<adamantium>
question. A systemd-boot UEFI installation. Can I just move the disk to another computer, and expect it to boot right up, or is the boot entry not going to be shown by the bios?
Myhlamaeus has quit [Ping timeout: 252 seconds]
asheshambasta_m has joined #nixos
<rnhmjoj>
adamantium: i think you'll probably need to write a boot entry using efibootmgr, but it's not too difficult
<adamantium>
thats what i was thinking. it's too bad they made uefi to be that way
tbenst_ has joined #nixos
tbenst has quit [Ping timeout: 244 seconds]
<colemickens>
That's not necessarily true.
<colemickens>
Every UEFI implementation I've ever used has offered a boot menu entry for loaders in the default locations.
<colemickens>
(without having installed an entry via efibootmgr, etc)
jgt has joined #nixos
<adamantium>
colemickens: default locations -- does that mean your EFI partition should be mounted at /boot/EFI
<colemickens>
Well, the UEFI won't know anything about where you're mounting in some OS that boots later.
<colemickens>
It's more about that Grub and Systemd-boot will install to <esp>/some/path that UEFI system menus will look in by default.
<adamantium>
i guess 'try and see' then
<colemickens>
er, \EFI\BOOT\BOOTX64.EFI is the default, I think
<colemickens>
I've never heard of a UEFI implementation that doesn't do what I'm discussing. I'm not sure they're allowed to omit this functionality.
<colemickens>
Even TianoCore without the ability to even persist menu entries, will still boot the default location.
<adamantium>
colemickens: yes, mine is /boot/EFI/BOOT/BOOTX64.EFI but my /boot is fat32 and efiSysMountPoint = "/boot";
<colemickens>
Guess it's just a matter of if your BIOS will look on external devices, but that's usually just a config issue.
<colemickens>
well, those are the defaults/standards, so that will be fine
lambda-11235 has quit [Quit: Bye]
<adamantium>
thanks
<adamantium>
I wasn't sure if it was standard or not
dansho has quit [Read error: Connection reset by peer]
dansho has joined #nixos
silver has joined #nixos
InFlames has quit [Ping timeout: 258 seconds]
horner has joined #nixos
logzet has joined #nixos
InFlames has joined #nixos
horner_ has joined #nixos
asheshambasta_m has quit [Quit: Leaving.]
horner has quit [Ping timeout: 246 seconds]
slack1256 has quit [Ping timeout: 245 seconds]
polman has quit [Read error: Connection reset by peer]
polman has joined #nixos
esmerelda has joined #nixos
adamantium has quit [Remote host closed the connection]
phaebz has joined #nixos
ottidmes has joined #nixos
Izorkin has quit [Ping timeout: 252 seconds]
linarcx has quit [Quit: WeeChat 2.4]
linarcx has joined #nixos
__monty__ has joined #nixos
<yorick>
the HP uefi implementation hardcoded only the windows loader, fun time
Ariakenom has joined #nixos
<__monty__>
So no linux on HP?
thc202 has joined #nixos
<MichaelRaskin>
Or only on the systems with Linux preinstalled…
<MichaelRaskin>
(do they hardcode GRUB there?)
<ottidmes>
Is there a way to protect the purity of my config against accidentally pointing to some file on the local file system (non local to the config directory)? --pure-eval would not catch these I believe, because they are just part of some strings without any context. I guess I could do some rigurous thing like checking for paths in the output paths in /nix/store
init_6 has joined #nixos
<Torus[m]>
<ottidmes "Is there a way to protect the pu"> chmod ?
