<fresheyeball>
how can I restart nfs on the server?
<fresheyeball>
is there firewall ports I need to open or something?
ng0 has quit [Quit: Alexa, when is the end of world?]
<ldlework>
clever: I'm getting, /nix/store/k16skadgyjx39vfdc6lajwy55qvw137d-dotnet-sdk-2.2.401/sdk/2.2.401/Microsoft.Common.CurrentVersion.targets(1124,5): warning MSB3191: Unable to create directory "obj/Debug/netcoreapp2.2/". Access to the path '/tmp/nix-build-disinfo.drv-0/disinfo/Disunity.Disinfo/obj/Debug/netcoreapp2.2/' is denied. [/tmp/nix-build-disinfo.drv-0/disinfo/Disunity.Disinfo/Disunity.Disinfo.csproj]
<ldlework>
Only when building on windows WSL2
<ldlework>
Can you think of anything?
Rusty1 has joined #nixos
<{^_^}>
[nixpkgs] @jtojnar pushed to master « lib/options: fix path in comment »: https://git.io/fjAZX
<{^_^}>
[nixpkgs] @kalbasit pushed commit from @rvolosatovs to master « gofumpt: Init at 2019-07-29 (#66892) »: https://git.io/fjAZb
<fresheyeball>
ok so I put those lines back
<fresheyeball>
rebuilt the server
<fresheyeball>
then restarted nfs for good measure
<fresheyeball>
umounted on the client
<fresheyeball>
and then ran mount on the client
<fresheyeball>
and I still only see the file the client made
<fresheyeball>
/mnt/spruce/bar is there (client)
<clever>
fresheyeball: what is the line from exports, for spruce, and what does `mount | grep spruce` say on the client?
<{^_^}>
[nixpkgs] @peti pushed to haskell-updates « hackage-packages.nix: automatic Haskell package set update »: https://git.io/fjAZN
<fresheyeball>
systemd-1 on /mnt/spruce type autofs (rw,relatime,fd=96,pgrp=1,timeout=0,minproto=5,maxproto=5,direct)
<fresheyeball>
192.168.1.20:/mnt/spruce on /mnt/spruce type nfs4 (rw,relatime,vers=4.2,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,clientaddr=192.168.1.10,local_lock=none,addr=192.168.1.20)
jluttine_ has joined #nixos
wtv_nick has quit [Ping timeout: 245 seconds]
<clever>
fresheyeball: try removing the exports line for /mnt ?
<fresheyeball>
clever: I don't know what you mean
<fresheyeball>
this is deeper than I have dared tread in the past
<fresheyeball>
oh wait
<fresheyeball>
you mean on the server
<clever>
fresheyeball: you should have 4 exports lines, one for /mnt, and then 3 for each subdir
<clever>
just remove the line for /mnt
<fresheyeball>
yay!
<fresheyeball>
that seems to have done the trick!
fresheyeball has quit [Quit: WeeChat 2.4]
boxscape has left #nixos [#nixos]
xkapastel has joined #nixos
<{^_^}>
[nixpkgs] @matthewbauer opened pull request #67470 → cpython: skip macOS system frameworks → https://git.io/fjAne
fresheyeball has joined #nixos
<fresheyeball>
clever: I rebooted the client
<fresheyeball>
and all is well
<fresheyeball>
that you for your help once again
<fresheyeball>
clever++
<{^_^}>
clever's karma got increased to 182
<clever>
fresheyeball: heh, was looking like a hit&run, you vanished the instant the problem was solved!
<fresheyeball>
clever: I rebooted
<clever>
yeah
dycan has joined #nixos
dycan has quit [Ping timeout: 272 seconds]
<ldlework>
clever: turns out my dependency package is not hash-reproducable based on what machine builds it
<ldlework>
clever: on windows it runs into a permission error in the same exact place with a random .drv folder in /tmp
<ldlework>
Is there any chance you'd like to build my project to say that it can build on machines other than my own laptop?
<clever>
ldlework: next minor problem, both derivations have the identical name
<clever>
so its imposible to tell which one is which in the errors
<clever>
/nix/store/z955xygfz1c365nasjfbh4jhf0dnzsvf-dotnet-sdk-2.2.103/sdk/2.2.103/Microsoft.Common.CurrentVersion.targets(1128,5): warning MSB3191: Unable to create directory "obj/Debug/netcoreapp2.2/". Access to the path '/build/disinfo/Disunity.Disinfo/obj/Debug/netcoreapp2.2/' is denied. [/build/disinfo/Disunity.Disinfo/Disunity.Disinfo.csproj]
<clever>
ldlework: you didnt use the no-preserve flag i gave earlier
<{^_^}>
#16922 (by ryantrinkle, 3 years ago, closed): nixos copySystemConfiguration: enable by default
<infinisil>
And I just don't get it, I don't see any good reason why this can't be enabled by defualt
<ldlework>
clever: you're right!
<clever>
infinisil: if <nixos-config> doesnt exist, or is the wrong config (nixops for ex) it will copy the wrong file
<infinisil>
One argument is "Because it won't back up the files configuration.nix includes", but any kind of backup is better than none, so that's no good
<evanjs>
infinisil: also, dolstra says bc not everything needs it - e.g. nixops. lol but I would want it on nixops machines so I know whats going on ...
<clever>
sqlite> select path, narsize/1024/1024 as narmb, datetime(registrationTime,'unixepoch') from ValidPaths where narsize > 256 * 1024 * 1024 order by registrationTime;
<clever>
infinisil: this will list every store path over 256mb, sorted by when it was added to the store
<clever>
which lets you discover what it just dumped
<clever>
ldlework: this is the main change i had to do, to make it build
<wtv_nick>
Is the only upside to nixos that you could switch and save different config states in nixstore? Essentially the whole system config is around the configuration.nix. Pressumably you would git that from some repo and install everything you need. Which sounds great but this could easily also be the case with a bash scrypt that apt-gets everything. In the ladder case all that's needed is bash, no need to
<wtv_nick>
learn nix language. So am i missing something?
<clever>
wtv_nick: the other major benefit, is that you can undo changes very easily
<clever>
wtv_nick: ive bricked a few machines with `apt-get dist-upgrade`, but nixos lets you undo even major changes
<evanjs>
wtv_nick: for me, a few things.
georges has joined #nixos
<wtv_nick>
undo in term of picking an older state in the startup screen or literally undo, with some sort of undo command
<evanjs>
Sharing fragments of configs between machines, making many parts of the config dependent on other settings, and sometimes set or handled automatically based on other factors, etc
<clever>
wtv_nick: you can either pick an older state from grub, or use `nixos-rebuild rollback`
<clever>
which you use depends on if kernel changes are involved, and if you broke it so badly that you cant even boot
<wtv_nick>
also i guess you could pick exact version of packages that way on the same machine
<evanjs>
the determinism is also extremely helpful when configuring multiple machines (ie from the same repo)
<wtv_nick>
Could you explain how the fragments of configs point is different compared to just importing an extra bash file
<wtv_nick>
like how is it fundamentaly better doing it with .nix in nixos
<clever>
wtv_nick: all config files are built in a sandbox, and only have access to what they defined as inputs, and the output path is a hash of all of the defined inputs
<clever>
so any change to an input will properly update all things that depended on it
<wtv_nick>
I guess the determinism and the almost garenty that you'll always have a configuration/state that works
<clever>
thats not simple to do in a bash script
<wtv_nick>
Ah ok see there's the thing i was missing
<wtv_nick>
the all config files built in a sandbox part
<clever>
both config files, and actual packages
<wtv_nick>
Ya the whole sentence
<wtv_nick>
thanks, this is much more valuable for someone that needs to deploy machines i guess
<wtv_nick>
I mean there is definitely an upside for a normal user but I don't know if it is worth learning it considering what an average linux home user would gain
<clever>
wtv_nick: i recently began having problems with the whole machine locking up due to changes in the graphics drivers
<clever>
but it only took seconds to pick an older generation in grub, to undo the whole upgrade
<wtv_nick>
ah ok ya that's a good use case
<clever>
and i know somebody else, that did an upgrade on fedora, and it basicalled killed all of xorg, and made the machine basically un-usable
<clever>
like, reinstall levels of unusable
<infinisil>
Joy
<wtv_nick>
Do you find youself running into that kind of issue enough to where you feel the work you had to put into learning and configuring usefull?
