<lordcirth_>
Hey, I'm starting to tinker with using nixops to make NixOS VMs (libvirtd) on my Ubuntu desktop. It's working but my internet is slow. Is there a good way to get it to cache nix store downloads locally?
gyroninja___ has quit [Ping timeout: 246 seconds]
ddellacosta has joined #nixos
gyroninja___ has joined #nixos
<swerlk>
Hi. Has anyone tried to use a Yubikey to unlock a LUKS encrypted drive during boot?
dansho has quit [Ping timeout: 268 seconds]
emptyflask has joined #nixos
cpc26 has quit [Read error: Connection reset by peer]
<infinisil>
lordcirth_: Those --option's are documented in `man nix.conf` btw
<lordcirth_>
infinisil, thanks
<infinisil>
It's the same values you can put in /etc/nix/nix.conf
<lordcirth_>
"Deprecated: binary-caches is now an alias to substituters" oh
simukis__ has joined #nixos
simukis_ has quit [Ping timeout: 245 seconds]
<tdeo>
anyone else have building `wine` broken on latest git master?
<lordcirth_>
infinisil, I am using nixops, so I am writing configuration.nix syntax. how do I set "substituters" there?
<lordcirth_>
Or do I just have to use --option?
<infinisil>
tdeo: Nix is very much reproducible, so it will be broken for everyone if it's for you
<infinisil>
lordcirth_: Hm yeah that's a problem, you can't set this with nixops
<infinisil>
Afaik at least, I wanted this too at some point and couldn't do it
<infinisil>
Probably the only possibility is to change /etc/nix/nix.conf
<tdeo>
yeah. it seems like the `qtbase` dependency of wine fails to build, but manually building `qt5.qtbase` works, i'll look into it more and post an issue
<tdeo>
and i can't use `why-depends` without building the failing dependency (hmm, but maybe i can bisect the commit)
<lordcirth_>
infinisil, nixops claims to pass '--option' through to nix, but it fails
<lordcirth_>
infinisil, is there a reasonable way to edit nix.conf when making a VM with nixops?
<kaliumxyz>
where does nginx log to on nixos?
<lordcirth_>
kaliumxyz, what do you mean?
<swerlk>
infinisil: I saw the options but was hoping there may be a bit more information (what mode the yubikey should be in, an example configuration, etc). I'll have a yubikey tomorrow so I'll try the options you mentioned in the link
<lordcirth_>
It would be *really* nice if Nix worked with squid-deb-proxy
<gchristensen>
it can certainly work with any basic caching server
<lordcirth_>
gchristensen, Well, I'm having trouble with it
<lordcirth_>
gchristensen, do you have an example?
rajivr___ has joined #nixos
<lordcirth_>
I tried using "substituters" but to use a proxy, I guess I need it to request the real site, not the proxy IP
<gchristensen>
setup foo.com to do a caching proxy to cache.nixos.org, set your nix clients to use foo.com as its binary cache
<gchristensen>
and set the foo.com caching proxy to cache any positive results as cachable for eternity
<Miyu-chan>
gchristensen: Oh yeah, I've been meaning to ask, who can get the @NixOS/user/?
<gchristensen>
members of the community who use NixOS! :)
<lordcirth_>
gchristensen, I have squid-deb-proxy set up to cache any site that is requested; I was hoping I could get that to work instead of making a proxy specifically for cache.nixos.org
<Miyu-chan>
\o/ May I have it? I saw it a while ago, but keep forgetting to ask for it.
<lordcirth_>
Oh, maybe networking.proxy does what I want?
<gchristensen>
lordcirth_: not sure about in that configuration
<gchristensen>
but it should work, Nix's cache is all immutable files. once one exists, it won't change
<gchristensen>
Miyu-chan: yeah. NixOS/user/myrl ?
<Miyu-chan>
Yep, that should work.
[Leary] has joined #nixos
<gchristensen>
remind me tomorrow? seems nobody is available to make the request.
<Miyu-chan>
Sure sure.
<gchristensen>
thanks!
Lears has quit [Ping timeout: 244 seconds]
<{^_^}>
[nixpkgs] @romildo opened pull request #63795 → deepin.dtkcore: explicitly set DTK_VERSION → https://git.io/fjrrm
waleee-cl has quit [Quit: Connection closed for inactivity]
<{^_^}>
[nixpkgs] @worldofpeace pushed 2 commits to master: https://git.io/fjrrh
<monokrome>
lordcirth_: I'm pretty sure that you're never supposed to change system.stateVersion, there's even a comment about it in every new NixOS install?
selfsymmetric-mu has joined #nixos
<monokrome>
Are you intending to upgrade your nix-channel list?
<lordcirth_>
monokrome, I want to use 19.03, because it's the latest stable
<lordcirth_>
Also, you are supposed to change it when a new version is declared stable, I believe.
<monokrome>
After the system is already installed?