<tilpner>
ottidmes: You could check purity by filtering nix-instantiate -v for "evaluating file" lines outside of the store
<tilpner>
Which isn't really pretty, and might not catch local sources
<tilpner>
For which you could use strace, but that's even worse
<tilpner>
IIRC gchristensen had something for this, maybe
<ottidmes>
tilpner: but that would not catch lines a hardcoded path in config files of applications, I had this for example with my nginx config defined in my NixOS config, where I referred to some absolute path outside of my NixOS config project
<tilpner>
Not exactly what you meant
<tilpner>
ottidmes: There is a restricted mode, which can be used to define which directories you can access
<tilpner>
ottidmes: The bot uses it for safe evaluation
<ottidmes>
tilpner: but that is again only restricting files within the Nix system, like when using import and whatnot, but it would not protect me from generating config files for my application that point to hardcoded paths outside of my NixOS configuration
<tilpner>
> /etc/passwd
<tilpner>
> "${/etc/passwd}
<tilpner>
> "${/etc/passwd}"
<tilpner>
I guess it's not here
<tilpner>
I feel like restricted mode also protects against "${./config}"
<tilpner>
But I don't know for sure, so check that
InFlames has quit [Ping timeout: 246 seconds]
knupfer has quit [Quit: knupfer]
<ottidmes>
I meant more if I had some path not nixified, so just plain strings, e.g. in my NixOS configuration I had '' ... ssl_dhparam /wheel/proj/nixcfg/shared/config/nginx/dhparam.pem; ... ''; which hardcoded /wheel/proj/nixcfg
knupfer has joined #nixos
<tilpner>
Oh
<tilpner>
That's not visible to Nix at all, you'll need to do something custom for that
<ottidmes>
yeah, was just wondering if someone had :)
<ottidmes>
I am planning to convert my configuration to be completely pure now, so I am checking all impurities in my config at the moment. I will probably first do some scopedImport magic to mimic the behavior of --pure-eval, because having to commit / tarball on every change while actively working on your config is too painful
knupfer has quit [Ping timeout: 264 seconds]
phaebz has quit [Quit: ERC (IRC client for Emacs 26.1)]
adamantium has quit [Quit: Konversation terminated!]
knupfer has joined #nixos
Ariakenom has quit [Quit: Leaving]
kloenk has joined #nixos
knupfer has quit [Ping timeout: 252 seconds]
vid has joined #nixos
phaebz has joined #nixos
<manveru>
cizra: yeah, got a fix for that
freeman42x has joined #nixos
dne has quit [Remote host closed the connection]
troydm has quit [Quit: What is Hope? That all of your wishes and all of your dreams come true? To turn back time because things were not supposed to happen like that (C) Rau Le Creuset]
dne has joined #nixos
linarcx has quit [Quit: WeeChat 2.4]
troydm has joined #nixos
_ris has joined #nixos
linarcx has joined #nixos
fendor has joined #nixos
<infinisil>
ottidmes: oh neat
<infinisil>
ottidmes: You could always autocommit every change. I'm almost doing that already with my config
alexherbo25086 has joined #nixos
init_6 has quit []
alexherbo2508 has quit [Ping timeout: 255 seconds]
vid has quit [Ping timeout: 255 seconds]
phaebz has quit [Ping timeout: 252 seconds]
<manveru>
cizra: i got tdm to build and execute, but it's missing all the assets i think... do i know where to get those?
fendor has quit [Read error: Connection reset by peer]
Glider_IRC__ has quit [Quit: Leaving]
ym555 has joined #nixos
horner_ has quit [Ping timeout: 244 seconds]
kisik21 has joined #nixos
<gchristensen>
(question from kisik21
<gchristensen>
(question from kisik21 ) http://dpaste.com/0KR6NT2 - I want to set an attribute from provided information. The "config.theming.fonts.sans.name" should be visible from another module and provide a string combining some info from the "config.theming.fonts.sans" submodule set in the same module, but... it gives me a cryptic error: "value is a string while a set was expected, at /nix/store/<...>-nixos-19.09pre<...>/nixos/lib/modules.nix:219:25"
<gchristensen>
(continued) basically it's like that: 1) module imports theming.nix (the paste) 2) module sets theming.fonts.sans.* attributes 3) module expects theming.fonts.sans.name to contain a string set from theming.fonts.sans.* attributes 4) it doesn't seem to receive that string?
<miniBill>
So, I'm tring to build a cabal package from a specific git commit. I've done "cabal2nix https://github.com/elm/compiler.git --revision af2ea2b5baf6e47dcccca4385f6a773a981c6df2 > elm.nix" but when I try to build I get missing dependencies errors. When I tried using cabal2nix on the deps and overriding them... it still failed in the end saying that some packages depended on container 0.5.something some
<{^_^}>
[nixpkgs] @Lassulus pushed commit from @dtzWill to master « whatstyle: init at 0.1.7 »: https://git.io/fj8Rr
MmeQuignon has quit [Ping timeout: 245 seconds]
phaebz` has joined #nixos
phaebz has quit [Ping timeout: 252 seconds]
<bodqhrohro_>
Is there some analog of localepurge for Nix?
<cocreature>
is there any documentation on flakes? I’ve seen the term mentioned in a few commits and issues but I’m utterly failing to find any documentation or more information on what they actually are.
<tilpner>
bodqhrohro_: Nix/nixpkgs isn't the most space-efficient solution, do you need the extra disk space or do you want to do it just because you could elsewhere?
<bodqhrohro_>
tilpner: doing somewhere means I can theoretically do it anywhere :D Nothing prevents me from looping on /nix/store/**/share/locale/, right?
