilpner: i am not sure what you mean, if i install coreutils locally in home-manager(home.nix) will the package automatically be detected and put into scope for the udev rules globally in configuration.nix? Is this what you mean?
<tilpner>
zeta_wolf: No, you don't need to install coreutils separately
Thra11 has joined #nixos
nschoe has joined #nixos
<{^_^}>
[nixpkgs] @Infinisil merged pull request #61483 → unison: fix building on macOS with enableX11 = false → https://git.io/fjWdJ
<zeta_wolf>
tilpner: the minimum brightness of brightnessctl is to bright and hurting my eyes and giving me migrane headaches, so i am trying to setup xmonad-brightness, all that is left is to do is to fix the permissions, lets see if it works
<tilpner>
<zeta> tilpner: ok i'll try it out, i will let you guys know if it works or not
<zeta_wolf>
tilpner: i know, i was just trying to explain what i am trying to do, thanks for helping me
<tilpner>
But then you never got back to me
<judson_>
So, I still need to test my hypothesis, but I don't know how I'm the only one having problems with Chrome's singleton behavior.
<judson_>
If it's true.
<judson_>
Chrome uses a socket to control the singleton browser. That's how, if you open a link from another program, it knows whether to open a new tab or a new browser.
<judson_>
It puts the socket in /tmp, and I think that systemd cleans it.
<tilpner>
It should only do that at boot
<tilpner>
At which point you shouldn't have a GUI running, and thus no socket
<tilpner>
See nixos-option boot.cleanTmpDir
wangoe has quit [Ping timeout: 246 seconds]
<zeta_wolf>
tilpner: oh my bad, i just switched to new irc(rcirc in emacs), maybe i did not see your message, i got rcirc up and running with some elisp, but there are still some things that i need to fix
zeta_wolf has quit [Remote host closed the connection]
inf is now known as inf_
pie_ has quit [Remote host closed the connection]
inf_ is now known as inf
esmerelda has quit [Ping timeout: 258 seconds]
rwe has quit [Remote host closed the connection]
civodul has quit [Ping timeout: 252 seconds]
rwe has joined #nixos
jomik has joined #nixos
<linarcx>
Guys, how to create a systemd service for a package?
<tilpner>
Look at similar modules, imitate and adapt
sigmundv has quit [Ping timeout: 268 seconds]
<aanderse>
linarcx: yes, many examples. feel free to bring specific questions here, though :)
ddellacosta has joined #nixos
Ariakenom has joined #nixos
<linarcx>
aanderse: Look at this package in arch linux:https://git.archlinux.org/svntogit/community.git/tree/trunk?h=packages/v2ray. i want to create a package for it and also include a service in it. but i don't know how do that?
rwe has quit [Ping timeout: 258 seconds]
<aanderse>
linarcx: well step 1 is to create the package then. are you having any difficulties there?
<linarcx>
aanderse: Yes, im creating it. but i don't know how to create a service for it.
camsbury has quit [Remote host closed the connection]
zeta_wolf has joined #nixos
drakonis_ has quit [Ping timeout: 245 seconds]
rwe has joined #nixos
<linarcx>
Gyus, i'm testing a package. it start to download some dependencies. but after one hour i don't know what's the process of downloading. it says: copying path '/nix/store/barxv95b8arrlh97s6axj8k7ljn7aky1-go-1.12' from 'https://cache.nixos.org'...
<linarcx>
How to know the exact process of download/build a package?
<tilpner>
zeta_wolf: I told you to use ${pkgs.coreutils}/bin/chgrp, and nothing has changed since
fionnan has joined #nixos
jgt has joined #nixos
<cizra>
Synthetica: all ready for your review!
jgt has quit [Ping timeout: 248 seconds]
aveltras_ is now known as aveltras
shabius_ has quit [Ping timeout: 252 seconds]
ddellacosta has quit [Ping timeout: 244 seconds]
otini has left #nixos ["User left"]
rwe has quit [Ping timeout: 246 seconds]
dnlkrgr has quit [Ping timeout: 252 seconds]
Matthieu_ has joined #nixos
<infinisil>
linarcx: I like to check htop to see what's happening. Start htop, go to the process that is downloading it (press t to see the tree structure), then press s to see the syscalls being made, then enable auto-scroll by clicking at the button on the bottom. You probably need to start htop with sudo for this to work
Lears has quit [Remote host closed the connection]
Lears has joined #nixos
is_null has quit [Ping timeout: 268 seconds]
<linarcx>
infinisil: Ohh, it's hard. why there is no process information in nixos download manager. in arch, debian, even guixsd, they have a ncie process information that you can know what's going on.