<lordcirth_>
monokrome, no, trying to get nixops to make a 19.03 VM
<monokrome>
I thought that was referring the initial system state, not the wanted system state
<monokrome>
ah ok, not sure then
<monokrome>
sorries
<monokrome>
EG, to upgrade to 19.09 you move your channel up but leave stateVersion at 19.03 on a regular non nixops install
<monokrome>
not sure if this is different
klntsky has quit [Ping timeout: 260 seconds]
klntsky has joined #nixos
freeman42y has quit [Ping timeout: 258 seconds]
adamantium has quit [Remote host closed the connection]
phreedom has quit [Quit: No Ping reply in 180 seconds.]
xelxebar_ has joined #nixos
xelxebar has quit [Quit: ZNC 1.7.2+deb2~bpo9+1 - https://znc.in]
phreedom has joined #nixos
emptyflask has joined #nixos
emptyflask has quit [Ping timeout: 258 seconds]
<samueldr>
,stateVersion
<{^_^}>
Setting stateVersion to the latest release doesn't upgrade anything and can only break your setup at best. To actually upgrade NixOS see https://nixos.org/nixos/manual/#sec-upgrading. If you want to update the stateVersion option regardless, Ctrl-F for "stateVersion" in https://nixos.org/nixos/manual/release-notes.html to see things that need to be manually migrated with the new value.
<samueldr>
(the same goes for going back)
<samueldr>
I'm not sure how it translates to nixops, haven't touched it yet
<samueldr>
though it's likely to be a NIX_PATH manipulation (which channels manipulation end up being)
hamishmack has quit [Ping timeout: 258 seconds]
<lordcirth_>
Ok, so the VM has the channel set to 19.03.
<lordcirth_>
Nope, wrong VM. The nixops one has no channels set??
<samueldr>
it's possible, channels are not necessary for nixos to build and work
<samueldr>
they are one way to resolve paths for imports in NIX_PATH
<lordcirth_>
So I dug through the code a bit, and it seems that nixops does not set stateVersion, but records it based on how the machine first came up.
<lordcirth_>
So, the initial bootstrap is installing 19.09 versions, I guess?
<samueldr>
if I understand nixops right, without reading the manpage, not using it, it builds locally on your system, and that build will determine the nixpkgs revision it will build
mac10688 has joined #nixos
<lordcirth_>
hmm
<samueldr>
is your system running on unstable?
<lordcirth_>
Apparently it is
kaliumxyz has quit [Quit: leaving]
<lordcirth_>
That's interesting. I wouldn't have guessed that nixops would have deployed package versions based on my workstation, instead of the config
fusion809_ has quit [Remote host closed the connection]
* samueldr
shouldn't really answer since he doesn't actually know
<samueldr>
it might be entirely dependent on NIX_PATH, and using `import <nixpkgs> {}`
<lordcirth_>
Are there special steps to roll back (I only have a few Nix packages installed) or should nix-channel --update && nix-env -u work?
<lordcirth_>
Hmm, -u only upgrades to newer versions
<samueldr>
try running nixops with `NIX_PATH=nixpkgs=channel:nixos-19.03`; that would make <nixpkgs> resolve to the current release
<lordcirth_>
I think I've rolled back
<samueldr>
(if it works like I think it does)
<lordcirth_>
Using --always
<lordcirth_>
Good to know, though
<samueldr>
you can see the effect it has like this `NIX_PATH=nixpkgs=channel:nixos-19.03 nix-instantiate --find-file nixpkgs`
MrCCoffee has quit [Ping timeout: 252 seconds]
kvda has joined #nixos
<lordcirth_>
Well, it seems to be building a lot of stuff that's not cached, so I think it's working. Going to bed, though. Thanks!
adamantium has joined #nixos
day|flip has quit [Remote host closed the connection]
<{^_^}>
[nixpkgs] @romildo opened pull request #63797 → deepin.deepin-calculator: init at 1.0.11 → https://git.io/fjroM
lord| has quit [Ping timeout: 268 seconds]
Supersonic has quit [Disconnected by services]
Supersonic112 has joined #nixos
Supersonic112 is now known as Supersonic
lord| has joined #nixos
stepcut has quit [Remote host closed the connection]
kvda has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
stepcut has joined #nixos
stepcut has quit [Ping timeout: 252 seconds]
sb0 has quit [Quit: Leaving]
kvda has joined #nixos
stepcut has joined #nixos
furrycatherder has quit [Read error: Connection reset by peer]
<niten>
i'm trying to figure out how to initialize a postgres database when rebuilding my system
<niten>
it seems like the script in the postgresql packages itself isn't the answer...it's for creating users and stuff, but doesn't allow for switching between dbs afaict
<niten>
i've seen mentions of creating a post-build script to run, but i don't know exactly which script that is
<niten>
is there a way to specify scripts to run exactly once after a system is built and running? or a better way to initialize databases?
<niten>
and just to be clear: yes i'm okay with wiping it each time i rebuild...it's a backing db for powerdns & a dhcp server, i'm happy adding entries in the nixos config and rebuilding to add
lord| has quit [Read error: Connection reset by peer]
adamantium has quit [Remote host closed the connection]
lord| has joined #nixos
mexisme has joined #nixos
dansho has joined #nixos
ddellacosta has quit [Ping timeout: 252 seconds]
zupo has joined #nixos
domogled has quit [Ping timeout: 252 seconds]
vmandela has joined #nixos
knupfer has joined #nixos
steell has joined #nixos
adamantium has joined #nixos
mexisme has quit [Ping timeout: 246 seconds]
Rusty1 has quit [Quit: Konversation terminated!]
adamantium has quit [Remote host closed the connection]
<rprije>
Question: I have a fixed nixpkgs/nixos repository. I have a repository A which imports that nixpkgs and defines a package P and service definion S which uses package P. The Service Definition is defined in a nixos module taking {config,pkgs}. I then have a repo B which defines a nixops set of machines which use imports to load service definition S after getting the path to it from repo A. The import of S fails because it can't find P because
<rprije>
the module defining the machine has been passed a different package set to what was constructed in A and so doesn't include the P that S depends upon, and this package set is what gets passed to the service definition module through use of the imports attribute. How should I go about fixing this?