<clever>
infinisil: thats how i convinced him to convert to nixos
<clever>
wtv_nick: i once ran into an issue with minecraft segfaulting in opengl, and it was fairly simple to just build a special opengl with debug print statements everywhere, to confirm where it was failing
<infinisil>
wtv_nick: Nowadays I'm not afraid to reconfigure NixOS in drastic ways. Try out a different kernel? no problem, try out different DE? Sure
<clever>
wtv_nick: doing that (and undoing when your done) is not trivial on any other distro
<evanjs>
Right, it really depends on your use cases. It's extremely helpful if I have multiple linux machines and want to keep a lot of things synchronized/up to date, without having to maintain multiple completely separate configurations. My desktops now have like <30 lines for their respective configurations. The rest is basically shared or set via profiles defined in those configurations.
<wtv_nick>
I guess you only need to run into a problem that screws ur machine up once for it to have been worth beeing under nixos
<clever>
wtv_nick: yep
<wtv_nick>
cool thanks
<wtv_nick>
i just started running nixos on qemu
freeman42x has quit [Ping timeout: 258 seconds]
<wtv_nick>
unixporn made me get upsest with setting up my machine this whole week
<emptyflask>
I've run into an issue with nix-prefetch-git hashes not matching the hashes when building a derivation... I have a default.nix that works under MacOS, but not on NixOS. Possibly something to do with capital letters in filenames? https://gist.github.com/emptyflask/c9750b05386efc132fe91c19d7144a0e
whatever_nick has quit [Quit: leaving]
jluttine_ has joined #nixos
kp__ has quit [Quit: WeeChat 2.5]
freeman42x has joined #nixos
slack1256 has joined #nixos
<emptyflask>
I thought maybe it had something to do with an older snapshot of the git repo, but it's using a specific revision, and I've also tried a `nix-collect-garbage` first
steell has quit [Ping timeout: 245 seconds]
<clever>
emptyflask: try building the repo on 2 machines (linux and mac), fixing the hash to match what it claims, then use nix-copy-closure to copy the paths to a single machine
<clever>
emptyflask: then run `diff -r /nix/store/a /nix/store/b` to diff them, what differs?
<emptyflask>
clever: I'll have to try that tomorrow. strange thing though is that nix-prefetch-git under nixos shows the same hash that built under macos. it's just when running nix-shell that it calculates something different
reallymemorable has joined #nixos
<teto>
just updated nixos-unstable seems like gettext is broken which in turn blocks evrything.
nexgen2 has quit [Remote host closed the connection]
<slack1256>
Report it
<evanjs>
teto: Wait, nixos-unstable is broken, but nixpkgs-unstable isn't? o_O
xkapastel has quit [Quit: Connection closed for inactivity]
<hpfr[m]>
Hello
<evanjs>
clever: I guess I just figured that nixos-unstable is typically only newer because stuff is added after tests pass. Is that not always (or ever?) the case?
<clever>
evanjs: nixpkgs-unstable also waits for darwin builds, so that can hold it back
lh- is now known as liam
<evanjs>
clever: aha. I had no idea that was the case. I see the differences are listed on howoldis now though :P The difference between the two is interesting, though
liam is now known as hpfr
oida has quit [Remote host closed the connection]
oida has joined #nixos
infinii has quit [Ping timeout: 248 seconds]
hpfr has quit [Remote host closed the connection]
Myhlamaeus1 has quit [Remote host closed the connection]
<teto>
I don't get how nixos-unstable could pass with gettext broken since it breaks many packages :/
<tdeo>
is there a simple function to turn a file in the store to a file in a directory in the store?
<clever>
teto: the channel updates when the tests pass, and hydra has tried to build everything, the non-test stuff doesnt have to pass
<clever>
teto: howoldis will link to the subset that must pass
<tdeo>
i want to make a buildEnv of a bunch of greasemonkey scripts, and they're all single files
<clever>
vvbb[m]: this builds with both `make` under` nix-shell` and also `nix-build
alanz has joined #nixos
<n00b13>
Does anyone here know how to use I2P or get the package to work on NixOS ?
gxt has quit [Ping timeout: 260 seconds]
<clever>
vvbb[m]: gist updated, you can now `nix-build -A simple` to build the program, or `nix-build -A output` to both build, and run it, producing a result/hello.png
<clever>
vvbb[m]: if nothing has change with the code, it wont re-run it, and if you perfectly undo something, it can reuse a previous result!
<vvbb[m]>
which for some reason redirects me to the man page?
<vvbb[m]>
what the hell?
<clever>
if `info` cant find the info file, it searches for a man page by the same name
<clever>
which is explained in the man page for info
<clever>
when i first got into linux, i just obsessively read every man page for every command, lol
<vvbb[m]>
which one do you prefer using gnu make or cmake
<clever>
cmake helps automate a lot of things, but then you never learn how make itself works
<sphalerite>
clever: but what if you don't want to know how make works, just to build your software? ;)
<dminuoso>
Mmm. so I want to run emacs from a nix-shell, but then be able to close that terminal (Ideally I want my X server to adopt it - or whatever it is that owns the process when started from my program launcher)
<clever>
sphalerite: yeah, it depends on if you want to forever ride a bike with trainwheels, lol
<vvbb[m]>
maybe run it with `&` dminuoso
<dminuoso>
vvbb[m]: That wouldn't do it.
<vvbb[m]>
hmm i have no idea ask clever he probably knows
<clever>
dminuoso: nohup emacs &
<dminuoso>
clever: That would keep stdout disconnected, wouldnt it?
<clever>
i think it keeps stdout linked, but will stop the SIGHUP
<dminuoso>
Right, and its SIGHUP that actually kills the process when the parent dies right?
<dminuoso>
(or at least thats the expectation)
<clever>
SIGHUP is sent when you close the terminal, its the hang-up signal
<clever>
from the old days when you dialed into a machine over a modem
<dminuoso>
clever: Ohh! Wow! I just understood why it was called HUP. I always thought it was about telling a process it was "hung" in the sense of "being stuck"
<ctp>
Hi folks. Do you use home-manager? I moved from regular Nix to Nix + home-manager in a way that I just install the most important packages (handful) via regular Nix and ALL other stuff via home-manager. But after few weeks of use it feels a little bit uncomfortable. nixos-rebuild and home-manager don't play together, what Nix gives with rollbacks is basically what home-manager lacks of etc. Any suggestions how to deal with
<ctp>
userconfigs?
<srhb>
ctp: Take a look at the home manager NixOS module.
dycan has quit [Ping timeout: 272 seconds]
civodul has joined #nixos
zupo has joined #nixos
<immae>
srhb: is there such thing? Do you have a link/reference?
