<icey__>
The gist being, that I would like to have a cron job or systemd timer that periodically fetches from github and thus updates the contents of the nginx server
<icey__>
however, I can't find an intelligent way how to clone the repo using configuration.nix
<cole-h>
pjt_014: There is a fetchgit, but again, it would fetch the entire repository every time it runs, which will add up over time if you have a fixed amount of bandwidth
arahael2 has quit [Ping timeout: 264 seconds]
<pjt_014>
you sure there isn't a wrapper around just Git itself though?
<icey__>
I was looking at the options, git doesn't really have anything
<icey__>
neither in home-manager
<icey__>
I mean, there definitely is fetchFromGitHub
<cole-h>
pjt_014: That wouldn't help because it would still need to be copied into the nix store every time it runs...
<icey__>
and if it creates a repo, then that'd be the initial clone
ivan has joined #nixos
<icey__>
well, the cron job just does a `git fetch && git checkout --force`
<icey__>
or the moral equivalent
<icey__>
it doesn't clone anymore
CRTified has joined #nixos
<cole-h>
The nix store is not writable
<icey__>
ah, so that's a problem.
<icey__>
In that case, it's probably easiest to check in the cron job if it's already cloned
<hexo_>
/nix/store/q7611jb12r1jy21dxj9sdgnnyrzfj62y-bootstrap-stage1-stdenv-linux/setup: ./configure: /bin/sh: bad interpreter: No such file or directory
<simpson>
ldd it? Is that interpreter present and executable? ldd the interpreter? "bad interpreter: permission denied" usually meens something doesn't have +x. It *could* also mean that you're trying to run a binary which isn't loadable on your architecture, I guess, which is a danger in your current situation.
<simpson>
Mind-reading a bit, I think that the reason for the scope and bindings is that git-oriented tooling usually desires ambient authority over various binaries that need to be discovered at runtime.
<pjt_014>
that reminds me: is the repl a good place to fix broke pkgs? I know of one in nixpkgs that's refusing to build, which is a bit concerning since it's a single C file and header
<simpson>
The best way to fix nixpkgs is to make a git checkout of nixpkgs, IMO. The REPL can be run from within a git checkout of nixpkgs in order to test changes, sure.
<pjt_014>
hm. on an extremely related note, would that be in/alongside ../pkgname/default.nix?
h0m2 has quit [Ping timeout: 246 seconds]
slack1256 has joined #nixos
<simpson>
Probably.
h0m2 has joined #nixos
<pjt_014>
makes sense. Time to start trying semi-random stuff.
<pjt_014>
also one last thing I can think of right now: do you happen to know what tic is imported from?
<{^_^}>
[mobile-nixos] @samueldr opened pull request #105 → Enable CONFIG_USB_RTL815* options for multiple devices → https://git.io/JvSd0
<ashkitten>
is there an environment variable to temporarily disable the sandbox?
<simpson>
,locate bin/tic
<{^_^}>
Found in packages: ncurses, ncurses5
<pjt_014>
simpson: thanks
<pjt_014>
ashkitten: in nix.conf
<pjt_014>
sandbox can be set to false
<pjt_014>
not sure about an env var
<ashkitten>
pjt_014: in nixos isn't the nix configuration managed by a nixos module?
<ashkitten>
i don't think i can just edit nix.conf
<hexo_>
--option sandbox false ?
<simpson>
nix.conf does work, I thought?
<hexo_>
i saw something like that in docs today
<pjt_014>
I think they only want it disable for a one-off build
<ashkitten>
well, i need it until i can disable it system wide
<ashkitten>
because cgroups don't work under this device's kernel so the sandbox is broken
<ashkitten>
so i can't rebuild with it enabled
<cole-h>
In which case `--option sandbox false` works for single builds
<cole-h>
Or should work
<pjt_014>
might be --argstr or --arg instead
* cole-h
is not on NixOS and so cannot corroborate whether or not this is true
<cole-h>
It's not
<ashkitten>
i also need to do `nix-channel --update` without the sandbox
<ashkitten>
nix-channel doesn't seem to take args
<samueldr>
ashkitten: you can `mv /etc/nix /etc/something_else` and create copy back the configuration into a fresh nix folder to unbreak / make nix usable
<samueldr>
/etc/ is kinda hybrid in being managed by nix
<bsima>
i need to package a python program with bindings to a c library, are there any examples or docs on this?
<energizer>
how do i fetchurl from ssh instead of http?
<hexo_>
is /bin/sh supposed to be in bootstrap-tools.tar.xz, pretty please?
<energizer>
bsima: do you already have a working setup.py?
<{^_^}>
#32732 (by bobvanderlinden, 2 years ago, closed): fetchurl for private resources
<energizer>
bsima: idk if there's a guide, but have you looked at some of the popular python libraries that use C?
slack1256 has quit [Ping timeout: 250 seconds]
<bsima>
nat yet, i think numpy uses c? i'm not super familiar
<simpson>
hexo_: My next steps would be ldd and strace. ldd might help show what's wrong with the ELF binaries involved; strace can reveal which syscall is failing and why.
is_null has quit [Read error: Connection reset by peer]
<jlv>
How can I change the uid of a user? Changing the `users.users.<name>.uid` option results in a warning that the uid will not be changed.
<energizer>
bsima: numpy uses c and fortran. scipy, psycopg2, and many others also use C
<hexo_>
simpson: ill try ldd and strace, let me see what happens
* hexo_
still feels like without hands dealing with this :D
<simpson>
No worries. Doing cross-compilation and bootstrapping is an adventure.
<colemickens>
how do I do nix-copy-closure --from file:///path like I can do with `nix copy`?
<hexo_>
cross-compile did someone else
<colemickens>
I think I'm on a box where I can't use `nix copy`.
<hexo_>
i'm fighting it on ppc64le side now
<hexo_>
and still have no idea what i'm doing
<hexo_>
(a little bit)
<hexo_>
:D
<hexo_>
could just the package be broken?
<hexo_>
and it is it?
<hexo_>
so if i patch broken configure somehow, it should work?
<hexo_>
isn't it that it's just not in dependencies, somehow?
<simpson>
Possibly. But also could be a situation where your existing userland isn't lined up with what the bootstrapping tools need.
<cole-h>
colemickens: Not even by passing the feature flag that enables use of the nix2 command?
<hexo_>
or is this stupid thinking?
<hexo_>
hmmmm
<cole-h>
colemickens: `--experimental-features nix-command` I think it is
is_null has joined #nixos
<pjt_014>
colemickens: If you don't mind the clunkiness I think you could also possibly use nix-store --serve to 'serve' it and then consume it with nix-copy-closure --from localhost://..
oida has quit [Ping timeout: 240 seconds]
<pjt_014>
or not, but hey, trying stuff is fun :D
<colemickens>
I wound up using the experimental feature. I'm trying to write a script so that workaround would require some book-keeping.
<colemickens>
If I didn't have the xperimental feature, I was going to go there.
<colemickens>
Or just forward ssh and ssh://localhost ;)
<thomashoneyman>
For those of you who occasionally need to use software not available for Linux (for example, music software which only works on Windows or MacOS), other than dual booting, how do you do it?
<thomashoneyman>
Is my best bet to install some sort of virtual machine and run Windows in it?
<simpson>
I modified my desires, and sometimes my USB drivers. Which software do you need? There's no substitute for Windows itself, but sometimes Wine is sufficient.
<thomashoneyman>
I used to work in music and have some mixes I was going to update. Most of the plugin manufacturers don't make anything Linux-compatible (Steven Slate, etc.)