<rprije>
By "use imports to load service definition S" I mean it uses the imports attribute in the machine definition, not the nix import statement.
zupo_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
rauno has joined #nixos
cfricke has joined #nixos
<li_matrix>
is there a normalized way to include lua headers for cmake project?
winem_ has joined #nixos
<teto>
li_matrix: including lua in buildInputs should be enough ?
wfranzini has joined #nixos
justbeingglad has joined #nixos
emptyflask has joined #nixos
emptyflask has quit [Ping timeout: 272 seconds]
<li_matrix>
used a special env var. newest neovim uses luv
<li_matrix>
now im getting version error :D
jtojnar has quit [Quit: jtojnar]
kvda has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
adamantium has joined #nixos
dansho has quit [Quit: Leaving]
alex`` has joined #nixos
kvda has joined #nixos
<{^_^}>
[nixpkgs] @markuskowa opened pull request #63803 → linuxptp: init at 2.0 → https://git.io/fjrie
justbeingglad has left #nixos [#nixos]
<rprije>
I was able to fix my problem. I loaded S by manually importing it and passing it the packages from repo A then //'d it with the nixos module I was creating in my machine definition. Seems to work.
adamantium has quit [Remote host closed the connection]
goibhniu1 has joined #nixos
arjen-jonathan has joined #nixos
cjpbirkbeck has quit [Quit: Quitting now.]
cfricke has joined #nixos
Mateon2 has joined #nixos
<li_matrix>
master neovim now depends from `luv/luv.h` from the luv lua module, but luarocks derivations dont seem to include those header files. any idea?
Mateon1 has quit [Ping timeout: 248 seconds]
Mateon2 is now known as Mateon1
mac10688 has quit [Ping timeout: 268 seconds]
Shoubit has joined #nixos
<li_matrix>
the src is even a special .rock file format that im unfamiliar with
srl295 has quit [Quit: Connection closed for inactivity]
alp has joined #nixos
<teto>
li_matrix: i had a look yesterday at this very problem, luv build system uses cmake
<teto>
if you look at luv's CMakeList you can see some variables to generate the .so file. Apparently luv can't build everything at the same time
<teto>
I believe luv's build system is being worked on so I gave up and pinned neovim to the rev just before the luv's changes
<li_matrix>
ahah
<li_matrix>
I did just that
<li_matrix>
what a shitshow!
<li_matrix>
thanks for letting me know
orivej has joined #nixos
<teto>
li_matrix: I don't think cmakeFlags would work via buildLuarocksPackage but basically we would need to pass the cmake flags. Maybe create another derivation libuv that uses luaPackages.libuv.src
<teto>
-libuv +luv
<li_matrix>
yes I was just at this point
<li_matrix>
unpacking rock file
<li_matrix>
never played with lua really
kl3 has joined #nixos
<teto>
ha the rock file is just a zip
<li_matrix>
cmake can just burn in hell
<li_matrix>
ahh perfect
<li_matrix>
DOP
<li_matrix>
direction-oriented programming
<teto>
it's usually unpacked via pkgs/development/tools/misc/luarocks/setup-hook.sh
<li_matrix>
I might give it a shot
<teto>
aka luarocks unpack just calls unzip on it
<li_matrix>
ill let you know if I get it working
Uniaika has left #nixos [#nixos]
<teto>
if it's simpler , you could just fetchFromGithub :p
<teto>
that would be super cool
<li_matrix>
true
<kl3>
with latest unstable, netcat tls looks broken:
<kl3>
# nc -vcz nixos.org https
<kl3>
nc: failed to open CA file '/etc/ssl/cert.pem': No such file or directory
<kl3>
it's linked against libressl 2.9.2 which has the cert.pem on my system: /nix/store/7dq9sz8x4wwkj1l2w5xmw63c2fwy9jm9-libressl-2.9.2/etc/ssl/cert.pem
<Taneb>
Does nix build have an equivalent to nix-build's -K flag?
<boogiewoogie>
hey, I'm trying to create an expression for https://github.com/okonek/tidal-cli-client. I don't know npm so for now my attempt was `npm2nix package.json`. gives me the error `Error during fetch: Error getting registry info for fs-extra: Error: unable to get local issuer certificate` though, so I'm probably doing something wrong. anyone got an idea?
knupfer has joined #nixos
<boogiewoogie>
okay, just found out about node2nix. new attempt.
<davidtwco>
I'm working on a package for configuring my keyboard. It needs udev rules and the software is an appimage. I've got it running and I've packaged the udev rules, but udev rules don't appear to be applying in the appimage chroot. Any thoughts on how to proceed?
<ned>
hi, i'm trying to use nix-shell for a perl project. Is there any way to automatically convert a cpanfile (a file containing a list of perl module dependencies) to a .nix file?