<jackdk>
I normally use nix shells for my Haskell development, but I'm trying to test that my cabal new-build instructions work. I'm in a shell with nix-shell -p zlib zlib.dev (among others) but I see an error "<command line>: can't load .so/.DLL for: libz.so". What am I doing wrong?
hyper_ch2 has joined #nixos
<{^_^}>
[nixpkgs] @peterhoeg opened pull request #67481 → perlPackages.DeviceSerialPort: name -> pname → https://git.io/fjAW9
<ctp>
ok, i will do. the question is, is it smart in general to use home-manager as primary package manager and regular nix just basically to bootstrap the machine
<strojatr>
srhb: Oh, I'm sorry, I was looking just under nixos itself, not nixpkgs, that might be it. So we are not running the nixos test set on staging?
jgt1 has joined #nixos
<srhb>
That is the nixos:staging-small jobset, not nixpkgs.
<srhb>
If you compare the list of jobs, you'll see that it's not that similar to the nixos test set.
<strojatr>
You are right, sorry, I'm confused about this process at little - does it mean that jobset rebuilds only packages different from master? And that the unstable does for everything?
fendor_ has joined #nixos
<strojatr>
I would like to submit a PR into staging branch, as it's a mass rebuild and just wondering where should I watch for possibly of breakage.
<srhb>
strojatr: Nix always only rebuilds if there's a difference from.. Something :)
<srhb>
stojatr: nixos:staging sounds good along with nixpkgs:staging and nixpkgs:staging-next
<strojatr>
srhb: that's a good point, so actually for the unstable, it rebuilds only on change OR if the package is failing to build?
<srhb>
Well
jgt1 has quit [Client Quit]
<srhb>
Not staging-next if you're aiming for staging of course
<srhb>
strojatr: Right.
<srhb>
I don't recall exactly how/if the failure caching works though..
<strojatr>
srhb: thank you for you help, I wish you a nice day!
strojatr has left #nixos [#nixos]
<srhb>
You as well :)
<srhb>
ah
Chiliparrot has quit [Quit: My iMac has gone to sleep. ZZZzzz…]
<lucus16>
I just realised the escaping mechanism in indented strings is ugly and incomplete: How to escape a $ depends on potentially many characters in front of it and some strings are unrepresentable as indented strings
<sphalerite>
does anyone have a nice solution for managing DNS zones with nix? Particularly managing the serial number
<dminuoso>
sphalerite: That's a really curious thought.
zfnmxt has joined #nixos
Zer0xp has quit [Ping timeout: 258 seconds]
<sphalerite>
lucus16: you can use ${""} within an indented string to represent anything. It's ugly, but not incomplete ;)
orivej has joined #nixos
n00b13 has quit [Ping timeout: 272 seconds]
<lucus16>
sphalerite: You can also use string concatenation to represent anything but that wasn't the point
<sphalerite>
lucus16: it doesn't _need_ to be complete is my point :p
<vika_nezrimaya>
gchristensen: oh! found the new topic button after... five or so minutes of search
<{^_^}>
[nixpkgs] @risicle opened pull request #67503 → poco, cctz: enable for darwin → https://git.io/fjAEC
<gchristensen>
ah cool
<gchristensen>
good
___laika has joined #nixos
<risson>
Hi! So I'm trying to create a package and I added a patch to it. Now I want to add a second patch but it refuses to build telling me the first patch has already been applied and cannot be applied again (first version has been pushed to cachix)
xkapastel has joined #nixos
<risson>
Can I force the rebuild somehow ?
<vika_nezrimaya>
Is it worth to host remote builders in remote locations, for example, for an interconnected distributed build farm managed by a Hydra instance somewhere? For example, a laptop at home, a VPS/EC2 instance and a friend's laptop overseas?
<rnhmjoj>
risson: are you using the mkDerivation patches attribute?
<risson>
rnhmjoj: yes
<risson>
stdenvNoCC.mkDerivation to be precise
dycan has quit [Remote host closed the connection]
<risson>
with nix-build
<rnhmjoj>
risson: have you tried applying the patches sequentially in the source tree? maybe their out of order collide in some way
<rnhmjoj>
*they're
<risson>
They don't apply to the same files so they shouldn't
<risson>
Hold on I'm a moron
___laika has quit [Ping timeout: 248 seconds]
<rnhmjoj>
risson: what was it?
jbgi_ has joined #nixos
<{^_^}>
[nixpkgs] @blargg opened pull request #67504 → tiled: use qt5.mkDerivation → https://git.io/fjAER
jbgi has quit [Ping timeout: 245 seconds]
<betaboon>
who is in charge of inviting to the github-nixos-organization ?
Neo-- has joined #nixos
<gchristensen>
I am
<betaboon>
gchristensen: did you invite me on purpose ?
<risson>
rnhmjoj: both patch files were the same because I copied the wrong one :/
<vika_nezrimaya>
gchristensen: if I get into the org, would I be able to set labels on issues? it seems like my issue with apr is left unseen by anyone, and I can't set label: cross-compilation because I lack the rights to do so
<betaboon>
gchristensen: ah thanks :) gonna read up on that
<gchristensen>
since this team has no real special "rights", I maybe wouldn't require 2FA
<gchristensen>
but github doesn't allow teams to have different 2FA policies -- and 2FA is required to have commit access to the repo
seanparsons has joined #nixos
<manveru>
gchristensen: ah, forgot about that... gotta apply :D
reallymemorable has joined #nixos
ryantrinkle has joined #nixos
selfsymmetric-pa has quit [Ping timeout: 248 seconds]
waleee-cl has joined #nixos
selfsymmetric-pa has joined #nixos
Tucky has quit [Quit: WeeChat 2.5]
domogled has quit [Ping timeout: 245 seconds]
<manveru>
zimbatm: btw, i think we should move bundix to nix-community as well
jtojnar has quit [Quit: jtojnar]
jtojnar has joined #nixos
alanz has quit [Remote host closed the connection]
domogled has joined #nixos
<catern>
is there a simple way on the command line to see all the derivations that are defined by a Nix expression in a file?
<zimbatm>
manveru: I'm all for it
<catern>
I'd use `nix-instantiate` but I expect that would be slower than some alternative, since it actually writes to the store, and I just want to see names
<zimbatm>
manveru: do you have access already?
reallymemorable has quit [Quit: reallymemorable]
<manveru>
zimbatm: i don't think so
<alexarice[m]>
is anyone using emacsPackagesNg.irony and got it to work?
ub has joined #nixos
<zimbatm>
manveru: yes you do :p
<manveru>
ah :)
<zimbatm>
manveru: /join #nix-community
<manveru>
wonder when that happened...
<zimbatm>
when you worked on builtwithnix.org
<evanjs>
catern: I typically just import stuff into the repl
<vika_nezrimaya>
the reason is unknown but pgrep and pkill always work
<samueldr>
what I like from pgrep/pkill is how I can validate with pgrep that I'm not accidentally including other processes
<gchristensen>
+1
<ivan>
vika_nezrimaya: can I get pkill to complain when it can't find the process, or do I need to wrap it?
