<Notkea[m]>
is there a function similar to pkgs.writeScript that creates a package? (putting the script in a bin subdirectory so that the expression can be used in environment.systemPackages)
<samueldr>
writeScriptBin
<samueldr>
writeShellScriptBin will also shellcheck it for shell (bash)
<samueldr>
oops, not shellcheck, just check it's valid bash with -n
iqubic has quit [Ping timeout: 276 seconds]
<exarkun>
Can nixops pin nixpkgs to a different thing on different hosts in a single deployment?
<Notkea[m]>
that's handy, thanks!
kvda has joined #nixos
<exarkun>
It seems like ... not. If I export a deployment, I see there is only one nixPath for the whole thing.
psy3497 has joined #nixos
ThatOtherGuy has joined #nixos
<exarkun>
How about morph?
__red__ has joined #nixos
ddellacosta has quit [Quit: WeeChat 2.2]
<__red__>
So, just did a presentation on NixOS at Defcon. Room Enthralled. Win.
<__red__>
lots of questions after - very happy :-)
<__red__>
one question I got from the group was: "Can you run Nix under Windows for Linux subsystem?
<__red__>
"
<aanderse>
__red__: you're alive!
<__red__>
so we downloaed Kali and tried the usua; curl url | sh install and it failed
<__red__>
I am, indeed
<aanderse>
busy busy sounds like
<__red__>
but in Vegas - so the definition of live is variable :-)
<aanderse>
ha ha ha
<__red__>
and yes - thanks, the merge was awesome
<aanderse>
glad to hear :D
<aanderse>
about the defcon talk too!
<gchristensen>
__red__: wow! awesome!
<aanderse>
will it be posted at any point?
<__red__>
No, it was in a group that doesn't record talks.
<__red__>
not open to the public
<aanderse>
i've heard defcon talks are often like that
<gchristensen>
how many people?
<aanderse>
my manager has been a couple times
<aanderse>
unfortunately i've never had the priviledge
<__red__>
it was a small group, ~20 people
<gchristensen>
nice
<__red__>
this wasn't defcon main, but a small subgroup at the same location
ThatOtherGuy has quit [Quit: ZNC 1.6.5+deb1+deb9u1 - http://znc.in]
<__red__>
I guess I could submit to defcon main next year, I didn't expect the talk to go so well I'll be honest
<__red__>
everything from seeing me to package stuff in OSX, nix-shell in dev workflows, seeing me go from nothing to atmel compilation environment in one shell
<gchristensen>
♥‿♥
<__red__>
it blew their mind that a nix-shell -p made an environment in that shell - yet in the other parallel tmux window none fo the stuff was visible
ThatOtherGuy has joined #nixos
<qyliss>
that was what sold me on nix the first time i saw it
<aanderse>
:D
<__red__>
I then switched my main production server from unstable to stable to another version
<__red__>
and back again
<__red__>
and they were blown away since such things are impossible in other distros
ddellacosta has joined #nixos
ThatOtherGuy is now known as LogicAside
<__red__>
they had a hard time believing it was possible
<__red__>
and the facty that I did it with my main production machine showed my level of confidence
<__red__>
esp since I didn't have access to the console ;-)
<aanderse>
ha
<aanderse>
living on the edge indeed :p
<__red__>
I <3 Bleed
<__red__>
So - I was asked about nix in WSL
<__red__>
thoughts?
<aanderse>
hmm speaking of which...
<aanderse>
i wonder how geoffrey is doing
<Henson>
is there a way to get nix repl to print out the type of a function?
<aanderse>
__red__: during an informal online nix meetup some 2 weeks ago some guy (geoffrey) was talking about working on that
<__red__>
another Nix fan at defcon?
<__red__>
ooh, cool!
<samueldr>
nix itself on WSL I think should run
<samueldr>
it ran under wsl1 for sure
<samueldr>
nixos is what ghuntley is working on
<aanderse>
ahh, right right
<aanderse>
i recall now
<samueldr>
I would bet that nix works, too, under wsl2
<samueldr>
I did personally try nix on wsl1, so at one point it did work
slyfox has quit [Ping timeout: 244 seconds]
<exarkun>
Henson: The only type a function has in nix expr language is "function" afaict
fusion809 has quit [Remote host closed the connection]
slyfox has joined #nixos
<Henson>
oops, I kind of asked my question right in the middle of a good exposition by _red__ now that I read back a bit, sorry about that.
<Henson>
__red__: I'm glad the audience was impressed by Nix's abilities!
<__red__>
seriously - there are people in the room looking at the installation now
<__red__>
I started with Nix (because OSX people need to use it instead of homebrew et al)
<__red__>
then I walked them through my production nixos server
<__red__>
then I reverted one of my desktops to a minimal server configuration by commenting out all the X / desktop stuff
<__red__>
nixos-rebuild, and boom - X closed and we were at console
<__red__>
minds were blown
<__red__>
"Can you imagine even making a list of packages to uninstall under a .deb or .rpm distro to achieve the same thing"
abathur has joined #nixos
<__red__>
people were literally swearing, "No fscking way... are you kidding me..." etc, at the idea that it could be done so easily
boxscape has quit [Remote host closed the connection]
<Ashy>
__red__: nixos is actually amazing compared to every other distro atm (possibly guixsd too but i havent tried that)
<{^_^}>
[nixpkgs] @jonringer opened pull request #66356 → pythonPackage.xapian: init at 1.4.12 → https://git.io/fj7q5
jlv has quit [Ping timeout: 260 seconds]
<selfsymmetric-mu>
__red__++
<selfsymmetric-mu>
That's awesome.
Soo_Slow has quit [Remote host closed the connection]
<nexgen>
Hello
<nexgen>
Please let me know
<nexgen>
Can GUIX work on Linux distro like Gentoo?
<nexgen>
Is it any worse than NixOS?
<Henson>
__red__: one cool experiment I tried with NixOS was doing the equivalent of a "distribution upgrade" going from version 16 to version 19 of NixOS. Then I rolled back the system generation from 19 to 16. I had to manually roll back the database schema, but after that I was back to NixOS 16 with no problem. I was amazed.
<nexgen>
ZFS rollback does the same thing in 1-2 seconds on any distro
<simpson>
nexgen: ZFS's rollback is at the filesystem level. Nix's rollback is at the level of environments, packages, and build artifacts.
<nexgen>
who cares?
fendor_ has quit [Ping timeout: 248 seconds]
<nexgen>
At FS level is more reliable I guess
<simpson>
You'll get different behaviors. Filesystem versioning is useful for data, while environment versioning is useful for code.
<simpson>
Also, *you* care, I think. FWIW, don't worry about Guix in here. Nix is the package manager, and it works on any Linux distro. NixOS is a complete Linux distro using Nix and systemd.
<nexgen>
Can environment be kept while rollbacking package versions in GUIX?
drakonis1 has joined #nixos
<nexgen>
I prefer distros without systemd actually
<nexgen>
OpenBSD, Gentoo and Devuan
<simpson>
Sure. There are tools like https://github.com/target/lorri for managing development environments in a fine-grained way.
<nexgen>
Can I use GUIX on BSD?
<nexgen>
Specifically OpenBSD
<simpson>
Sure. There are several distros based on Nix but not using systemd, as well as meta-distro toolkits like https://github.com/cleverca22/not-os
<nexgen>
OpenBSD is not a Linux distro
<nexgen>
it is UNIX
drakonis_ has joined #nixos
<simpson>
Unfortunately, it's not currently among the supported kernels (which are listed in the manual at https://nixos.org/nix/manual/#ch-supported-platforms) but there have been many inquiries about BSD flavors, and support starts with the work of volunteers like you. Are you interested in helping to bring Nix to OpenBSD?
<nexgen>
I would be interested to do reproducible builds for OpenBSD
<{^_^}>
[nixpkgs] @Ralith opened pull request #66358 → openxr-loader: init at 1.0.1 → https://git.io/fj7mJ
<nexgen>
But I cannot afford to do it free of charge
drakonis2 has joined #nixos
<simpson>
Sure. Maybe somebody will give you money in exchange for writing code. After all, anything that can be done for free, can be done for money. But don't hold your breath.
jluttine has quit [Ping timeout: 245 seconds]
<nexgen>
I charged $30/h and I like to work slowly to produce a quality code
<simpson>
Nix is relatively non-negotiable on many fronts, and this is the first one: Whatever you do will have to fit into the existing codebase. You will have to work in C++. And you are likely not going to be compensated for it.
<nexgen>
I do not like C++ anymore, last time used it 20 years ago being a school mate yet
<danderson>
sounds like Nix development won't be a good fit for you then
<nexgen>
Only DotNet
<drakonis1>
:|
<nexgen>
no prob
<nexgen>
Just need GUIX on OpenBSD yet :)
<drakonis1>
no guix either
<infinisil>
simpson: There is this Nix PR by niksnut that adds some Rust though :D
<drakonis1>
rust on my nix?