<eddyb>
qyliss: do you want to submit the fixes needed to make the testsuite work? although doCheck=true by default is still not possible, as some tests seem to be broken and only comparing two runs fo regressions is supported
<arianvp>
I wanted to benchmark how long my nixos eval takes
lurpahi has quit [Ping timeout: 244 seconds]
<arianvp>
and I did nix-instantiate --eval --strict on system.toplevel
<arianvp>
but I get the following error
<arianvp>
overrideDerivation not yet supported for functors
<arianvp>
but as always, --show-trace is again absolutely useless :/
<arianvp>
oh wait it isn't something with perl-packages ?
<arianvp>
but still, this is not something I am touching
<{^_^}>
[nixpkgs] @fpletz pushed commit from @WilliButz to release-19.03 « grafana: 6.2.4 -> 6.2.5 »: https://git.io/fjrP5
psy3497 has quit [Ping timeout: 245 seconds]
fendor has joined #nixos
cfricke has quit [Quit: WeeChat 2.5]
<teto>
arianvp: might want tto disable overlays ?
veske has joined #nixos
erik-4levels has joined #nixos
<erik-4levels>
hi all, I'm really struggling to work with overlays in a nixoPs context.
<erik-4levels>
I don't understand on how to use them properly, I keep getting infinite recursion errors etc etc
<erik-4levels>
I need this to deploy custom packages to my target machines, from a nixops deploy machine
<arianvp>
teto: why?
<erik-4levels>
I've been working with a forked version of the nixpkgs repo and that works, but I'd like to do away with the forked version and use overlays instead
mexisme has quit [Ping timeout: 258 seconds]
<arianvp>
erik-4levels: can you show an example of how you're currently using it
<erik-4levels>
arianvp that's a long story, but basically I need older versions of packages that don't exist anymore in the latest nixpkgs
ajirx has joined #nixos
<erik-4levels>
like eg. elasticsearch 1.7.2
<arianvp>
I mean. how do you hook them into your config
<arianvp>
With the nixpkgs.overlays = option in NixOS?
knupfer has quit [Read error: Connection reset by peer]
<arianvp>
so you could do nixpkgs.overlays = [ import ./our-custom-overlay.nix ];
<erik-4levels>
Ok, but just to be clear, will this also allow me to override direvations from eg. nixos/modules/.. ?
<arianvp>
alas. no. Overlays only works for nixpkgs
<arianvp>
:/
<arianvp>
not for nixos modules
<erik-4levels>
But in the nixpkgs repo, there is both a pkgs and a nixos dir
<erik-4levels>
so only stuff inside the pkgs subdir can be overlayed?
<arianvp>
yes that is correct. and overlays are only for the pkgs part. Nixos and nixpkgs live in the same repo for convenience so that we can keep them in sync
<erik-4levels>
but how can I "overlay" things that are declared in the nixos dir then?
<arianvp>
but... nixos modules can be extended. the nixos module system is similar to overlays
<arianvp>
you can create a new module using imports = []; that module can extend an existing module
<erik-4levels>
(I might be doing a lot of things wrong here, I'm no expert, just a long time user
<erik-4levels>
ok, that makes sense and sounds promising to achieve what I need
<erik-4levels>
Did you have a look at the PR I linked?
<arianvp>
Let me have a look
m0rphism has joined #nixos
<erik-4levels>
I'm basically adding stuff to allow elasticsearch 1.x, and 2.x as I'm preparing a migration and need both versions on the same machine. The other changes are php related since I needed some older php extension (leveldb) and the older php versions 5.6 & 7.0
<arianvp>
In these cases what I would do is just create a new nixos module
ned has quit [Remote host closed the connection]
<arianvp>
put it in a <my-company> namespace
<erik-4levels>
To test migrating a rather large legacy php5.6 project
<arianvp>
then mycompany.elasticsearch.enable = true;
<erik-4levels>
*check*
<arianvp>
instead of elasticsearch.enable = true;
<tobiasBora>
Hello,
<erik-4levels>
arianvp thanks a lot already!
<arianvp>
because you seem to have changed quite a bit to the module itself. not sure if that's worth "extending" or if you would just create a new module
<arianvp>
I think the second option is less work, tbh
<erik-4levels>
I'll be giving that a try
<arianvp>
nixos modules are usually pretty standalone. so copying them out of the repo into your own usually works
<arianvp>
nixos modules are functions of records to records
<arianvp>
so
<arianvp>
{ pkgs, config, options, modulesPath , <lots of stuff here> }: ...my config here
<arianvp>
you can only match a subset of them like this:
<tobiasBora>
I have a strange minor bug (it's not super important, just a bit annoying): I installed the great addon "Dark Background and Light Text" on firefox that turn every page into a dark background, and since my last update of nixos, when I open firefox it's not loaded, so all my pages are unchanged. However, once I click on the logo of the addon, it displays "loading..." for a few seconds, and then it displays all
<tobiasBora>
the pages with dark background as expected. Since this appended right after my last update, I'm wondering if it's a nixos bug or a firefox bug
<arianvp>
{ pkgs , ...}: my config here
<arianvp>
if you don't need any arguments at all : { ... }: my config here
<erik-4levels>
Anyway, I'll give it a try using imports and custom modules as you have demonstrated, I'm sure I should be able to ditch my fork and use this approach instead
<arianvp>
its just a pattern match that discards everything
<erik-4levels>
thanks again arianvp
<arianvp>
( II think in this case you can drop it, and nixos is smart enough to figure it out, but I do it for consistency )
<arianvp>
no problem
Khetzal_ is now known as Khetzal
<kl3>
<kl3>
d
v88m has quit [Read error: Connection reset by peer]
knupfer has joined #nixos
mexisme has joined #nixos
v88m has joined #nixos
kvaster has joined #nixos
Anton-Latukha has joined #nixos
erik-4levels has quit [Remote host closed the connection]
pie_ has quit [Ping timeout: 252 seconds]
<yorick>
is there a lib.leftPad? :P
v88m has quit [Read error: Connection reset by peer]
zupo_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
cfricke has joined #nixos
<eddyb>
oh you did say nativeBuildInputs
<eddyb>
qyliss: wait, I can't depend on `doCheck` because any logic will be computed before `.override({...}:{doCheck = true;})` won't it?