<thomashoneyman>
Wine could possibly be sufficient, though the main thing other folks seem to run into is problems with activation / licensing
<thomashoneyman>
especially as most of this is guarded by an iLock usb device with licenses on it
<thomashoneyman>
in the worst case i could dual boot windows
erasmas has joined #nixos
<wedens[m]>
thre are a lot of non-ilock plugins that work great with wine
<arcnmx>
and some gpus include a usb controller..!
orivej has quit [Ping timeout: 240 seconds]
<{^_^}>
[nixpkgs] @bhipple pushed to revert-79581-feature/fetcher-whitespace-clean « Revert "fetchzip, fetchgit: cleanup handling of optional features and whitespace" »: https://git.io/JvSbg
sevanspowell has quit [Excess Flood]
sevanspowell has joined #nixos
thomashoneyman has quit [Quit: Lost terminal]
<{^_^}>
[nixpkgs] @bhipple opened pull request #83408 → Revert "fetchzip, fetchgit: cleanup handling of optional features and whitespace" → https://git.io/JvSba
<{^_^}>
[nixpkgs] @bhipple merged pull request #83408 → Revert "fetchzip, fetchgit: cleanup handling of optional features and whitespace" → https://git.io/JvSba
<DigitalKiwi>
not that anyone is getting on planes much but no more getting on a plane and 'oh no everything got garbage collected'
<bqv[m]>
yeah
<bqv[m]>
that has been a problem for me, actually
<DigitalKiwi>
i think that alone sold me on it and then the editor integrations i get out of the deal are nice too...
cruxeternus has quit [Ping timeout: 256 seconds]
cruxeternus has joined #nixos
waleee-cl has quit [Quit: Connection closed for inactivity]
<bqv[m]>
ok
<bqv[m]>
is there a way to have a .envrc that fallsback to direnv if lorri isn't running?
<cole-h>
Not sure I understand
<cole-h>
direnv and lorri are made to be used together, from my understanding
<wedens[m]>
envrc is just a shell script
jlv has joined #nixos
<wedens[m]>
cole-h: no. direnv is its own thing orthogonal to Nix
<cole-h>
Then lorri was made to be used with direnv
<bqv[m]>
i think i've misunderstood too. so with a "use nix" .envrc, when i enter a directory, the shell gets built and setup. with lorri, it doesn't if the lorri daemon is not running
<bqv[m]>
is there a way i can make lorri fallback to "use nix" so that if lorri isn't running, the shell still gets set up?
<wedens[m]>
just add condition that checks lorri process is running
<bqv[m]>
badass
<bqv[m]>
ok
<cole-h>
Curious why you wouldn't opt for a systemd service for lorri, so it's always running?
<bqv[m]>
i do
<bqv[m]>
i have services.lorri.enable
<bqv[m]>
but not everyone will
<bqv[m]>
so in the situation that someone clones this, it'd be nice if they can settle for direnv
<bqv[m]>
and not have to install and run lorri
<DigitalKiwi>
when did that become a thing :o
<DigitalKiwi>
(services.lorri.enable)
<cole-h>
(Pretty sure it's home-manager, not NixOS)
<bqv[m]>
that option is, yes
<jlv>
Does anyone know how home-manager looks for its lock file? I'm in the process of changing my username, and I keep running into an error with home-manager: "error: opening lock file '/nix/var/nix/profiles/per-user/OLD_USERNAME/profile.lock': No such file or directory". It keeps wanting to look in an old username directory, and I can't figure out
<shor>
Is it possible to install nixos Loris without an internet connection?
<drakonis>
if you only use packages in the install media?
<shor>
I have not specified any packages, and am attempting with the --no-bootloader option, but the first package it attempts to build is bash and defaults to downloading it
<shor>
I also tried --option substitute false (this typically causes my workstation to rebuild offline without pulling in narinfo files) but to no avail
<etu>
shor: Maybe using substitutes for the cache server and have it locally somewhere and that you have managed to cache all needed files.
<DigitalKiwi>
--option substituters '' ?
<DigitalKiwi>
curious, how come you don't have an internet connection?
<pjt_014>
well lsof tells me I have 128,839 files open. That's a start.
<shor>
right now I'm copying the installation media's store structure and examining the script for nixos-install
<peelz>
What's the difference between nix.optimise.automatic and nix.autoOptimiseStore?
<shor>
from what I see nixos-install doesn't pass any options from the option flag to the nix-build
<pjt_014>
jlv: it looks like the state of nix-env is also stored in the...store. The only other files I saw it open were a few sockets.
<pjt_014>
...but I also can't find any imperative packages in it. Hm.
<jlv>
pjt_014: I managed to figure it out. The issue was the ~/.nix-profile link. Removed it and everything works.
jlv has quit [Remote host closed the connection]
<pjt_014>
Hm. Well that's one problem down.
drakonis has quit [Ping timeout: 246 seconds]
<pjt_014>
I'm still curious where that state is though...
<pjt_014>
okay
<pjt_014>
I really shoulda looked there first
<pjt_014>
it's in the nix-env man page
<pjt_014>
NIX_STATE_DIR
<pjt_014>
...or not? I don't have that var. weird.
<pjt_014>
...but It's okay anyway I guess because I found it. $NIX_USER_PROFILE_DIR/profile/manifest.nix seems to be the right file. It has all the things I've installed imperatively.
<pjt_014>
That's another problem solved then. Thank you for coming to my TED talk.
<{^_^}>
[nixpkgs] @vcunat pushed 5 commits to release-20.03: https://git.io/JvSpe
palo1 has joined #nixos
<{^_^}>
[nixpkgs] @FRidh merged pull request #80753 → bear: Use python3 by default → https://git.io/JvRFz
<{^_^}>
[nixpkgs] @FRidh pushed commit from @doronbehar to master « bear: Use python3 by default »: https://git.io/JvSpf
erasmas has quit [Ping timeout: 240 seconds]
mexisme has quit [Ping timeout: 246 seconds]
FRidh has joined #nixos
palo has quit [Ping timeout: 256 seconds]
palo1 is now known as palo
<iqubic>
I'm running NixOS, and this one steam game (Dead Cells) isn't running at all. I can download it just fine, but then I can't actually run it due to a bunch of missing libraries. See this paste for a complete list of all the libraries Steam cannot find.
<pjt_014>
would that be something in configuration.nix?
Tucky has joined #nixos
<iqubic>
srhb: How do I check this?
<iqubic>
I don't think I am using nativeOnly.
<srhb>
iqubic: If you didn't override steam, you're probably not. I've had good experience with it, contrary to what I think is the common belief.. I just add libraries as games need them and rebuild
<iqubic>
I see.
<srhb>
pjt_014: Sorry, what was the question?
<iqubic>
So how do I fix this issue?
<pjt_014>
what is nativeOnly? Is it something that would be set in configuration,nix?
<srhb>
iqubic: Well, you could give it a try with nativeOnly, adding every library you need to extraLibraries.
<iqubic>
that sounds like a large pain.
<srhb>
pjt_014: Just checking, you're also talking about steam games now? :-)
<pjt_014>
Yeah, I can't run Borderlands :
<srhb>
iqubic: I mean, that seems quite subjective. I like it, it's worked well for me. :)
<srhb>
pjt_014: Ah, ok. Yeah, you can overlay steam with it
<pjt_014>
I doubt it'll run well without a GPU from this century but still
<pjt_014>
I don't even know what it is that it's missing. My only hint is in my config file under graphics drivers there are several commented out from ages ago
<pjt_014>
one of the comments simply reads '# NOT THIS ONE'
<iqubic>
This seems so hard.
<srhb>
pjt_014: That sounds very encouraging. :-P
<pjt_014>
I think it's opengl probably
<srhb>
pjt_014: Usually running steam from a terminal might give you more output to help diagnose the issue, but it's not always easy.
boolman has quit [Ping timeout: 240 seconds]
<iqubic>
srhb: I did run steam from a terminal. That's how I was able to get the large list quickly.
<srhb>
iqubic: It's just an overlay.. :) You have a list of files. Combine that with nix-locate to try and find the missing libraries, it shouldn't take long.
boolman has joined #nixos
<srhb>
Worth a shot anyway.