<samueldr>
(and killall is a linuxism that could get you in hot waters on some other unices)
Theuni2 has joined #nixos
<manveru>
it returns status 1 if it can't find the process
<samueldr>
IIRC it was solaris, where killall meant kill _all_
<infinisil>
I usually prefer to kill from htop
<infinisil>
Much easier and clearer and less error prone
<vika_nezrimaya>
ivan: I think it returns exitcode 1
<manveru>
htop can jump around a lot :P
<vika_nezrimaya>
manveru: there is a lock feature
<vika_nezrimaya>
I've never used it though
<manveru>
ha
<vika_nezrimaya>
also Space marks processes
<vika_nezrimaya>
marked processes are all acted upon
<manveru>
yeah
englishm has quit [Excess Flood]
<ivan>
killall uses some process name that doesn't match what ps lists
<DariusTh`>
Is there an example of how to set up circle ci with a default.nix?
englishm has joined #nixos
ryantrinkle has quit [Ping timeout: 244 seconds]
<ivan>
cat /proc/28840/stat
<ivan>
28840 (.qbittorrent-wr) ...
<ivan>
killall -STOP .qbittorrent-wr # works :((
domogled has quit [Ping timeout: 268 seconds]
<{^_^}>
[nixpkgs] @jtojnar opened pull request #67506 → wireshark-cli: remove Qt from build closure → https://git.io/fjAu2
<ivan>
maybe the new Qt wrapper caused this breakage for Qt programs?
<ivan>
seems to be working for other things and there aren't any killall complaints on LKML
orivej has quit [Ping timeout: 272 seconds]
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
zupo has joined #nixos
<Ariakenom>
I have clementine installed on nixos and I've tried to remove it. clementine in bash doesn't find anything but it keeps starting when I log in.
<ivan>
I think there's some signal-desktop / xfceUnstable (?) breakage in master where the number of unread messages doesn't appear in the window button
<evanjs>
nilsirl[m]: are your user and root nix channels the same/both up to date? Or are you using `nix-env` as root?
hyper_ch2 has quit [Remote host closed the connection]
cfricke has quit [Quit: WeeChat 2.5]
Ariakenom has quit [Remote host closed the connection]
<samueldr>
imagine I have a function defined into a `callPackage`d file, what's the idiomatic way to make sure the function is not named "anonymous function", but something useful?
<samueldr>
hard-mode: it would be better if the name of the function had a dot, `"x.y"`
<manveru>
samueldr: i usually use `addErrorContext` in that case
<samueldr>
manveru: got a sample? still "anonymous function at"
<samueldr>
I have a way to do it, using a `let` binding that I return directly, I mostly find it weird
tv has joined #nixos
<manveru>
it will output on some line before that, not the function name itself
<manveru>
it's more like a `trace`
<samueldr>
I figured, though it's not at all
<manveru>
strange :|
<samueldr>
I wrapped `builtins.addErrorContext "myFunc" ({x}: x)` and it's from an undefined position, only line anonymous function called without required argument
<manveru>
yeah
<samueldr>
I'll continue with the weird let bindings and adjust later
<manveru>
i'm not sure why, it works on nix-build for my usage
<manveru>
but trying with nix eval it fails to output anything
Lears has quit [Remote host closed the connection]
<vika_nezrimaya>
aanderse: I think Postfix configuration in NixOS is perfect - it allows for quick user-friendly configuration, but also allows to copy-paste snippets from the internet right into main.cf
<vika_nezrimaya>
manveru: it's only able to use virtual users
<vika_nezrimaya>
that's what most people want now though
ixxie has joined #nixos
jbgi_ has quit [Ping timeout: 246 seconds]
<manveru>
i never used it, so can't say
<vika_nezrimaya>
I read the source code of it
<pbb>
I'm still using the nixcloud mailserver config. But it comes with all their ACME abstractions and stuff so I want to change it at some point.
<pbb>
angerman: are you sure you are on the right channel and everything? I just checked out the current nixos-19.03 channel (3924b344254) and ran "nix-build . -A perl" and it was pulled from the cache just fine
<angerman>
pbb: well I'm building it for mingw32, so I'll have to build it from source.
<pbb>
I see
<Unode>
is there any way to allow unfree packages with nix-build without having to write to ~/.config/...config.nix ?
fendor__ has joined #nixos
boxscape has joined #nixos
<pbb>
Unode: set NIXPKGS_ALLOW_UNFREE=1
<Unode>
pbb: great thanks!
jb55 has quit [Ping timeout: 260 seconds]
nexgen2 has joined #nixos
fendor_ has quit [Ping timeout: 244 seconds]
noudle has quit []
erasmas has joined #nixos
<angerman>
sneaky. we seem to use a different perl source for cross compilers and then just copy that in...
<gchristensen>
perl doesn't cross compile
Ariakenom has joined #nixos
<angerman>
gchristensen: but binutils depends on it... 😱
<pbb>
perl is in nativeBuildInputs for openssl, so you should not need to build perl for the target
<pbb>
or am I wrong with that assumption?
<angerman>
pbb: well. Look at line L90
<angerman>
it uses both, the native (cross compiled) and the one from the buildPackages...
__monty__ has joined #nixos
<pbb>
wait, so it has a build dependency on perl to check that it doesn't have a runtime dependency? o.o
<angerman>
at least that's where I believe the mingw32 perl dependency comes from.
<pbb>
you can just remove that check I guess
<boxscape>
there's a few different versions of ghc in nixpkgs (I'm seeing 8.4.4.nix, 8.6.5.nix, etc.) but if I try to install it via nix-shell -p I can only find ghc, haskellPackages.ghc, and haskellPackages.ghc_8_6_5, all of which are 8.6.5. How can I access the other versions?
<kraem>
👋 i'm trying to migrate to qemu/kvm since virtualbox is broken on unstable. i'm getting a permissions error while trying to open an iso (https://bpaste.net/show/nPeE). am i doing it right if i'm running libvirtd as root and virt-manager as my own user or do i need to run it as root as well?
<angerman>
boxscape: haskell.compiler.ghcXYZ
<angerman>
pbb: I'm tempted to...
<boxscape>
angerman ah, thank you
lambda-11235 has joined #nixos
<rsoeldner>
Is is possible to describe a "machine configuration" with nix and create a docker image and a virtualbox image ?
jb55 has joined #nixos
stepcut_ has joined #nixos
<pbb>
rsoeldner: the answer is yes and no. you can not easily run a full NixOS in docker, because docker can not run systemd for a few reasons
<angerman>
pbb: the relevant commit for that line says: Fix cross compile.
<gchristensen>
rsoeldner: Nix can produce docker images, and it can produce virtualbox images
<gchristensen>
but a NixOS system cannot become a docker image (though it can become a vbox image)
stepcut has quit [Ping timeout: 244 seconds]
<pbb>
you could also produce one docker image running your service directly, and one virtualbox image running the same binary inside a nixos installation
<rsoeldner>
gchristensen, pbb thanks, is there an example for a vm running nixos ?
bikki[m] has joined #nixos
<vika_nezrimaya>
btw NixOS has its own containers which run NixOS system configurations
drakonis has quit [Quit: WeeChat 2.5]
<stepcut_>
How do I create a nix-shell where I can use the jsdom package for nodejs? I tried, nix-shell -p 'nodePackages."jsdom-11.12.0"', but I guess that isn't right
<vika_nezrimaya>
nix-shell -p "nodejs.withPackages (p: with p; [ jsdom ])" may or may not work
jbgi_ has joined #nixos
<pbb>
rsoeldner: do you want to produce an image for VirtualBox running independently on another host? because there is some tooling for nixos tests that runs the VM from your host's nix store via a shared directory
<rsoeldner>
pbb, the first use case, generating an image for another host
<pbb>
rsoeldner: there is a module for that, which is used to create the virtualbox image for nixos releases (but you can generate it with any system configuration).
civodul has quit [Quit: ERC (IRC client for Emacs 26.2)]
<{^_^}>
[nixpkgs] @Ericson2314 pushed 152 commits to staging-19.03: https://git.io/fjA2W
<pbb>
rsoeldner: this should give you a virtualbox image with a nixos system running a plain nginx server
<rsoeldner>
pbb, this is really not obviouse, thank you
<pbb>
rsoeldner: it does a lot. it contains a system configuration (even though a small one), evaluates the system configuration to a derivation describing the whole nixos system, and then takes the attribute that discribes how to build a vm image with it
<pbb>
if you want to put the system configuration in a seperate file, just add it to the imports
<balsoft>
Hey, is anyone using niv? I have a feeling github bans your IP temporarily if you use niv on 5-10 dependencies in five minutes
<laika___>
domenkozar[m]: hi, can i request a couple of cachix caches to be deleted via PM?