hio has joined #nixos
MmeQuignon has joined #nixos
v88m has quit [Ping timeout: 244 seconds]
<sphalerite>
eddyb: there's no practical difference when compiling natively, but when cross-compiling, you need to put stuff that runs as part of the build in nativeBuildInputs
zupo has joined #nixos
<eddyb>
sphalerite: thanks, that's what I thought! then, yeah, that would include `expect` and `dejagnu`
<sphalerite>
although the testing stuff probably won't work at all when cross compiling so it doesn't really matter much :p
<eddyb>
I think it's designed to, and should work for at least x86 (i686 vs x64)
<eddyb>
qyliss: anyway, here it is, have fun https://github.com/NixOS/nixpkgs/pull/63808 (I'm not sure I'll be able to spend any time on this - especially now that I have a path to finishing my contributions to GCC and other GNU projects that use libiberty :P)
<{^_^}>
#63808 (by eddyb, 1 minute ago, open): gcc: support running the testsuite.
Ridout has quit [Quit: Lost terminal]
<qyliss>
eddyb: if the nixpkgs gcc maintainers are interested in it, I'm happy to move it along if you don't mind me pushing to the branch.
<qyliss>
(check the "maintainers can push" box on github if so)
<eddyb>
if it's the default it should already be checked, yeah
<eddyb>
oh right nowadays you can toggle it even afterwards
xok has joined #nixos
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<xok>
hello guys...
<eddyb>
qyliss: yeah, I don't mind, thanks in advance <3
<xok>
can anyone help me setup an SFTP service limited to a certain directory?..
<xok>
I want to give access to some users but not to be able to go up those directories...
<betaboon>
xok: you mean SFTP, not FTPS, right ?
<xok>
yes...
<xok>
I know SSH has option to enable SFTP...
<xok>
but I couldn't find anything beyond that...
<xok>
I want to lmit users to certain directories...
<mdash>
howdy. Looking at the result from `nix-build '<nixpkgs>' -A nodePackages.indium` I see a relative symlink in bin/ instead of a link to a store path
jcbrand has left #nixos [#nixos]
<mdash>
is there a preferred way to fix this? I'm fine with either hacking around this locally or submitting a nixpkgs PR :)
jcbrand has joined #nixos
ericsagnes has quit [Ping timeout: 252 seconds]
nckx has left #nixos [#nixos]
srid6390803 has quit [Ping timeout: 272 seconds]
Drakonis has quit [Quit: WeeChat 2.4]
fendor has joined #nixos
srid6390803 has joined #nixos
Miyu-chan has quit [Changing host]
Miyu-chan has joined #nixos
tmaekawa has quit [Quit: tmaekawa]
kisik21 has joined #nixos
vmandela has quit [Quit: Leaving]
fires has joined #nixos
fires has left #nixos [#nixos]
<kisik21>
So. NixOS containers or Docker? Maybe both? What's more secure? Faster? More useful? Easy to use? Are there tasks for which a Docker/NixOS container would be more useful than its opponent? Can you deploy Docker containers on nixos-rebuild, like with NixOS containers?
<kisik21>
Docker seems like a big thing in the container world, but NixOS containers are more tightly integrated.
ericsagnes has joined #nixos
<Yaniel>
security is not a goal of either container type
stepcut has joined #nixos
Lears has joined #nixos
[Leary] has quit [Read error: No route to host]
<yorick>
kisik21: what do you want to do/
[Leary] has joined #nixos
<yorick>
?
<kisik21>
First of all, I want to get all this container architecture, I want to see how it works and what it can provide. Maybe I should read something basic first
<yorick>
kisik21: the main advantage of nixos containers is some modicum of sandboxing (that you could all also get with systemd serviceConfig) and the ability to run multiple identical services on the same server
<yorick>
kisik21: the main advantage of docker containers to the outside world is deployability
npmccallum has joined #nixos
Lears has quit [Ping timeout: 248 seconds]
<kisik21>
But I think the same deployability could be achieved with NixOS containers too, since these are just snippets of Nix code that you could paste into a file and then do config.containers.someservice = { config = import containers/someservice.nix; };
<kisik21>
It's just that not everyone uses NixOS :3
<yorick>
kisik21: what's the advantage of that over just importing a nixos module in the system config
<mdash>
kisik21: docker doesn't provide any distinct advantages that i've found, but the ops people I work with have standardized on it
<mdash>
otherwise i'd ignore it entirely
<kisik21>
so people use it for the sake of using it everywhere?...