<simpson>
nexgen: Oh well. Then no, Nix isn't coming to OpenBSD tonight.
<drakonis1>
sst is it?
<infinisil>
nexgen: Oh and btw, what you can't do with file system rollbacks is reproduce a system config on a new machine
<simpson>
infinisil: So, like, I'm reading through the autoconf, and it doesn't seem like our requirements are magical; it seems like all of the tough parts of doing this Nix port are in filesystems, coreutils, C toolchain, that sort of thing.
<drakonis1>
simpson: openbsd has pretty terrible performance though
nexgen has quit [Quit: Leaving]
<drakonis1>
ha, welp
<drakonis1>
what's the deal with this guy?
<simpson>
There *are* folks in the community who want BSD support, FWIW. They don't seem to have organized enough to produce a GH issue.
<drakonis1>
its cultural it seems
<drakonis1>
because the average bsd user things ports is the end all way to acquire packages
<gchristensen>
simpson: we used to support freebsd afaik?
<danderson>
changing the subject slightly - the nix manual mentions at various points that it's helpful for random helpers to do code reviews on open PRs, but I haven't found information on how specifically I can help with that.
<danderson>
Do I just reply to PRs saying that yes, it looks good, or?...
<simpson>
gchristensen: And we still support Darwin, a distant relative. I think that the main issue really is in all of the little edges, like filesystem types or compiler vendors, which POSIX doesn't discuss.
<drakonis1>
it stopped working somewhere in 2014 and back
<gchristensen>
for sure
<drakonis1>
darwin passingly resembles freebsd nowadays
<simpson>
There's also an issue open for CloudABI, which I think is an interesting idea tangential to some BSDs.
<drakonis1>
cloudabi is interesting but the BSDs have barely no interest at all in it
jmu- has joined #nixos
<infinisil>
danderson: You can do things like test the package being changed/added, test the NixOS module
<drakonis1>
looks like it has stalled out
jmu- has left #nixos ["Closing Window"]
<infinisil>
danderson: Another thing to do is look at the code, does it adhere to good practices? This requires a bit of experience
<infinisil>
danderson: And then you can submit a review (a github feature) either requesting changes or accepting it, optionally with comments for places in the code
<infinisil>
Reviews like that are very encouraged, it helps out a lot for the people that churn through the PR pile
<danderson>
Got it. I don't know how much of the PR pile I can contribute usefully to, but I'll get digging :)
nrt^ has left #nixos [#nixos]
<infinisil>
danderson: Cool, always feel free to ask (in #nixos-dev or here) :)
<Henson>
why happened to Nix support in FreeBSD, why did things stop working somewhere in 2014? I use FreeBSD on my file servers for FreeBSD and have often wondered if Nix would work on it.
<gchristensen>
afaik the community who was supporting it stopped
<drakonis1>
but you'd need to set up a build infra for it
<drakonis1>
packages would need to be patched up to work on freebsd
xkapastel has quit [Quit: Connection closed for inactivity]
<gchristensen>
yeah, we used to have all that
<Henson>
gchristensen: are there any linux-specific aspects of the Nix package manager that need special treatment to make it work with FreeBSD?
<gchristensen>
yes
<gchristensen>
like all the sandboxing
<Henson>
does the sandboxing use (taps head trying to rememeber name....)
<simpson>
Yeah, there's enough design stuff to fill an RFC. That's not to say that you must do an RFC! You could hack now, and figure out merging later, and anything specific to just one kernel can stay specific to just one kernel for a while.
<drakonis1>
there's a whole lot of things that could be done here
<drakonis1>
an rfc for handling OS specific features could be done for this
<Henson>
lxc?
<drakonis1>
no
<drakonis1>
i don't think LXC is used for anything on nix builds
<simpson>
It's not a problem for the precise nature of sandboxing to differ kernel-by-kernel. Just gotta do *something*. Same with root filesystems and /nix, with the available syscalls, with the bootstrapping C compiler.
<gchristensen>
yeah, right, the sandboxing is a bit different on macos too
jgt has joined #nixos
vmandela has joined #nixos
<drakonis1>
yes
jgt has quit [Ping timeout: 276 seconds]
nexgen has joined #nixos
<nexgen>
May I please know why have you choosen C++ for development of GUIX?
<nexgen>
Would not it be smarter to use something like GO at least?
<nexgen>
I guess GUIX is useless on OpenBSD
<nexgen>
Nobody except me would welcome GUIX there
<nexgen>
because of security reasons
<nexgen>
May be I will change my mind later too after experimenting with GUIX on Gentoo
<gchristensen>
nexgen: hey, so #nixos is actually not about Guix
<gchristensen>
maybe #guix is where you're looking for
<nexgen>
Anyway I liked presentation of GUIX very much, look modern innovative
<nexgen>
Thanks
<nexgen>
I will look into it
MmeQuignon has quit [Ping timeout: 244 seconds]
<simpson>
nexgen: As a general rule, you are free to port anything to any system of your choice.
<Henson>
drakonis1: Linux namespaces are pretty cool, they're like a baby version of Plan9's namespace stuff, which is amazing.
englishm has joined #nixos
englishm has quit [Excess Flood]
Supersonic has quit [Ping timeout: 250 seconds]
<Henson>
drakonis1: I once had a read-only NFS mount with a writeable overlay on it. I used namespaces to remount the read-only NFS mount to where the overlay filesystem was mounted, and install new software on it. This was all without affecting other processes or users on the system who didn't see anything going on.
englishm has joined #nixos
<Henson>
ohh, how about Nix on Plan9!
<Henson>
:-)
Supersonic has joined #nixos
<nexgen>
This channel is more alive than GUIX, btw
<nexgen>
Can I use GUIX as a Brew tool?
<nexgen>
Not for the whole installation of Gentoo, but only for some subdirectory like a chroot, but without actual chroot?
<simpson>
nexgen: Yeah, but Nix != GUIX. If you can't compare strings of this length, I'm not sure how you're going to handle Nix store paths.
<nexgen>
I use Gentoo already in a Devuan chroot btw.
<simpson>
You *can* certainly do such a thing. You'd have to rebuild everything from scratch. As a Gentoo user, you might think that that is fun.
<nexgen>
Cannot compare is not equal to trying to get help on a slightly related #channel
<nexgen>
I found building from source is the most advantage provided with GUIX reproducible builds
<nexgen>
For security reasons I try to build a grsec hardened Gentoo for i486
<nexgen>
for actual usage on i586/i686
<nexgen>
some packages in Gentoo even refuse to build for i486 while building for i586 fine
<{^_^}>
Nix XML docbook cheatsheet: <link xlink:href="https://example.com"/> <citerefentry><refentrytitle>man</refentrytitle><manvolnum>1</manvolnum></citerefentry> <programlisting>let some = "program"; in some</programlisting> <literal>true</literal> <option>users</option> < = < > = > Simple docbook reference: https://docbook.rocks/
<Ashy>
Henson: have you actually used plan9 in anger? it's something i've been meaning to play with for a long time
drakonis has joined #nixos
drakonis2 has quit [Ping timeout: 245 seconds]
<Henson>
Ashy: in anger, no, I actually quite liked it and founds its features to be amazing. I wish it had taken off more. Unix systems would be way more ahead if they and Plan9 had merged. Plan9, unfortunately, was just a proof-of-concept and doesn't really have many packages or the user base for it to develop.
<drakonis1>
simpson: there's also patches upon patches that non linux or mac OSes require to run software
<drakonis1>
OSes more niche than either
<drakonis1>
part of plan9 lives on linux these days
<drakonis1>
but well
<drakonis1>
not at all the same experience, now is it?
<Henson>
drakonis1: was the Plan9 filesystem ported to Linux?
<danderson>
the filesystem protocol was, and it's getting all kinds of uses as a lightweight way to ship filesystems across sockets
<danderson>
e.g. the gVisor sandbox uses 9P as a transport in and out of the sandbox for filesystem-ey things, iirc
<drakonis1>
virtio-fs is a thing these days now
<drakonis1>
its superior to 9p tho
<danderson>
is it a thing? Last I saw it was proposed and not done
<Henson>
one thing that never developed in Linux or other Unixes was Plan9's treating everything like a filesystem. I was blown away by how, instead of using the X11 protocol to display windows on another monitor, you just map their display namespace onto yours via 9p for the desired process, and then it displays on the other screen.
<Henson>
the same with network cards and sound cards, you just map hardware from other computers onto your via 9p and use them. Amazing.
<drakonis1>
that's still doable though
Abednego has joined #nixos
Abednego has quit [Ping timeout: 246 seconds]
<Henson>
how?