<iqubic>
Can you show me what you mean?
<pjt_014>
woo thatsa lotta messages
CMCDragonkai1 has quit [Read error: Connection reset by peer]
<srhb>
iqubic: nix-locate libXinerama.so.1 gives me a list of packages that contain that file.. I figure that xlibs.libXinerama sounds like the rightest one to include, so I'd add that package to extraLibraries in the overlay.
<iqubic>
which overlay?
<srhb>
iqubic: The one I linked in the gist above.
<iqubic>
Why doesn't steam know about these libraries in the first place?
<srhb>
iqubic: I don't know why some games seem to have issues using the steam-included ones.
<iqubic>
I see.
<srhb>
But that seems to be the case for some games, thus this workaround. Though frankly I prefer to use my native NixOS libs anyway.
<iqubic>
So, how do I use this overlay?
<srhb>
iqubic: Do you have any overlays currently?
<iqubic>
Nope.
<srhb>
Okay, then the manual and wiki page on how to use them will probably be helpful. :)
<iqubic>
I mean, I have an overlay being pulled in by my home-manage config, but I assume that's not quite the same.
<srhb>
iqubic: depends how you're installing steam I suppose.
<srhb>
iqubic: If home manager maintains its own list of overlays, and you're installing steam with home-manager, that should be a fine place to include it.
<iqubic>
I just have steam in my global system.environmentPackages
<pjt_014>
same
<srhb>
Then no, the overlay will have to take effect for the nixpkgs used in your nixos config.
<iqubic>
I do want to switch over to steam on home-manager.
<iqubic>
I'll just do that.
<iqubic>
I know what to do from here.
<srhb>
Great :)
<pjt_014>
do let us know how that works out
<pjt_014>
preferably another day within ~3 hours of this current time
<iqubic>
srhb: I notice that the overlay you gave me already has some elements in the extraPkgs and extraLibraries lists. Should I keep those as they are?
<srhb>
iqubic: That's mostly arbitrary stuff I wanted to be available in the steam shell, you can nuke it.
<srhb>
iqubic: It's really just a snapshot of what I needed for whatever set of games I used at whatever time I wrote that overlay. You can start from blank lists.
<srhb>
I don't recall which completely stupid game needed the hostname executable, but I was flabbergasted... :)
<srhb>
And strace is there for debugging exactly this kind of issue..
asheshambasta has joined #nixos
<iqubic>
Alright... I'm not sure how to add this overlay.
mexisme has joined #nixos
<srhb>
iqubic: I suggest naming the self: super: block in a let var and then adding that to your nixpkgs.overlays list
<srhb>
Looks like that's an option in home-manager at least.
<iqubic>
Yeah. It is.
<srhb>
iqubic: Or you could let steamOverlay = import thegistfile.nix; and add steamOverlay to the list.
<srhb>
Up to you.
<iqubic>
It turns out that I don't want to add "./steam.nix" to my overlays list, but reather, "(import ./steam.nix)"
<srhb>
Yeah.
<srhb>
I think it should always be a list of functions of the form self: super: { somepackages }
<iqubic>
IDK why the latter works, and not the former.
<srhb>
^ because of that
<iqubic>
Right. I see.
<iqubic>
I just copied the stuff from the gist into a file called steam.nix
<iqubic>
I'm sure you were able to figure that out.
<{^_^}>
[nixpkgs] @FRidh merged pull request #83407 → sudo: switch download from FTP to HTTPS → https://git.io/JvSFd
<{^_^}>
[nixpkgs] @FRidh pushed commit from @bhipple to staging « sudo: switch download from FTP to HTTPS »: https://git.io/JvSha
<pjt_014>
I have made several observations
<iqubic>
observations are good.
<pjt_014>
one: at some point in the past I friended someone called 'SHARK MAN'
<pjt_014>
they are currently playin dark souls.
<pjt_014>
two: holy crap borderlands 3 is finally on steam
ivan has left #nixos [#nixos]
<pjt_014>
(now do minecraft cmon GABE)
<pjt_014>
and three: yeah it looks like something called libGL is missing
cjpbirkbeck has quit [Quit: cjpbirkbeck]
asheshambasta has quit [Ping timeout: 272 seconds]
kcalvinalvinn has joined #nixos
<pjt_014>
there are some other odd things tho
kcalvinalvin has quit [Ping timeout: 260 seconds]
<pjt_014>
like the very first message is "cp: cannot create regular file '/home/josh/.local/share/Steam/bootstrap.tar.xz': Permission denied". wat?
<srhb>
pjt_014: That's normal. Don't worry about that.
<srhb>
The libGL one does sound wrong.
<pjt_014>
there's also this straight banger:
<srhb>
pjt_014: Did you follow the instructions on the wiki page?
<pjt_014>
"Invalid resolutions constraints: 0x0 must not be greater than 0x0; and also within media::limits."
<pjt_014>
I've done some of them
<pjt_014>
cant remember which
<srhb>
That's probably a consequence of the libgl one.
<pjt_014>
later though, I'm in the middle of like 3 1/2 unrelated things
<srhb>
There are some specifics related to drivers and openGL, but frankly I don't quite remember the details, and I don't remember doing anything special on NixOS beyond what's already on the Wiki page.
<srhb>
Perhaps searching for old issues might help you.
chagra has joined #nixos
<{^_^}>
[nixpkgs] @Mic92 pushed 0 commits to revert-79581-feature/fetcher-whitespace-clean: https://git.io/JvSjD
<srhb>
(something related to libglvnd being used as a pure wrapper between the application and the (impure) driver in /run/opengl-driver)
<srhb>
Supposedly the steam wrapper already checks that glxinfo is at least able to run, so not sure...
vandenoever has joined #nixos
vandenoever has joined #nixos
vandenoever has quit [Changing host]
<iqubic>
srhb: Alright... So, I have steam installed via your overlay. What do I need to modify to get the right libaries installed?
<srhb>
iqubic: The extraLibraries list
<iqubic>
I see.
knupfer has joined #nixos
<iqubic>
How do I figure out which packages to add?
<srhb>
iqubic: nix-locate is useful to map filename to package.
<srhb>
iqubic: But try regenerating the list of files first, things might have changed now that you're using the native versions, and it does come with a lot of libraries baked in already.
<iqubic>
How do I do that?
<srhb>
iqubic: However you got the list that you pasted the first time.
<iqubic>
Ah. I see.
<iqubic>
I got that list by clicking the play button in steam and grabbing the terminal output.
<{^_^}>
[nixos-channel-scripts] @edolstra pushed 14 commits to master: https://git.io/Jv9em
<{^_^}>
[nixos-channel-scripts] @edolstra merged pull request #35 → mirror: Add packages/options data to channel release. → https://git.io/JvSLO
<srhb>
Looks about the same. That's not encouraging.
<iqubic>
Look at the last item in that list. ** ERROR ** Missing library libstdc++.so.6
<iqubic>
How are we missing that?
<iqubic>
Also srhb it is the same.
<iqubic>
It is so much the same that dpaste assigned me the same URL for that paste.
<srhb>
That means it's still not picking up eg libXinerama, which I know is included in the default native list, so this is probably not going to be your solution.
<iqubic>
What the bloody hell is going on here?!?!
<srhb>
debugging gets more hairy after this, you'll need to find out if it's actually looking for it in the right place, eg. with strace, and if it is, whether there's a 64bit/32bit mismatch, and then go from there.
<{^_^}>
[nixos-homepage] @edolstra pushed 2 commits to master: https://git.io/Jv9eC
<srhb>
I don't have time to assist with that unfortunately, but you can always try opening an issue for the specific game or trying on discourse, long-running debug sessions tend to do better there. :)
<iqubic>
Is there a way I can check if the overlay is actually being used?