<kisik21>
wow
<mdash>
yes, it's popular because it's popular. :)
leotaku has joined #nixos
xkapastel has quit [Quit: Connection closed for inactivity]
ciaran-lounge has joined #nixos
<kisik21>
Oh, wow, networking.bridges! so I can make a bridge with my ethernet connection, and then just add containers to it with hostBridge?
<kisik21>
I don't think Docker can do this
jabranham has joined #nixos
<mdash>
kisik21: or you could just run stuff without containers at all
reinhardt has quit [Quit: Leaving]
<kisik21>
everyone uses containers, so I want to understand how to use them in case someone will make me use them when they hire me :3
MmeQuignon has quit [Read error: Connection reset by peer]
<simpson>
sonercirit[m]: `lib.filterAttrs`. Nix is scoped, and every name is introduced somewhere. The bot here brings everything from `pkgs` into scope, which includes some stuff from `pkgs.lib` too.
<sonercirit[m]>
simpson: yep that worked `:p lib.filterAttrs (n: x: ! lib.isDerivation x) kdeApplications`
<sonercirit[m]>
how can I find out about the scopes while digging? let's say I wanted to find `lib` here
iyzsong has joined #nixos
kisik21 has quit [Ping timeout: 258 seconds]
<simpson>
sonercirit[m]: You now know about the concepts of scope, as well as `pkgs` and `lib`, and that's likely enough. You could read nixpkgs source to find out exactly what's available.
<{^_^}>
[nixpkgs] @romildo opened pull request #63813 → deepin.startdde: init at 3.14.6.4 → https://git.io/fjr93
Guest77 has joined #nixos
<Guest77>
Is it possible "nix-copy-closure" or "nix-store --import" without checking signatures? When I try to use them, they report "error: cannot add path ... because it lacks a valid signature".
<clever>
Guest77: if the receiving end is a trusted user, it wont check
<clever>
Guest77: root is trusted by default
endformationage has joined #nixos
<Guest77>
Thanks, seems to be happy now.
softinio has quit [Quit: WeeChat 1.9.1]
xok has quit [Read error: Connection reset by peer]
<noonien>
i'm trying to package something, i've got an initial default.nix, what would be the easiest way of building it to see that it works?
<clever>
noonien: nix-build
<sonercirit[m]>
so one more question :D how can I filter multiple values in this lambda `builtins.attrValues (lib.filterAttrs (key: value: ! builtins.elem key [ "callPackage" || "recurseForDerivations" ]) kdeApplications)`
<sonercirit[m]>
`OR` operator does not work like this
<sonercirit[m]>
I also tried this `builtins.attrValues (lib.filterAttrs (key: value: ! builtins.elem key [ "callPackage" ] || [ "recurseForDerivations" ]) kdeApplications)`
<clever>
sonercirit[m]: [ ... ] is an array of items
<clever>
sonercirit[m]: you want [ "foo" "bar" ]
<noonien>
clever: yeah, that's what i remember, however, i get "error: undefined variable 'stdenv'`, is this not valid as the first line?: `{ lib, pkgs, stdenv, fetchurl }:`
<clever>
,callPackage noonien
<{^_^}>
noonien: If a Nix file foo.nix starts with something like `{ stdenv, cmake }:`, you can build it with `nix-build -E '(import <nixpkgs> {}).callPackage ./foo.nix {}'`
<sonercirit[m]>
clever: damn thank you :D still learning nix
klntsky has quit [Remote host closed the connection]
<noonien>
ah, good, thanks!
klntsky has joined #nixos
<sphalerite>
sonercirit[m]: also, you could use intersectAttrs for this
<sonercirit[m]>
this is what I've came up with in case anyone needs it `builtins.attrValues (lib.filterAttrs (key: value: ! builtins.elem key [ "callPackage" "newScope" "override" "overrideDerivation" "overrideScope" "overrideScope'" "packages" "recurseForDerivations" ]) kdeApplications)`
<sonercirit[m]>
I know it's a little dirty but it works for now :D
<sonercirit[m]>
sphalerite: how would I do that?
<sphalerite>
sonercirit[m]: err, sorry, got it the wrong way round
erik-4levels has joined #nixos
xok has joined #nixos
<sphalerite>
sonercirit[m]: but `lib.removeAttrs kdeApplications ["callPackage" "newScope" …]`
<sphalerite>
sonercirit[m]: depends on what you want to do, really. The nix pills are a solid in-depth introduction to the nix languages and some of the core concepts of nixpkgs, but aren't necessary if you just want to write packages for example.
<erik-4levels>
I just want to add the php56 and php70 versions back so I can install them without having to use my forked repo but I'm struggling on how to use the generic function on top of the original file
<sphalerite>
sonercirit[m]: The nix and nixpkgs manuals are useful to get an overview of builtins and library functions, if you want to do more twiddling than just writing simple packages
sigmundv has joined #nixos
<sonercirit[m]>
ty guys I'll consider about both, but it looks like I should just read and fiddle with stuff :D
test443322952 has quit [Remote host closed the connection]
iyzsong has quit [Ping timeout: 258 seconds]
Jackneill has quit [Ping timeout: 252 seconds]
kvaster has joined #nixos
<{^_^}>
[nixpkgs] @peterhoeg opened pull request #63814 → openhab: init at 2.4.0 and NixOS module [WIP] → https://git.io/fjrHS
<{^_^}>
#53024 (by ajs124, 25 weeks ago, open): sshd: Add user options for ForceCommand and ChrootDirectory
veske has quit [Ping timeout: 248 seconds]
v88m has joined #nixos
<manveru>
if you set that, you probably also want to set `services.openssh.sftpFlags = ["-d" "${cfg.webroot}/database"];`
rauno has joined #nixos
<ajs124>
manveru: tell me about it... well, there's this RFC about how we might not want to add stuff like this, but idk if it's because of that.