Okinan has quit [Quit: Konversation terminated!]
sogatori has joined #nixos
<{^_^}>
[nixpkgs] @grahamc opened pull request #66361 → maintainers: add github user IDs in service to NixOS/rfcs#39 → https://git.io/fj7mj
<Henson>
drakonis1: maybe we could continue this conversation another time, I need to go to bed
mmhyphen has left #nixos ["Kicked by @appservice-irc:matrix.org : issued !quit command"]
domogled has joined #nixos
Rusty1 has quit [Quit: Konversation terminated!]
karswell has joined #nixos
zeta_0 has joined #nixos
zeta_0 has quit [Client Quit]
<{^_^}>
[nixpkgs] @mdorman opened pull request #66362 → emacsPackages: melpa-stable fixes for new infrastructure → https://git.io/fj7Y8
BinkyTheClown has joined #nixos
<danderson>
so, etc.nix defines environment.etc as a loaOf file submodules. The docs say loaOf means I can provide either a list or a set, but the submodule then expects to get a name attr as input. How does that happen if I provide a list?
<clever>
kalbasit: after adding qemu.nix to imports, and setting qemu-user.aarch64 = true; in your configuration.nix
<clever>
you can just set system when importing nixpkgs
alex`` has joined #nixos
<clever>
pkgs = import <nixpkgs> { system = "aarch64-linux"; }
<clever>
--option system aarch64-linux may also work in this case
<kalbasit>
clever: nice! thank you
<kalbasit>
clever: FYI `trace: warning: The option `boot.binfmtMiscRegistrations' defined in `/nix/store/4dqkrvdy5dw4fjrs8vvh7wzg5xwyrbz2-source/qemu.nix' has been renamed to `boot.binfmt.registrations'.`
<kalbasit>
clever: also it's failing to build for me
<clever>
kalbasit: i think this commit was to blame?
<clever>
the build system was redone, and that broke compatability
zupo has joined #nixos
<kalbasit>
that commit set mesonFlags to `"-Dgtk_doc=true"` and you're setting `"--default-library both" ` I was expecting to see `-Ddefault_library` as the error suggested
<clever>
trace: warning: The option `boot.binfmtMiscRegistrations' defined in `/home/clever/apps/nixos-configs/qemu.nix' has been renamed to `boot.binfmt.registrations'.
<clever>
ah, but i can reproduce this if i use a newer nixpkgs temporarily
<clever>
checking that rev...
<clever>
ERROR: Got argument default_library as both -Ddefault_library and --default-library. Pick one.
<clever>
yep
jgt has joined #nixos
drakonis has quit [Ping timeout: 264 seconds]
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
sogatori has quit [Remote host closed the connection]
fendor_ has joined #nixos
zupo has joined #nixos
fendor_ has quit [Remote host closed the connection]
bakakuna has quit [Ping timeout: 272 seconds]
<pie_>
sphalerite: any load :(
<pie_>
sphalerite: mostly trying to sync my backups righ tnow
<pie_>
i _am_ under some memory pressure but i think this happenns even if i have memory free
<pie_>
i think the zfs caches just take up all the ram and then performanc eplummets
<pie_>
i have 32 gigs but most of that is firefox D
<pie_>
xD
fendor has joined #nixos
veske has joined #nixos
ng0 has joined #nixos
<sphalerite>
pie_: yeah get more RAM or use less :p
<sphalerite>
pie_: you can reduce the amount of memory zfs uses for the ARC by setting zfs_arc_max (write a number of bytes to /sys/module/zfs/parameters/zfs_arc_max)
<sphalerite>
I myself haven't done any tuning other than that
<{^_^}>
[nixpkgs] @adisbladis merged pull request #66362 → emacsPackages: melpa-stable fixes for new infrastructure → https://git.io/fj7Y8
<marek>
srhb, clever conditional imports how? I tried to somehow force config.networking.hostName into an import but it seems to not be supported
<srhb>
marek: I'm saying _don't_ do conditional imports.
<pie_>
Device Model: Samsung SSD 850 PRO 1TB
<srhb>
marek: That is, trying to decide what to import based on some value.
<marek>
srhb: oh yes :) sorry
<srhb>
marek: On your Foo machine you just import foo.nix, on your Bar machine, you import bar.nix
<srhb>
where foo.nix has networking.hostName = "foo"; etc.
<pie_>
"s. The claimed sequential read speeds are 550MB/s across the board from 128GB to 1TB, with the sequential write speeds ranging from 470MB/s for the 128GB to 520MB/s for all the other drives."
<pie_>
"We found that the write speed for the Samsung 850 Pro SSD decreased from ~500MB/s to around 30MB/s throughtput, with less than 500 IOPS per disk."
Neo-- has joined #nixos
<pie_>
not sure whats actually going on...long thread
<pie_>
something sometihng TRIM?
<clever>
pie_: if trim is enabled, and doesnt malfunction, it will tell the SSD to erase any blocks that zfs isnt using
Shoubit has joined #nixos
<clever>
and erasing ssd blocks is a large chunk of write time
<clever>
so that lets it pre-erase a large chunk of the disk
<pie_>
actually i should check i didnt misread the stats
<clever>
pie_: and if the ssd is brand new, or about to be sold, you should probably run blkdiscard on it, WARNING, IT WILL WIPE THE DISK
<clever>
that lets you boost write performace short-term
jb551 has joined #nixos
<clever>
some high end camera's have also gotten flack, because they dont let you erase a single clip, then only let you blkdiscard the whole ssd at once
<nyanloutre[m]>
Hello, I created a test profile with nixos-rebuild. But now I would like to delete it, how do you do it ? I can't find it in the man or the doc
<clever>
nyanloutre[m]: nix-store --delete, dont force it
<sphalerite>
Miyu-chan: nixos has lots of dependencies that don't cross-build yet.
<clever>
something i was toying with a year ago
<Miyu-chan>
sphalerite: Oh. TIL.
<clever>
the file i linked requires an arm build slave, and wont cross
<Miyu-chan>
clever: checking
<sphalerite>
Miyu-chan: it does depend on the config though
<Miyu-chan>
Oh.
fusion809 has joined #nixos
<sphalerite>
Miyu-chan: you can run nix-build '<nixpkgs/nixos>' --arg configuration '{fileSystems."/".device = "dummy"; boot.loader.grub.enable = false; }' --argstr crossSystem armv7l-linux -A system
<Miyu-chan>
clever: Can't you theoretically make a machine a build slave of itself?
<sphalerite>
Miyu-chan: to see if an almost-empty config will build
<sphalerite>
or which dependencies fail :)
<Miyu-chan>
sphalerite: I'm actually kinda interested in doing the inverse lol. Deploying from my phone for hotfixes.
<sphalerite>
Miyu-chan: yeah that won't go well, you do not want to build the entire closure of your system on your phone x)
<sphalerite>
Miyu-chan: get a €3/month VPS and deploy from there :)
<Miyu-chan>
OTOH, it's probably around much faster to find a table, take the laptop, and gotfix than doing everything on the phone lmao
<sphalerite>
Miyu-chan: get an sqlite build for it
<Miyu-chan>
Yeah. nix is straight-up amazing for this, and someone has a nix-on-termux proot online. :)
<Miyu-chan>
(FWIW my first SQL that I'd say is sufficiently advanced was actually me getting the privkey given a deployment name, and a nixops resource name.
<lpil>
Hi everyone. I've created a NixOS machine using nixos-infect and now I wish to make some changes to it (add packages, etc). Should I be editing the config in /etc/nixos and then running a command to apply it?
<petercommand>
clever: I guess that makes sense, unless the user also overrides passthru through overrideAttrs, the passthru attributes won't be overriden
<lpil>
Or is it better to leave this config alone and have my customisations elsewhere?
<adisbladis>
lpil: Yes that's fine, at this point you have a normal nixos installation.
<infinisil>
clever: I'd think it should, since passthru is an argument of mkDerivation like any other
<lpil>
Cool so edit those files, run `nixos-rebuild switch` as root? I was thinking it would be nice to keep my config in git but there's some machine specific config such as the IP addresses etc. Is there a good way to split this config out? :)
<clever>
infinisil: maybe its overrideDerivation where it fails
<lpil>
I could have one file on the machine not in git and import that I guess :)
<petercommand>
infinisil: from the definition of overrideDerivation, I don't quite get why it evaluates the original derivation first
<infinisil>
petercommand: That's the same for overrideAttrs actually, and it's something that happens due to how nix's scoping works
<Zer0xp>
infinisil: That line security.pam.services.login.googleAuthenticator.enable = true; --Should login be replaced by my username ?
<petercommand>
infinisil: isn't nix lazy?
<infinisil>
petercommand: When a derivation is defined like `mkDerivation rec { name = "foo"; url = "https://blabla.${name}"; }`, it's really the same as the expression `{ name = "foo"; url = "https://blabla.foo"; }`
<petercommand>
yes
<infinisil>
petercommand: Meaning any kind of later override won't even realize that the name has been interpolated
<petercommand>
infinisil: ah..interpolation
<infinisil>
Zer0xp: I don't think so no
<Zer0xp>
Cool, thanks.
