<energizer>
says to look in /nix/var/nix/profiles/system/sw/share/X11-fonts but i dont have that directory
cge has quit [Ping timeout: 250 seconds]
kolbycrouch has quit [Remote host closed the connection]
kolbycrouch has joined #nixos
<energizer>
answer: .nix-profile/share/fonts/
reallymemorable has quit [Quit: reallymemorable]
acarrico has joined #nixos
thc202 has quit [Ping timeout: 246 seconds]
ambro718 has quit [Ping timeout: 250 seconds]
rogue_koder has quit [Remote host closed the connection]
rogue_koder has joined #nixos
<makefu>
energizer: it would be great if you could add this hint to the wiki page :)
<energizer>
makefu, good idea
cge has joined #nixos
ddellacosta has joined #nixos
jb55 has quit [Ping timeout: 240 seconds]
captjakk has joined #nixos
reallymemorable has joined #nixos
reallymemorable has quit [Client Quit]
ArchFeh has joined #nixos
ALLES|bennofs is now known as bennofs
iqubic has joined #nixos
<iqubic>
So, I just installed Chromium, and now Netflix isn't working for me. It's giving me an error about the Widevine Content Decryption Module not being updated. How can I fix this?
<iqubic>
I'm running NixOS here.
<danderson>
Pretty sure Chromium can't use netflix. Netflix uses a proprietary DRM module that's only bundled in the proprietary google-chrome, not chromium
<danderson>
but the simplest possible option is to replace chromium with google-chrome. Then you get the closed source build with widevine bundled in.
<ottidmes>
iqubic: maybe it is hidden behind an option in Chromium? I was always told that NixOS's chromium build should work for it, but the reason I packaged Google Chrome and still am using it is Netflix, can't be bothered to get it working under Chromium
<hpfr[m]>
nixpkgs aliases exfat-utils to exfat since 2015, but the kernel has support for exfat post-5.4. maybe this alias needs to be rethought, since the FUSE module isn't necessary but the utils are still of use?
jb55 has joined #nixos
ArchFeh has quit [Quit: archfeh]
aleph- has quit [Ping timeout: 256 seconds]
<bqv[m]>
i just tried build-vm to test a new config
<bqv[m]>
such a good idea
aleph- has joined #nixos
bvdw has quit [Read error: Connection reset by peer]
<Cadey>
how do i use an RSA private key to ssh into NixOS?
bvdw has joined #nixos
drakonis1 has joined #nixos
jb55 has quit [Ping timeout: 240 seconds]
drakonis_ has quit [Ping timeout: 250 seconds]
<NobbZ[m]>
As you'd do it with any other distribution as well, assuming you have enabled the sshd service
<ottidmes>
Cadey: have the public key in users.users.cadey.openssh.authorizedKeys.keyFiles
aljce has joined #nixos
<aljce>
I'm trying to run the nixos AMI but after I launch the 18.01 instance from the aws console I can't seem to ssh into the box. The box is open on port 22.
<aljce>
Has anyone successfully ran a nixos aws instance?
jb55 has joined #nixos
Makaveli7 has quit [Quit: WeeChat 2.7.1]
mexisme_ has joined #nixos
<energizer>
emacs is to spacemacs as nixos is to ____
<chocopuff>
energizer: huh no idea actually....
<chocopuff>
is there an equivalent "batteries included" nixos distro
<gchristensen>
nixos
mexisme_ has quit [Ping timeout: 246 seconds]
iqubic` has joined #nixos
drakonis_ has joined #nixos
kolbycrouch has quit [Remote host closed the connection]
<jtojnar>
hedning what is the status of the capabilities patch?
iqubic` has quit [Remote host closed the connection]
gustavderdrache has quit [Quit: Leaving.]
kleisli has quit [Ping timeout: 250 seconds]
<colemickens>
lovesegfault: ping
<colemickens>
lovesegfault: can you remind me how to get around modulesPath when pinning? I am running into inf recursion again and can't remember the right workaroudn.
* colemickens
is not going down the flakes rabbit hole tonight, hopefully
<cole-h>
(He doesn't appear to be in IRC right now)
<infinisil>
colemickens: What's the problem with it?
Guest29 has joined #nixos
slack1256 has joined #nixos
Guest29 has left #nixos [#nixos]
<colemickens>
cole-h: I see a nick, I mention the nick.
<colemickens>
cole-h: that was meant to be tongue in cheek, not snooty :S
<cole-h>
:P
<colemickens>
infinisil: idk, I think even the flakes works calls out that modulesPath doesn't work in a flakes world. What does modulesPath mean when NIX_PATH is unset?
<cole-h>
Only reason I knew he wasn't here was because his name didn't color :P https://paste.rs/kip.jpg
<hpfr[m]>
so I checked status.nixos.org for the commit nixos-unstable is on, then browsed github at that commit to see that `libseccomp` is at version `2.4.3`. My nix channels are up to date, but when I run `nix repl '<nixpkgs>'` and check `pkgs.libseccomp.version`, it returns `2.4.2`? why would this happen?
<colemickens>
If I try to do "${pkgs.path}" or just "${pkgs}" or "${nixpkgs}" anywhere, it triggers infinite recursion. Maybe due to how I import the pinned nixpkgs.
<ottidmes>
colemickens: remember to set overlays = []; when pinning, or else it will import impure.nix which will imports the overlays, which will define you pinned thing, which will import impure.nix, etc.
<infinisil>
colemickens: That only happens if you use it in `imports`, because pkgs depends on imports (and with this imports depends on pkgs too)
<infinisil>
Although, where does your pkgs come from?
<colemickens>
ottidmes: I actually hadn't thought of that. But... (1) I manually ensure that overlays are loaded from my config the same as they do during nixos-rebuild switch, (2) my overlays in nixpkgs matches what I have in my sys config.
<colemickens>
ugh, flakes, come sooooooner
<infinisil>
colemickens: If it's just the normal one, you can use `{ modulesPath, ... }: { imports = [ (modulesPath + "/services/...") ]; }`
<colemickens>
infinisil: yeah, let me actually see what it does when I use modulesPath instead of handwavey my memory
<colemickens>
and then the other function will cause either a pinned version of my overlays (or a local copy if I have one checked out at a special location).
rardiol has quit [Quit: No Ping reply in 180 seconds.]
<ottidmes>
colemickens: ${nixpkgs} used to define machine, depends on machine
<ottidmes>
nope, its not, sorry
<colemickens>
I guess modulesPath works?
<colemickens>
And then I guess I can cheat with it and relative paths to get to other stuff like in lib/make-squashfs.nix ,etc
<{^_^}>
#16026 (by romildo, 3 years ago, closed): Default fonts configuration not working
cge has quit [Quit: Leaving]
sigmundv__ has joined #nixos
aij has joined #nixos
iyzsong has joined #nixos
ottidmes has quit [Ping timeout: 250 seconds]
<hpfr[m]>
anyone know why my nix repl reports an older version of libseccomp than my channel should have?
h0m1 has quit [Ping timeout: 246 seconds]
captjakk has quit [Remote host closed the connection]
h0m1 has joined #nixos
sigmundv__ has quit [Ping timeout: 264 seconds]
captjakk has joined #nixos
srl295 has quit [Quit: Connection closed for inactivity]
teto has quit [Ping timeout: 260 seconds]
captjakk has quit [Read error: Connection reset by peer]
iqubic has joined #nixos
captjakk has joined #nixos
_d0t has joined #nixos
<_d0t>
hey! What's the currently best way to add an electron app to nixpkgs?
jumper149 has quit [Quit: WeeChat 2.7.1]
m0rphism has quit [Ping timeout: 240 seconds]
<bqv[m]>
in my experience, the best way is to not
<bqv[m]>
i don't think there's many electron apps in nixpkgs, most i've seen are in the nur, and the one that i know if in nixpkgs (riot) seems to be mispackaged in at least one way for me
<_d0t>
bqv[m]: i've seen a few, including slack, wire, discord, gitter, etc.
<_d0t>
Oh, and atom, of course.
<_d0t>
But all of these derivations are a bit different from one another.
<bqv[m]>
just copy from them then. if there's no obvious gold standard, the best you can do is create one
<_d0t>
well, they all just wrap the official binaries.
<_d0t>
Is this the way?
chocopuff has quit [Quit: WeeChat 2.7.1]
<bqv[m]>
i have no idea, never (successfully) packaged an electron app, never want to
<mdash>
_d0t: well, at least it won't be _worse_ than the others...