<srhb>
iqubic: steam should have a different path with and without it
<{^_^}>
[nixpkgs] @Mic92 pushed commit from @magnetophon to master « faust2: 2.20.2 -> unstable-2020-03-20 (#82650) »: https://git.io/Jv9eE
<srhb>
iqubic: so `ls -l $(which steam)` should do it
<iqubic>
I didn't know what the path was before hand.
<srhb>
Just comment it out and rebuild.
<iqubic>
So, the overlay is being used. But it isn't helping at all.
<srhb>
Too bad.
<iqubic>
I'm just going to install steam via flatpak because that worked for me in the past.
<iqubic>
And I'm not going to figure out why this isn't working.
<pjt_014>
quick question
<srhb>
iqubic: OK. :)
<pjt_014>
did you try any other games?
<pjt_014>
iqubic
<iqubic>
pjt_014: Yes I did.
<iqubic>
Other games worked just fine.
<pjt_014>
same error?
<pjt_014>
oh
<iqubic>
No. No.
<iqubic>
A small game called Induction worked just fine.
<pjt_014>
Hm, same. I got death road to canada working.
<pjt_014>
N++ too, but despite having less fancy graphics it runs at about 1/3 speed
<iqubic>
In other news, today I learned that the paste site dpaste will assign identical pastes identical URLs. Like even if you go to the new paste page and enter in the text again.
<pjt_014>
how tf does a 2.5d pixel art game run so much slower than a 2d vector graphics one??
<pjt_014>
0x0.st does that too
<pjt_014>
you could test a few in short order with pastebinit
<iqubic>
Basically, I was going to check if the two pastes were the same, until I noticed they were the same URL.
<pjt_014>
I used to have it installed then I just kinda accidentally memorized curl -F file=@x site.foo
<pjt_014>
tis a nice feature
<vaibhavsagar>
I'm pretty reliably getting this error when trying to build my package with GHC 8.10: ghc-pkg: Couldn't open database <db>/package.conf.d for modification: {handle: <db>/package.conf.d/package.cache.lock}: hLock: invalid argument (Bad file descriptor)
<pjt_014>
I gotta see if pixeldrain does it
<vaibhavsagar>
has anyone else seen this before?
<vaibhavsagar>
how would I go about reporting this?
<pjt_014>
If you're trying to build a package then the nixpkgs github issue page
<pjt_014>
what is it? I can try to reproduce it
<pjt_014>
one 2 architectures if that helps
<vaibhavsagar>
I'm using the `haskell-updates` branch
<vaibhavsagar>
and it's my own package, so not on nixpkgs exactly
<vaibhavsagar>
let me pin a few things and when I come up with a good Nix expression I'll ping you if you're still interested
<vaibhavsagar>
thanks for offering :)
<pjt_014>
sure
Jackneill has joined #nixos
<pjt_014>
I may be asleep, but I'll leave this thing open
dingenskirchen has quit [Read error: Connection reset by peer]
dingenskirchen1 has joined #nixos
Guest30 has joined #nixos
<vaibhavsagar>
appreciate it!
<pjt_014>
actually vaibhavsagar: do you know a minimum time it'll take?
Guest30 is now known as ash-braker
<vaibhavsagar>
I'll probably have it done in the next hour?
<vaibhavsagar>
If you do `nix-build release-8.10.nix` then you will see the same thing I am seeing
zupo has joined #nixos
<vaibhavsagar>
but what I have right now uses `head.hackage` so I would like to clean it up so it only uses nixpkgs, which I have working locally but using local clones of everything
<{^_^}>
[nixpkgs] @vbgl pushed to release-20.03 « coqPackages.mathcomp_1_10: init at 1.10.0 »: https://git.io/Jv9vA
o1lo01ol1o has quit [Remote host closed the connection]
thc202 has joined #nixos
<kreetx>
(doubleposting this question from #nixops, but:) how do you guys deploy from multiple machines using nixops? I have three work computers all running nixos and would like to use any of these to deploy something
dermetfan has joined #nixos
<mokasin>
<- noob, if I enable a service that pulls in a package with some binaries, how do I access those apart from /nix/store/hash/bin?
fendor has joined #nixos
<mokasin>
concrete example, I'm trying to setup matrix-synapse server that has some contrib binaries to register users. How do I actually use that, without looking up the hashes?
o1lo01ol1o has joined #nixos
iqubic has quit [Remote host closed the connection]
iqubic has joined #nixos
<srk>
kreetx: use them as builders or share the nixops state between them so you can run nixops from any of them
<adisbladis>
mokasin: Pretty much, you don't. Some modules add packages to `environment.systemPackages` but it seems like matrix-synapse does not.
<srk>
mokasin: you can e.g. add them to environment.systemPackages which makes everything in listed packages bin/ available
<{^_^}>
[nixpkgs] @Ma27 merged pull request #82353 → nixos/nextcloud: fix upgrade path from 19.09 to 20.03 → https://git.io/Jv6I8
<bqv[m]>
oh, fair enough. that's basically a one time thing though
<bqv[m]>
that said, i think i do have it as a system package in my matrix container, but that's only because it's a container
<kreetx>
srk: how would it work with using builders, i.e where would the state be then?
<tilpner>
mokasin: Note that the deployed matrix-synapse and the one nix-shell gives you might be different
<mokasin>
bqv[m], sure, but it was an opportunity to ask this more general question. I'm still trying to grasp the structure of nixos
<srk>
kreetx: on "master" machine, but any will do
<tilpner>
mokasin: The safest way is to use e.g. systemctl cat to look up what is actually running
<mokasin>
tilpner, yes, this what I was doing. Okay, but this verifies that there is no cleaner way
<mokasin>
it felt like a hack
<tilpner>
It is
leotaku has joined #nixos
<kreetx>
srk: got it! but then, what is the wider background on using nixops? I'm just going to deploy a personal blog, but with bigger systems is there supposed to be a "deployer machine" that gets build artifacts from the ci and then puts them live
<srk>
kreetx: depends how do you set it up - you can have one machine use the other two as remote builders or setup something like that for every machine (so each machine uses the other two as builders)
<mokasin>
tilpner, how would the deployed and nix-shell version be different if I were only using stable? Shouldn't that refer to the same binary?
<kreetx>
or is sharing the state file a best practice?
<srk>
kreetx: many ways to achieve that, you can either run hydra (+hail) to build (and autodeploy) your nixops deployment or use one big deployer machine
<srk>
or even share the state between devs and use caches from your hydra which builds it as well
<srk>
it really depends on how you want it, how big it is, how many devs there are and tons of other things :)
<kreetx>
srk: thanks!
<srk>
last time we went with a big deployer machine inside the network and morph to have no state :D
<tilpner>
mokasin: Imagine you deployed something, then updated your channels without deploying immediately afterwards. nix-shell could now give you a newer package than what is currently running
<tilpner>
mokasin: Now imagine the script directly manipulated the database, instead of just doing the API call I hope it does, and they changed the schema slightly
<mokasin>
tilpner, so adding it to environment.systemPackages circumvents that issue, right?
<kreetx>
srk: I just want to learn more of nixops and I guess for my tiny private project it all seems an ovekill, but for learning purposes I think I'll try to follow through :)
<srk>
tilpner: that's a good point for sure but hopefuly stuff is not allowed to change like that between channel updates
<tilpner>
mokasin: If you set environment.systemPackages = [ config.services.matrix-synapse.package ];, then yes
<tilpner>
mokasin: If you set environment.systemPackages = [ pkgs.matrix-synapse ];, then also yes, but sometimes no
<srk>
kreetx: fiy you can also do something like NIXOS_CONFIG=deploy.nix nixos-rebuild switch --target-host ssh://
<mokasin>
tilpner, phew, is this actually documented somewhere or do I need to just know this stuff? :)
bdju has quit [Quit: Lost terminal]
bdju has joined #nixos
<mokasin>
tilpner, so basically config.foo.package gives access to the underlying package of the current closure? Can I say it that way? While pkgs.foo pulls what is in the repo?