<petercommand>
infinisil: is it possible to defer interpolation?
<Miyu-chan>
I never knew how much I needed this before, but can Mix optimize `x == x`? I want to make a toposort, but I need to prune repeated values too.
<clever>
Miyu-chan: lib.toposort
<petercommand>
infinisil: like, some sort of template haskell like thing
<Miyu-chan>
TL;DR, NixOps, DAG, and toposort.
<infinisil>
petercommand: Not really, but you can do `{ stdenv, someArgument ? ""; }: stdenv.mkDerivation { url = "https://blabla.${someArgument}"; }`, which then allows changing `someArgument` with .override
<Miyu-chan>
Based on how I understand it, the toposort is implemented in the Python part.
<clever>
Miyu-chan: builtins.genericClosure is now nixops and nixos trace a tree, and turn it into a flat list, while avoiding recursion in the tree
<typetetris>
Hi! How can I determine which commit of a certain branch nix-channel --update has loaded ?
<{^_^}>
[nixpkgs] @danbst pushed commit from @tokudan to master « postgresql: fix CVE-2019-10208, CVE-2019-10209 (#66347) »: https://git.io/fj7nt
hyper_ch2 has quit [Remote host closed the connection]
<Miyu-chan>
Yeah. Now that you mentioned that. I think I could just do equality on the key.
<lpil>
I wish to make use of the "docker-containers" option from this PR https://github.com/NixOS/nixpkgs/pull/55179 but on my server I get an error saying that it does not exist. Is it possible to upgrade my installation to make use of this?
<{^_^}>
#55179 (by benley, 26 weeks ago, merged): NixOS: Run Docker containers as declarative systemd services
<clever>
lpil: which channel are you on?
<lpil>
Forgive me, I'm a newbie and don't know. I ran nixos-infect on a DO machine using the instructions in the nixos-infect README
<{^_^}>
[nixpkgs] @vbgl pushed commit from @marsam to master « dune: 1.11.0 -> 1.11.1 »: https://git.io/fj7n4
<Zer0xp>
Okay so I just set up google-authenticator. The problem now is that I want to be able to add auth required pam_google_authenticator.so in my /etc/pam.d/gdm file but the file is read-only and without adding that command I can't use google-authenticator for 2FA logins. How can I overcome this issue ?
mgdm has left #nixos ["WeeChat 1.4"]
johanot has quit [Quit: WeeChat 2.4]
karetsu has joined #nixos
<aanderse>
Izorkin: can you please rebase mysql replication pr and resolve merge conflicts?
phreedom has joined #nixos
<clever>
Zer0xp: one min
<Izorkin>
aanderse: make
<Zer0xp>
clever: Sure.
<clever>
Zer0xp: googleAuthenticator.enable does that for you
<craige>
I'm trying to build xvfb-run from nkgs locally and I'm hitting "hash mismatch" but the hash is correct. When I change it to the wanted one, I get exactly the same error. I may just be over tired but has anyone seen that before?
<tazjin>
infinisil: I'm filing an issue for it atm, maybe someone else recognises this immediately - won't have time to spend on debugging until this evening
<craige>
I'll give that a go. Thanks infinisil
<infinisil>
craige: You have a mixup there
<infinisil>
craige: For your problem you should give more info (always a good idea if you're asking for help with a problem). Nix won't give a hash mismatch with no reason, so if you changed it and it still doesn't work, your change didn't apply correctly
<craige>
Yep and I'm trying to untangle where. The has mismatch is not even for the package i'm building but for a dependency it's building.
<{^_^}>
[nix] @CSVdB closed pull request #2959 → Check whether flag registry is compeletely used → https://git.io/fjVnI
<{^_^}>
[nix] @CSVdB closed pull request #2950 → Cleaned up HandleLockFile and the flags to steer it → https://git.io/fjaVY
<{^_^}>
[nix] @CSVdB closed pull request #2943 → Added flags to override the lockfile → https://git.io/fjgjH
<sphalerite>
craige: are you replacing the right hash?
<nbp>
I keep getting "HTTP error 200 (curl error: Timeout was reached)" while running `nix run`, so I have to constantly restart it until it succeeds at finishing the download from the cache.nixos.org.
<nbp>
I tihnk I will switch to downloading with `wget`, and use `nix-store --restore`, hoping that it will work.
waleee-cl has joined #nixos
<is0x3F>
Hello everyone 🙂 new to nix but love the ideas behind it. I'm installing minimal nixOS for the first time after coming from minimal debian. looking forward to being a nixer 😁
<infinisil>
is0x3F: Awesome, I hope you like it :D
<joepie91>
is0x3F: ohai :)
* nbp
(replying to my-self)
<is0x3F>
:) i stayed away for awhile because people kept talking about the difficulty in understanding .nix files but i decided to decide for myself and try and learn it. I always enjoyed a bit of a challenge
<alexarice[m]>
is there anyone who's done some rust packaging who would be able to have a look at https://github.com/colemickens/nixpkgs-wayland/pull/154, I'm trying to compile a rust program with a go dependency and no matter what I try it can't seem to build the go dependency properly
<{^_^}>
colemickens/nixpkgs-wayland#154 (by alexarice, 1 day ago, closed): wldash: Init
<is0x3F>
so currently i'm setting up nix in a virtualbox before i replace my system entirely. i believe there must be a way to get from virtualbox to actual hardware once i've got the system configured the way i like. is there any best practices i should follow? or maybe somewhere in the wiki somebody could point me? would really appreciate it thanks :)
<{^_^}>
[nixpkgs] @worldofpeace pushed 2 commits to master: https://git.io/fj7Wa
qqlq has joined #nixos
<infinisil>
is0x3F: I think the only necessity is to generate a hardware-configuration.nix with `nixos-generate-config` once you're in the installer, then you should be able to copy over the configuration.nix and have it work
<ajs124>
is0x3F: if you structure your config in a way where hardware dependent config is seperate from system config (which more or less happens by default), it should be pretty easy to move it from a virtual machine to a real one.
<Aleksejs>
there's something really broken with the way nixos uses name servers recently: when I don't specify any nameserver then github, skype and many other things don't work (they work perfectly on other machines in my network). When I specify nameservers, all these things work but when I connect to office VPN I don't resolve names from internal nameserver
<Aleksejs>
this appeared after I switched to 19.03
<Aleksejs>
before 19.03 I didn't have to specify nameservers and everything worked
MmeQuignon has joined #nixos
fendor has quit [Ping timeout: 246 seconds]
nihh_ has quit [Quit: Leaving]
<is0x3F>
<ajs124 "You can simply follow https://ni"> sweet awesome this is what i've been following. im actually reading your configuration files rn infinisil :D i think to start i'll have a common.nix and individual nix files for each machine. this is good inspiration thansks for keeping this public
<infinisil>
Hehe glad you can get something out of it
<ajs124>
Aleksejs: maybe something with systemd.resolved or nscd?
<adisbladis>
xwvvvvwx: Hmm, I think I have a geth nixos module somewhere..
<xwvvvvwx>
infinisil: Can I use systemd.tmpfiles to also specify the content of a file? I have previously only used it to ensure that directories are created.
<gchristensen>
where should this file be written to?
<infinisil>
xwvvvvwx: So ideally you wouldn't have to write the file there at all and can pass something like `--config ${derivation for config file}`
hyper_ch2 has quit [Remote host closed the connection]
<infinisil>
xwvvvvwx: But sometimes that's not possible, in which case the next best option is to symlink it to the config file derivation with the `L+` directive with systemd.tmpfiles (see `man tmpfiles.d`)
<xwvvvvwx>
what do you mean "config file derivation"?
<adisbladis>
gchristensen: geth (go-ethereum) does not enforce any specfic location (and has no default path), so xwvvvvwx could write it anywhere
<gchristensen>
then using the `etc` config file mechanism is probably better than tmpfiles
<exarkun>
ivan: Darn. Thanks.
<xwvvvvwx>
this particular file has to be in geths datadir
<{^_^}>
[nixpkgs] @rydnr opened pull request #66387 → Pharo VM 64b upgraded to support Pharo 7 and Pharo 8 images → https://git.io/fj7lt
judson has quit [Ping timeout: 245 seconds]
<{^_^}>
[nixpkgs] @rydnr closed pull request #60649 → Pharo VM (64b) for Pharo 7 and Pharo 8 images → https://git.io/fjZuI
18VAA0SOE has quit [Ping timeout: 248 seconds]
judson has joined #nixos
schjetne has quit [Ping timeout: 268 seconds]
<craige>
sphalerite infinisil - I think I'm just over tired and was building this package with the wrong build command from the wrong directory. The nixpkgs wiki page sorted me out. Thank you!