<bqv[m]>
that's the last thing in my shell history, anyway
<cole-h>
Ah, I was `nix-instantiate`ing oops
<cole-h>
Thanks. bqv[m]++
<{^_^}>
bqv[m]'s karma got increased to 2
<bqv[m]>
np
captjakk has quit [Ping timeout: 246 seconds]
<samueldr>
,callPackage for whenever it happens next
<{^_^}>
for whenever it happens next: If a Nix file foo.nix starts with something like `{ stdenv, cmake }:`, you can build it with `nix-build -E '(import <nixpkgs> {}).callPackage ./foo.nix {}'`
drakonis_ has quit [Ping timeout: 240 seconds]
mexisme_ has joined #nixos
<cole-h>
samueldr++ You overestimate my recall abilities
<{^_^}>
samueldr's karma got increased to 188
<samueldr>
you already knew it involved callPackage :)
<danderson>
hmm, does pcilib have a nix derivation...
chocopuff has joined #nixos
<nh2>
_d0t bqv[m]: from its homepage, ripcord is proprietary but you can get access to the source (presumably for reading it) when getting an enterprise license. I was actually wondering whether to ask how much one costs, so that we could perhaps have a few people to verify its contents. I'm intritued by a fast/non-resource-wasting Slack client
mexisme_ has quit [Ping timeout: 260 seconds]
drakonis_ has joined #nixos
<cole-h>
samueldr: Only because that's what I do for my redefined overlays (too much of a hassle to override a few things; might as well create a new drv)
<cole-h>
:P
<bqv[m]>
there's a ripcord discord server if you want to ask cancel himself
<bqv[m]>
danderson: no
<danderson>
darn, no ryzenadj for me then. Ah well, it was a distraction anyway :)
<danderson>
Added to the laundry list of nixpkgs contribs
<energizer>
i dont understand font configuration well enough to diagnose this. my fonts.defaultFonts aren't being used
abathur has quit [Ping timeout: 250 seconds]
aw has quit [Quit: Quitting.]
spacefrogg has quit [Quit: Gone.]
aw has joined #nixos
spacefrogg has joined #nixos
delli3 has joined #nixos
_d0t has quit [Ping timeout: 264 seconds]
kleisli has joined #nixos
<tnks>
If I'm trusted user, and I use `nix-build --option trusted-public-keys ...` does that append public keys? Or override what's set?
tertl3 has quit [Quit: Connection closed for inactivity]
waleee-cl has quit [Quit: Connection closed for inactivity]
Supersonic112 has joined #nixos
Supersonic has quit [Disconnected by services]
Supersonic112 is now known as Supersonic
<colemickens>
hm, are early mounts handled by systemd mounts still? I should be able to order a service before one of the mounts?
* colemickens
it probably is, I just am not unit configing correctly
<hio>
I'm sorry guys but you cant seriously expect me to use NixOS when I cant even use prepackaged, guaranteed to be working IDEs like Jetbrains because you cant provide a compatability layer
<energizer>
hio: way to make an entrance haha :-)
leotaku has quit [Ping timeout: 256 seconds]
<hio>
well I really try to like NixOS but I cant just hope that I'll never run into software that I cant do a workaround for. Things like static binaries suddenly dont work on NixOS that were built to work anywhere, literally anywhere
<hio>
it doesnt matter, it's about the principle. Eventually I'll run into something that wont work and doesnt exist as a package already. I have no idea what version those packages are, I always use the latest EAP
leotaku has joined #nixos
<energizer>
if you can find examples like that in the issue tracker i'd be curious to see how they turn out
<hio>
energizer: the rider version on there is ~5-6 months old
<hio>
most are very old
<energizer>
i wonder if someone could start a little business just taking requests for packaging
<hio>
I tried to make it work with patchelf but it wouldnt work, some kind of error with zlib.so ELF header being wrong
<GrimSleepless>
hio: Are you talking about the version in the master branch?
<colemickens>
how do people handle remote nix builds with an ssh key that is in gpg-agent?
<colemickens>
this UX is not good
<colemickens>
I guess you only have to accept ssh host key with sudo, and then somehow gpg-agent is used, even with the nix daemon? neat trick.
<colemickens>
we should warn the user, especially if the nix cli can see that the host is already accepted by the user - hint them to accept the host key as root, even spit out the command for them
<colemickens>
oh no, still permission denied.
rogue_koder has quit [Ping timeout: 264 seconds]
mexisme_ has quit [Ping timeout: 246 seconds]
<hpfr[m]>
^ I don't have an answer for this but agent support would be much nicer than having to create a one-off private key in /root/.ssh sitting around for nix builds
<emily>
I'm getting "error: attribute '_module' missing, at /nix/store/xqqa60qd7ipwxxfvj90pdh9l7g6zh30n-source/nixos/lib/eval-config.nix:72:12" after upgrading to the latest nixos-unstable (103315f830fc2c9f880c4b74d478eb4ff3366715 -> 8c65d2aa92a12f52f6e0b216a0333d79d5952eb7). I'm not sure what could have caused this; does anyone understand eval-config.nix better than me? I use a custom system.nix rather than nixos-rebuild so that I can inject niv dependencies:
<emily>
(the backtrace offers no light, it's just that eval-config line and 1:1 in system.nix)
<linarcx>
Guys, i want to use x11 header files to develope an application. So i put `xorg.libX11` inside my shell.nix. But still get error about missing header files.
maddo has joined #nixos
<tilpner>
The header files are in .dev, but I feel like it should have used that automatically?
jmeredith has quit [Quit: Connection closed for inactivity]
<Izorkin>
Mic92: can create an empty file?
<Mic92>
Izorkin: I am not sure if that is a good idea. Netdata might assume it was installed via an installer, which it is not.
<Mic92>
As long as everything works properly...
<Izorkin>
ок
<danderson>
When I'm hacking on a derivation in nixpkgs, how do I get a nix shell where I can run build phases separately?
<danderson>
I got `nix-build --run-env -A <pkg>`, but I can only find `genericBuild` in there, which does everything
<tilpner>
danderson: That should make the phases available, but it depends on what you substitute for <pkg>
* tilpner
didn't know about --run-env though
<danderson>
I found it from some desperate googling, it's not documented.
<tilpner>
Which package are you trying to use it with?
<danderson>
redo-apenwarr
jakobrs has quit [Quit: WeeChat 2.7.1]
<tilpner>
Well, that doesn't even instantiate
<danderson>
yeah, that's why I'm trying to hack on it :)
ardumont has joined #nixos
<danderson>
upstream's built a new version that works with python3
<danderson>
I'm upgrading the derivation, and trying to figure out why docs aren't building.
<danderson>
One sec, I'll push what I have.
glittershark has quit [Ping timeout: 240 seconds]
<tilpner>
And after you got it to instantiate, --run-env doesn't export the phases?
doyougnu has joined #nixos
<tilpner>
At a glance, nothing there should overwrite them
<danderson>
how would I list what got exported?
<tilpner>
env
<tilpner>
Ohh, hmm
<danderson>
env is full of crap, anything in particular I'm looking for? :)
<tilpner>
No, wait a minute
glittershark has joined #nixos
<tilpner>
Not pretty, but declare -f | grep Phase
opthomasprime has joined #nixos
opthomasprime has left #nixos [#nixos]
<danderson>
hmkay, so I do have the phases. But running unpackPhase fails with a bunch of permission denied errors. I'm assuming it's trying to unpack in /nix/store ?
<tilpner>
No, unpackPhase should create a new directory in the current working directory
<tilpner>
Try with hello for a known-working package
<tilpner>
If you run unpackPhase, it creates a hello-2.10 directory
<danderson>
hrm. Probably some leftover garbage from a nix-build, sec.
kleisli has quit [Remote host closed the connection]
<danderson>
yeah, there we go.
<danderson>
looks good now, thanks.
kleisli has joined #nixos
<danderson>
now, to figure out why this python module isn't visible...
<colemickens>
I mean, creating an extra key isn't even a choice necessarily.
<colemickens>
I don't want to have to PR the community aarch box with an "extra" key and especially one that I know isn't up to my security bar.
<colemickens>
Mostly frustrating because there must be a way to do it, knowing people around here, someone is doing it. We just don't have it documented on the wiki/manual as far as I can tell.
<Mic92>
It is probably not worth the effort the time beeing.
<Izorkin>
Mic92: ok
<tilpner>
Mic92: Can you supply config.boot.kernelPackages.kernel to the package via an override, and have it recompile just the ebpf part?
<Mic92>
tilpner: This is indeed an option. However right now it does not provide many information we would not already have otherwise.
<Mic92>
It just provides vfs read/write metrics, which netdata already has.
<tilpner>
I don't use or particularly care about netdata, just curious. However, the last paragraph describes it as "collecting and displaying much more sophisticated metrics."
abbe has quit [Quit: “Everytime that we are together, it's always estatically palpitating!”]
* tilpner
hasn't read much else though
<Mic92>
In theory yes, but right now it seems sparse. They also just introduced this plugin recently
<tilpner>
There's probably no urgency, I just wanted to point out that a module could prevent having to compile for all kernels
evils has quit [Quit: Lost terminal]
<Mic92>
The epbf part is seperate from netdata. So only the kernel-specific part would need to be recompiled.
<tilpner>
Well, even if you compile for "all" kernels (from nixpkgs), you can't really cover all of them. The user might provide their own
evils has joined #nixos
<tilpner>
And you can still combine these two methods, so that you get the best of both
ambro718 has joined #nixos
ambro718 has quit [Client Quit]
wavirc22 has quit [Quit: ZNC 1.7.2+deb3 - https://znc.in]
<linarcx>
Guys, shell.nix complains that it can't find mount, but i've added it to shell.nix :`Package 'mount', required by 'gio-2.0', not found`
<tilpner>
That might not be a Nix error
<tilpner>
But I need more context to be sure
<bqv[m]>
hey, if i do `nix-store --gc --print-roots` i see a hecktonne of lines that say `{censored}`
<bqv[m]>
what are those and how do i kill them
<bqv[m]>
oh, nevermind, sudo unmasked them
<bqv[m]>
apparently they're in /proc...
<bqv[m]>
why the hell do i have gc roots in /proc
<tilpner>
That might be processes using those store paths
<bqv[m]>
hmm
<bqv[m]>
makes sense
evils has quit [Quit: Lost terminal]
knupfer has joined #nixos
chocopuff has quit [Ping timeout: 246 seconds]
evils has joined #nixos
chagra_ has quit [Ping timeout: 250 seconds]
o1lo01ol1o has joined #nixos
o1lo01ol1o has quit [Remote host closed the connection]
o1lo01ol1o has joined #nixos
evils has quit [Client Quit]
fendor has joined #nixos
evils has joined #nixos
c0c0 has quit [Ping timeout: 250 seconds]
__monty__ has joined #nixos
tmaekawa has joined #nixos
mexisme_ has joined #nixos
jakobrs has joined #nixos
<bqv[m]>
is there a mechanism for cleaning up old generations
<peelz_>
What's the proper phase for executing wrapProgram? Some derivations are doing it in postFixup and others in installPhase.