<colemickens>
Did something in `nix-build` change recently?
<colemickens>
I keep getting this on my numerous-CPU-core Packet VM: error: all build users are currently in use; consider creating additional users and adding them to the 'nixbld' group
<tilpner>
balsoft: You can verify that, by making an unauthorized API request after you believe it has been blocked
<balsoft>
http://ix.io/1TxH <-- here's the niv log, if anyone can help
<colemickens>
and had never seen it prior to a week or so ago
<balsoft>
Is there an example somewhere>
<domenkozar[m]>
laika___ sure
<tilpner>
balsoft: Or you can find out how many requests niv typically sends for a repo, multiply that by 10 and see if it's over their unauthorized rate limit
<laika___>
domenkozar[m]++
jbgi_ has joined #nixos
<{^_^}>
domenkozar[m]'s karma got increased to 4
<laika___>
domenkozar++
<{^_^}>
domenkozar's karma got increased to 25
laika___ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
o1lo01ol1o has quit [Remote host closed the connection]
o1lo01ol1o has joined #nixos
o1lo01ol1o has quit [Ping timeout: 248 seconds]
<Unode>
I'm still confused about the role of default.nix, shell.nix and other files in a project. Does anyone have a (large) example on a project that contains both?
<Unode>
The reason for my confusion is that I'm using buildEnv to make nix-build happy but then if I use the same .nix file with nix-shell I get an empty environment.
<Unode>
Using mkDerivation works for nix-shell but not nix-build.
<Unode>
ideally the example I'm after actually shows how the two files interact with each other. So far the examples I found end up duplicating most of it.
<Unode>
*most of the code/dependencies
<{^_^}>
[nixpkgs] @volth opened pull request #67513 → treewide: name -> pname → https://git.io/fjA2S
jbgi_ has quit [Ping timeout: 246 seconds]
<{^_^}>
[nixpkgs] @petabyteboy opened pull request #67514 → riot-desktop: use yarn2nix-moretea → https://git.io/fjA2Q
<balsoft>
Also, how do you guys make hydra work with git submodules correctly?
<balsoft>
It's a major pain point for us ATM
orivej has quit [Ping timeout: 245 seconds]
vmandela has left #nixos ["Leaving"]
feep_ has joined #nixos
<feep_>
yo
feep_ is now known as feep
fresheyeball has quit [Quit: WeeChat 2.4]
<feep>
gonna look into updating kmymoney+aqbanking, since any versions older than newest are gonna stop working for german users in half a month.
selfsymmetric-pa has quit [Ping timeout: 244 seconds]
<balsoft>
tilpner: Thank you, GITHUB_TOKEN thing linked somewhere in that issue worked
johnw has joined #nixos
<tilpner>
balsoft: I forgot, but it does work now
* tilpner
useless
johnw has quit [Remote host closed the connection]
o1lo01ol1o has joined #nixos
<tilpner>
balsoft: I found an override that patched prefetch-git, but it's commented out
zupo has joined #nixos
<tilpner>
Are you sure it wasn't fixed?
<balsoft>
Well, we're using an old version
<balsoft>
If it works for you I might try and update
<tilpner>
How old?
<tilpner>
I'm on 2019-02-01
<balsoft>
Very old
<balsoft>
2018-something
o1lo01ol1o has quit [Ping timeout: 245 seconds]
<hyperfekt>
Anyone know how to add the build time dependencies of the current system as a GC root? nixos-rebuild keeps redownloading my pinned nixpkgs :<
ldeck has joined #nixos
<tilpner>
hyperfekt: In your config, or outside of it?
<hyperfekt>
tilpner: In my config would be ideal, of course, but I'll take any solution.
<tilpner>
hyperfekt: Use system.extraDependencies to add a file with store paths
<exarkun>
is nixos-in-place the best option to convert an existing system (debian) to nixos? it looks like it's still on 16.09
<tilpner>
While kexec has worked wonderfully, you might still do it wrong
<exarkun>
but this is also a test run to find out the best/most reliable way to do this
<feep>
hm, aqbanking 5.8.1 is "unreleased", or rather it's released but only as a git tag
<exarkun>
so failure is tolerable
<tilpner>
That includes building an image that doesn't bring network up correctly
<feep>
which is kind of awkward because again, the nixpkgs version will stop working in two weeks :/
ldeck_ has joined #nixos
<exarkun>
I have two machines to play with. Maybe I'll nixos-in-place one of them and kexec the other...
<tilpner>
exarkun: Then do try kexec. If you want to avoid tickets, you could try it on a VM/VPS first
<exarkun>
yea probably makes sense to practice in an environment I control
freannrak has joined #nixos
aborsu has joined #nixos
<feep>
how do I fetch a git repo? I can't find it in the docs, but older docs call it out as possible
<tilpner>
I've used kexec on Hetzner Cloud multiple times. Ping for pastes or help
amb007[m] has left #nixos ["User left"]
johnw has joined #nixos
<feep>
nm docs found
<tilpner>
feep: That depends. You can use builitns.fetchGit to do it at eval-time, fetchgit for build-time, fetchFrom* for specialised hosts
aborsu has quit [Client Quit]
aborsu has joined #nixos
aborsu has quit [Remote host closed the connection]
Guest62653 has joined #nixos
Guest62653 has quit [K-Lined]
<feep>
hm, can I just grab a folder from the nixpkgs distro and convert it to an overlay?
<tilpner>
Ehh?
aborsu has joined #nixos
<tilpner>
Let's take a step back, what do you want to accomplish?
<freannrak>
I'm writing my first derivation after reading the nix-pills and looks like my builder doesn't have permission to write to the store (`mkdir: permission denied`). During the build it's only allowed to write to the $out path?
<feep>
tilpner: I need to update aqbanking and kmymoney
jbgi_ has joined #nixos
<__monty__>
freannrak: That's right.
ldeck_ has quit [Client Quit]
<tilpner>
freannrak: Mostly, yes. The sandbox can prevent file and network access
<feep>
aqbanking has an update script that uses tarball releases, which don't include the current release
<__monty__>
freannrak: $out will end up in the store.
<feep>
so I need to switch to git sourced src
aborsu has quit [Client Quit]
<feep>
but I don't wanna switch my entire setup to nixpkgs master
<tilpner>
feep: Hold on
<__monty__>
feep: It's really easy to write an overlay that points to a default.nix in a nixpkgs checkout.
<feep>
__monty__: that sounds promising!
<freannrak>
Ok. I've got a git cloned source in `$src` and the build instructions are `make install` which will execute some go code. I've already added go to the path. Should I be copying the whole $src to $out then so that `make install` has permissions to write?
laika___ has joined #nixos
<tilpner>
feep: So 5.7.8 is too old, yes?