<aanderse>
if an /opt directory is created when i'm in a fhsUserEnv where is that actually stored, and how can i make it persistent? (i have not worked with fhsUserEnv much)
<{^_^}>
[nixpkgs] @KoviRobi opened pull request #66390 → mandelbulber2: init at 2.19 → https://git.io/fj78f
orivej has quit [Ping timeout: 244 seconds]
seanparsons has quit [Ping timeout: 245 seconds]
ubert has quit [Quit: Leaving]
orivej has joined #nixos
<{^_^}>
[nixpkgs] @ivegotasthma opened pull request #66391 → Packages for the python coreapi client → https://git.io/fj78m
<__monty__>
corpix[m]: I think you have to specify nixpkgs.overlays in configuration.nix
<__monty__>
The system configuration doesn't look at any other overlays iiuc.
drakonis has quit [Quit: WeeChat 2.4]
ericsagnes has joined #nixos
gxt has quit [Ping timeout: 260 seconds]
<corpix[m]>
Hmmm, strange, I've got `error: infinite recursion encountered, at undefined position` with `nixpkgs.overlays = [ myOverlay ]`. Will look further. If configuration is not looking at any other overlays then `nixpkgs.overlays = [...]` is probably the only way to get it work...
zeta_0 has joined #nixos
<alexarice[m]>
corpix: sounds like there is a problem in your overlay
xkapastel has quit [Quit: Connection closed for inactivity]
<{^_^}>
[nixpkgs] @timokau opened pull request #66396 → sage: default to long tests again → https://git.io/fj78A
ZD[m] has quit [Remote host closed the connection]
gspia[m] has quit [Remote host closed the connection]
fasd has quit [Remote host closed the connection]
eqyiel has quit [Remote host closed the connection]
wuji[m] has quit [Remote host closed the connection]
tonic0x539[m] has quit [Remote host closed the connection]
florianjacob has quit [Write error: Connection reset by peer]
Vskilet has quit [Remote host closed the connection]
hpfr[m] has quit [Write error: Connection reset by peer]
arturo[m] has quit [Write error: Connection reset by peer]
luftmensch[m] has quit [Remote host closed the connection]
wak-work has quit [Write error: Connection reset by peer]
anton-latukha[m] has quit [Remote host closed the connection]
kxlljoyy[m] has quit [Remote host closed the connection]
danielrf[m] has quit [Write error: Connection reset by peer]
nocent has quit [Write error: Connection reset by peer]
apx[m] has quit [Remote host closed the connection]
cab404[m] has quit [Remote host closed the connection]
neonfuz2 has quit [Write error: Connection reset by peer]
hiroshi[m] has quit [Write error: Connection reset by peer]
weebull[m] has quit [Read error: Connection reset by peer]
BinkyTheClown has quit [Write error: Connection reset by peer]
manveru[m] has quit [Write error: Connection reset by peer]
isgy[m] has quit [Remote host closed the connection]
siraben has quit [Write error: Connection reset by peer]
LinuXit has quit [Remote host closed the connection]
Lisanna[m] has quit [Write error: Connection reset by peer]
ptotter[m] has quit [Read error: Connection reset by peer]
corpix[m] has quit [Remote host closed the connection]
simbergm has quit [Write error: Connection reset by peer]
li_matrix has quit [Write error: Connection reset by peer]
jsquared71[m] has quit [Write error: Connection reset by peer]
frederic_chopwn[ has quit [Write error: Broken pipe]
craige[m] has quit [Write error: Connection reset by peer]
rycee has quit [Write error: Connection reset by peer]
KarelWDingeldey[ has quit [Write error: Broken pipe]
Thinkofname[m] has quit [Write error: Connection reset by peer]
monado[m]1 has quit [Write error: Connection reset by peer]
Moredread[m] has quit [Write error: Connection reset by peer]
contrun[m] has quit [Read error: Connection reset by peer]
otini has quit [Remote host closed the connection]
HappyEnt[m] has quit [Read error: Connection reset by peer]
yangm has quit [Read error: Connection reset by peer]
malteof[m] has quit [Read error: Connection reset by peer]
peterhoeg[m] has quit [Read error: Connection reset by peer]
clacke[m] has quit [Read error: Connection reset by peer]
balsoft has quit [Write error: Connection reset by peer]
sugi[m] has quit [Write error: Connection reset by peer]
iceychris[m] has quit [Write error: Connection reset by peer]
ajirx[m] has quit [Write error: Broken pipe]
tails[m] has quit [Read error: Connection reset by peer]
tindvik[m] has quit [Read error: Connection reset by peer]
ejpcmac has quit [Read error: Connection reset by peer]
rnhmjoj has quit [Read error: Connection reset by peer]
abbafei[m] has quit [Read error: Connection reset by peer]
mariusz-kowalski has quit [Read error: Connection reset by peer]
worldofpeace has quit [Read error: Connection reset by peer]
das-g[m] has quit [Remote host closed the connection]
domenkozar[m] has quit [Read error: Connection reset by peer]
nh2[m] has quit [Read error: Connection reset by peer]
bkl[m] has quit [Remote host closed the connection]
cornu has quit [Write error: Connection reset by peer]
zaphar_ps[m] has quit [Write error: Connection reset by peer]
EuAndreh[m] has quit [Read error: Connection reset by peer]
abbec has quit [Write error: Connection reset by peer]
philipp[m] has quit [Read error: Connection reset by peer]
fgaz has quit [Read error: Connection reset by peer]
thefloweringash has quit [Write error: Connection reset by peer]
blitzclone[m] has quit [Write error: Connection reset by peer]
hr[m] has quit [Remote host closed the connection]
tomberekn[m] has quit [Remote host closed the connection]
arcnmx has quit [Remote host closed the connection]
retrry[m] has quit [Remote host closed the connection]
makaveli[m] has quit [Remote host closed the connection]
wrunt[m] has quit [Write error: Connection reset by peer]
Gopal[m] has quit [Remote host closed the connection]
Yakulu[m] has quit [Remote host closed the connection]
schmittlauch[m] has quit [Write error: Connection reset by peer]
harkenedraven has quit [Write error: Connection reset by peer]
spoutnik3567[m] has quit [Remote host closed the connection]
thequux[m] has quit [Write error: Connection reset by peer]
vaibhavsagar has quit [Write error: Connection reset by peer]
sauyon[m] has quit [Write error: Connection reset by peer]
jschievink[m] has quit [Write error: Connection reset by peer]
attente[m] has quit [Write error: Connection reset by peer]
marius851000[m] has quit [Write error: Connection reset by peer]
roberth has quit [Write error: Connection reset by peer]
macerbi[m] has quit [Write error: Connection reset by peer]
colemickens has quit [Write error: Connection reset by peer]
M0ddba11[m] has quit [Write error: Connection reset by peer]
MerlinGttlinger[ has quit [Write error: Connection reset by peer]
roadt[m] has quit [Write error: Connection reset by peer]
codyopel has quit [Write error: Connection reset by peer]
aquarial has quit [Write error: Connection reset by peer]
pingveno[m] has quit [Write error: Connection reset by peer]
aymenstudios[m] has quit [Read error: Connection reset by peer]
am3on[m] has quit [Write error: Connection reset by peer]
JaakkoLuttinen[m has quit [Read error: Connection reset by peer]
gudea[m] has quit [Write error: Connection reset by peer]
matthewbauer has quit [Read error: Connection reset by peer]
MilkManzJourDadd has quit [Write error: Broken pipe]
Woland[m] has quit [Remote host closed the connection]
bkchr has quit [Remote host closed the connection]
divansantana1 has quit [Remote host closed the connection]
Dan[m]7 has quit [Remote host closed the connection]
sputny[m] has quit [Remote host closed the connection]
Dandellion[m] has quit [Read error: Connection reset by peer]
freddie_freeload has quit [Remote host closed the connection]
byzoni[m] has quit [Write error: Connection reset by peer]
Minijackson[m] has quit [Read error: Connection reset by peer]
bennofs[m] has quit [Write error: Connection reset by peer]
frislie[m] has quit [Write error: Connection reset by peer]
bee[m]1 has quit [Write error: Connection reset by peer]
sinuxi[m] has quit [Write error: Connection reset by peer]
wangoe[m] has quit [Remote host closed the connection]
Notkea[m] has quit [Remote host closed the connection]
copy` has quit [Read error: Connection reset by peer]
submoo[m] has quit [Read error: Connection reset by peer]
bendlas has quit [Read error: Connection reset by peer]
icetan has quit [Read error: Connection reset by peer]
bricewge has quit [Read error: Connection reset by peer]
pop[m]1 has quit [Read error: Connection reset by peer]
spacekitteh[m] has quit [Read error: Connection reset by peer]
laas has quit [Read error: Connection reset by peer]
alexarice[m] has quit [Read error: Connection reset by peer]
MichalLaskus[m] has quit [Read error: Connection reset by peer]
Ralith has quit [Write error: Connection reset by peer]
zurdo has quit [Remote host closed the connection]