<manveru>
yeah...
<xok>
manveru: I couldn't understand how to use it... :_D
<noonien>
infinisil: sounds like nix-build could use a flag :D
sigmundv has quit [Ping timeout: 245 seconds]
<noonien>
also, i'm trying to build http://ix.io/1MQX, but running result/bin/LBRY results in libsecret not being found, for some reason: http://ix.io/1MQY
<noonien>
libsecret is a build dependency though
<noonien>
but it doesn't appear to be detected as a dependency by nix, can i manually specify it as a runtime dependency?
jackdk has quit [Quit: Connection closed for inactivity]
<georgyo>
Can anyone point me to an example package that has is polyglot? IE, a C program that also ships python libraries with it.
<anttih_>
I'm trying to get libiconv installed so I run `nix-shell -p pkgconfig libiconv` but then `pkg-config --libs libiconv` does not find it. Any ideas?
<noonien>
`nix-shell -p pkgconfig -p libiconv`
<noonien>
anttih_: ^
<anttih_>
noonien: nope
<xavierm02>
I really need a --build-nothing option. It just tried to build libreoffice and ungoogled-chromium :o
jcbrand has left #nixos ["Error from remote client"]
<xavierm02>
symphorien: I don't understand. guix package and guix -u both tell me that -j0 doesn't exist. (I managed to upgrade by specifying which packages should not be upgraded by hand, it's just a bit annoying)
<georgyo>
betaboon: wrapPythonPrograms was the magic I needed! Thanks!
<symphorien>
xavierm02: ah sorry, I thought you were talking about nix
<symphorien>
anttih_: iirc iconv belongs to glibc. pkgs.libiconv is just a summy package for glibc-based stdenv
<symphorien>
*dummy
arjen-jonathan has quit [Ping timeout: 246 seconds]
ddellacosta has joined #nixos
srid6390803 has quit [Ping timeout: 246 seconds]
<anttih_>
symphorien: I guess I should be using the default libiconv that comes with macOS, but pkg-config does not find that either :/
<anttih_>
but thanks!
<symphorien>
ah, macos may be a different story
<symphorien>
anttih_: and does the compiler find libiconv "natively" without pkg-config ?
<symphorien>
with -liconv
__monty__ has joined #nixos
<anttih_>
I'm tryhing to build neovim, and it's not finding it but I don't know how it's looking for it.
<symphorien>
does it not find libiconv headers of library or both ?
<infinisil>
But you can also use `with import <nixpkgs> {}; stdenv.mkDerivation { name = "foo"; buildInputs = [ <list of stuff> ]; }`
gratto has quit [Ping timeout: 272 seconds]
gratto has joined #nixos
o1lo01ol1o has quit [Remote host closed the connection]
o1lo01ol1o has joined #nixos
<user>
infinisil: Thanks, I think that I was looking for the second option that you provided. It works!
knupfer has quit [Ping timeout: 250 seconds]
o1lo01ol1o has quit [Read error: Connection reset by peer]
o1lo01ol1o has joined #nixos
arjen-jonathan has joined #nixos
<user>
infinisil: Where can I put the second option you gave a call to python35.withPackages?
<user>
infinisil: * Where can I put within the
<xavierm02>
symphorien: It's my bad I though I was on the guix channel >_< I usually keep hexchat open on it, but when I reopen it, it focuses nixos and I didn't notice...
<infinisil>
user: Note that you might want to use python3 instead of python35, because the former comes with precompiled dependencies
oxa has joined #nixos
freeman42x has joined #nixos
oxa has quit [Quit: Leaving]
<karetsu>
does anybody have experience with behave (python one, not jbehave) on nixos?
<karetsu>
my nix-shell doesn't complain about it not being installed, the behave/default.nix is there, but it doesn't seem to be added into my shell
emptyflask has quit [Quit: leaving]
bvdw4 has joined #nixos
asymmetric_ has joined #nixos
jfroche has joined #nixos
shlevy_ has joined #nixos
<immae>
karetsu: what do you mean by "added into your shell"? Are you expecting something in the shell paths? If so, does behave have a bin subdirectory?
rfold has joined #nixos
arjen-jonathan has quit [Ping timeout: 252 seconds]
tA- has joined #nixos
jeregrine has quit [Quit: Connection closed for inactivity]
<karetsu>
even if you get a minimal shell like `nix-shell -p 'python3.withPackages(ps: with ps; [ behave ])'` you don't get behave anywhere that python or the shell can use it
dhkl_ has joined #nixos
<karetsu>
not import behave, no python -m behave etc.
andersk has joined #nixos
mmlb has joined #nixos
<karetsu>
its just not included in there, even though all of my other requirements are
<karetsu>
and I have had no error to say that behave is not supported under py37 (the default python3.with...)
o1lo01ol1o has quit [Remote host closed the connection]
Shoubit has quit [Ping timeout: 245 seconds]
o1lo01ol1o has joined #nixos
<{^_^}>
[nixpkgs] @worldofpeace opened pull request #63822 → deepin.dde-control-center: init at 4.10.11 → https://git.io/fjrFU
<kisik21`>
how to properly add a new Lua package via an overlay? Prosody module requires a package
<kisik21`>
(oh great I have a glitched out username)
<gchristensen>
you do?