<tilpner>
bodqhrohro_: Well, the store is usually mounted read-only, so yes, something prevents you from doing that
<clever>
Izorkin: you can use the preAutoreconf hook to put those extra things back in
nckx has quit [Read error: Connection reset by peer]
<clever>
gchristensen: possibly by assigning to options.services.nginx.virtualHosts, giving it a submodule, that has a default extraConfig, but that may conflict due to defining extraConfig twice
<{^_^}>
[nixpkgs] @marzipankaiser opened pull request #61676 → caffeine-ng: init at 3.4.2 (and setproctitle: 1.1.9 -> 1.1.10) → https://git.io/fj80G
<Izorkin>
how to fix tis error - Traceback (most recent call last): File "firewall-config", line 25, in <module> import gi - mportError: No module named gi
<symphorien>
also, use buildPythonApplication instead
<{^_^}>
[nixpkgs] @miniBill opened pull request #61680 → Elm: fix "Map.! when compiling with --debug" → https://git.io/fj8EJ
<symphorien>
see 9.14.2.2.2 in the nixpkgs manual
fendor has joined #nixos
<gchristensen>
infinisil: I get «building all machine configurations... error: The option `security.acme.certs' in `/nix/store/j9k3hwrvcnd28dkl03zcxx5xwawayl5x-nixexprs.tar.xz/nixos/modules/security/acme.nix' is already declared in `/home/grahamc/projects/github.com/grahamc/network/network.nix'.» with https://gist.github.com/grahamc/281f8f235837f683f25c08f4934d84c1 -- any thoughts?
ambro718 has joined #nixos
fendor_ has joined #nixos
fendor_ has quit [Remote host closed the connection]
<ambro718>
I booted the armv7 image on raspberry pi 2, it went well until some point when the screen went black, there were some drm-related messages just earlier.
<ambro718>
can I at least ssh into it somehow?
horner has joined #nixos
<tilpner>
gchristensen: Try attrsOf
<gchristensen>
d'oh
<gchristensen>
thank you...!
detran has quit [Ping timeout: 255 seconds]
<gchristensen>
dang. I went over the rate limit for LE.
linarcx has quit [Quit: WeeChat 2.4]
<tilpner>
That's why I back up my certs too :/
linarcx has joined #nixos
nullher0es has quit [Quit: WeeChat 2.4]
romildo has quit [Quit: Leaving]
<gchristensen>
I *think* I will be able to try again in about 30min.
<clever>
mkoenig: the only variables, are the name of the cabal file, and the nixpkgs rev, and that is far more compact then what cabal2nix generates
<DigitalKiwi>
first time after a reboot*
polman has joined #nixos
<tilpner>
DigitalKiwi: Which commands?
<DigitalKiwi>
# $ nix-shell -p dropbear --command "dropbearkey -t ecdsa -f /tmp/initrd-ssh-key" <-- that but /tmp/ isn't right I either have to move it or put it in a different spot
pie_ has quit [Remote host closed the connection]
pie_ has joined #nixos
<tilpner>
DigitalKiwi: Just put the key into persistent storage, and you won't have to regenerate it every time
<cizra>
If I ask for xlib in buildInputs in my shell.nix, I get error: cannot coerce a set to a string - yet the same works fine in nix-build's default.nix. How to fix?
<clever>
> xlib
<{^_^}>
undefined variable 'xlib' at (string):253:1
<cizra>
Mmm, OK. I nix-built a game (The Dark Mod) using manveru's fine script @ https://www.irccloud.com/pastebin/CWzqYTi6/thedarkmod.nix , but it can't dlopen libGL.so.1 unless I run it like: LD_LIBRARY_PATH=/nix/store/7jfdw9nr6dxhj71g2l1yqzqpq0f40bsa-libGLU-combined/lib:$LD_LIBRARY_PATH thedarkmod
<sm>
upgrading nix from 2.2.1 to 2.2.2 seems to have fixed my connectivity problem
<cizra>
manveru: when I do, it works perfectly, assets n' all. I ran it from my usual directory.
Copenhagen_Bram has quit [Read error: Connection reset by peer]
<{^_^}>
[nixpkgs] @matthewbauer pushed 0 commits to ryantrinkle/ledgerblue-0.1.17: https://git.io/fj8zb
MrUpload1000[m] has left #nixos ["User left"]
Miyu-chan has joined #nixos
<cizra>
OK, so having libGLU_combined in LD_LIBRARY_PATH fixes my issue, let's add it to dependencies. However, _despite_ nix repl '<nixpkgs>' tab-completing libGLU_combined, I cannot add it (nor libGLU) to buildInputs[].