<feep>
definitely
<feep>
needs 5.8.1
<tilpner>
feep: You can .overrideAttrs to replace an attribute of a derivation, here src
<feep>
.... oh! I can just replace src
* feep
>.<
<feep>
shoulda thought of that, thanks!
sk8forether has joined #nixos
<tilpner>
feep: So you would use aqbanking.overrideAttrs (old: { src = fetchurl { ... }; }) instead of aqbanking
<tilpner>
__monty__: As long as you're aware that this will not result in the same package as if you were using master, everything is fine
bdesham has left #nixos [#nixos]
<tilpner>
qubasa: What about line 18?
ng0 has quit [Quit: Alexa, when is the end of world?]
<qubasa>
tiplner: Yes but look into postFetch
<qubasa>
tiplner: line 30-31
<qubasa>
tilpner: .
ldeck8 has joined #nixos
<tilpner>
And those URLs were working recently?
<qubasa>
No stable is broken too
<tilpner>
Ahh. You mentioned master, which I interpreted to mean that you think it's caused by a recent change
<qubasa>
Sorry my wording was misleading I was just wondering why nobody had issues with that :o
<tilpner>
I'll give it a try
<feep>
bleh, this has a nontrivial build process :-/
<__monty__>
tilpner: Thanks for pointing it out. Is there really a pragmatic way to "do the right thing" though? (Not even sure what that'd be, testing master seems semi-pointless, testing a release will always have the same problem of testing against an older nixpkgs than it'll be part of.)
pie_ has quit [Ping timeout: 264 seconds]
jbgi_ has quit [Ping timeout: 268 seconds]
ng0 has joined #nixos
<feep>
how do I find the nix prefix for a package?
<feep>
or rather, path
<tilpner>
qubasa: Yes, can reproduce
<qubasa>
tilpner: wtf does nobody fetches zips like that o.O
<tilpner>
__monty__: Probably not, because the right thing depends so much on the context. Using callPackage from unstable might be good enough
<angerman>
pbb: how do I add `perl` into an allowed dependency of `openssl` then? Becuase that's what makes the build fail now.
asymptotically has joined #nixos
<angerman>
guess I can just nuke the `postFixup` phase.
<angerman>
God this is so remarkably broken even on release-19.03
DariusTh` has quit [Ping timeout: 268 seconds]
jbgi_ has quit [Ping timeout: 245 seconds]
pareidolia has quit [Ping timeout: 258 seconds]
pareidolia has joined #nixos
o1lo01ol1o has quit [Remote host closed the connection]
ng0 has quit [Quit: Alexa, when is the end of world?]
ng0 has joined #nixos
<boxscape>
it's been a while since I've had to do this - when i import <nixpkgs>, I can specify overrides for specific packages in the {} after it, right? What's the syntax for doing that?
valebes has quit [Quit: Lost terminal]
chloekek has joined #nixos
ldeck has quit [Read error: Connection reset by peer]
demize has quit [Quit: Do Androids Dream of Electric Sheep?]
chloekek has quit [Ping timeout: 272 seconds]
<Baughn>
So, it seems I have got my system in a state where root can't talk to systemd:
<boxscape>
jonreeve[m] mine is /home/user/.nix-defexpr/channels:nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixos:nixos-config=/etc/nixos/configuration.nix:/nix/var/nix/profiles/per-user/root/channels
<rsoeldner>
pbb, is there a way to add a root ssh priv. key to the vm build with virtualBoxOVA ?
jtojnar has joined #nixos
<boxscape>
hm, so I copied withPackages into a nix file so I can alter it, so this file just contains a set with this one element. Is there some easy way I can use it in nix-shell like I would use with -p ghc.withPackages?
endformationage has quit [Read error: Connection reset by peer]
endformationage has joined #nixos
<{^_^}>
[nixpkgs] @pacien opened pull request #67528 → riot-desktop: use yarn2nix-moretea → https://git.io/fjAwD
<ldlework>
Unfortunately, it looks like the maintainer of Paket2Nix says they wont be working on that project any longer.
<ldlework>
No grief to them at all, but it seems like a theme in Nix
<ldlework>
Someone will build some nice piece of infrastructure, and then they switch jobs or stack, and then that thing rots to death.
DariusTh` has quit [Ping timeout: 244 seconds]
<ldlework>
Not like an overarching theme that defines the project, just something I've run into a couple times now
<gchristensen>
definitely true for the less common language ecosystems
<manveru>
ldlework: yeah, lacking manpower i guess :|
<ldlework>
If you wanna see some beautiful F# though, that Paket2Nix project is really really pretty
DariusTh` has joined #nixos
<manveru>
there's just not a lot of people using nix and .net?
<ldlework>
...yet!!
<ldlework>
hehe
chloekek has joined #nixos
<manveru>
:)
<manveru>
chicken&egg and all
<ldlework>
I couldn't figure out how to get my "fixed-point" derivation to actually be fixed point so I gave up and went back to Docker
<ldlework>
it kills me everytime I have to do that
<{^_^}>
[nixpkgs] @worldofpeace closed pull request #67215 → nixos/gnome3: default support for color emoji → https://git.io/fjb50
<manveru>
that sounds strange
<ldlework>
manveru: i have to download a bunch of dependencies from the internet
<ldlework>
and everytime I build that derivation the hash changes
<averell>
there's a billion node/react/etc apps out there though, and like <5 node2nix instances in nixpkgs. it's not really a popularity thing sometimes.
<ldlework>
send the expressions to a friend, they have to build it once, update the hash, and build it again
<manveru>
so you have to write your own fetcher that makes it reproducible?
<ldlework>
it's just not workable when I can just ship around a Dockerfile and it always works everywhere
<ldlework>
yeah, that's what paket2nix is
<manveru>
ah, ok
<ldlework>
but I just don't understand the problems involved or how paket works
<manveru>
i did something like that for elixir/erlang too
Guest34 has joined #nixos
<ldlework>
It would be nice if one of the more free authors of one of those tool explained "How to go about" writing one of those things
<ldlework>
What exactly is the conceptual space and practical problems
<manveru>
:)
<averell>
wow, last commit 2016...
<manveru>
i can probably write about that
<ldlework>
I imagine that these things are probably not too hard to actually craft software wise
<ldlework>
like you're downloading some stuff, maybe running sha256 on something, and generating nix code from templates right?
<ldlework>
manveru: that'd be awesome
<manveru>
there are two tricky parts: get a hash, and make the downloaded stuff byte-identical
<ldlework>
that does sound tricky
<gchristensen>
and sometimes, determining the closure of what needs to be fetched *eyes maven*
<manveru>
so if you have some kind of lockfile that contains hashes already, that's ideal
<manveru>
yeah :P
<ldlework>
I have a lockfile but no hashes
<ldlework>
just versions
<Guest34>
Hi all, I'm trying to write a derivation for trelby (www.trelby.org). So far I have this: https://pastebin.com/E7U4szFJ. I think this should be fairly straightforward, it's a python2.7 package, the zip has a .desktop file all ready to go. Is there a wrapper for this kind of thing that I'm missing?
selfsymmetric-pa has quit [Remote host closed the connection]
<averell>
yes, usually people don't pull the release archive, but rather build from source with buildPythonApplication or similar
jbgi_ has quit [Ping timeout: 258 seconds]
<Guest34>
perfect, I'll give that a look
zecco has joined #nixos
<manveru>
ldlework: and your issue atm is that paket2nix is not reproducible?
<manveru>
might be that it's just pulling git repos or something
<zecco>
hey when you're building a package, where's the work directory? I'm trying to make a package for zecwallet, and I don't know where the binaries it makes end up, so I can copy them into $out/bin
DariusTh` has quit [Ping timeout: 245 seconds]
<zecco>
is the work directory maybe deleted after the build?