zeta_wolf has quit [Remote host closed the connection]
_ris has joined #nixos
<infinisil>
linarcx: The new Nix CLI does display download progress nicely
<{^_^}>
[nixops] @AmineChikhaoui pushed to master « datadog: remove api/app_keys from the monitor options »: https://git.io/fjlAO
<infinisil>
Idea: Provide a cachix cache for nix-locate indices, so you don't have to build it yourself
<infinisil>
Although, not sure if you can create a nix-build from nix-index
<infinisil>
Would probably require turning off the sandbox
<infinisil>
Mehh
emptyflask has joined #nixos
<matthewbauer>
infinisil: yeah this would probably better be done as part of the channel scripts
<infinisil>
matthewbauer: You mean to bundle the index with the channel?
<infinisil>
Ideally hydra would allow such queries directly
<emptyflask>
so I've got a nice ruby/rails dev environment set up on nixos using bundix... I wonder what the best way would be to run the various apps (with different ruby versions) through nginx. on other OSes I've used a chruby wrapper script with passenger, but since here I'm using direnv + nix shell, I have to rethink that
<manveru>
emptyflask: easiest i found is to run them as separate systemd services and use port forwarding
<tilpner>
You need to test if intermediate steps are solved, not test the whole chain at once
<tilpner>
Paste the output of: ls -lah /sys/class/backlight/*/brightness
adamantium has joined #nixos
<zeta_wolf>
tilpner: well, the xmonad.hs file compiled without any errors and the people in #haskell said the code looked fine, and ok give me one sec to run that command
<tilpner>
So what? You can eliminate the entire Haskell portion of this puzzle by just looking at the permissions directly
<tilpner>
Then you can stop guessing about where it goes wrong
joko has quit [Quit: leaving]
rwe has quit [Remote host closed the connection]
rwe has joined #nixos
shibboleth has quit [Quit: shibboleth]
mexisme_ has quit [Ping timeout: 258 seconds]
<zeta_wolf>
no i finished the xmonad.hs compiled it, checked with the #haskell people and they said it looked correct, now i am just trying to get the permissions to work
<tilpner>
See? Now you know the Haskell part isn't causing this
troydm has quit [Quit: What is Hope? That all of your wishes and all of your dreams come true? To turn back time because things were not supposed to happen like that (C) Rau Le Creuset]
jgt has joined #nixos
<zeta_wolf>
tilpner: um, ok that's good to know, but i'm not sure what the output of thatcommand means?
<tilpner>
It means the udev rules didn't take effect or were incorrect
<tilpner>
~ > ls -lah /sys/class/backlight/*/brightness
<tilpner>
-rw-rw-r-- 1 root video 4.0K May 15 13:10 /sys/class/backlight/acpi_video0/brightness
<tilpner>
-rw-rw-r-- 1 root video 4.0K May 16 15:14 /sys/class/backlight/intel_backlight/brightness
alp has quit [Ping timeout: 258 seconds]
<tilpner>
That's how mine look, and since I'm in the video group I can set brightness as I want
alp has joined #nixos
arguser has joined #nixos
<arguser>
Hi there, anyone got VSCode Live Share working?
jgt has quit [Ping timeout: 250 seconds]
<tilpner>
ottidmes and steveeJ have
fendor has quit [Ping timeout: 246 seconds]
<arguser>
tilpner: thanks
<arguser>
ottidmes or steveeJ care to share the magic with a nixos newbie?
<tilpner>
arguser: You can wait for them to see your question, and in the meantime search if they have publicly available configuration repos
<zeta_wolf>
tilpner: ok i see, it needs to be `root video` instead of `root root`, i already set my user as part of the video group globally in configuration.nix, here is the pastebin: https://hastebin.com/yarusacece.php
<tilpner>
zeta_wolf: Yes, that is not the issue here
<tilpner>
(Where "that" is the "groups your user is in")
<arguser>
tilpner: will do, last time I saw some gists but didn't know how to work with them properly
<etu>
Izorkin: My last statement still remains, unless you've changed things
lovesegfault has quit [Quit: WeeChat 2.4]
<ottidmes>
arguser: disclaimer I haven't had the time to test the repo, but the source files I used are literal copies from what I used a few weeks ago, so unless I made some mistakes in the glue code, it ought to work, let me know if something does not work for you so I can fix it
<arguser>
ottidmes: great!