midi[m] has quit [Read error: Connection reset by peer]
ma27[m] has quit [Read error: Connection reset by peer]
sylvie[m] has quit [Read error: Connection reset by peer]
regnat[m] has quit [Read error: Connection reset by peer]
erk^ has quit [Max SendQ exceeded]
Catalyst[m] has quit [Remote host closed the connection]
jgosset[m] has quit [Remote host closed the connection]
aterius has quit [Remote host closed the connection]
hackeryarn[m] has quit [Remote host closed the connection]
IslandUsurper has quit [Remote host closed the connection]
syntaxtree[m] has quit [Remote host closed the connection]
amorosa1984[m] has quit [Remote host closed the connection]
fidgetspinoza[m] has quit [Remote host closed the connection]
bnasty[m] has quit [Remote host closed the connection]
nyanloutre[m] has quit [Read error: Connection reset by peer]
Smith[m] has quit [Remote host closed the connection]
Brio[m] has quit [Remote host closed the connection]
musicmatze has quit [Remote host closed the connection]
ronny has quit [Write error: Connection reset by peer]
yoho[m]1 has quit [Write error: Connection reset by peer]
bbigras has quit [Write error: Connection reset by peer]
sonercirit[m] has quit [Write error: Connection reset by peer]
Ericson2314 has quit [Write error: Connection reset by peer]
dwagenk has quit [Write error: Connection reset by peer]
arianvp[m] has quit [Write error: Connection reset by peer]
bohan[m] has quit [Write error: Connection reset by peer]
Seb[m] has quit [Write error: Connection reset by peer]
boredom101[m]1 has quit [Write error: Connection reset by peer]
info_supplicant[ has quit [Write error: Connection reset by peer]
haslersn has quit [Write error: Connection reset by peer]
joepie91[m] has quit [Remote host closed the connection]
is0x3F has quit [Read error: Connection reset by peer]
Noughtmare[m] has quit [Write error: Connection reset by peer]
badmutex[m] has quit [Write error: Connection reset by peer]
ArtemVorotnikov[ has quit [Write error: Connection reset by peer]
dtz has quit [Write error: Connection reset by peer]
jonge[m] has quit [Write error: Connection reset by peer]
NickHu has quit [Write error: Connection reset by peer]
jonreeve[m] has quit [Write error: Connection reset by peer]
roitme[m] has quit [Write error: Connection reset by peer]
alj[m] has quit [Write error: Connection reset by peer]
NfixEstrada[m] has quit [Write error: Connection reset by peer]
alan[m] has quit [Write error: Connection reset by peer]
pinage404[m] has quit [Write error: Connection reset by peer]
MarkOtaris has quit [Write error: Connection reset by peer]
timokau[m] has quit [Read error: Connection reset by peer]
nilsirl[m] has quit [Read error: Connection reset by peer]
atopuzov[m] has quit [Read error: Connection reset by peer]
craigevil[m] has quit [Read error: Connection reset by peer]
tsrt^ has quit [Max SendQ exceeded]
escaP[m] has quit [Remote host closed the connection]
cgm[m] has quit [Remote host closed the connection]
EB[m] has quit [Remote host closed the connection]
AntonSchirg[m] has quit [Remote host closed the connection]
balsoft[m] has quit [Write error: Connection reset by peer]
vxzero[m] has quit [Remote host closed the connection]
imj[m] has quit [Remote host closed the connection]
dsrt^ has quit [Max SendQ exceeded]
ffl^ has quit [Max SendQ exceeded]
srt^ has quit [Max SendQ exceeded]
TravisRt2botio[m has quit [Write error: Connection reset by peer]
krt^^ has quit [Max SendQ exceeded]
MayeulC_backup has quit [Write error: Connection reset by peer]
fulgjon has quit [Remote host closed the connection]
alienpirate5 has quit [Write error: Connection reset by peer]
alxev[m] has quit [Write error: Connection reset by peer]
smolboye[m] has quit [Remote host closed the connection]
orospakr[m] has quit [Remote host closed the connection]
bachp has quit [Remote host closed the connection]
rihardsk[m] has quit [Write error: Connection reset by peer]
sphalerit has quit [Write error: Connection reset by peer]
kaychaks[m] has quit [Remote host closed the connection]
slabity has quit [Read error: Connection reset by peer]
jasonk000[m] has quit [Remote host closed the connection]
GerdFlaig[m] has quit [Remote host closed the connection]
layus[m] has quit [Remote host closed the connection]
lel[m] has quit [Remote host closed the connection]
ninjatrappeur[m] has quit [Remote host closed the connection]
olejorgenb[m] has quit [Remote host closed the connection]
MiloIgnis[m] has quit [Read error: Connection reset by peer]
DanP[m] has quit [Write error: Connection reset by peer]
jak[m] has quit [Write error: Connection reset by peer]
momack2[m] has quit [Write error: Connection reset by peer]
ndarwincorn has quit [Write error: Connection reset by peer]
flip[m] has quit [Remote host closed the connection]
goibhniu has quit [Remote host closed the connection]
clefru has quit [Remote host closed the connection]
timclassic has quit [Remote host closed the connection]
sgh^^ has quit [Max SendQ exceeded]
hcs^ has quit [Max SendQ exceeded]
eok^ has quit [Max SendQ exceeded]
o1lo01ol1o has quit [Remote host closed the connection]
krt^^ has joined #nixos
<DigitalKiwi>
I'm trying to get ocrmypdf packaged I have a PR open I think it works but it doesn't run in nix-review I'm not sure if that's my fault or what... can anyone help?
<{^_^}>
[nixpkgs] @svalaskevicius opened pull request #66397 → electron: add 6.x version → https://git.io/fj74U
<{^_^}>
[nix] @volth opened pull request #3036 → nix-shell: provide fake $out → https://git.io/fj74T
<{^_^}>
#66391 (by ivegotasthma, 1 hour ago, open): Packages for the python coreapi client
<ivegotasthma>
I left a comment on github, but we can also discuss here, if you prefer
<zeta_0>
infinisil: what do you mean? what's `lib.loPrio`?
Thra11 has joined #nixos
<exarkun>
python modules in propagatedBuildInputs of derivations built with buildPythonPackage aren't ending up in an environment created with (python.buildEnv.override ...).env
<infinisil>
Yeah that's probably the best way to do it. You can e.g. just wrap a lowPrio around the whole thing
sogatori has quit [Remote host closed the connection]
waleee-cl has joined #nixos
Jackneill has quit [Remote host closed the connection]
<pie_>
clever: elvishjerricco: zpool status -t actually says trim unsupported for both my device
<pie_>
maybe its because theyre on dmcrypt devices?
<pie_>
does that mean those handle trim?
<zeta_0>
infinisil: should i just use a different ghc version for ihaskell because ihaskell is not going to integrate with haskell.packages right, or should i go the route of trying to install ihaskell in the body of haskell.packages, i'm confused?
<{^_^}>
[nixpkgs] @mmahut opened pull request #66399 → metabase: service module and test → https://git.io/fj7BH
AluisioASG has joined #nixos
<vaibhavsagar>
zeta_0: you aren't posting the full build output
chinarin has joined #nixos
<vaibhavsagar>
zeta_0: you also aren't posting the full contents of home.nix, there's no way that gist is compiling correctly as it is
zupo has joined #nixos
zupo_ has joined #nixos
zupo has quit [Ping timeout: 245 seconds]
fendor has joined #nixos
<chinarin>
Is it possible to change nixos global options (e.g. networking.extraHosts) on-the-fly (i.e. without doing nixos-rebuild switch?) It'd be nice to be able to effectively modify /etc/hosts without needing to rebuild my whole config.
<vaibhavsagar>
no
erasmas has quit [Quit: leaving]
<vaibhavsagar>
that's the whole point of NixOS
<vaibhavsagar>
you can always use another distro if you want mutability
<vaibhavsagar>
zeta_0: that's not the whole output
gagbo has joined #nixos
<__monty__>
I'm trying to reinstall nixos from the live usb. But I get `error: unable to start build process`, is this not allowed/a bad idea? How else can I change an installed system that doesn't boot?
<infinisil>
chinarin: As vaibhavsagar said in general no. There are ways to make certain properties stateful, so they won't be part of the NixOS rebuild cycle anymore. This allows fast changing of those components, but of course doesn't get you the reproducibility anymore
<chinarin>
infinisil: OK sounds good. How can I do that? Btw, so you get an idea of my needs: I can't connect to a wifi hotspot. There's a fix (https://askubuntu.com/questions/1023429/cant-connect-to-google-starbucks-wifi-on-ubuntu-17-10) I can do by editing extraHosts. But I've added some systemPackages since I last rebuilt. Now I rebuild to apply the extraHosts; but it fails b/c it can't download the extra packages. There should be an elegant solution for things
<chinarin>
infinisil: nice. I'm curious how you found that option, though. "--option" isn't mentioned in nixos-rebuild(1) man, and "substitute" isn't listed in nixos.org's "Options" page.