<evanjs>
zecco: should just be in the current directory. And by default, yes
<evanjs>
*current directory in the context of nix-build
<zecco>
hmmm, can I make that stick around so I can look at it?
DariusTh` has joined #nixos
<evanjs>
For failed builds or?
<averell>
or, during build it's somewhere in /tmp, and there are flags to keep it, like -K
<evanjs>
^
<zecco>
yeah it seems to build successfully, but I'm cargo-culting this by looking at antoher qt project, which copies the final artifacts to $out/bin. In my case, it doesn't find the executables its supposed to copy
<zecco>
I don't know where those are supposed to be in the soure directory after the build, so I'd like to inspect it to see.
<zecco>
-K, I'll look that up. Thx!
<averell>
you could start the build in a nix-shell then work through the phases interactively, but it's more involved. cheapo way is put some ls -laR in the build and die or something :)
<mightybyte>
tilpner: I'm late responding, but not sure what your last message to me is in reference to.
jbgi_ has joined #nixos
___laika has joined #nixos
<tilpner>
mightybyte: Sorry about that, I was replying to someone whose nick begins with m1, and it was past midnight and tab completion let me down
<Guest34>
Alright, I've switched over to buildPythonApplication https://pastebin.com/pXNJQytm, however, it now gives me an error that setup.py is not found. Here is the ls of the trelby directory: https://pastebin.com/Riq91PgT. Note: when extracted from the tar.gz the trelby folder is contained
<Guest34>
So, there really isn't a setup.py file. I'm wondering if this is the right approach?
<Yaniel>
the repo does have a setup.py though
<Guest34>
ah
o1lo01ol1o has joined #nixos
<Guest34>
Okay, I'll give it another shot, you're right
zecco has quit [Remote host closed the connection]
<pie_>
i've been staring at some problems for days with no progress
<pie_>
anyone know anything about "nixpkgs/pkgs/build-support/fetchurl/boot.nix:5:1 called with unexpected argument 'meta', at /home/paprika/nixos2/nixpkgs/pkgs/build-support/fetchpatch/default.nix:14:1"
<pie_>
(nyone know anything about "nixpkgs/pkgs/build-support/fetchurl/boot.nix:5:1 called with unexpected argument 'meta', at /home/paprika/nixos2/nixpkgs/pkgs/build-support/fetchpatch/default.nix:14:1"
<pie_>
argh
<pie_>
sorry
<pie_>
correct paste: "anonymous function at someroot/nixpkgs/pkgs/build-support/fetchurl/boot.nix:5:1 called with unexpected argument 'meta', at /home/paprika/nixos2/nixpkgs/pkgs/build-support/fetchpatch/default.nix:14:1"
<Guest34>
Alright, looks like we're almost there. Thanks again for the help everyone. Just one last issue it seems... Everything looks to be working correctly, but when I try to run the wrapped program I get an error: https://pastebin.com/adMEmgW9
<jlv>
I'm getting an error `FileNotFoundError: [Errno 2] No such file or directory: '/homeless-shelter/.s3ql'` while trying to update s3ql to 3.2, from tests. Any idea how to fix this?
<qubasa>
Question: I want to upstream a system wide function called fetchXpi which fetches firefox addons where should I put it?
<qubasa>
and does such a function need to be written in shell or is python for example ok?
<sphalerite>
jlv: `export HOME=/build` before the tests
<tilpner>
Not entirely. Small pieces are extracted into github.com/tilpner/nur-packages
ng0 has joined #nixos
<hyperfekt>
tilpner: Oh that's not ideal, that would mean I have to collect everything I fetch from the net in that argument. But I guess if there's not better way...
commander has quit [Remote host closed the connection]
<tilpner>
hyperfekt: My pinned sources are a JSON file each, automatically gathered into this sources set. If you just have fetchTarballs scattered all over your config... good luck c.c
zupo_ has joined #nixos
<tilpner>
How did you pin nixpkgs exactly?
zupo has quit [Ping timeout: 245 seconds]
<{^_^}>
[nixpkgs] @globin pushed to staging « libdrm: enable omap support »: https://git.io/fjAo4
<hyperfekt>
tilpner: I have some distributed throughout because they get like one update every four years and thus not managed as a source (which I have managed via niv). But I can fix that. I feel like this possibly deserves to get solved generally and upstream though, cause anyone who GCs has this problem.
<tilpner>
hyperfekt: If it's an option for you, I find that acquiring lots of storage and disabling automatic GC helps a lot with making it less painful
<tilpner>
You'll still have to GC every few months, but it's not the "ugh, GC deleted my toolchain again, and now I need to spend 10 minutes fetching it. Again!"
<boxscape>
How can I get haskellPackages.developPackage to use a local version of a package? I tried "overrides = self: super: { pkgs.haskellPackages.haskell-src-exts = ./haskell-src-exts; }", but that doesn't actually seem to change which version it installs
domogled has joined #nixos
<boxscape>
(i.e. I tried adding that as an argument to developPackage)
<infinisil>
boxscape: Should be `developPackage { source-overrides.haskell-src-exts = ./haskell-src-exts; }`
<ldlework>
alexarice[m]: hmm everytime I run `nix-build --check paket.nix` it just builds the derivaiton and doesn't tell me anything interesting about whether it matched the previous build
<boxscape>
ah, thanks infinisil
<alexarice[m]>
ldlework: Can't you look at the store path?
selfsymmetric-pa has quit [Remote host closed the connection]
<alexarice[m]>
alexarice: or hash the result or something if you're really skeptical
<infinisil>
pie_: Oh, that's not meant to be evaluated like that
<infinisil>
You should add `-A system` to get the resulting system
<pie_>
i swear it worked earlier :V (probably didnt)
<pie_>
infinisil: -A makes it dump a whole bunch of stuff to stdout though
<pie_>
infinisil: any idea why it fails though?
<ldlework>
When you build a fixed-output derivation that uses the `outputHash` attribute, does the hash that you set on that attribute endup being an input to the hash that gets output? I have a derivation that nix-build says produces the same hash, but when I use that fixed-output derivation as a dependency in another of my derivations, it always says the hash is wrong, so I have to update the hash and rebuild and I'm
<ldlework>
just confused on this point.
<infinisil>
pie_: Hm no idea for now
<pie_>
infinisil: why should an --eval fail but a build not
<pie_>
or watever the heck -A does
<pie_>
i want to violate the no cursing policy right now
<gchristensen>
-A selects a specific attribute to evaluate
<infinisil>
pie_: Well --strict eval needs to evaluate every nook and cranny, that fails in nixpkgs because there's always something broken
<pie_>
so what, i can select that attribute with eval too
<qyliss>
yes
<qyliss>
i think
<pie_>
infinisil: ok i was about to guess it has something to do with --strict, thats starting to make sense
blitzclone[m]1 is now known as blitzclone[m]11
<ldlework>
:|
<pie_>
does system have all of nixpkgs in it somewhere
<qyliss>
nope
<qyliss>
unless you put it in
<pie_>
well i dont think i did
<qyliss>
oh, wait, you mean the system attribute set
<qyliss>
as opposed to the output
<qyliss>
never mind
<infinisil>
ldlework: The outputHash itself is the thing that defines a fixed-output derivation's hash
<ldlework>
infinisil: then why when I depend on that fixed-output hash, I get "expected, got" things
<ldlework>
and then I have to set the "got" hash to the output derivation's outputHash attribute to get it to work?