<arguser>
ottidmes: will try it later today, thanks!
zeta_wolf has quit [Remote host closed the connection]
<ottidmes>
arguser: just write an issue, because I am likely not to be online here at that time
<Izorkin>
etu: leave as is. may find another method
troydm has joined #nixos
<arguser>
ottidmes: will do
arguser has quit [Quit: Page closed]
domogled has quit [Quit: domogled]
pie_ has joined #nixos
domogled has joined #nixos
<pie_>
are there any pending kernel updates or x11 or something because for the past two weeks plasma keeps breaking when i undock :(
zeta_wolf has joined #nixos
<zeta_wolf>
tilpner: one of the commands changed mk keyboard layout back from my custom one to qwerty so i had to reboot but here are the outputs that i have so far: https://hastebin.com/aqamogusoc.rb
<pie_>
in the sense that it wont work unless you have git in your environment
<zeta_wolf>
tipner: why aren't these udev rules working?
<zeta_wolf>
tilpner: the brightness is the last thing i need to setup in xmonad.hs then i will finally be good to go, i did not think that setting up these permisions would be so difficult
<tilpner>
zeta_wolf: And this shows two lines? grep -r backlight /etc/udev/rules.d
<pie_>
ok uhhh nix-prefetch-github seems kinda broken idk
<tilpner>
I don't know why they aren't working
* pie_
looks sideways at his code
<zeta_wolf>
tilpner: i just setup rcirc so i haven't been able to get into the #xmonad channel to ask questions, i guess i am screwed
<zeta_wolf>
:(
<tilpner>
...
i1nfusion has quit [Remote host closed the connection]
<tilpner>
This IS NOT related to xmonad at all
zupo__ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<zeta_wolf>
tilpner: then what is this related to?
<tilpner>
As I've been telling you for the last 4 hours, it seems the udev rules aren't taking effect or are wrong
<tilpner>
And no, I don't know why either
* tilpner
is done for today
<zeta_wolf>
tilpner: so do you know of another channel where i can ask for help?
jgt has joined #nixos
<pie_>
if it works on ubuntu try to figure out why it works on ubuntu and not your setup
<pie_>
compare, scratch head, repeat. most channels are not so helpful as here, if people cant help you here you're probably going to need to give it a good shot yourself.
Matthieu_ has quit [Ping timeout: 264 seconds]
<pie_>
i think udev at some point ended up in systemd?
<zeta_wolf>
i guess i will try the #haskell channel again, they are usually not very friendly so i am not looking forward to it
jgt has quit [Ping timeout: 252 seconds]
<pie_>
backlights dont sound like an xmonad or haskell problem
<zeta_wolf>
pie_: so does that mean that i would have to setup the udev rules in in the systemd options?
<ottidmes>
zeta_wolf: not really followed your question, but from a glance, if it has to do with rights on /sys for backlight, maybe make some little script and make an exception for it in sudoers?
<pie_>
zeta_wolf, no i mean go ask the systemd people :P
domogled has quit [Ping timeout: 268 seconds]
<pie_>
in my experience if people in haskell arent friendly the problem tends to be with the asker
<pie_>
zeta_wolf, you probable need to authenticate
knupfer has joined #nixos
<pie_>
something something /msg nickserv help identify
<zeta_wolf>
i need to fix the elisp in .emacs for rcirc, it does not sound fun
<pie_>
yeah emacs is a yak shave i havent had the time to deal with yet :)
<pie_>
why are you heavily relying on emacs if you cant use it yet?
<pie_>
zeta_wolf, also there is usually a way to search a list of irc channels. i dont know if theres a freenode service that does that, i just use whatever interface hexchat gives me
gilligan has joined #nixos
<infinisil>
/list does that
<gilligan>
hiho o/
<zeta_wolf>
i am looking long term and emacs seems great, you can almost anything in it
<Ralith>
as a heavy emacs user, I wouldn't learn emacs if I were starting over from scratch
<gilligan>
Does anyone here happen to use *swaywm* and *waybar* ? I'm wasting way too much time trying to figure out how to get the systray to display icons correctly :--D
<zeta_wolf>
well, i give up, i going to try out the `lights` package, i'll give xmonad-brightness a try again when i have the time
knupfer has quit [Ping timeout: 248 seconds]
<judson_>
tilpner - I have a systemd.tmpfiles.rules = [ "d /tmp 1777 root root 3d" ]; Hoist on my own petard!