<bqv[m]>
pick one and stick to it
<bqv[m]>
i don't think anyone cares too much
o1lo01ol1o has quit [Remote host closed the connection]
c0c0 has joined #nixos
m0rphism has joined #nixos
<peelz_>
bqv[m]: hmmm okay
m0rphism is now known as Guest93098
o1lo01ol1o has joined #nixos
Cale has quit [Remote host closed the connection]
thc202 has joined #nixos
<jakobrs>
When do I need to specify which outputs I want?
kenran has joined #nixos
<jakobrs>
buildInputs = [ SDL2 ] seems to work even if I want SDL2.dev and not SDL2.out
<jakobrs>
where SDL2.out is the default output
<bqv[m]>
when you want ones that aren't already there? :D
<jakobrs>
But it seems I can just go with SDL2 and it works even though I want SDL2.dev specifically
o1lo01ol1o has quit [Ping timeout: 250 seconds]
<ottidmes>
peelz_: I roughly follow the rule that when the subject of the derivation is to wrap the program, like when you make a derivation to wrap some scripts, then put it in installPhase, but if it is part of a bigger installation, I would put it in postFixup
tmaekawa has quit [Quit: tmaekawa]
oever has joined #nixos
<ottidmes>
jakobrs: pretty sure it also includes .dev inputs by default when you use nix-shell, so that might be what you are seeing
<{^_^}>
#83061 (by LouisTakePILLz, 1 day ago, open): rmtrash: init at 1.13
Guest93098 has quit [Quit: WeeChat 2.7.1]
mvnetbiz_ has quit [Read error: Connection reset by peer]
m0rphism1 has joined #nixos
blaggacao has quit [Read error: Connection reset by peer]
blaggacao has joined #nixos
<bqv[m]>
looks sensible
<peelz_>
okay, was just wondering if it made sense to have wrapProgram in the postFixup phase when I could just do everything in installPhase
<evils>
i don't suppose anyone can point me in the right direction to getting a VM with USB passthrough working?
<bqv[m]>
virtualbox supports that almost by default doesn't it?
<bqv[m]>
not sure about anything else
<srk>
virt-manager & libvirt does as well, you need to allow polkit access
<evils>
bqv[m]: virtualbox is about the only option i know how to use, last time i tried i concluded it doesn't support usb passthrough (i could be wrong about that)
kolbycrouch has quit [Remote host closed the connection]
<jakobrs>
Is it possible to keep the build directory *even if the build succeeds*?
<ottidmes>
peelz_: You can look in nixpkgs and search for wrapProgram, you will see basically different opinions on the matter, but most will have it in their installPhase when it is like yours, just copying some files, and most that have an install phase as part of the thing that is packaged (i.e. its Makefile), will have it is in postFixup
bahamas has joined #nixos
<kenran>
I've been trying to use nim-lang in a tiny project of mine on NixOS. It has a dependency on `SDL2`. I can build it just fine, but when trying to run the binary it can't find the .so. When I had a similar problem in Rust, I created a shell.nix which has `SDL2` in its buildInputs and it worked, but doesn't for nim.
<peelz_>
ottidmes: okay, thanks!
<tilpner>
bqv[m]: Keep in mine that it requires root to delete system generations
<evils>
srk: thanks, i guess i'll look up how to use virt-manager
<colemickens>
I don't know if that's still needed, but usb passthrough worked for me with virt-manager with that.
<srk>
evils: ^
<srk>
kenran: what does ldd says on the binary? how does it even compile with missing SDL?
<colemickens>
er, I don't know how I got that so wrong on the username there, sorry for the random mention there
<srk>
happens! :)
<evils>
colemickens++ srk++
<{^_^}>
colemickens's karma got increased to 18, srk's karma got increased to 3
o1lo01ol1o has joined #nixos
<peelz_>
ottidmes++
<{^_^}>
ottidmes's karma got increased to 21
<kenran>
srk: I don't know how it does compile. Something seems fishy there. `ldd` says https://pastebin.com/Ax9D5eKg
<kenran>
Shouldn't SDL2 be mentioned there somewhere?
<srk>
maybe it's loaded dynamically
<srk>
try with strace -f
<ottidmes>
is system.nixos.revision the Nixpkgs revision or my config revision, guess the former? The description says the git revision from which NixOS was built, but thats ambiguous
Guest91724 has quit [Changing host]
Guest91724 has joined #nixos
Guest91724 is now known as Miyu-saki
evils has quit [Quit: Lost terminal]
<kenran>
srk: Thanks, I'll have a look later. Probably won't get anywhere, first time using those tools :D but something to learn. I have to go outside for a bit *shudder* now.
evils has joined #nixos
xkapastel has joined #nixos
teto has joined #nixos
kenran has quit [Quit: leaving]
domogled has quit [Ping timeout: 250 seconds]
<peelz_>
bqv[m]: hey, thanks for the LGTM. I just realized that both scripts depend on GNUs rm and rmdir, not just trash-cli. Should I add coreutils to the wrapper?
<gentauro>
is there any way to add a `package` instead of override? At the moment I'm overriden `dotnet` but what I really want to do is, to expand `pkgs` with an `ad-hoc` extra package called `dotnet-sdk-lts` -> https://pastebin.com/wNUwFQ0D
<gentauro>
[nix-shell:~/code/dotnet]$ which dotnet
<srk>
you can create an overlay that just adds the package via callPackage
chagra has joined #nixos
<gentauro>
srk: link to a guide/tutorial?
<gentauro>
(or just an example)
<srk>
,overlay
<{^_^}>
Overlays look like `self: super: { foo = ...; }`. Use the self argument to get dependencies, super for overriding things and library functions (including callPackage). More info: https://nixos.org/nixpkgs/manual/#sec-overlays-install
<Guest92223>
hello, I've created an overlay in ~/.config/nixpkgs/overlays which works fine when I use nix-shell. However, it doesn't work when doing a nixos-rebuild. Do I have to change my configuration.nix somehow?
<srk>
how do you include the overlay?
<srk>
both of you? :)
<srk>
you can either use nixpkgs.overlays = [ (super: self:.. ) (import ./another-overlay.nix) ];
<srk>
in your configuration.nix to apply them system wide
<gentauro>
srk: oh, that might be the problem
abathur has quit [Ping timeout: 265 seconds]
chagra has quit [Ping timeout: 265 seconds]
<gentauro>
:)
<srk>
or use import <nixpkgs> { overlays = [ overlay1 overlay2 ]; } in e.g. default.nix
Makaveli7 has joined #nixos
chagra has joined #nixos
<Guest92223>
@srk: right now I haven't modified my configuration.nix at all, I was under the impression that overlays which are placed in ~/.config/nixpkgs/overlays are picked up automatically, which is what happens for nix-shell. I will try including them how you showed me, thanks a lot
<bqv[m]>
<peelz_ "qy: hey, thanks for the LGTM. I "> no, that's part of the default nix build environment
<bqv[m]>
oh wait, you mean the program itself
<bqv[m]>
yes, then
<peelz_>
Yeah. I missed a bunch of dependencies. I realized that when running it in nix-shell --pure
<peelz_>
getopt, which, coreutils
o1lo01ol1o has quit [Remote host closed the connection]
<{^_^}>
nix#2925 (by mroi, 41 weeks ago, open): /nix will not be writable on macOS Catalina
<bierlingm>
MichaelRaskin yeah, that's the issue thread I've consulted to try and set it up. I've tried some suggested routes, but it hasn't worked so far.
<gchristensen>
jakobrs: sure!
<gchristensen>
jakobrs: if you could attach it to the issue, that'd be ideal
<chris__>
Is the packages search really slow for anyone else? The one at nixos.org? It took 1.4 minutes to just download the css files.. That are <1kb.
cosimone has quit [Remote host closed the connection]
<ottidmes>
is the system generation number available within Nix?
<MichaelRaskin>
No
<MichaelRaskin>
I think there can be two generations with different number but exact same system instance path in Nix store
<MichaelRaskin>
(probably non-adjacent)
<gchristensen>
and a system can be built and used without it being written as a generation
<clever>
MichaelRaskin: definitely non-adjacent, you have to switch 3 times, with the 1st and 3rd having identical output
<clever>
MichaelRaskin: if the 2nd switch matches the 1st, it wont do anything
<ottidmes>
Ah ok, just wondering, cause I saw it mentioned in system.nixos.versionSuffix, and thought it might be useful if it showed up when I checked /nix/store, but I guess I there a better ways to get this info
<MichaelRaskin>
clever: this is what I normally assume, but I haven't checked recently
<MichaelRaskin>
Thanks for confirmation
<clever>
ottidmes: about the only place youll find generation numbers, is the bootloader scripts
<MichaelRaskin>
Well, or when looking at /nix/var/nix/profiles
<ottidmes>
Checking /nix/var/nix/profiles/ will probably be best anyway
<clever>
and all of the other generation management commands like delete and rollback work
drakonis_ has quit [Ping timeout: 264 seconds]
jmeredith has joined #nixos
linarcx has joined #nixos
<ottidmes>
I have the rev of my Nixpkgs channel and NixOS configuration, I probably have to set nixos.revision to the Nixpkgs channel rev, but am I allowed to set nixos.configurationRevision to my NixOS configuration revision, since it mentiones flake's explicitly, I might better not touch it
noudle has joined #nixos
<ottidmes>
Hmm, from checking nixpkgs, its only used for extra info, so should be safe
<kraem>
i'm trying to learn how to write shell.nix files to have yarn with node pinned at a certain version. i'm having trouble finding examples on how to that, does anybody have any? :)
<ottidmes>
And my setup is basically already flakes-light, so should be future compatible, or easy to make compatible when flakes come out
<ottidmes>
kraem: Guess you would use nodejs-12_x and nodePackages_12_x
<clever>
kraem: you can just override the nodejs that yarn is using
<clever>
3 nodejs = nodejs-12_x;
bvdw has quit [Read error: Connection reset by peer]
bvdw has joined #nixos
<ottidmes>
kraem: Tip, don't overlay nodejs to a specific version, rather override only your specific use, i.e. yarn = super.yarn.override { nodejs = self.nodejs-12_x; }
<jluttine>
what's a good way to quickly look up the signature and docstring of some function in nix/nixpkgs? for instance, now i wanted to look up toJSON and writeText. googling doesn't work too well and grepping nixpkgs neither
philr has quit [Ping timeout: 246 seconds]
<kraem>
i've tried something similiar to that; https://bpaste.net/RZAA but can't get it to work
<clever>
jluttine: i tend to just look at the source
<jluttine>
clever: yeah, but then how to find those easily in the source?