<srk>
config.foo.package is used by the foo module
<srk>
and you can change that to use e.g. overriden package
<yorick>
segfault at 0 ip 00000000004014c3 sp 00007fffffff94e0 error 6 in udisks-test-helper[401000+1000]
<srk>
kill it with fire
<yorick>
why does it even have udisks
o1lo01ol1o has joined #nixos
<bqv[m]>
hah, nice, got past the emacsPackages segfault by just adding the packages to the system instead of using emacsWithPackages
<yorick>
the.. emacsPackages.. segfault?
<adisbladis>
*listening intensifies*
<bqv[m]>
yeah i had a thing where trying to add emacsWithPackages to my configuration made nix segfault during the evaluation
<bqv[m]>
only when i switched to flakes
<yorick>
bqv[m]: what nix version?
<yorick>
oh, makes sense
<adisbladis>
Oh, I thought it was something wrong with emacs :)
<bqv[m]>
but still very annoying, because i use emacs as a window manager
<adisbladis>
Carry on
<yorick>
bqv[m]: if you have infinite ram, run with export GC_DONT_GC=1
<mokasin>
srk, is there a glossary that give an overview over the terminology and structure of nixos? So for examples, definition of module, service, package, etc?
bahamas has joined #nixos
bahamas has joined #nixos
<bqv[m]>
lol, no something wrong with nix
<bqv[m]>
would that fix it?
<bqv[m]>
i think the segfault place was actually in GC_free, when i ran it in gdb
oida has quit [Remote host closed the connection]
<tilpner>
mokasin: I don't think there's a single location where you can read all of it, without knowing what you're looking for
<yorick>
bqv[m]: yeah, GC_DONT_GC disables the gc :)
<bqv[m]>
doesn't matter anyway, i found a decent workaround
oida has joined #nixos
<bahamas>
hello. dockerTools doesn't work on mac? I tried to run it and I got "assertion failed at /nix/store/cixx2qgbb35v17xxa1ihg2yjczlh46n4-nixpkgs-19.09pre194893.8d3ff5bf4e3/nixpkgs/pkgs/os-specific/linux/kernel/generic.nix:56:1"
<tilpner>
mokasin: Yes, config.*.package gives access to the package that was deployed at some point
<srk>
mokasin: not quiet, yesterday just before I went to sleep I was thinking that something like nixpkgs internals/hacking would be nice
mananamenos has joined #nixos
<yorick>
bqv[m]: it'll crash on something else that you need
<bqv[m]>
is that... sensible? how much is it likely to use
<alexarice[m]>
They have probably stopped adding features to 27
iyzsong has quit [Remote host closed the connection]
<etu>
XX.0 is always pre-releases of Emacs because XX.1 is the stable of that series
<alexarice[m]>
so any new features need to go in 28
iyzsong has joined #nixos
<ldlework>
I've been using 28 and it seems fine
<bqv[m]>
hm gotcha
<bqv[m]>
i just find it funny that if i look in share/emacs it shows me skipping straight from 26 to 28
oida has quit [Remote host closed the connection]
andreas31 has quit [Remote host closed the connection]
gxt has quit [Remote host closed the connection]
KeiraT has quit [Remote host closed the connection]
phreedom has quit [Remote host closed the connection]
cartwright has quit [Read error: Connection reset by peer]
xelxebar has quit [Read error: Connection reset by peer]
klntsky has quit [Write error: Connection reset by peer]
KeiraT has joined #nixos
oida has joined #nixos
<aanderse>
Izorkin: please let me know how to reproduce. did you try changing your mysql to use pname instead of name?
matthiaskrgr has quit [Quit: Free ZNC ~ Powered by LunarBNC: https://LunarBNC.net - currently broken?]
andreas31 has joined #nixos
matthiaskrgr has joined #nixos
xelxebar has joined #nixos
ottidmes has joined #nixos
gxt has joined #nixos
<bqv[m]>
lorri isn't rebuilding my shelll.nix
<bqv[m]>
have i done something wrong
pluplog has quit [Remote host closed the connection]
<bqv[m]>
oh hang on
phreedom has joined #nixos
<bqv[m]>
it might just not like flakes
<atemu12[m]>
Hey could anyone help me with an error? I'm trying to include my raspi in my main config repo but need to exclude a few packages that don't work on ARM when building for ARM. Here's how I wanted to implement that https://gitlab.com/atemu/nixos-config/-/blob/d5ac9a21f5c8e45f98be2e23a5b6a5883da66615/common.nix#L70 but it throws an error about coercing a list into a string in attrsets.nix and I can't figure out what's actually
<atemu12[m]>
wrong
<Valodim[m]>
atemu12: are the "x" and "noX" variables you're using there all lists?
<Valodim[m]>
ah, yes they are from ./packages.nix
<atemu12[m]>
Yes, everything in packages.nix is a list
Guest30 has joined #nixos
<Valodim[m]>
hm. no idea :)
sjkelly1 has quit [Ping timeout: 246 seconds]
<Valodim[m]>
(that looks like a very comfy list of systemPackages, btw :)
<Izorkin>
aanderse: with services.mysql.package = pkgs.mariadb; - error - The option value `services.mysql.package' in `<unknown-file>' is not of type `package'.
<atemu12[m]>
Valodim: I probably don't need SXHKD in my systemPackages though, I must've missed that when removing bspwm, the module should add it automatically
<aanderse>
Izorkin: i think that should be reproducible for me, thanks! I'll reply once i check today
<ottidmes>
Since there seems to be the pattern to remove hardcoded ids from modules, I tried to remove the few I had added myself, the only problem I am facing is that I get: The following groups are not valid system groups, i.e. groups that have an uid < 399, for one of my system groups, there is no isSystemGroup equivalent option of isSystemUser, how do I deal with this without hardcoding a particular id?
bahamas has quit [Ping timeout: 250 seconds]
cybrian has quit [Quit: cya]
<gvolpe>
@etu it worked after I pinned pkgs in my `default.nix` as well, thanks!
gvolpe has quit [Remote host closed the connection]
cybrian has joined #nixos
ash_braker has quit [Remote host closed the connection]
vika_nezrimaya has quit [Ping timeout: 256 seconds]
troydm has quit [Quit: What is Hope? That all of your wishes and all of your dreams come true? To turn back time because things were not supposed to happen like that (C) Rau Le Creuset]
andreas31 has quit [Remote host closed the connection]
<{^_^}>
[nixpkgs] @clkamp opened pull request #83423 → aqbanking: Fix download url because of upstream changes → https://git.io/Jv9l2
andreas31 has joined #nixos
erictapen has joined #nixos
monsieurp has quit [Ping timeout: 268 seconds]
monsieurp has joined #nixos
drewr has quit [Ping timeout: 260 seconds]
erictapen has quit [Ping timeout: 260 seconds]
chloekek has quit [Ping timeout: 240 seconds]
knupfer has quit [Ping timeout: 240 seconds]
<aranea>
I'm trying to build the nftables package with nix-shell, but I can't seem to figure it out. I should just need to invoke "nix-shell -p nftables" and then genericBuild, right?
<aranea>
That doesn't do anything, it just sources the (empty) file created by nix-shell to which $buildCommandPath is pointing.
<aranea>
And if I try to manually run unpackPhase instead, that fails because $src isn't set.
<ToxicFrog>
`nix-shell -p nftables` on its own should download and build the one in nixpkgs and put it in your $PATH until you exit the shell.