<{^_^}>
[nixpkgs] @matthewbauer merged pull request #61169 → static: set default_library flag for meson in makeStaticLibrary → https://git.io/fjcpd
<{^_^}>
[nixpkgs] @matthewbauer pushed 2 commits to staging: https://git.io/fj8zp
horner has quit [Remote host closed the connection]
Copenhagen_Bram has joined #nixos
ddellacosta has joined #nixos
<cizra>
manveru: 1) tdm_update downloads stuff. 2) the game itself downloads stuff. How can we reconcile this with file permissions in Linux? Set the executables as sgid and have a group-writeable directory?
_e has quit [Quit: WeeChat 2.4]
_e has joined #nixos
mexisme_ has quit [Ping timeout: 258 seconds]
<{^_^}>
[nixpkgs] @0xflotus opened pull request #61685 → fixed small error → https://git.io/fj8gs
_e has quit [Client Quit]
knupfer has joined #nixos
domogled has joined #nixos
_e has joined #nixos
<cizra>
Let's suppose we create a package for tdm_update, then another package for tdm that depends on tdm_update and runs it in a post-build step, and it ends up in NixOS official repos -- will it spam up the binary cache? The assets seem to be 3.6 gigabytes.
schneid3306 has joined #nixos
domogled has quit [Ping timeout: 258 seconds]
<cizra>
manveru: You're correct - the buildscript works fine and running tdm_update in an empty dir is acutally the official way of getting the assets.
gchristensen has quit [Quit: Connection closed for inactivity]
drager has joined #nixos
jgt has joined #nixos
<drager>
When I use videoDrivers = [ "nvidiaLegacy940" ]; together with resolutions = [ { x = 1920; y = 1080; } ]; the resolutions doesn't apply. Any idea why?
BuGless has quit [Read error: Connection reset by peer]
ddellaco1 has joined #nixos
mexisme_ has quit [Ping timeout: 245 seconds]
nD5Xjz has quit [Ping timeout: 258 seconds]
selfsymmetric-mu has joined #nixos
Orbstheorem has quit [Ping timeout: 248 seconds]
JustAnotherNixUs has joined #nixos
nD5Xjz has joined #nixos
ardumont has quit [Ping timeout: 252 seconds]
jgt has joined #nixos
ng0 has joined #nixos
jgt has quit [Ping timeout: 252 seconds]
ardumont has joined #nixos
work_ has joined #nixos
talqu has quit [Remote host closed the connection]
ddellaco1 has quit [Ping timeout: 245 seconds]
<JustAnotherNixUs>
Hey, so for the nix package manager, when using substituters, is it possible for one cache to override the other? I added a additional binary cache, but now when I try and download things, it seems to only use the new one
ddellaco1 has joined #nixos
<tilpner>
JustAnotherNixUs: That's the default, it prefers one, but falls back to the other ones if it's not in the first one
<JustAnotherNixUs>
Huh, how many attempts will it try before falling back?
selfsymmetric-mu has left #nixos ["gone to the land of dead hiccups and extinguished light bulbs"]
<clever>
JustAnotherNixUs: if 2 caches have the same file, then it will use the priority of the cache to decide where to get it
gentauro has quit [Read error: Connection reset by peer]
<clever>
JustAnotherNixUs: also, double-check `nix show-config | grep substituters` to make sure its actually using 2
<tilpner>
Oh, good point
gentauro has joined #nixos
ddellacosta has joined #nixos
<immae>
Hello there, does someone know how quicklisp packages work in nixpkgs? I have pgloader in pkgs/development/lisp-modules/quicklisp-to-nix-output/pgloader.nix but it’s not referenced in the main set nor anywhere else, so I’m a bit lost as to how to use it
<JustAnotherNixUs>
Hmmm, alright, I dooo seem to have two entries yeah
<{^_^}>
[nixpkgs] @xaverdh opened pull request #61688 → android-file-transfer: fix hash of version 3.8 → https://git.io/fj8am
<clever>
immae: see if something in that cycle is optional and can be disabled?
<immae>
I tried already
jgt has quit [Ping timeout: 252 seconds]
<immae>
they’re actually both from https://github.com/marijnh/Postmodern and I suppose they can be installed somehow "simultaneously" usually, which nix cannot (and I don’t speak enough lisp to debug that)
<immae>
(postmodern is a super-package containing s-sql, and s-sql has an explicit dependency in postmodern)