<clever>
jluttine: for anything in pkgs, use this function to find the location the attr was defined at
<clever>
jluttine: for builtins.toJSON, check primops.cc in the nix source
<clever>
they sometimes have a comment nearby with the type
<jluttine>
would be really nice to have some manual where one could just search for these and get the docstring, signature and link to the source code :)
<clever>
jluttine: writeText i would expect to find in the nixpkgs manual, and toJSON in the nix manual
<jluttine>
probably somewhere in the manual but i couldn't figure out how to find them from the manual.. searching for them gives a huge number of hits
<jluttine>
maybe i just don't know how to use the manual..
<clever>
jluttine: writeText and toJSON should be fairly unique words in the manual
<kraem>
clever ottidmes do you have a full example? i thought i'd have to override nodejs-13_x to use a specific version and then use that override while overriding yarn but can't get my head around how to do it
kleisli has quit [Remote host closed the connection]
<kraem>
ah thanks! i used niv init and then imported sources.json in `sources`, can i import buildNodejs from there?
<clever>
kraem: yeah, you can also do `sources.nixpkgs + "/pkgs/development/web/nodejs/nodejs.nix")
kleisli has joined #nixos
vandenoever has joined #nixos
vandenoever has joined #nixos
vandenoever has quit [Changing host]
o1lo01ol1o has joined #nixos
oever has quit [Ping timeout: 264 seconds]
abathur has quit [Ping timeout: 264 seconds]
<jared-w>
gchristensen: saw your recent article about nix and Arm and thought it was great stuff, btw :)
<jared-w>
clever: any functional difference between `"${sources.nixpkgs}/pkgs/development/web/nodejs/nodejs.nix}"` and your syntax? Been wondering for a while. I seeeeem to recall something vaguely about it being lazier in downloading nixpkgs?
<clever>
jared-w: mainly, when sources.nixpkgs is a local path, not a derivation
<clever>
jared-w: let foo = ./.; in "${foo}/bar" will copy ./. in full, then generate /nix/store/hash-something/bar
<kraem>
clever, tilpner thanks. getting somewhere. how do i inherit openssl the right way? i'm getting "openssl undefined" with just openssl and "unexpected '.'" with pkgs.openssl https://bpaste.net/PQVA
<clever>
jared-w: so if anything in . changes, everything rebuilds
<clever>
jared-w: but, let foo = ./.; in foo + "/bar" will copy only bar, creating /nix/store/hash-bar
<jared-w>
gotcha. That makes sense
v88m has quit [Ping timeout: 264 seconds]
<clever>
jared-w: also, bar only gets copied, when you later force that into a string
<clever>
jared-w: so you could add ../foo to it, to go to a sibling
<clever>
kraem: inherit (pkgs) openssl;
<jared-w>
So most of the time it doesn't matter and sometimes it really does, and I should probably use + for things to be better behaving :p
<jared-w>
Very excited to see how nixbuild.net works out
domogled has joined #nixos
<jared-w>
Between cachix, hercules, and nixbuild all coming out, nix is getting a lot of much needed dev/ops infrastructure improvements. On one hand, it's kinda sad to see all of that not being FOSS, otoh nix has very little investment by large corporations, so it makes sense that the tooling can't be funded otherwise.
<kraem>
clever: thanks again :) what's the difference with pkgs.openssl? i get "undefined variable callPackage", tried with builtins.callPackage but get "attribute missing". where does it live? do i need to import it from nixpkgs?
<clever>
kraem: pkgs.callPackage
<gchristensen>
oh cool, thanks jared-w!
acarrico has joined #nixos
abathur has joined #nixos
oever has joined #nixos
vandenoever has quit [Ping timeout: 264 seconds]
<kraem>
clever: https://bpaste.net/CFMA getting `error: attempt to call something which is not a function but a set` - i thought buildNodejs on line 10 returned the function needed by buildInputs?
<jdelStrother>
I'm really struggling to figure out why a certain gem isn't building in NixOS. Is there any way of essentially adding a breakpoint or dropping into a shell mid-build, complete with all the environment variables and other dependencies that would have been set up?
<gchristensen>
,bottest
<gchristensen>
,botsnack
<{^_^}>
Oh thanks, have a cookie yourself
<jdelStrother>
I'm currently using postPatch to call substituteInPlace and insert a bunch of printf statements all over the place, but after about 3 days of that I'm slowly going insane.
noonereally[m] has joined #nixos
<{^_^}>
[nixops] @grahamc merged pull request #1255 → ci: move back to hand-written yaml → https://git.io/Jv6hA
<{^_^}>
[nixops] @grahamc pushed commit from @lovesegfault to master « ci: move back to hand-written yaml »: https://git.io/JvDwU
<simpson>
jdelstrother: nix-shell can be used to enter an interactive builder's shell. From that shell, you'd explicitly incant the unpackPhase, buildPhase, and others.
<jdelStrother>
I can't see what my equivalent of 'pan' would be from the manual's example of `nix-shell '<nixpkgs>' -A pan`
<clever>
jdelstrother: you need your default.nix to return a set, not a derivation, and that set can then contain things like your-package, gems, and ruby
<clever>
kraem: that looks much better, does it work?
<kraem>
clever: i'm getting this error: unsupported argument 'outPath' to 'addPath', at /sources.nix:118:21
<clever>
linarcx: dont use builtins.path on line 6
<clever>
kraem: it was already a path
<clever>
linarcx: oops
<kraem>
clever: ah i needed '( "/foo/bar" )' including the '()' for it to not throw "cannot coerce a string to function". the shell builds and everything but `node --version` outputs "10.19.0" so it wasn't built with my override
<clever>
kraem: what does `type node` report?
<kraem>
clever: "node is /nix/store/8fb67axqjywj3l09y898b1p4q81iary5-nodejs-10.19.0/bin/node"
<clever>
kraem: and if you exit the `nix-shell`, what does `type node` report?
drozdziak1 has joined #nixos
<kraem>
clever: same path node is /nix/store/8fb67axqjywj3l09y898b1p4q81iary5-nodejs-10.19.0/bin/node
<clever>
kraem: then that default.nix isnt providing any nodejs at all, and you have a node installed elsewhere that is leaking in
<{^_^}>
[nixpkgs] @jtojnar pushed 140 commits to gnome-3.36: https://git.io/JvDwA
<clever>
kraem: this is why i never install tools like nodejs, so they cant leak in unexpectedly
<clever>
kraem: but you can fix it by adding nodejs_override to the buildInputs
c0c0 has quit [Ping timeout: 246 seconds]
glittershark has quit [Ping timeout: 250 seconds]
logand has joined #nixos
c0c0 has joined #nixos
<kraem>
clever: perfect! thank you!
<kraem>
clever++
<{^_^}>
clever's karma got increased to 357
glittershark has joined #nixos
<kraem>
now i have to figure out how to the same thing with yarn, hopefully with your help with this i can figure it out :)
<clever>
kraem: ive been using yarn2nix with good success
<{^_^}>
[nixpkgs] @jtojnar pushed 140 commits to gnome-3.36: https://git.io/JvDrf
kolbycrouch has quit [Remote host closed the connection]
<kraem>
thanks! using that yarn, node + yarn.lock dependencies would be packaged and available in the nix store when entering the shell? no need for what i have been doing?
kolbycrouch has joined #nixos
<ottidmes>
And if you don't want to go the Nix route for npm/yarn I am using without problem on NixOS without going through Nix. If I were to do it profesionally I would probably try the Nix route, but for my use case just using the tools like normal is preferrable
<clever>
kraem: yarn2nix does the entire `yarn build` under nix, so you dont need `nix-shell`
teto has quit [Ping timeout: 246 seconds]
<clever>
kraem: there is also a shell.nix in daedalus, but all it does is provide node and yarn, and everything else is done impurely by yarn, as you would on any other distro
<clever>
jdelstrother: thats still not returning a set, thats returning the builderEnv
<kraem>
ottidmes, clever yeah that's what i'm trying now. just getting the right versions of yarn + node, as specified by yarn.lock, to be able to run `yarn dev` when in the project
<clever>
jdelstrother: and i dont see any obvious expression that could contain a sub-section of things
<{^_^}>
[nixpkgs] @jtojnar pushed 136 commits to gnome-3.36: https://git.io/JvDrt
shweta has joined #nixos
<shweta>
nix installation is not supported for iOS 10.10.5(yosemite)
<shweta>
any suggestions on how I may use nix in this mac
justanotheruser has quit [Ping timeout: 246 seconds]
<clever>
shweta: what error is it giving?
fenedor has joined #nixos
<{^_^}>
[nixpkgs] @Ma27 pushed to master « nixos/ssmtp: declare all option renames manually »: https://git.io/JvDrm
organixpear has joined #nixos
doyougnu has quit [Remote host closed the connection]
ArchFeh has quit [Quit: archfeh]
<linarcx>
clever: What? Where?