<vaibhavsagar>
zeta_0: no, this isn't the whole output
<DigitalKiwi>
__monty__
<vaibhavsagar>
zeta_0: and I don't need your home.nix again, the first time was enough
<DigitalKiwi>
Err thanks
eof has quit [Ping timeout: 246 seconds]
<infinisil>
chinarin: Good question. This option gets passed along to nix-build, nixos-rebuild only mentions "In addition, nixos-rebuild accepts various Nix-related flags"
<symphorien>
habbah: I don't know about osx, but on another linux distro you would have to create a user called "postgres" and configure postgres in /etc/ to use unix authantication
<infinisil>
chinarin: So you'll find --option in the nix-build man page, which links you to the nix.conf manpage for available options
<symphorien>
installing postgres with nix-env does not do this, it only makes the executables available
<__monty__>
DigitalKiwi: I think others achieve something similar to toxvpn but better (because of mesh routing) using tinc but I haven't figured out whether that can do NAT traversal and stuff.
<infinisil>
chinarin: These are not ordinary options, they're like nix core options that configure how Nix itself behaves. So this is why they're not in the NixOS options or so
zupo_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<chinarin>
infinisil: ah, I see. Thanks!
noudle has joined #nixos
<aanderse>
infinisil: lol... awesome waste of time, we just left the same review on the same PR :D
<__monty__>
Hmm, nixos install throws an error about cloning the builder process. Why did it work without errors yesterday? Should I not nixos-install over an already nixos-installed system?
<aanderse>
>_<
<gchristensen>
__monty__: are you in a nix-shell?
<__monty__>
gchristensen: No, in the live install media.
<infinisil>
aanderse: Haha nice
schjetne has joined #nixos
<gchristensen>
are you in a nix-shell on the live media?
<__monty__>
gchristensen: Just the root-shell you're dropped in. Definitely didn't run nix-shell.
<infinisil>
aanderse: I finally caught up with my notification backlog today, so I wanted to keep it like that for at least a little while, which is why I reviewed the PR so soon :)
<__monty__>
I've run into this on arch before but `sysctl kernel.unprivileged_userns_clone=1` always fixed it there. Here /proc/sys/kernel/unpriv... doesn't exist (cannot stat).
<zeta_0>
vaibhavsagar: i tried ghc864 instead and it is still throwing an error?
<__monty__>
zeta_0: Are you trying to install both ihaskell and a different ghcWithPackages?
<vaibhavsagar>
oh hmm, that's probably it
<zeta_0>
my guess is it is conflicting with ghcWithHoogle?
<vaibhavsagar>
yeah, that sounds right to me
<__monty__>
Can you run nixos-install multiple times from the live medium? Or do I have to do a chroot or something the second time around?
<andi->
__monty__: yes!
<andi->
Just do it again
<__monty__>
zeta_0: I somewhat get around that by having ghcWithHoogle's in seperate myEnvFun's. That way they don't collide and I can `load-env-somename` to enter something akin to a nix-shell with a specific ghcWithHoogle.
<__monty__>
andi-: : / nixos-install's erroring on `cloning builder process: Operation not permitted`
<zeta_0>
well, i'll try and install just ghc by itself and install hoogle as a seperate sub-package, i hope the `all-hies` package still works though because it depends on hoogle
<andi->
__monty__: not in the chroot
<andi->
also not after nixos-enter
<__monty__>
zeta_0: I don't think that'll work either though. You have to choose either ghc *or* ihaskell.
<elvishjerricco>
pie_: By default, LUKS doesn't pass trim through because it leaks which blocks have been trimmed. There's a NixOS setting to make it do it anyway
<__monty__>
zeta_0: Do you mean this? The available "versions" of haskellPackages in nixpkgs, if you will.
<simpson>
zeta_0: Oh. Run the Nix repl with $(nix repl '<nixpkgs>'), type `haskell.packages.`, and tap the Tab key a couple times. (This is known as "tab completion" and will help you greatly in many applications.)
<pie_>
elvishjerricco: yeah i peeked at the wiki links i linked afterwards, good to know about the nixos setting, ill have to figure out later if i want this
<elvishjerricco>
pie_: I think it's fine. Trim isn't exactly the most damning information. Way less bad than leaking file sizes. And it can seriously speed up an SSD
schjetne has joined #nixos
janneke_ has quit [Quit: janneke quits Mes'sing]
ozychhi has quit [Quit: WeeChat 2.5]
janneke has joined #nixos
<clever>
pie_: you may need to enable trim in luks first
karetsu has joined #nixos
<pie_>
clever: so i just tested and with a bunch of ram free, switching to quassel is still super slow
<karetsu>
how do I suspend to RAM? `echo mem > /sys/power/state` isn't allowed for my user so I guess I'm not in the correct group?
<pie_>
sometimes switching tmux panes is also laggy
<clever>
pie_: that sounds like a gpu problem
<pie_>
clever: but only during zfs send | recv
<clever>
karetsu: `sudo systemctl suspend`
<clever>
pie_: check top anyways
<pie_>
clever: cpu usage is low
<clever>
pie_: watch -d cat /proc/interrupts
<clever>
pie_: what irq is tied to what device, any sharing?
<karetsu>
clever: is there no non-sudo way?
<clever>
karetsu: something involving systemd/logind, but ive never used it
<karetsu>
alright, that gives me somewhere to start at least
<karetsu>
thanks
<clever>
karetsu: you can also configure sudo to allow certain commands without a pw
<pie_>
clever: i cant really tell if theres anything out of the ordinary,mostly just these go up https://bpaste.net/show/A871
leothrix has joined #nixos
<simpson>
zeta_0: $() is subshell quotation; I use it on IRC to make shell commands obvious. https://en.wikiversity.org/wiki/Bash_programming/Subshells is an alright intro to the concept. I'm afraid that I might not have time to spoon-feed you the basics of how to use bash or other shells.
<clever>
pie_: those most appear to be related to idle activity, though line 4 might be a hdd
<clever>
pie_: whats more important is if one of them goes up faster, when the hdd is active
<pie_>
all of these seem to
growpotk- has quit [Read error: Connection reset by peer]
orivej has quit [Ping timeout: 248 seconds]
growpotk- has joined #nixos
_kwstas has joined #nixos
<karetsu>
clever: whatever it is it works as a clickable area in dzen so I now have my i3 forking and system suspend in power menu
<karetsu>
ta
janneke has joined #nixos
<pie_>
clever: zfs send into /dev/null seems to be fine, so its somehow the writes that are messing up the system
<clever>
are send and recv on the same box?
wfranzini has quit [Remote host closed the connection]
<clever>
You can watch for your administrator to install the latest kernel with
<clever>
averell: you find all kinds of neat things if you read the man page, like this:
<clever>
watch uname -r
<savanni>
Hey, y'all. I have a bug with the ruby environment that I'm unable to fix. If anyone is available to help, I've created a super-minimal nix-shell that illustrates the problem: https://github.com/savannidgerinel/nixpkgs-ruby-tzinfo
<zeta_0>
simpson: running this caused my computer to go crazy: nix-repl> haskell.packages.ghc865
<savanni>
I would appreciate any help you can offer.
<clever>
zeta_0: that will print out every single package on hackage
dminuoso has quit [Ping timeout: 245 seconds]
<averell>
haha, yes great use case
<zeta_0>
damn
<simpson>
zeta_0: Nice.
<__monty__>
zeta_0: Seriously, just use the search on hackage.haskell.org, nixpkgs has *all* of those packages, no more, no less.
<exarkun>
where do I find the current nixos system configuration, as a nix expression?
sinuxi[m] has quit [Quit: Idle kick: User has been idle for 30+ days.]
orivej has quit [Ping timeout: 258 seconds]
xkapastel has quit [Quit: Connection closed for inactivity]
<infinisil>
exarkun: Unless you turned on system.copySystemConfiguration (which I want to have turned on by default, see #24707), /etc/nixos/configuration.nix is the only place
<pie_>
clever: guess ill not throttle and hope if tinishes in a few hours, FML
zeta_0 has joined #nixos
roitme[m] has quit [Quit: Idle kick: User has been idle for 30+ days.]
<exarkun>
infinisil: It looks like the PR turns on that option by default but the docs for that option don't make it clear that it's relevant.
<exarkun>
nixops doesn't use /etc/nixos/configuration.nix at all, does it?
<zeta_0>
what is the link to the haskell infrastructure?
<infinisil>
exarkun: It does not turn on the option by default, take another look
ertw has joined #nixos
<exarkun>
I don't understand why I should care about that option
orivej has joined #nixos
<infinisil>
exarkun: Maybe I misunderstood your original question, but that option backs up your configuration.nix to /run/current-system/configuration.nix
<exarkun>
Maybe the lexical similarity between "nixos" and "nixops" is standing in the way
<infinisil>
So "where do I find the current nixos system configuration?" -> /run/current-system/configuration.nix
<exarkun>
I am. Sorry, I didn't explain that in a terribly clear way.