<kisik21`>
`
<kisik21`>
my connection is a bit flaky
<kisik21`>
so it connected a second time it seems
alex`` has joined #nixos
<gchristensen>
^ some people do it on purpose! :)
<kisik21`>
not the scope of my question though :3
o1lo01ol1o has quit [Remote host closed the connection]
o1lo01ol1o has joined #nixos
<kisik21`>
I added lua5.override { packageOverrides = lself: lsuper: { luapam = lself.callPackage ({...}) {}; }; }; to my overlay and tried to build lua5.withPackages (p: [p.luapam]), but it refuses to find luapam in my overlay for some reason...
meck has quit [Quit: WeeChat 2.5]
<kisik21`>
so the question is: how to add a lua package that prosody can use for a custom module?
<kisik21`>
I need lua-pam for mod_auth_pam
<kisik21`>
...or am I better off using another server? >.<
meck has joined #nixos
o1lo01ol1o has quit [Ping timeout: 248 seconds]
knupfer has joined #nixos
<anttih_>
A build cannot find ApplicationServices.h, do I have to have some package installed for it to be found? This is on darwin.
<stepcut_>
I tried running nix ping-store and got `error: cannot open connection to remote store 'ssh-ng://dsf@build.example.org': serialised integer 7453010373394067013 is too large for type 'j'`, any thoughts?
<{^_^}>
[nixpkgs] @benley pushed commit from @groodt to master « kubecfg: 0.9.1 -> 0.12.0 (#63681) »: https://git.io/fjrFy
grumble has quit [Quit: and some kind of madness has started to evolve]
grumble has joined #nixos
<philipp[m]>
I don't want to annoy people but the current version of mesa in unstable is seriously broken on newer amd cards and the pr with the update that should fix a lot is not being reviewed: https://github.com/NixOS/nixpkgs/pull/56199
<colemickens>
I have run Sway for weeks with those without issue, gnome-shell for almost 2 weeks without issue (or at least, not related to mesa/graphics). I think they're more than ready to go to staging.
<gchristensen>
ok cool
<gchristensen>
can you re-point 57773 to staging?
<colemickens>
Will do in the next couple hours. L
<gchristensen>
thank you :)
<gchristensen>
then I suppose let's merge
MmeQuignon has quit [Read error: Connection reset by peer]
appleclusters has quit [Quit: Connection closed for inactivity]
<philipp[m]>
Thanks! I really appreciate your efforts.
wfranzini has quit [Remote host closed the connection]
jtojnar has quit [Quit: jtojnar]
jtojnar has joined #nixos
Ariakenom has quit [Quit: Leaving]
jackdk has joined #nixos
Athas has quit [Ping timeout: 252 seconds]
mexisme has joined #nixos
Athas has joined #nixos
dontobey has quit [Ping timeout: 250 seconds]
dontobey has joined #nixos
jtojnar has quit [Quit: jtojnar]
furrycatherder has joined #nixos
fendor has quit [Read error: Connection reset by peer]
jtojnar has joined #nixos
arjen-jonathan has quit [Ping timeout: 252 seconds]
spacewalker has joined #nixos
o1lo01ol1o has joined #nixos
<nh2>
I'm trying to backport a nix fix to 2.0.4 but get `boost/coroutine2/coroutine.hpp: No such file or directory`. How should I add this dependency? I also don't get why it works on nix master because boost doesn't seem to be referenced accordingly in release.nix
<{^_^}>
[nixpkgs] @luaduck opened pull request #63833 → linux_rpi: Update version to 20190620 / 4.19.50 → https://git.io/fjrxy
adamantium has joined #nixos
johnny101 has joined #nixos
shibboleth has joined #nixos
erasmas has quit [Quit: leaving]
<pie_>
clever, lol sigh more luks device problems again
<pie_>
i physically removed a device before unmounting the luks partition (i was in a hurry but i did a sync, "its fine right?", dont think i actually did anything important meanwhile0
<pie_>
now i cant unmount the luks
<pie_>
lsof shows nothing with it open
andrewrk has left #nixos ["Leaving"]
<colemickens>
can't unmount = ?
<colemickens>
did you luksClose it?
<pie_>
derp, its probably that i didnt export the zpool again
jtojnar has quit [Remote host closed the connection]
mbrgm has quit [Ping timeout: 258 seconds]
mbrgm_ is now known as mbrgm
<day|flip>
is there a way I can restart a service as computer booting up?
<day|flip>
or maybe delay it as the last service to start?
<colemickens>
XY problem, what are you really tring to do?
daGrevis has quit [Quit: daGrevis]
<day|flip>
will the problem is wpa_supplicant does not connect the frist time as it boot. since connman need it running. it just does not fully start
daGrevis has joined #nixos
<colemickens>
I'm not really sure how wpa_supplicant and connman are expected to interact in NixOS currently, but generally, Systemd has facilites for making services wait on one another.