<clever>
linarcx: tab-completed the wrong name, l and k are beside eachother
<{^_^}>
[nixpkgs] @Ma27 pushed to release-20.03 « nixos/ssmtp: declare all option renames manually »: https://git.io/JvDrs
fendor has quit [Ping timeout: 240 seconds]
<linarcx>
clever: No problem :)))
organixpear has quit [Client Quit]
teto has joined #nixos
shweta has quit [Ping timeout: 240 seconds]
<emily>
asking this again since no reply last time: is anyone running a nixos-unstable system with flakes? is there any reference material for how to switch your system over to using a flakes Nix and referencing nixpkgs as a flake, etc.?
magnetophon has joined #nixos
<Orbstheorem>
Hello, I've installed nixos using `nixos-install` based on this system derivation: https://gitlab.com/roosemberth/dotfiles/-/commit/a9ad31688cfa6d23e05e1d8637c5ad587e0a2ac7 (I've set and verified the disk UUIDs myself). When I boot the system in bare hardware it can't find find the block device with the disk UUID, after ssh'ing to the initramfs I realised there are no /dev/sd* nodes and /dev/disk/by-uuid
<Orbstheorem>
doesn't exist. The disk where I installed the system is the same that was booted. I can see that the kernel initialized the ata5 link to UDMA/133. udev (systemd-udevd) is running.
<ottidmes>
driver issue?
<clever>
Orbstheorem: is it a sata or usb disk?
<Orbstheorem>
sata ^^
<clever>
Orbstheorem: have you looked at the hardware-configuration that nixos-generate-config makes for that machine?
<Orbstheorem>
I have not
<misuzu>
Orbstheorem: make sure that `boot.initrd.availableKernelModules` has all modules listed in `nixos-generate-config --show-hardware-config`
* Orbstheorem
reboots to a nixos live
<{^_^}>
[nixpkgs] @veprbl merged pull request #81922 → Enable nvidia-optical-flow-sdk when building opencv4 with cuda → https://git.io/Jvw6g
<{^_^}>
Found in packages: libuuid.dev, utillinux.dev
<clever>
linarcx: add libuuid or utillinux to the buildInputs
<linarcx>
clever: what's the difference?
wozeparrot has joined #nixos
<clever>
16138 libuuid = if stdenv.isLinux
<clever>
16139 then utillinuxMinimal
<clever>
linarcx: ah, they are identical
<linarcx>
thanks.
tmplt has joined #nixos
<tmplt>
Are profile names stored somewhere? I think I tried to rebuild with an invalid name, now `nixos-rebuild` always fails (w/o -p, after reboot) with OSError 22, Invalid argument trying to create the temp file in /boot/loader/entries.
<clever>
tmplt: what does dmesg say?
<tmplt>
clever: oh the system boots, but I'm unable to create new generations.
<clever>
jakobrs: .so files should be in $out/lib/
<clever>
tmplt: i would expect that to work, what if you do `nixos-rebuild boot` again ?
<jakobrs>
I know that's where I'd expect it to be, but it's not in this case for whatever reason
<jakobrs>
If a derivation is capable of producing both 32-bit and 64-bit libraries at the same time, should the 32-bit and 64-bit libraries be in the same folder?
<clever>
jakobrs: id prefer to build only one, and use stdenv.system to decide which one to build
<{^_^}>
[nixpkgs] @NeQuissimus pushed 6 commits to release-19.09: https://git.io/JvDo5
<{^_^}>
[nixpkgs] @NeQuissimus pushed 6 commits to release-20.03: https://git.io/JvDob
<mmatthieu>
Hi everyone, Is there someone who knows how to run games like divinity original sin on dr
<mmatthieu>
* Hi everyone, Is there someone who knows how to run games like divinity original sin on steam ?
excelsiora has quit [Remote host closed the connection]
reallymemorable has quit [Quit: reallymemorable]
reallymemorable has joined #nixos
blaggacao has quit [Ping timeout: 256 seconds]
blaggacao has joined #nixos
cinimod has joined #nixos
waleee-cl has joined #nixos
knupfer has joined #nixos
<linarcx>
Guys, what's difference between buildInputs and nativeBuildInputs?
peelz has joined #nixos
<linarcx>
Where i put pkg-config and cmake?
<peelz>
I upgraded my NixOS and now everything GTK is mega zoomed in. What's up with that?
<peelz>
I'm on 19.09
akegalj has joined #nixos
<jtojnar>
linarcx nativeBuildInputs are for build time dependencies, buildInputs for run time
<linarcx>
jtojnar: Thanks
<jtojnar>
so pkg-config and cmake go to nativeBuildInputs
<linarcx>
Another question
<linarcx>
If a librarie required for both runtime and build time, should i place there in both places?
<cinimod>
I am trying to install octave on macos, I am modifying the default.nix in nixpkgs and making some progress. At the moment I get `ld: framework not found Cocoa` so I am trying https://gist.github.com/idontgetoutmuch/0bddedcd31366fe7249735c18ce06d54#file-default-nix-L98 but this fails with `error: value is a list while a set was expected, at /Users/dom/nixpkgs/pkgs/development/interpreters/octave/default.nix:98:32`
<jtojnar>
yup
<jtojnar>
linarcx you can also set `strictDeps = true;` to enforce the difference
<jtojnar>
cini: I would use (stdenv.lib.optionals stdenv.isDarwin darwin.apple_sdk.frameworks.Accelerate)
<jtojnar>
but it looks fine to me
<obadz>
general linux advice, are there filesystems that are particularly well suited to being nested via loopback? ext4 over ext4 feels inefficient given double journaling? I supposed LVM could be a good outer "filesystem". How about ext2 over ext4, is that a reasonable combo? Looking for someone who wants to discuss this with me :-)
<linarcx>
Guys, how can i find which package or file contains a c function name?
<obadz>
linarcx: try nix edit, or grep
<linarcx>
obadz: What? nix-edit?
<jtojnar>
linarcx I would use duckduckgo or debian code search to find the library
<linarcx>
I know the library. but seems it doesn't have certain functions.
<linarcx>
Seems it's a bug.
<obadz>
linarcx: nix edit is a command.. try nix edit nixpkgs.wget
fenedor is now known as fendor
<linarcx>
obadz: Wow, such a great thinkg. thanks..
<jtojnar>
and then grep nixpkgs/use package search/nix-index
<{^_^}>
libgit2/libgit2#5215 (by jvelilla, 29 weeks ago, closed): Undefined reference to `git_error_last' using libgit2 version 0.28.3
<linarcx>
jtojnar: No, it's there in library. The issue is from nix package.
<cinimod>
jtojnar: `++ (stdenv.lib.optionals (stdenv.isDarwin) stdenv.lib.platforms.darwin.apple_sdk.frameworks.Accelerate)` gives me `error: value is a list while a set was expected`
peelz has quit [Remote host closed the connection]
<{^_^}>
[nixpkgs] @bhipple opened pull request #83147 → [20.03] nixos-ami: update nvme_core.io_timeout for linux kernel >= 4.15 → https://git.io/JvDKc
<jtojnar>
linarcx that looks more like the build does not pass linking flags correctly
maddo2 has joined #nixos
<linarcx>
jtojnar: Hmm.. what can i do?
<linarcx>
You mean -lgit2?
<jtojnar>
cinimod I would try darwin.apple_sdk.frameworks.Accelerate instead of taking it from lib
<jluttine>
i'm getting "undefined reference" errors when building a package derivation. how should i add a dependency so that it's found? i tried buildInputs and propagatedBuildInputs
<cinimod>
jtojnar: but then it says: error: undefined variable 'darwin'
maddo has quit [Ping timeout: 240 seconds]
gustavderdrache has joined #nixos
delli3 has joined #nixos
<jtojnar>
cinimod did you add it to the arguments (line 1-53)?
<jtojnar>
linarcx yup -lgit2, will check
<jtojnar>
jluttine buildInputs should do it if the project's build scripts are not borked
<cinimod>
jtojnar: then I get error: value is a set while a list was expected, at /Users/dom/nixpkgs/pkgs/development/interpreters/octave/default.nix:169:35
is_null has quit [Remote host closed the connection]
<{^_^}>
[nixpkgs] @s9gf4ult opened pull request #83152 → qxmledit: init at 0.9.15 → https://git.io/JvDKi
<evils>
i'm packaging tuptime, which keeps a database and sometimes changes its format, should i do something with stateVersion now, or only deal with that if they change their format again?
hmpffff has joined #nixos
alexherbo2 has joined #nixos
<{^_^}>
[nixpkgs] @grahamc merged pull request #83147 → [20.03] nixos-ami: update nvme_core.io_timeout for linux kernel >= 4.15 → https://git.io/JvDKc
<{^_^}>
[nixpkgs] @grahamc pushed 2 commits to release-20.03: https://git.io/JvDKH
<jtojnar>
cinimod, weird, I would expect that to work
timsears has joined #nixos
T_S_ has quit [Quit: rcirc on GNU Emacs 26.3]
<samueldr>
evils: it's more for when *nixos* changes the state schema for a package than for when a package changes its own state schema
<samueldr>
evils: e.g. when we moved postgresql's data folder
<jtojnar>
cinimod also do not see -L flags which I would expect pkg-config to pass but perhaps cmake strips them
<{^_^}>
[nixpkgs] @roberth pushed 2 commits to haskell-updates: https://git.io/JvDK5
<samueldr>
evils: anyway a user should not change stateVersion, so what would happen when tuptime changes it schema? user will be forced to change it? two distinct versions would be maintained%?