<aranea>
oh, I must've misunderstood the docs then
jakobrs has joined #nixos
<aranea>
ahh, so it's -A nftables <nixpkgs>
<jakobrs>
I know I asked pretty much the same question just yesterday, but I can't figure out how to "correctly" upgrade to bluez-5.53 while still on nixos-19.09
o1lo01ol1o has quit [Remote host closed the connection]
drewr has joined #nixos
<clever>
aranea: `nix-shell -p nftables` will give a shell with nftables in PATH, `nix-shell -A nftables '<nixpkgs>'` will give a shell suitable to compile nftables
<jakobrs>
Setting hardware.bluetooth.package = nixos-unstable.bluez; doesn't change programs that depend on bluez
<clever>
ah, and thats what you want
o1lo01ol1o has joined #nixos
<aranea>
thanks
bahamas has joined #nixos
<aranea>
Okay, follow-up question: Can I somehow use fetchgit w/o pinning the sha256 hash?
<jakobrs>
and I couldn't figure out how (if) you're supposed to replace packages with packages from different channels in overlays
<ikwildrpepper>
aranea: you can use builtins.fetchGit
<ToxicFrog>
aranea: last time I asked this, the answer was "use a local checkout and replace src = fetchGit ... with src = /path/to/local/checkout while testing"
<aranea>
(I'm trying to test some local changes to nftables, and it'd be handy not to have to update the hash after every change)
<bqv[m]>
fetchtarball doesn't need a hash
<ikwildrpepper>
but I am not sure if it is supposed to be used inside nixpkgs
<jakobrs>
Or even just what packages to override
<aranea>
ah, cool, I'll just point it to the checkout then. Thanks!
<{^_^}>
[nixops] @grahamc opened pull request #1265 → parallel: handle exceptions more modern-like → https://git.io/Jv94X
<jakobrs>
The reason I'm asking is because my headset works much better with bluez-5.53
<clever>
12474 usePulseAudio = config.pulseaudio or stdenv.isLinux;
v0|d has quit [Ping timeout: 258 seconds]
<clever>
default is which os your on, true for linux
fendor has quit [Read error: Connection reset by peer]
aveltras has joined #nixos
<betaboon>
is that `config` nixpkgs-config or nixos-config? oO
<aveltras>
how long does the nixos lustrate process usually take ?
<clever>
betaboon: thats the nixpkgs config, which you can also set via nixpkgs.config in configuration.nix
<clever>
betaboon: outside of nixos, it comes from a config.nix file by default
<betaboon>
and how do i access nixpkgs-config in an overlay ?
<clever>
betaboon: self.config
<betaboon>
ah ok. thanks :)
est has joined #nixos
mexisme has joined #nixos
* est
waves at joepie91
* joepie91
waves
work_ has joined #nixos
<ottidmes>
aranea: BTW it is almost always cheaper to use fetchTarball if you can, so if you are fetching something from github, you probably want to use e.g.: fetchTarball "https://github.com/msteen/nixos-vsliveshare/tarball/master" (this is especially the case for nixpkgs, which is ~1.8GB with fetchGit, and ~100MB with fetchTarball)
mexisme has quit [Ping timeout: 240 seconds]
<joepie91>
ottidmes: is there any work on a more efficient fetchgit implementation?
<joepie91>
ongoing work*
<aranea>
Yeah, I'm aware of that (and of the fetchFromGitHub etc wrappers). but thanks. :)
<tilpner>
ottidmes: Prefer fetchzip over fetchTarball, you probably didn't mean to download large source tarballs at eval time
<bqv[m]>
more efficient how?
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<bqv[m]>
it's downloading a git repository
<bqv[m]>
it's not like you can just compress it harder
<tilpner>
bqv[m]: You can download a git repository with or without all its history
<ottidmes>
bqv[m]: one is doing a git clone, the other is doing downloading a snapshot of just the working directory of the revision you ask for
<bqv[m]>
tilpner: obviously, but i don't see how fetchgit could be improved
<tilpner>
bqv[m]: And if you don't want the history, a remote-build archive is more efficient than having to do a full clone and discarding the parts you don't need
zupo has joined #nixos
<tilpner>
*remotely-built archive
<tilpner>
bqv[m]: Mostly because git doesn't allow you to do a shallow clone of a specific revision
<ottidmes>
aranea: was just pointing it out, because I used fetchGit where I wanted a particular branch without a sha256, not realizing with github URL API you can just put any rev-like after /tarball
<{^_^}>
[nixpkgs] @bjornfor pushed commit from @hedning to release-19.09 « nix-bash-completions: 0.6.7 -> 0.6.8 (#81019) »: https://git.io/Jv90C
jbrock has joined #nixos
<tilpner>
ottidmes: fetchzip creates a derivation, fetchTarball just does it immediately. It can be necessary to fetch something at eval time, but not if you're just going to pass it as src to mkDerivation
<tilpner>
(E.g. it's necessary-ish if you want to do imports = [ (something you just fetched) ];)
<ottidmes>
tilpner: but I fail to see why it could not be a derivation when passed a hash
<tilpner>
It could maybe be disguised as one, but that would be confusing
<tilpner>
A derivation can be built remotely, fetchTarball can't. A derivation is built in a sandbox, fetchTarball isn't
nobrak` has joined #nixos
<ottidmes>
fair enough, would still have been useful to have a seperate builtin for it, although you can built it yourself with builtins already at the moment, its not really covenient to use
<clever>
tilpner: fetchTarball also cant be ran in parallel to other derivations
<clever>
so it causes major slowdowns
<ottidmes>
if you run fetchTarball on something you already fetchzip'ed, would it still fetch if its not in the fetchTarball's cache?
<gchristensen>
clever: it would be nice for it to be able to do that.
philr has quit [Ping timeout: 240 seconds]
nobrak has quit [Ping timeout: 258 seconds]
<clever>
ottidmes: thats controlled by the tarballttl in `nix.conf`
ryantm has quit [Ping timeout: 256 seconds]
orivej_ has joined #nixos
orivej has quit [Read error: Connection reset by peer]
<ottidmes>
clever: that only determines how long its cached, right, not whether it leverages what's already in /nix/store?
<clever>
ottidmes: if it has been over the ttl, it will try to re-download the file
<clever>
ottidmes: if the http server supports etag's, it can use that to skip the download, and reuse what was in the store
<clever>
if it lacks etag support, it will likely re-download the .tar.gz, but then notice the store already has an unpacked copy, and reuse that
<{^_^}>
[nixpkgs] @worldofpeace pushed 2 commits to master: https://git.io/Jv9uL
<{^_^}>
[nixpkgs] @worldofpeace pushed commit from @arianvp to release-20.03 « wire-desktop: Fix StartupWMClass »: https://git.io/Jv9uY
<jakobrs>
Can I just do 'nixpkgs.overlays = [ (self: super: { bluez = self.callPackage <nixos-unstable/pkgs/os-specific/linux/bluez> {}; })]' or is that a bad idea
<{^_^}>
[nixpkgs] @worldofpeace pushed commit from @arianvp to release-19.09 « wire-desktop: Fix StartupWMClass »: https://git.io/Jv9u3
<{^_^}>
[nixpkgs] @nh2 merged pull request #83423 → aqbanking: Fix download url because of upstream changes → https://git.io/Jv9l2
<MichaelRaskin>
We know it when we see it, and roughly stuff not positioned as reliant on POSIX likeness
<ehmry>
the BSDs?
erasmas has joined #nixos
<MichaelRaskin>
Well, there is exotic-in-terms-of-impact (i.e. low-tier), that might be foricbly applicable to BSDs. But BSDs are likely either to get dropped again, or to become non-exotic
<Ericson2314>
we have net bsd
<Ericson2314>
I started free bsd
<Ericson2314>
if we do the bsds purely, they shouldn't bit rot
<MichaelRaskin>
I remember old good days of FreeBSD on Hydra
<MichaelRaskin>
Looking at some Linux glibc updates… well, shouldn't bitrot quickly, but still…
nobrak`` has left #nixos ["ERC (IRC client for Emacs 26.3)"]
<srk>
halfway there, bootstrap-files/ppc* is missing
iqubic` has quit [Remote host closed the connection]
iqubic` has joined #nixos
<shor>
Is it possible to install nixos without an internet connect? I have a bare configuration without any additional packages, using --option substituters "", but it first tries to pull bash-4.4 from a gnu mirror.