<alexarice[m]>
is there a way to have the home environment variable set to something that can be written to in a derivation?
<ToxicFrog>
Say I want to set certain environment variables for the ./configure
<exarkun>
I have the nixops source configuration but the target system is not behaving as I would expect (nor is nixops giving me an error). I wanted to look at the target system and see what _it_ thought was happening.
Yaniel has joined #nixos
wuji[m] has quit [Quit: Idle kick: User has been idle for 30+ days.]
<exarkun>
And I thought I remembered that the nixos config set was available somewhere
<ToxicFrog>
Is it better to do that with `export FOO=bar` in preConfigure, or `env FOO=bar ./configure` in configureScript?
<pie_>
clever: totally unrelated, does pivot root work without tearing down currently running processes?
<pie_>
is there a command equivalent to > io redirection
<pie_>
i want to try ionice on the cat
<qyliss>
pipe to dd?
<qyliss>
(if I understand the question)
irl25519 has joined #nixos
<pie_>
qyliss: ah nice, thanks
<pie_>
well this seems to work a bit better, cat /dev/urandom | pv | ionice -c 3 dd if=/dev/stdin of=./test
<elvishjerricco>
For a long time, I've wished there was a way to sudo pipe in bash. Like `echo 1 sudo> /proc/asdf`. I feel dumb that I never thought of `dd` :P `echo 1 | sudo dd of=/proc/asdf`
<pie_>
but elvishjerricco said he doesnt have any problems and i havent the faintest idea why
<pie_>
elvishjerricco: are you still on 0.7
<pie_>
elvishjerricco: ugh tell me about it...
<elvishjerricco>
Yea. 0.7.12
<pie_>
elvishjerricco: omfg i didnt even think of that
<pie_>
i keep wanting sudo pipe
* pie_
softly throws cookies at qyliss while being angry
<elvishjerricco>
lol
<pie_>
cant believe i didnt think of this
<pie_>
elvishjerricco: can you try to repro on 0.8? >_>
<elvishjerricco>
I always just used tee and accepted the output on stdout :P But dd makes so much more sense
<elvishjerricco>
pie_: I'm not sure how to test that out realistically
<elvishjerricco>
I guess I could pop open a VM
<pie_>
yeah im not sure either :(
<elvishjerricco>
I love how easy it is to pop open a VM with NixOS :P I do it all the time
<pie_>
i havent quite figured that out yet
<pie_>
what do you do
<pie_>
build-vm and set config path for rebuild or somesuch?
<elvishjerricco>
`nix run vm -f "<nixpkgs/nixos>" --arg configuration ./some-config.nix --run run-nixos-vm`
<pie_>
oh
<pie_>
didnt know about nix run
<elvishjerricco>
very convenient
<pie_>
be back in a sec, gonna grab some food
<elvishjerricco>
no annoying gc roots to remember to clean up :P
<pie_>
yeah
<elvishjerricco>
derp, `-c`, not `--run`
<elvishjerricco>
got my nix-shell and nix run mixed up
ToxicFrog has quit [Ping timeout: 246 seconds]
<elvishjerricco>
pie_: remind me what command I should be testing?
<worldofpeace>
elvishjerricco: you must explain how that's so easy I didn't even expect it to work
<elvishjerricco>
worldofpeace: If that's in some-config.nix, then that command will drop me into a vm with zfs 0.8 support
<elvishjerricco>
Since the args to run-nixos-vm just get passed to qemu, I can add a drive to the VM on the command line to actually use that ZFS version with
<worldofpeace>
ahh I just realized that the result gives you run-nixos-vm elvishjerricco perhaps you should run `run-*-vm` since it might not always be named nixos (i think)
<elvishjerricco>
worldofpeace: That wouldn't work since the bash expansion would not see the binary
<elvishjerricco>
You could do it by invoking the same nix expression with `nix eval` and having it print the hostname
<worldofpeace>
oh right
<elvishjerricco>
but that's more effort :P
<worldofpeace>
elvishjerricco: that's a very nice oneliner. I keep a repo for vm configs and it would make the bash aliases I integrate with direnv simpler
<elvishjerricco>
Yea. I'm glad NixOS does all of its test suites via VMs built this way. It makes sure it'll always be easy to test NixOS out this way.
<worldofpeace>
Totally, if you think about what some people have to do in ubuntu to test :D I start to feel real happy for myself
Thra11 has quit [Quit: WeeChat 2.5]
<ctp>
hi folks, how can i assign same attribute at 2 different places?
<ctp>
programs.bash.shellAliases shall be same as prograns.fish.shellAliases
<ctp>
argh, wait, i think, i got it
<{^_^}>
[nixpkgs] @Infinisil opened pull request #66407 → lib/modules: Use options `apply` function even if no values are defined → https://git.io/fj7uS
irl25519 has quit [Quit: My computer has gone to sleep. ZZZzzz…]
<pie_>
when that is running, application switching is very bad
<pie_>
or something
<elvishjerricco>
pie_: No issues here with that command. Lemme try it with 0.8 in a VM
dl4mfo has quit [Remote host closed the connection]
<pie_>
i cant think of a scriptable repro :.
<pie_>
* :/
vika_nezrimaya has joined #nixos
<pie_>
also i forgot to set bs on dd again
vika_nezrimaya has quit [Client Quit]
vika_nezrimaya has joined #nixos
<johnw>
if I've booted a NixOS machine using a USB installer, so that my old machine is mounted at /dsk, how do I rollback to the previous OS build? I missed up something in configuration.nix that's preventing it from booting.
<elvishjerricco>
pie_: Yea, even in a vm with zfs 0.8, I have no issues
<elvishjerricco>
though in that vm, root is not zfs
ng0 has quit [Ping timeout: 260 seconds]
<pie_>
well, are you writing onto the zfs
<elvishjerricco>
yea
dl4mfo has joined #nixos
<joepie91>
johnw: can't boot into old revision from the bootloader?
<elvishjerricco>
pie_: I created a pool with 0.8 onto a virtual disk, and tried to do that command onto a file in said pool
<johnw>
joepie91: hey, that's a thought
<johnw>
joepie91: will try now
<elvishjerricco>
With `-enable-kvm`, I'd expect this to be basically native performance
<pie_>
elvishjerricco: ugh. wonder if it could be a root on zfs and or luks interaction
<elvishjerricco>
Oh I should try it over LUKS
sellout- has joined #nixos
sellout- has quit [Remote host closed the connection]
ixxie has quit [Ping timeout: 258 seconds]
ng0 has joined #nixos
<johnw>
joepie91: that worked a charm, thanks
<johnw>
now, what is the right way to move /nix to another device?
<joepie91>
:)
kleisli_ has quit [Ping timeout: 245 seconds]
<elvishjerricco>
pie_: Yea, even over LUKS, no issues here
<johnw>
just rsync'ing it there and mount /nix to that device was not good
<elvishjerricco>
pie_: And you're sure it's the ZFS mount that's the problem, not the data source? Do you get the same problem if you write to a tmpfs instead of the file on ZFS?
<pie_>
ok some random write benchmark i ran:
<pie_>
loaded: lat (usec): min=208, max=39662, avg=14599.32, stdev=12436.19
<pie_>
unloaded: lat (usec): min=31, max=705, avg=123.25, stdev=54.53
<pie_>
elvishjerricco: ill try
<pie_>
elvishjerricco: what, for the source, you mean urandom? :P
<pie_>
im gonna have to throttle tmpfs its gonna be too fast
<exarkun>
nixpkgs.pythonPackages.twisted has a number of packages in its propagatedBuildInputs - appdirs, pyhamcrest, etc - yet when I put a python package that depends on twisted into python27.buildEnv.override { extraLibs = [ ... ]; }, those packages don't appear in the resulting python environment
<exarkun>
I don't understand
<pie_>
elvishjerricco: yeah writing to tmpfs hasnt a single problem, system still runs great
<exarkun>
I thought this was the point of propagatedBuildInputs
<elvishjerricco>
pie_: So any scenario where you write to this zfs pool is slow and causes your system to lock up?
<pie_>
elvishjerricco: no, only if its a big volume of writes
<pie_>
elvishjerricco: well, presumably applies to smaller volume as well, just smaller impact
jgt has joined #nixos
<elvishjerricco>
pie_: Strange. Meet you in #zfsonlinux? Seems a more appropriate place for this issue?
<pie_>
elvishjerricco:
<elvishjerricco>
Oh you're already there :P
<pie_>
sure, ive been spamming there for the past while and still nohing useful xD check the scroll
<pie_>
had to explain like 3 times no the read source is not the problem x'D