<evils>
samueldr: yea, there's some migration scripts in the source, it does mean an update could break stuff
<linarcx>
jtojnar: Yes, it's because i'm on channel 19.09 and libgit2 version for this channel is: `libgit2-0.27.8` that doesn't cantain that function. But in unstable channel we have this function.
<evils>
samueldr: well, presumably a newer version of the package could be stopped from working if the database is in the old format
<samueldr>
stateVersion could be better named "whenWasThisInstallationFirstSetupSoWeCanFindTheFilesAtTheRightPlace"
<raboof>
is it possible to override bootStage2 when creating a lxc image with nixos-generators? I tried the simplistic thing at https://pastebin.com/8uZuPBaZ but that doesn't seem to have any effect
<xfix>
in general, you don't want to modify stateVersion
bandali has joined #nixos
<evils>
samueldr: that would probably cut down on a lot of questions xD
<samueldr>
evils: the nixos-side service AFAIK would need to know about running the migration on start
<linarcx>
there is newer versions of it. But it's still an old version. Is it possible in future it update?
v88m has joined #nixos
<xfix>
yes, in fact it is already updated
<linarcx>
No. newer version is 2-0.99.0
<xfix>
what you are looking for is a version of libgit2 in release-19.09
<linarcx>
it doesn't have a function
<xfix>
on master, the version is 0.99.0
<linarcx>
And my application can't build
<linarcx>
Should i change to channel unstable for this issue?
<linarcx>
Or there is another solutions?
o1lo01ol1o has quit [Remote host closed the connection]
<evils>
samueldr: looking at their migrate scripts, it doesn't seem to check if the database is already the target version, thanks for the suggestion though
o1lo01ol1o has joined #nixos
<xfix>
in short, to ensure stability, for stable releases like 19.09, only security updates are applied
reallymemorable has joined #nixos
<linarcx>
xfix: Hmmm...
<xfix>
so what can you do? well, you can import libgit2 from unstable, for instance
turion has quit [Ping timeout: 250 seconds]
<linarcx>
How do that? (in shell.nix)
<{^_^}>
[nixops-aws] @bhipple opened pull request #32 → py3 prep: relative imports and exception syntax → https://git.io/JvD6J
<{^_^}>
[nixops] @grahamc opened pull request #1261 → Add types to argparse calls → https://git.io/JvD6U
<xfix>
you can have a separate unstable channel, for instance
<xfix>
or you can use fetchTarball to import unstable nixpkgs
<SimonAlling>
I used to nick Alling, but it's registered according to the server. Dunno if it was me who registered it. Anyway. I'm having some trouble with Murmur and TLS.
blaggacao has quit [Read error: Connection reset by peer]
<SimonAlling>
Running Murmur on my server, but I can't connect anymore with Mumble 1.3.0+dfsg-1. Error on client: "This server is using an older encryption standard, and is no longer supported by modern versions of Mumble."
blaggacao has joined #nixos
<SimonAlling>
Error in journalctl on server: "Connection closed: Error during SSL handshake: error:1408F10B:SSL routines:ssl3_get_record:wrong version number [13]"
<SimonAlling>
NixOS 18.03 with nixos-19.09 as "main system channel"(?).
<tilpner>
SimonAlling: Yes, Alling was registered by you. You can probably reset your password with a PM to NickServ
cinimod has quit [Read error: Connection reset by peer]
<SimonAlling>
tilpner: (Y)
cinimod has joined #nixos
<tilpner>
SimonAlling: Which murmur version does your system end up running?
<{^_^}>
[nixpkgs] @roberth pushed commit from @gnprice to release-20.03 « python39Full: fix to use Python 3.9 rather than 3.8 »: https://git.io/JvD6Z
<SimonAlling>
tilpner: Seems to be murmur-1.2.19 based on the nix path.
<{^_^}>
[nixpkgs] @rnhmjoj closed pull request #82425 → vulkan-loader: use vulkan-headers include path in pkgconfig file → https://git.io/Jv6aL
<{^_^}>
[nixpkgs] @rnhmjoj reopened pull request #82425 → vulkan-loader: use vulkan-headers include path in pkgconfig file → https://git.io/Jv6aL
timsears is now known as T_S_
<{^_^}>
[nixpkgs] @rnhmjoj merged pull request #82425 → vulkan-loader: use vulkan-headers include path in pkgconfig file → https://git.io/Jv6aL
<tilpner>
Use that (^) with 20.03 instead of unstable, or just switch the channel if you're up for it
cinimod has quit [Ping timeout: 250 seconds]
<kraem>
clever: i am getting the "outPath to addPath" error if i'm having `yarn = builtins.path ...` and if i don't have it it says "value is a string with context while a set was expected". what am i missing? https://bpaste.net/WFAA
<SimonAlling>
Ooo, might be worth a shot!
<purpleman>
Hello everybody
<clever>
kraem: stop using builtins.path, you almost never need it
<purpleman>
I'm new to nix and I'm trying to add a plugin to gdb (gnu debugger) by packaging gdb using a shell script. Since it adds a config file, I have no binary expect of gdb. So I thought to create a small script with a name and execute gdb inside it (like an alias). Nix mkderivation compiles it but nix-shell tells me: command not found
T_S_ has left #nixos [#nixos]
<SimonAlling>
tilpner: Hmm ... I tried installing Mumble from snap instead of apt and now it works as usual. (I probably have the snap version on my laptop, where it works.) I'll refrain from modifying anything right now, as I really need the Murmur server working, but I'll stash your 20.03 tip for when someone can't connect anymore. :)
T_S_ has joined #nixos
<timsears`>
.
timsears` has quit [Quit: rcirc on GNU Emacs 26.3]
<kraem>
clever: alright :) how do i bind the variable to the attrset of "sources.nixpkgs + /path/to/yarn.nix" and not the path-string?
<clever>
kraem: path + "string" always results in a path
SimonAlling has left #nixos [#nixos]
<ottidmes>
Is there a linux prog that would merge common prefixes, I have a hard time googling it, for now I just call mkdir -p a bunch of times unnecessarily, but don't like it (off topic, but I am looking into this for my NixOS config)
<ottidmes>
So ./nixos/modules and ./nixos/modules/installer would become just the latter
<xfix>
what do you mean by that?
<cole-h>
Why wouldn't you just `mkdir -p ./nixos/modules/installer`?
<superbaloo>
how can I find which package to install to get a manpage ?
<ottidmes>
cole-h: that is what I want, but its part of a script that generates these paths
<clever>
superbaloo: use nix-locate to see which package includes the man page
<xfix>
what's the problem with unnecessarily generating directories?
slack1256 has joined #nixos
<superbaloo>
clever: thanks!
<kraem>
clever: makes sense. `yarn = (sources.nixpkgs + "/pkgs/development/tools/yarn/default.nix"); builtins.trace yarn` reports string though and overrideAttrs won't take it
Makaveli7 has joined #nixos
<cole-h>
kraem: Maybe you want to `callPackage` it?
c0c0 has quit [Ping timeout: 256 seconds]
knupfer has quit [Ping timeout: 246 seconds]
knupfer has joined #nixos
<ottidmes>
xfix: well they might be hundreds of mkdir -p calls, although it should be fast enough, filtering the list of paths that are unnecessary cause the deeper mkdir -p would already handle them would also cost time
timsears has joined #nixos
akegalj has quit [Remote host closed the connection]
<clever>
kraem: if you just want the yarn/default.nix in nixpkgs, its already been callPackage'd and is at pkgs.yarn
<xfix>
let's say, 300 syscalls, kind of nothing I feel like
<xfix>
by the way, you can pass multiple arguments to `mkdir -p`
<xfix>
which avoids the cost of `exec` syscall
<cole-h>
Which means you can use brace expansion as well
<cole-h>
Why can't you just use the `WANT` directly?
<ottidmes>
clever: Its generated by a script, I am not manually writing those calls, so brace expansion is out
<xfix>
300 syscalls assuming on average you create 3 directories per mkdir -p, this seems like it would be really fast
timsears has quit [Quit: rcirc on GNU Emacs 26.3]
<xfix>
i wouldn't be worried about performance, unless you can prove it's slow
<cole-h>
ottidmes: Can you modify said script?
<xfix>
most of the cost would be I assume creating the directories, for already existing directories, I assume kernel will figure out rather quickly from the cache that the directory already exists
sleepingforest has quit [Quit: bye!]
<kraem>
clever: i want to override the version of it as well.
<xfix>
and trimming the list of directories is not going to shorten the time for creating the directories
<purpleman>
Can someone tell me how to package a bash script using mkderivation ?
<kraem>
cole-h: ah i thought i'd have to call stdenv.mkDerivation on it but `yarn/default.nix` is of course a function which calls mkDerivation itself
<ottidmes>
purpleman: lol, well you could look at the gist I just posted before you, although there are slight different ways
<s1341>
ohi. i'm getting this error: error: the lock file /tmp/nix-build-page-2.3.3.drv-1/source/Cargo.lock needs to be updated but --frozen was passed to prevent this
<s1341>
i'm trying to update my PR to a new version of the tool....
<s1341>
(that i'm packaging)
<s1341>
but i don't know what this error means...