<zeta_wolf>
Ralith: why?
<judson_>
I tend not to reboot frequently, so I prefer to have /tmp cleaned more often than boot.
<Ralith>
because there are other high quality text editors not weighed down by decades of legacy now
<pie_>
zeta_wolf, sure, nothing wrong with long term and emacs working great later, but maybe help yourself help yourself
<pie_>
zeta_wolf, bootstrapping and whatnot
v0|d has joined #nixos
<zeta_wolf>
pie_: i am getting the hang of it, just have to stick with it
sigmundv has quit [Ping timeout: 245 seconds]
domogled has joined #nixos
Zer0xp has joined #nixos
<zeta_wolf>
well later guys
<zeta_wolf>
tilpner++
<{^_^}>
tilpner's karma got increased to 26
JonReed has joined #nixos
<zeta_wolf>
pie_++
<{^_^}>
pie_'s karma got increased to 1
<zeta_wolf>
Ralith++
<{^_^}>
Ralith's karma got increased to 4
<zeta_wolf>
clever++
<{^_^}>
clever's karma got increased to 131
zeta_wolf has quit [Remote host closed the connection]
gilligan has quit [Quit: Konversation terminated!]
<pie_>
am i making some dumb mistake here https://bpaste.net/show/17db9389db0a , results in: error: opening file '/nix/store/ng1rf5rlsylscnnz4kn8yl9h92alk8gk-source/default.nix': No such file or directory, with a nixpkgs that looks like it only has the repo/pkgs directory
<pie_>
kinda tired to really give a stronger shot at figuring out what i messed up
adamantium has quit [Ping timeout: 258 seconds]
<pie_>
everything looks fine to me
<ottidmes>
pie_: what does `ls /nix/store/ng1rf5rlsylscnnz4kn8yl9h92alk8gk-source` give?
<pie_>
ottidmes, well "everything in the nix looks fine to me", no idea why fetchfromgithub is only resulting in the pkgs directory existing in the repo..
<pie_>
or, whatever sources is
goibhniu1 has quit [Ping timeout: 252 seconds]
<ottidmes>
its indeed weird
<ottidmes>
I tried the same on my 19.03, same error
<pie_>
thanks ill chekck it out later, unless firefox deletes my tabs again
<pie_>
ottidmes, "Monkey patches the fetchers (via an overlay) to not ignore certificate validity checking, to reduce the risk of man-in-the-middle (MITM) attacks when prefetching." uhhh it ignoring certificates a thing...
domogled has joined #nixos
drakonis has quit [Ping timeout: 252 seconds]
<ottidmes>
pie_: yeah most default fetchers ignore certificates, so I have to fix them to do check them
<{^_^}>
[nix] @edolstra pushed 3 commits to improve-flake-command: https://git.io/fjlpj
fendor has quit [Ping timeout: 248 seconds]
<pie_>
0___0
<ottidmes>
ignoring them in Nix is safe due to hashing
<pie_>
ok....i guesssss
<lassulus>
pie_: nix-prefetch-github NixOS nixpkgs --rev master does the expected thing
<pie_>
lassulus, yeah i figured after you guys mentioned the rev problem
<pie_>
thats still pretty weird behaviour though
<ottidmes>
yeah I noticed something going wrong with nix-prefetch as well
<ottidmes>
it seems their response to requested the rev changed
<pie_>
im not up for filing a bug report but maybe this needs to be looked into
<pie_>
oops forced downgrade to 2004 :P
<ottidmes>
pie_: I am getting two revs returned at master, and I believe nix-prefetch-github uses the same API to access the rev
<ottidmes>
the problem with the prefetchers (nix-prefetch-github and my nix-prefetch) is basically: git ls-remote https://github.com/NixOS/nixpkgs.git HEAD | awk '{ print $1 }', returning 2 rev's
<pie_>
what changed
<pie_>
also gotta love stringly typed processing
Ariakenom has quit [Quit: Leaving]
<ottidmes>
pie_: HEAD is pointing to two rev's (is that even possible? my git knowledge is quite limited)
<ajs124>
what's the difference between HEAD and refs/remotes/origin/HEAD?