hlavaty has joined #nixos
<hyper_ch>
sounds painful but it's possible. You can run hydra buildfarm on your own
justanotheruser has quit [Ping timeout: 256 seconds]
<MichaelRaskin>
With some experience it is not too painful, you could install it to a
<hlavaty>
how can i set linux kernel option to n? using boot.kernelPatches...extraConfig throws error: option not set correctly: CGROUP_WRITEBACK (wanted 'n', got 'y')
<shor>
assuming I had a buildfarm, how would I direct the build process to pull from this instead of from gnu
<MichaelRaskin>
USB drive, then realise all the build dependencies, then install from that drive
iqubic`` has joined #nixos
<shor>
As I have a workstation on the local network, I can copy its store and build dependencies to a usb. Its that it starts off by trying to download bash from a non-nixcache location, I'm uncertain why this is
<MichaelRaskin>
Installation does pull from the boot device by default, so you just need to ensure all the necessary stuff is there
<glittershark>
wow why did I sleep on lorri for so long
<glittershark>
so FAST
ryantm has joined #nixos
cfricke has quit [Quit: WeeChat 2.7.1]
<MichaelRaskin>
shor: maybe it tries to reach the cache and fails?
<glittershark>
if anyone else isn't using lorri yet... use lorri. dang
<shor>
MichaelRaskin: makes sense, how would I ensure a complete list of build dependencies for stdenv
<DigitalKiwi>
shor: did you look at nix-serve? it'll create a cache you can point to
<DigitalKiwi>
also, hello, we meet again
<DigitalKiwi>
have you been at this all night
johnny5 has joined #nixos
<hyper_ch>
MichaelRaskin: thx, I still have no idea what it's good for :9
<MichaelRaskin>
shor: take your target configuration.nix as tgt-conf.nix, nix-build nixos with -I nixos-config=$PWD/tgt-conf.nix — then nix-store -q --deriver on the output path and nix-store -qR on the derivation and nix-store -r on each path
<MichaelRaskin>
hyper_ch: auto-caching of nix-shell builds basically
<hyper_ch>
ok, thx
<shor>
I have nix-serve running in a chroot in the installation media, using substituters option to point to 127.0.0.1:5000
<MichaelRaskin>
I do not use it as I have a list of stuff I prebuild and then add to the environment as needed
<shor>
DigitalKiwi: yes v_v
johnnyfive has quit [Ping timeout: 240 seconds]
<glittershark>
sales pitch: cd into a dir, you're in that dir's nix shell immediately
<glittershark>
the README of the repo could sell this a little harder imo
<glittershark>
because it's effing *magical*
<glittershark>
my muscle memory keeps trying to type `ns` once I cd into my project's directory
<glittershark>
no more!
<glittershark>
not to mention that evaluation time for big closures goes away entirely
<DigitalKiwi>
shor: i wonder if it's possible to build that version of bash on a different machine so that it's in the cache...idk
<hyper_ch>
shor: what is the reason to not connect it to the internet? I'm just curious
<shor>
Its my understanding its the same version on the installation media, I think maybe its just missing some dependency to install it?
johnny5 has quit [Ping timeout: 264 seconds]
<DigitalKiwi>
shor: and, not so much a solution but gets you out of the headache if it's feasible...usb ethernet are about $10 on amazon in the us not sure where you are
<shor>
hyerp_ch: this box does not have a wireless nic and a damaged onboard nic
johnnyfive has joined #nixos
<hyper_ch>
shor: as digitalkiwi said, I'd get a usb ethernet adapter
<shor>
also, personal education on how to deploy offline if I were in a circumstance where I need the worlds greatest distro without internet
ixxie has joined #nixos
<hyper_ch>
I bought one a long time ago and was glad to have it several times when wifi drivers weren't ready and no ethernet card
<hyper_ch>
I could also add a DE to it if I wanted (used to add kde to it but not anymore)
<shor>
the live-iso is probably my next rute, as even attempting to reinstall the same version of bash on the installatin media prompts it to try downloading a tarball from nixos.org, even with substituers ""
mexisme has quit [Ping timeout: 256 seconds]
<shor>
hyper_ch: thanks for the example config
<hyper_ch>
shor: well, I took some things out.. I do add a few custom files to it.. I can post the whole thing if you want
<hyper_ch>
e.g. I add my .tmux.conf also to /root/.tmux.conf and stuff
hlavaty has quit [Remote host closed the connection]
<shor>
its ok, the main thing I'm concerned with is providing the default builds that would be provided without any additional packages specified, I believe this base is called stdenv, right?
<judson_>
pypi2nix generates https://gist.github.com/12c9dda468ae801cb6fe87a120f7c51a, but when I `nix-shell requirements.nix -A interpreter` it replies error: attribute 'patchPhase' missing, at /home/judson/dev/foreman-provisioner-cli/requirements.nix:25:24
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<shor>
thanks for the fix, will try building on my nixos workstation
<judson_>
I'm trying, also, to use this with lorri, so trying to wrap a shell.nix around it, which gives a different error.
rogue_koder has joined #nixos
<glittershark>
judson_: that patchPhase stuff is kinda silly
<glittershark>
just use postPatch
<glittershark>
idk though, I don't use pypi2nix
<glittershark>
I just use `buildEnv` with `python.withPackages`
<glittershark>
I do almost exclusively python and I fully hate it
<glittershark>
yeah lol
<judson_>
Just grim determination, eh?
hlavaty has joined #nixos
CptCaptain has quit [Client Quit]
<judson_>
Ruby got packaging and distribution right, which is a big deal.
wildtrees has joined #nixos
CptCaptain has joined #nixos
CptCaptain has quit [Client Quit]
<manveru>
nothing i had to do with python so far has made me like it either... just barely tolerating its existence, but i never will understand how it got so popular :P
CptCaptain has joined #nixos
<judson_>
For a long time, I thought I was frustrated by the Nix approach to Python packaging. It seemed like a big regression.
<judson_>
But no. I don't know what you could do that would be more sensible.
CptCaptain has quit [Client Quit]
<manveru>
using poetry2nix instead
<manveru>
if you have a chance
<adisbladis>
Heh, I was just gonna shill that too ;)
erasmas has quit [Read error: Connection reset by peer]
<judson_>
So projects that are using pypi, I'd have to convert them.
<judson_>
Which in this case would be a political process.
<judson_>
Seems cool though.
<manveru>
yeah
wildtrees has quit [Remote host closed the connection]
<judson_>
I keep thinking Nix could use something like TUF, or the Go modules proxy.
<manveru>
i ended up writing a half-assed pipfile2nix converter because i couldn't switch them to poetry yet :P
wildtrees has joined #nixos
<adisbladis>
:<
<adisbladis>
Friends don't let friends use pipenv
<Yaniel>
I did actually like python a lot at one point
<judson_>
A universal format for language packaging adapters, and a server for each upstream distributor to do TOFU fetching.
nobrak has quit [Remote host closed the connection]
<Yaniel>
back in the 1.9.x days IIRC
medvid has joined #nixos
<Yaniel>
when it was ported to symbian and managed to be way nicer to use than any of the symbian c stuff
erictapen has quit [Ping timeout: 240 seconds]
<adisbladis>
judson_: Btw, you can use poetry/poetry2nix to package non-poetry things. It also uses the pypi index so you can use poetry to an environment.
<simpson>
judson_: Yep, it's politics; PyPI doesn't carry enough metadata for us, and they're not going to change that. Additionally, many of them don't grok why Nix is useful and aren't interested in non-Debian-style distros.
<drakonis>
simpson: which parties in python refuse to change?
Czen1 is now known as Czen
<simpson>
drakonis: Python Software Foundation generally doesn't care; Python Packaging Authority understands that there's a problem, but can't unilaterally change packaging standards.
jakobrs has joined #nixos
wildtrees has quit [Remote host closed the connection]
<jakobrs>
Launching musescore from the application launcher or Alt-F2 fails, but launching it from Konsole works; is this normal?