<xfix>
i don't think you need mkDerivation for something as simple as bash script
<clever>
kraem: you can use pkgs.yarn.overrideAttrs
<purpleman>
ottidmes: thanks, I'm checking it out
<clever>
kraem: yarn isnt as complicated as nodejs
<purpleman>
xfix: I want to run gdb with gef library which is loaded via .gdbinit when gdb starts. .gdbinit contains the source of gef.py.
chimay has joined #nixos
<ottidmes>
kraem: and I just installed yarn via, npm -g install yarn
<xfix>
i think it would make sense to make a wrapper script for gef, ending with two derivatios
<purpleman>
I don't know how to wrap it in a nix package called gef. So when I run gef it runs gdb with the config file I fetched
<purpleman>
What would be a nice idea, but gdb load gef using the file .gdbinit which contains only the line: echo source ~/.gdbinit-gef.py >> ~/.gdbinit
cr4y1 has joined #nixos
<kraem>
clever: `yarn_v1211 = pkgs.yarn.overrideAttrs { version="1.21.1"; src=....}; ... buildInputs = [ yarn_v1211 ];` leaves me with "error: attempt to call something which is not a function but a set"
<kraem>
clever: ah thanks - now on to combining the overriden yarn and node
Dagger2 has joined #nixos
<xfix>
this would mean that if you would let gef built using nix-build change your configuration files, the paths would become outdated the moment package gets updated, and then with nix-collect-garbage you could end up in a spot where gef no longer exists, and gdb is confused
blaggacao has quit [Read error: Connection reset by peer]
peelz has joined #nixos
reallymemorable has joined #nixos
blaggacao has joined #nixos
<xfix>
so, what can be done? the easiest solution is to modify gdb to use different default settings
<purpleman>
xfix: Yes you are right, my solution isn't good because I'm still trying to learn the Nix way. So how would you implement it ideally ?
<xfix>
it's non-trivial, i know, but hey, that's how things so sometimes
<xfix>
or you could consider managing your home with nix (with programs like home-manager), also kinda non-trivial
<purpleman>
How would you tell gdb to look on the config file .gdbinit ?
<purpleman>
Yep, that's not the way I want to do it. I'm trying to move all my environments to nix and then to switch to NixOs
hmpffff has quit [Ping timeout: 272 seconds]
<purpleman>
So I'm learning how to get into this Nix thinking approach
T_S_ has joined #nixos
<peelz>
Nautilus isn't generating any thumbnails for my pictures. I'm running on a tiling WM. Any idea why?
<xfix>
see, the problem is, what gef is doing isn't really compatible with Nix derivations
<xfix>
so getting that to work is more complicated
hmpffff has joined #nixos
<purpleman>
crap
<xfix>
it can be done (probably the best approach would be to modify gdb), but it isn't simple
<jtojnar>
peelz thumbnailers should be self contained
<jtojnar>
any messages in concole?
<peelz>
lemme check
<peelz>
nothing at all
<peelz>
jtojnar: it may or may not have worked previously because ~/.thumbnails contains some files
<peelz>
not sure what's happening
justanotheruser has joined #nixos
<jtojnar>
iirc ~/.cache/thumbnails/ would be used
<peelz>
doesn't exist on my end
<purpleman>
xfix: I know that the approach of wrapping gdb into a new package isn't the best way, but for now I want to stick to it. Probably into the future I'll try to modify gdb
<purpleman>
So the question now is, why nix-shell cannot find the bash script called gef like a command ?
<xfix>
first thing first, there is no such a thing as /bin/bash
<xfix>
first things first*
<jtojnar>
peelz do you have XDG_CACHE_HOME variable set? then it would be in there
<jtojnar>
peelz looking at the code, it would only use the cache home directory (falling back to ~/.cache)
slack1256 has quit [Ping timeout: 256 seconds]
<purpleman>
funny haha, did not know that. I thought you could create a script to be run. Got to this solution because I saw someone that packaged a python script into a nix derivation. Now even that solution doesn't work lol
blaggacao has quit [Read error: Connection reset by peer]
o1lo01ol1o has quit [Remote host closed the connection]
blaggacao has joined #nixos
o1lo01ol1o has joined #nixos
turion has joined #nixos
<peelz>
jtojnar: hmmm... not sure what's going on
<{^_^}>
[nixpkgs] @veprbl merged pull request #82065 → [20.03] glibc: provide fallback for kernels with missing prlimit64 → https://git.io/JvrAB
<{^_^}>
[nixpkgs] @veprbl pushed 2 commits to staging-20.03: https://git.io/JvDis
bennofs has quit [Quit: No Ping reply in 180 seconds.]
<jtojnar>
peelz you can kill nautilus and try running `env G_MESSAGES_DEBUG=all nautilus` in terminal
bennofs has joined #nixos
<peelz>
not much getting printed
<jtojnar>
how does it look like? do you see the icon with ellipsis and then it turns into a generic image icon?
m0rphism1 has quit [Quit: WeeChat 2.7.1]
<{^_^}>
[nixpkgs] @deedrah opened pull request #83155 → alsa-lib: 1.1.9 -> 1.2.2 and new alsa conf packages → https://git.io/JvDi4
<peelz>
jtojnar: well, nautilus detaches from the terminal rather quickly so it doesn't print much
o1lo01ol1o has joined #nixos
<jtojnar>
peelz did you kill it first?
<peelz>
yeah
<jtojnar>
if you have another insance running it will detach but otherwise it should remain attached
<peelz>
weird because it's definitely getting detached
slack1256 has joined #nixos
<peelz>
oh there was an invisible instance... wth
<cole-h>
jtojnar: Sorry to interrupt, but while you're here... Do you have any idea why the icons in lollypop (or any gnome app really) would look like this: https://paste.rs/4wt.jpg ? Is it likely because I'm not on NixOS?
<ottidmes>
peelz: lol... got to facepalm myself too, apparently I switched to nautilus some time ago (think it had to do with external drives working better in nautilus), no wonder it behaved the same XD
<ottidmes>
peelz: to make up for that, I checked with nix-shell -p xfce.thunar and it does show the thumbnails in list mode, and let me check if it remembers
<jtojnar>
I suppose you have them in /usr/share and that is not in XDG_DATA_DIRS, so apps that set XDG_DATA_DIRS (everything using wrapGAppsHook) will not be able to see them
<jtojnar>
cole-h but that is just a guess
<kraem>
clever: thank you for all your help. had to disconnect earlier but here's the final derivation: https://bpaste.net/WDAA
<kraem>
clever++
<{^_^}>
clever's karma got increased to 358
kolbycrouch has joined #nixos
<clever>
kraem: nice
<linarcx>
Guys, i want to set locale inside my shell.nix. so: i set `LOCALE_ARCHIVE = "${glibcLocales}/lib/locale/locale-archive";`. But i get this error:
<kraem>
clever: what's generally preferred? to call `(yarn-vXX.override { nodejs=nodjes-custom; })` or to override the buildInputs within the pkgs.yarn.overrideAttrs? are they used in different ways in different situations or do they basically always work the same?
<clever>
kraem: if you use overrideAttrs, you have to either re-create the buildInputs list, or filter things out, then add things back in
<clever>
kraem: .override is much simpler, when the things you want to change are at that level
<cole-h>
jtojnar: If you point me to where I should put that information, I'd gladly do it. Unless you want to take care of it.
<{^_^}>
[nixops-aws] @bhipple opened pull request #34 → py3-prep: fix filter with list comprehensions → https://git.io/JvDPp
<jtojnar>
cole-h I am not sure, maybe a wiki page for using graphical applications on Arch
<jtojnar>
by the way do you have nix profile in XDG_DATA_DIRS
<kraem>
clever: oh sorry, i was looking at my branch where i had the input param modified to be able to install yarn with node-13_x with `nix-env` :P
turion has joined #nixos
<jtojnar>
cole-h perhaps the recomendation coul judt be to install icon theme like adwaita using nix
o1lo01ol1o has joined #nixos
jumper149 has joined #nixos
leonardp has quit [Remote host closed the connection]
mniip has joined #nixos
purpleman has quit [Read error: Connection reset by peer]
o1lo01ol1o has quit [Remote host closed the connection]
ZoomZoomZoom has joined #nixos
o1lo01ol1o has joined #nixos
<energizer>
anybody who has dunst installed mind confirming that `man dunst` doesn't work?
<kraem>
clever: thanks again! your help really helped me understand how callPackage, overrides and all the derivations in nixpkgs are connected
Havvy has quit [Read error: Connection reset by peer]
Havvy has joined #nixos
<tilpner>
energizer: man dunst works here
<energizer>
tilpner: which version of dunst do you have, and where did you install it from?
cosimone has quit [Quit: Terminated!]
<cole-h>
jtojnar: My XDG_DATA_DIRS was empty. And I did have `gnome3.adwaita-icon-theme` in my packages (maybe home-manager doesn't install it properly/to the right place?)
<tilpner>
energizer: I'm not aware of any variations. It's "dunst" from nixos-20.03
<energizer>
tilpner: ok
<tilpner>
/nix/store/d2xaw9fsz1lp6mkgiq010lgkvr1dzpfz-dunst-1.4.1 in cache.nixos.org
<claudiii>
I'm trying to setup a hetzner root server with nixops but i get a `blivet.errors.FormatCreateError: ('invalid device specification', u'/dev/sdb2')` error
<{^_^}>
[nixops-aws] @grahamc merged pull request #34 → py3-prep: fix filter with list comprehensions → https://git.io/JvDPp
<claudiii>
that is with the default partitio scheme and nixops 1.7
chimay has quit [Ping timeout: 264 seconds]
linarcx has quit [Ping timeout: 250 seconds]
ZoomZoomZoom has joined #nixos
shibboleth has quit [Quit: shibboleth]
<{^_^}>
[nixops-aws] @bhipple opened pull request #36 → py3 prep: foo.values() does not return an indexable list → https://git.io/JvDXK
<ZoomZoomZoom>
Hi. nixos-rebuild fails on the GRUB stage with the following error: https://pastebin.com/v5maUb0A What should I do?
Neo-- has joined #nixos
<ZoomZoomZoom>
"/dev/sde1" is a boot partitions (vfat)
Makaveli7 has quit [Quit: WeeChat 2.7.1]
<clever>
ZoomZoomZoom: did you run nixos-rebuild as root?