<pie_>
i dont know but theres a difference, i saw that when i was playing with my git sandbox :D
<pie_>
my knee jerk gues sis local and remote head
<pie_>
but iunno
<ajs124>
How can it be local if I do git ls-remote? I don't even have a local .git
<pie_>
ok so im probably wrong
<ottidmes>
ajs124: I should just fix the command to only look for exactly HEAD not any others
dnlkrgr has quit [Quit: WeeChat 1.4]
v0|d has quit [Remote host closed the connection]
<ottidmes>
pie_: about the stringly typed processing, unfortunately thats a given on unix. I at least try to avoid processing output meant only for human consumption
<infinisil>
ajs124: git ls-remote shouldn't use anything from locally, no idea why it has HEAD though :/
lovesegfault has quit [Quit: WeeChat 2.4]
lovesegfault has joined #nixos
<ajs124>
the thing is, if you do git ls-remote https://github.com/NixOS/nixpkgs.git HEAD, copy the hash and do git […] | grep $THAT_HASH, you get refs/heads/master and they match. so why does it return refs/remotes/origin/HEAD? why even refs/remotes??
stites has quit [Quit: ZNC 1.6.6+deb1ubuntu0.1 - http://znc.in]
<infinisil>
Somebody should ask #git
work_ has joined #nixos
drakonis_ has quit [Quit: Leaving]
<pie_>
ottidmes, yeah
<pie_>
git is pretty responsive in my limited experience
mexisme_ has joined #nixos
Glider_IRC_ has joined #nixos
domogled has quit [Ping timeout: 244 seconds]
<ottidmes>
don't see any way in the manual to filter it further, so guess a more complex awk has to do: git ls-remote https://github.com/NixOS/nixpkgs.git HEAD | awk '$2 == "HEAD" { print $1 }'
justanotheruser has joined #nixos
<infinisil>
Well you can use --refs
Glider_IRC has quit [Ping timeout: 258 seconds]
talqu has quit [Remote host closed the connection]
<infinisil>
Or --sort it by date
esmerelda has quit [Ping timeout: 258 seconds]
<infinisil>
Although, --sort=creatordate fails
<infinisil>
For nixpkgs at least
<ottidmes>
infinisil: not really, I want to know HEAD, which could be a later date than other refs/tags and I don't know what it will be pointing to
<infinisil>
Ah
Zer0xp has joined #nixos
<infinisil>
How about just using the line with HEAD?
<Zer0xp>
Hey
<ottidmes>
infinisil: thats exactly my solution with the updated awk
<infinisil>
Ahh haha sorry
<{^_^}>
[nixpkgs] @basvandijk opened pull request #61604 → nixos: add test for tinydns → https://git.io/fjlhV
<ottidmes>
ghehe, good to know you agree on the solution :P
<Zer0xp>
I'm new to NixOS and I was wondering if any of you know how to install the google-authenticator package and make the 2FA work successfully ?
esmerelda has joined #nixos
lovesegfault has quit [Quit: WeeChat 2.4]
<Zer0xp>
Because from what I've read elsewhere is that some of the files need to be edited in pam.d but I've tried that and all those files are unwritable.
<ottidmes>
infinisil: I am about to setup the disks on my new laptop, any tips? I plan to go with /boot of 8GB (so I can put some LiveCD there too and never even have to think about running out of /boot space) swap of 32G (same as RAM), and the rest of the remaining 1TB will be ZFS with NixOS using legacy mountpoints
<infinisil>
ottidmes: Sounds good to me, no encryption then?
<Baughn>
ottidmes: There is absolutely no need to make swap the same size as RAM. I usually make it 2GB.
<sir_guy_carleton>
Zer0xp: no, you just put it in the configuration.nix file
<ottidmes>
infinisil: I will do that via sedutil (native hardware encryption, its less safe, but its easier and still matches my threat model, i.e. in case of theft, that thieves not having access to my files as well)
<pie_>
swap just needs to be big enough that theres enough time for it to fill up while the system is lagged out so that you can kill something :D
<Zer0xp>
clever: Do I have to add that in the config.nix file ?
<ottidmes>
Baughn: what if I want to support hibernation?
<clever>
Zer0xp: configuration.nix
<Baughn>
ottidmes: Do you? Suspend-to-ram is probably good enough.
<pie_>
ottidmes, i was about to ask, no idea where hibernation on linux actually saves stuff
<Baughn>
32GB is a lot of disk space to reserve.
<infinisil>
Baughn: suspend != hibernation though
<pie_>
imagine all the nixos versions you could save there :D
<pie_>
probably like...two :D
<pie_>
jk
<clever>
pie_: it basically just pushes everything into swap, and then cuts power
<ottidmes>
I got 1000GB (probably more like 900+ since 1TB is likely not 1000G) so enough space to spare
<Baughn>
Well, everything that isn't found elsewhere. It does drop caches, etc.