<gchristensen>
it is not common for people to writetheir own fixed output derivations, what does it do?
<infinisil>
Need more context
<infinisil>
Or like an example ldlework
<infinisil>
I don't think that should happen
<pie_>
ok, so these seem to fail consistently unless i messed something up again
<pie_>
`nix-instantiate -v -E '(import ./nixpkgs/nixos {})' -A system --eval --strict --show-trace`
<ldlework>
from what I can tell, paket.nix is a "reproducable" derivation, and yet
<pie_>
i guess strict infinite recurses horribly somewhere in the bootstrap tools
<ldlework>
when you try to build default.nix, it'll complain the hash of paket.nix is not matching what it claims
<ldlework>
infinisil: then you can update the outputHash attribute with the "got" hash, then commit it
<pie_>
infinisil: the reason i started using strict was not selecting .system would just WHNF and not get me anywhere, but i guess i dont need that anymore
<ldlework>
when I try to build your commit on my machine, then it'll complain again the hash is not right and i'll have to update the outputHash attribute
<infinisil>
ldlework: I mean, Nix will check that the outputHash is correct when it builds it first
<ldlework>
infinisil: but if we both run `nix-build --check paket.nix` on our machines, it'll always produce the same build
<ldlework>
infinisil: sure, but take in my whole message and you'll see what I mean
<ldlework>
sorry for the newlines
<infinisil>
Hm
<ldlework>
bad habit :(
<qyliss>
ldlework: try letting the two machines do their thing with their own hashes, and then running diffoscope on the outputs
<pie_>
letssee if it stops spewing garbage at any point...
ris has quit [Ping timeout: 246 seconds]
<gchristensen>
qyliss: (can just --check too, no?)
<ldlework>
--check on a single machine produces the same store path
<ldlework>
like i just did it a bunch of times on my machine
<ldlework>
but if I put it into a docker container
<ldlework>
and do the same thing
<pie_>
that sounds kind of useless
<pie_>
:(
<ldlework>
different, yet consistent, store path
<ldlework>
:(
<gchristensen>
it doesn't exit non-zero?
<clever>
ldlework: run diff -r on the 2 paths, to see how they are different
<ldlework>
ok
<ldlework>
all likelyhood i'm just confused about something / doing something wrong
<pie_>
` nix-instantiate -v --eval --show-trace -A system ./nixpkgs/nixos/` does not seem to reasonable terminate, spews output
<gchristensen>
or diffoscope at qyliss suggested
<clever>
pie_: can you paste some of the repeating output?
<ldlework>
btw, I think that --check should actually tell you whether the hashes match and what they are
<hyperfekt>
tilpner++
<{^_^}>
tilpner's karma got increased to 41
<averell>
#66292 <-- trivial PR, disables cuda on non-x86_64 (it only builds there anyway, and fails otherwise; causes no rebuilds otherwise).
<pie_>
clever: oh duh i even read in the man page that --eval pritns it
<pie_>
i..need sleep *blames it on needing sleep*
<pie_>
*and frustration(
<pie_>
clever: i want whatever it was that prevents actual building
<pie_>
" --parse Just parse the input files, and print their abstract syntax trees on standard output in ATerm format." whats Aterm, google brings up a bunch of japanese stuff
stepcut_ has quit [Remote host closed the connection]
<ldlework>
clever: how do you use the thing output by building a docker image with buildImage
stepcut has joined #nixos
<ldlework>
docker import?
<ldlework>
'm guessin so
stepcut has quit [Remote host closed the connection]
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
stepcut has joined #nixos
<ldlework>
clever: one strange thing though is if you do `docker import /nix/store/d745kfzkviff6bqnz7fzvb72lbaavkbd-docker-image-disinfo.tar.gz` the tag and name specified in the derivation don't get used by docker when importing the image
<ldlework>
so that seems largely useless
stepcut has quit [Remote host closed the connection]
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
<ldlework>
I also got "Error response from daemon: No command specified." when running the image even though I got ` config.Cmd = [ "/bin/bash" ];` in the expression
<ldlework>
hmm
stepcut has joined #nixos
Soo_Slow has joined #nixos
stepcut has quit [Remote host closed the connection]
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
<infinisil>
Hey, is it possible to have a unix user different than the postgresql user it matches to?
<infinisil>
I think postgresql always alings with unix users
jb55 has quit [Ping timeout: 260 seconds]
philr has joined #nixos
stepcut has joined #nixos
<infinisil>
Like when you add a user in postgresql with the same name as the unix user, it lets the unix user authenticate as that postgresql user
stepcut has quit [Remote host closed the connection]
<infinisil>
But is this something built into postgresql or something with PAM/
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
jb55 has joined #nixos
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
stepcut has joined #nixos
<infinisil>
I'm asking because I'm trying to package invidious <https://github.com/omarroth/invidious> which seems to use the database user "kemal" everywhere (which apparently comes from some web framework it uses <https://kemalcr.com/>)
stepcut has quit [Remote host closed the connection]
stepcut has quit [Remote host closed the connection]
<infinisil>
It uses the invidious user, and that's really confusing me, because I think on NixOS at least usually the unix user is the same as the database user
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
<ldlework>
clever: I just build Example 7.131 from the nixpkgs manual, then imported the tar into docker and ran it like `docker run -it --rm hello` and I just get "Error response from daemon: No command specified." and doing `docker inspect` on the image shows that the image config is empty
<ldlework>
Is this stuff broken or am I broken
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
stepcut has joined #nixos
stepcut has quit [Remote host closed the connection]
<ldlework>
gchristensen: I was reading through that, is that what drives the current buildImage function?
<ldlework>
what's the difference between buildImage and buildLayeredImage?
<craige>
heya samueldr - it;s just that changes to master for the planet.nixos site have not been reflected in the live site. So I'm assuming there's manual part that's missing?
<ldlework>
Oh I see
<ldlework>
the docs don't actually say how to define multiple layers
<ldlework>
is it done automatically based on the logic in that blog post?
<manveru>
yes
<ldlework>
that's so amazing
<manveru>
you can do the same using buildImage and splitting the contents, but that's a ton of manual work :P
<ldlework>
gchristensen++
<{^_^}>
gchristensen's karma got increased to 144
<ldlework>
manveru++
<{^_^}>
manveru's karma got increased to 22
<samueldr>
craige: :/ I don't know what it means, so maybe open an issue on the nixos-org-configuration, I see you probably knew about it since you added your planet :)
<craige>
Yep, I just keep noticing it;s ot live and I'm busy blogging away :-)
<samueldr>
ah, master as in the git branch, I thought it could be some planet concept
* craige
heads of to raise an issue.
<craige>
Thanks samueldr
<hyperfekt>
Is there any point to using the NUR for something instead of the source repo if that already has a default.nix?
<ldlework>
i'm honestly still reeling ata this
<ldlework>
heh
<gchristensen>
ldlework: :D
<gchristensen>
craige: soyou added your blog, but it hasn't updated?
<craige>
Back in March, IIRC. PR was merged into master.
<gchristensen>
oops :)
<gchristensen>
craige: link to the PR?
<ldlework>
It would be nice if some major corporation started taking Nix seriously so that we could have a production-at-scale grade orchestrator
<craige>
No sweat, I was just waiting patiently but recently my NixOS blogging has increased, so I thought it would be useful to someone :-)
<ldlework>
Even a production-scale-scheduler defined in nixlang would be welcome
<samueldr>
ldlework: there are major corporations using Nix and NixOS, though they're not loudmouthed :/