<cole-h>
Stupid question, but doesn't hurt to ask: are you running with `sudo` or otherwise as root?
<ZoomZoomZoom>
clever, you mean ever?
<pie_[bnc]>
i stull get hung up on basic stuff like this:
<energizer>
are you uspposed to run nixos-rebuild as root or not?
<pie_[bnc]>
if i have a function in a default.nix, how do i call it with nix-build?
<pie_[bnc]>
{pkgs ? stuff}: ...
<energizer>
supposed*
<pie_[bnc]>
im doing nix-build default.nix -A sometihngorother
<cole-h>
ZoomZoomZoom: You need to run `nixos-rebuild` as root for everything (or almost everything)
<clever>
,callPackage pie_[bnc]
<{^_^}>
pie_[bnc]: If a Nix file foo.nix starts with something like `{ stdenv, cmake }:`, you can build it with `nix-build -E '(import <nixpkgs> {}).callPackage ./foo.nix {}'`
<ZoomZoomZoom>
cole-h, I use sudo
ChimeraZara has joined #nixos
<{^_^}>
[nixops-aws] @grahamc merged pull request #36 → py3 prep: foo.values() does not return an indexable list → https://git.io/JvDXK
<pie_[bnc]>
clever: i think i see whats going on 'xD
<pie_[bnc]>
clever: does that mean argstr applies to any uncalled function along the evaled attrs?
<clever>
pie_[bnc]: basically, for every attr in the `-A foo.bar.baz`, nix will try to call it with all --arg and --argstr
<clever>
yep
<{^_^}>
[nixops-aws] @bhipple opened pull request #37 → Migrate nixops-aws to python3 → https://git.io/JvD1u
gustavderdrache has quit [Quit: Leaving.]
<{^_^}>
[nixpkgs] @markuskowa pushed commit from @ckesg to release-20.03 « redo-apenwarr: 0.42 -> 0.42a; use python3 and fixed building manpage »: https://git.io/JvD1V
<Nafai>
nixops-aws, hmm. That reminds me. Anyone got hints on the latest and greatest way to run nixos on AWS - to run things like IRC, etc?
oever has quit [Read error: Connection reset by peer]
<hodapp>
are there any good write-ups on how to get a functioning setup with Rust + Racer, maybe with Emacs?
<raboof>
clever: hmm, "'/nix/store/x5wir58d412060vlxh21p3z2x48cy0q9-nixos-system-nixos-20.09.git.40cd29c2693' does not depend on '/nix/store/gh9a48qcwzw588vy4w72w93kad0mhhi8-gcc-9.2.0'"
<hodapp>
I see references to needing the Rust overlay but don't understand a lot of this
<hodapp>
and out-of-the-box Racer doesn't really work (at least in Emacs) because racer-rust-src-path/RUST_SRC_PATH point somewhere nonexistent
cosimone has joined #nixos
shibboleth has joined #nixos
<kalbasit>
how can I override lib in a `import <nixpkgs> { config = {}; overlays = []; }`? Can it be done via an overlay?
joesbushi has joined #nixos
<clever>
kalbasit: you could use an overlay to just change lib
<clever>
that would affect pkgs.lib
<kalbasit>
ok I'm going to try that
Desetude has joined #nixos
<kalbasit>
yay, worked!
<kalbasit>
I don't know why I thought it wouldn't work 🤔
joesbushi is now known as tlux
scream has left #nixos ["Kicked by @appservice-irc:matrix.org : issued !quit command"]
<raboof>
clever: it shows up via /nix/store/h1fh4y7vkhh46x6z6g032jrmv71bx8km-stdenv-linux , but then I get stuck: h1fh4y7vkhh46x6z6g032jrmv71bx8km doesn't seem to appear anywhere in the tarball (except in /nix-path-registration)
<clever>
,locate bin/nixos-generate
<{^_^}>
Found in packages: nixos-generators
<clever>
$ vi nixos-generators/share/nixos-generator/formats/lxc.nix
opthomasprime has quit [Remote host closed the connection]
<raboof>
I don't think I need nix-shell inside the container though, so I'd be best off using a modified nixos-generate I guess? (or perhaps copying over just the parts of nixos-generate I need to my project?)
<{^_^}>
[nixpkgs] @lasandell opened pull request #83163 → shortwave: init at 1.0.1 → https://git.io/JvDyC
opthomasprime has quit [Remote host closed the connection]
cinimod` has quit [Ping timeout: 246 seconds]
kleisli has joined #nixos
cinimod` has joined #nixos
<clever>
raboof: yeah
<raboof>
cool, thanks for helping me navigate a bit better ;)
knupfer has quit [Ping timeout: 264 seconds]
Rusty1 has quit [Remote host closed the connection]
oever is now known as vandenoever
<{^_^}>
[nixpkgs] @peti pushed 2 commits to haskell-updates: https://git.io/JvDy5
Nafai has joined #nixos
<boogiewoogie[m]>
hey, is there a way to create files in absolute paths in a derivation? (e.g. copy prepared configs or files in $src to ~/.config)
<{^_^}>
[nixpkgs] @peti opened pull request #83164 → Update Haskell package set to LTS 15.5 (plus other fixes) → https://git.io/JvDyp
<gchristensen>
no
johnw has joined #nixos
<boogiewoogie[m]>
okay, thanks
<gchristensen>
instead of, say, emacs reading my config files from ~/.emacs/, I instead create a wrapper around emacs which knows my plugins are at /nix/store/....-grahams-config
hmpffff has quit [Quit: nchrrrr…]
knupfer has joined #nixos
<boogiewoogie[m]>
ah, gotcha!
ZoomZoomZoom has quit [Ping timeout: 256 seconds]
turion has quit [Ping timeout: 272 seconds]
philr has joined #nixos
<{^_^}>
[nixops-aws] @bhipple opened pull request #38 → Bugfix: known_hosts update on nixops destroy → https://git.io/JvDSa
<evils>
what's the best way to chmod a directory from a nixos module?
<energizer>
does home-manager give all the benefits of that strategy?
<{^_^}>
[nixops-aws] @bhipple opened pull request #39 → Bugfix: SSH public key creation has to be encoded into bytes → https://git.io/JvD9I
<energizer>
HM doesn't do "`emacs` will work the same no matter who runs it" but that's probably for the best since nobody else would like my .emacs
codygman has quit [Read error: Connection reset by peer]
vandenoever has quit [Read error: Connection reset by peer]
codygman has joined #nixos
<gchristensen>
as much as possible, I like the build output to be completely independent, and only use things like home-manager or nixos configuration for things which simply cannot be feasibly done that way
vandenoever has joined #nixos
vandenoever has joined #nixos
vandenoever has quit [Changing host]
nerdmaxx has joined #nixos
reallymemorable has quit [Quit: reallymemorable]
<energizer>
by independent you mean the only input should be ~/.nixpkgs/config.nix ?
<energizer>
(sorry for the barrage of questions, still getting the feel of things...)
<gchristensen>
I mean I can do nix-build ./emacs.nix, and get out a ./result/bin/emacs where I can try out that new version
<energizer>
ok i see
<gchristensen>
and if I have a bug report, I can upload that emacs.nix and be done prett ymuch
knupfer has quit [Remote host closed the connection]
bhipple has quit [Ping timeout: 250 seconds]
<colemickens>
Can you have a module in an overlay? I tried to do this a while back and never could figure it out. I think NUR claims to allow it but I'm not sure I've seen a full example before.
<colemickens>
It seems like it's just more nix, it ought to be possible?
<MichaelRaskin>
I think nixos-option is kind of similar
<colemickens>
nixos-option
<simpson>
Also nixos-option
<cole-h>
Did anybody mention nixos-option yet? Because that's pretty handy, too
<cole-h>
:P
v0|d has quit [Remote host closed the connection]
o1lo01ol1o has quit [Remote host closed the connection]
<energizer>
what do i do about data that's private but not super-secret, such as ~/.ssh/config?
o1lo01ol1o has joined #nixos
<energizer>
things that fall under "opsec"
v0|d has joined #nixos
<energizer>
do you put them in your dotfiles repo on github or what?
<colemickens>
I use a dotfiles repo + git-crypt
cosimone has joined #nixos
<cole-h>
^
reallymemorable has quit [Quit: reallymemorable]
astrofog has joined #nixos
furzio has joined #nixos
o1lo01ol1o has quit [Ping timeout: 250 seconds]
<danderson>
energizer: git-crypt + custom keys deployment goop that integrates with nixos (so that nixos knows when a secret changes, but not what the secret is)
<danderson>
for my personal homelab use case, I just need "I give you a symmetric key and you decrypt my stuff". git-crypt does that well.
<danderson>
and once initialized, it stays out of the way.
<colemickens>
do you use it without having to involve gpg then?
<danderson>
that doesn't scale to multi-user though. git-crypt and git-secret both try to solve that with using GPG and public keys
<danderson>
colemickens: maybe? I'm sure on the inside git-crypt still uses gpg for stuff somewhere
<danderson>
but from my UI perspective, there are no GPG keys or anything
<danderson>
I just git-crypt init <<<"my-secret-key" after initial clone, and voila, my secrets are there.
furzio has left #nixos [#nixos]
<cole-h>
Unfamiliar with git-secret, but I like git-crypt because I don't have to think about de/encrypting. It's encrypted on push. It's decrypted on my FS
<bqv[m]>
You could achieve that with filters, no?
<cole-h>
That's what git-crypt does under the hood
sleepingforest has quit [Quit: bye!]
<bqv[m]>
Makes the sense
<cole-h>
I don't want to learn how to use git's filters, so I let git-crypt do it for me :P