<{^_^}>
[nixpkgs] @danielfullmer opened pull request #61605 → rtl8812au: fix build with Linux >= 5.0 → https://git.io/fjlhi
<pie_>
clever, oh. and i think ive hibernated to a smaller swap without it complaining >_> left me quite suspicious maybe it does some compression or sometihng but sounds hlla sketchy
<Baughn>
1TB should be precisely 1000GB. Might be slightly more.
<ajs124>
are there still like 3 solutions for hibernation? back when I looked into it, there was the upstream kernel thing, tuxonice and some userspace thing.
<Baughn>
HDD manufacturers don't tend to _cheat_. They just, y'know, use SI prefixes.
<ottidmes>
ajs124: I have been using hibernation quite extensively for a while, but it was quite dependent on the kernel version (i.e. updates resulting in it breaking from time to time)
<clever>
infinisil: wut
<Zer0xp>
clever: Thank you so much.
<infinisil>
clever: Haven't tried it myself, but it sounds pretty neat
<ottidmes>
how does that differ from what I have been using, I also could just resume from where I left things?
<infinisil>
Because criu seems to indicate that normal hibernation doesn't restore process state
<ottidmes>
clever: hah, that happens to me from time to time as well, like coming back to an apparantly Windows session from weeks ago :P
<infinisil>
But if it doesn't do that, then nothing is started again after hibernation
<infinisil>
Which is not what it does afaik
<ottidmes>
* apparantly hibernated
Zer0xp has quit [Ping timeout: 256 seconds]
o1lo01ol1o has quit [Remote host closed the connection]
<pie_>
infinisil, youre looking at it wrong
mexisme_ has quit [Ping timeout: 246 seconds]
<pie_>
criu isnt meant as an alternative to normal hibernation
<pie_>
not that i ever used it
<Baughn>
s2ram and s2disk give you the same thing. Except, s2ram is far more reliable these days, and also resumes much faster.
<infinisil>
Ah, I guess it's just if you need to hibernate single processes
o1lo01ol1o has joined #nixos
<infinisil>
Got it
<Baughn>
The downside is that it uses a tiny little bit of power. It tends to drain ~5% of your laptop battery per 24h.
<ottidmes>
infinisil: "Using this functionality, application or container live migration, snapshots, remote debugging, and many other things are now possible."
<pie_>
and i usually try to hibernate when im at 5% so ive screwed myself before :D
Matthieu_ has quit [Ping timeout: 258 seconds]
hoijui has quit [Ping timeout: 250 seconds]
<ashkitten>
so i have a weird issue. i want to fork a beep command in the initrd script, but it gets killed and the last frequency continues playing forever if it gets killed by the handoff to stage 2 init. basically i need to fork it early, but also wait for it to exit cleanly if it makes it to the end of stage 1
o1lo01ol1o has quit [Ping timeout: 268 seconds]
stites has joined #nixos
<Baughn>
ashkitten: Would `printf '\a'` work?
<ashkitten>
Baughn: wdym?
<clever>
Baughn: the beep command is seperate from the bel character
schjetne has joined #nixos
<Baughn>
Yes, but perhaps a bel would do.
<ashkitten>
i'm playing a startup tune but i don't want it to delay boot, basically
rfold has quit [Quit: WeeChat 2.4]
<clever>
ashkitten: oh, there is the @ thing
<ashkitten>
clever: hm?
<clever>
ashkitten: if you prefix argv[0] with an @ i think, then it wont be killed by switch-root
<ashkitten>
oh
<clever>
thats used for fuse and unionfs type stuff dealing with the rootfs
<clever>
so you dont murder the thing thats giving the rootfs
<ashkitten>
that's great, exactly what i need
<ashkitten>
so just @beep?
<clever>
something like that, cant remember the exact details
schjetne has quit [Ping timeout: 245 seconds]
ashkitten has left #nixos ["no bouncer for now :<"]
jgt has joined #nixos
Matthieu_ has joined #nixos
ashkitten has joined #nixos
<ashkitten>
clever: it wasn't @beep
toppler`` has quit [Ping timeout: 246 seconds]
jgt has quit [Ping timeout: 258 seconds]
drakonis has joined #nixos
<ashkitten>
clev
<ashkitten>
clever: it apparently is correct to set argv[0][0] to "@"
<ashkitten>
but i'm not sure how to do that in a script without modifying the binary