<jakobrs>
I mean, I know why this is happening, sort of
<jakobrs>
I just don't know how to get plasma to actually run the applications in the correct environment
<jakobrs>
Does this sound like a bug?
<colemickens>
My minimal nixos image is 2.4 GB, I think I should've tried to build a minimal boot image with not-os and then tried to pivot into nixos stage2 from there...
<{^_^}>
[nixpkgs] @Ma27 pushed to master « Revert "nixos-container: use systemd-run instead of nsenter" »: https://git.io/Jv9ah
matthiaskrgr has quit [Quit: Free ZNC ~ Powered by LunarBNC: https://LunarBNC.net - currently broken?]
matthiaskrgr has joined #nixos
bahamas has quit [Quit: leaving]
oida has quit [Ping timeout: 240 seconds]
<aswanson>
I'm attempting to add a python package that isn't in nixpkgs to a shell.nix file for development purposes, and gotten this far: https://pastebin.com/RmWVBLZM
<aswanson>
the expression evaluates successfully, but doesn't seem to actually do anything with the package I've defined
foolob has joined #nixos
<foolob>
Can somebody help me setup an nginx reverse proxy config that forwards to different locations depending on the port?
<shor>
hyper_ch: you mentioned that you added custom files to the built iso image, what is the canonical way of accomplishing this?
<foolob>
In the configuration file itself, I could just define multiple server {} statements, but that does not seem to be possible with the nginx package. Or is it?
<shor>
foolob: does it have to be ports, or could you use vhost names?
<foolob>
shor, it has to be ports
<foolob>
vhost names is easy, but the issue is, that I cannot redefine the same vhost with different ports, it seems
<{^_^}>
[nixpkgs] @bachp opened pull request #83434 → cryptomator: init at 1.4.15 → https://git.io/Jv9wt
<foolob>
shor, So basically I need server { listen 1234 ssl; server_name example.com; location / { proxy_pass http://foo; } server { listen 4567 ssl; server_name example.com; location / { proxy_pass http://bar; } in the resulting nginx config
<foolob>
I think, this is not possible with the nginx nixos service? But I am still a noob, so I might miss something.
<johnw>
has anyone here setup Gerrit as a NixOS container?
<hexo_>
Ericson2314: hi, do you have any idea what is going on, please? /nix/store/q7611jb12r1jy21dxj9sdgnnyrzfj62y-bootstrap-stage1-stdenv-linux/setup: ./configure: /bin/sh: bad interpreter: No such file or directory
<hexo_>
bin/sh is symlink to dash
lassulus has quit [Ping timeout: 240 seconds]
rail_ has quit [Quit: gone...]
<hexo_>
Ericson2314: nix was trying to build building '/nix/store/bwxqabz3b5smkz9r9r65p50s7gxz68f0-gnum4-1.4.18.drv'...
lassulus_ has joined #nixos
<hexo_>
this is ppc64le, but anyway...
growpotk- has joined #nixos
lassulus_ is now known as lassulus
rail_ has joined #nixos
<hexo_>
is the gnum4 package broken?
rail_ has quit [Client Quit]
<drakonis>
hexo_: is this getting built from a debian machine?
<hexo_>
srk: ^^^
<hexo_>
bootstrap was from hydra
<hexo_>
this machine is void linux with nix installed
rail_ has joined #nixos
<hexo_>
i'd love to get to having nixos natively
<srk>
yeah, drakonis was probably asking about host
<drakonis>
hm
<hexo_>
so, void linux ppc64le
<drakonis>
that's a weird error
<hexo_>
yup, my brain melts from it
<hexo_>
:D
<drakonis>
hm, how does linux normally handle running software from other architectures?
<hexo_>
via qemu
<drakonis>
i mean
<drakonis>
what happens when you run it
<hexo_>
there's a thin qemu layer, you need to have libs for that architecture
nuncanada has quit [Ping timeout: 258 seconds]
<hexo_>
so i had libaarch64 and lib (for x86)
nuncanada has joined #nixos
<hexo_>
and you just setup binfmtmics kernel handler
<hexo_>
you can have this for wine as well
growpotkin has quit [Ping timeout: 240 seconds]
<drakonis>
i think i'm not asking the correct question, what is the error that is output when you run a binary from another architecture
<hexo_>
(and somehow it should be possible to have x86 wine on qemu on ppc64le :D)
<aveltras>
how can i fetch a private repo from github used in a configuration.nix ? is it only possible via ssh ?
<Ericson2314>
hexo_: that error looks to me like it is not finding the dynamic linker
<Ericson2314>
that is usually the source file not found errors running executables that do in fact exist
<Ericson2314>
run and strace
<Ericson2314>
*an strace
<judson_>
Awesome. glittershark: master for pypi2nix drops 2.7
<judson_>
Which is so backwards.
<gchristensen>
:/
<gchristensen>
it even has 2 in the name!
foolob has quit [Quit: Leaving]
<matthewbauer>
hexo_: I don't think we have bootstrap tools for ppc64le
hmpffff has joined #nixos
<hexo_>
Ericson2314: how should i run strace
<hexo_>
matthewbauer: we do, in hydra
<matthewbauer>
hexo_: but you should be able to use `boot.binfmt.emulatedSystems = [ "x86_64-linux" ];` if you'd like to have binfmt setup to run x86_64 binaries
<Ericson2314>
matthewbauer: maybe we should add pcc64le to release-cross.nix bootstrap tools?
<Ericson2314>
ah it it there
<Ericson2314>
hexo_: yeah that looks like it
<hexo_>
:)
<Ericson2314>
so edit nixpkgs to hard-code that path or something until we can get someone to upload one of those builds with the other bootstrap tools
vandenoever has quit [Read error: Connection reset by peer]
vandenoever has joined #nixos
vandenoever has joined #nixos
noudle has quit []
<aveltras>
i have a nixos server with an imperative nixos container running apache inside. being root in the host, i can curl the container ip and it answers correctly. is there anything more than the following to do on the host to access the container from the web ?
<judson_>
Ugh. Okay, so I've got a python 2.7 tool here that I need to use. Is there something better than manually building up a list of python packages in my shell.nix?
<hexo_>
matthewbauer: ill try fetchurl
<judson_>
pypi2nix isn't working. I might pickaxe it to find a commit that would work?
<hexo_>
while setting up the build environment: executing '/nix/store/6pkaihvncxgmz4akfspqjczkxhhl384m-busybox': Permission denied
<hexo_>
building '/nix/store/pvp2walnxx64hinjg7dl4nmkz432g7fl-bootstrap-tools.drv'...
<hexo_>
/nix/store/9br9z6n5ly6l55dvdyryr8g8ca8v6x69-busybox: XZ compressed data
hyper_ch has quit [Ping timeout: 258 seconds]
<hexo_>
wooooot
<energizer>
like, how do i tell my irc client what my password is?
<hexo_>
how can i tell it to unxz it please?
jwaksbaum[m] has joined #nixos
wildtrees has joined #nixos
kfound has joined #nixos
<judson_>
For home-manager stuff, nah. I use pass and deliver it directly.
mexisme has quit [Ping timeout: 256 seconds]
nuncanada2 has joined #nixos
<jwaksbaum[m]>
Is there a way to manage flashing firmware (to eeprom) declaratively using nixos?
<judson_>
Where it's unattended (like nixops deployed servers) passwords go in a git-crypted directory and get imported from a checked-out (=decrypted) workspace
<lordcirth_>
judson_, how is the decryption secret stored? /run/keys?
<drakonis>
is it only me or github is throttling pulls right now?
<cransom>
energizer: if nix happens to get the content of your secret, it's not secret anymore because it's in the store. there's no official solution for it, but the general approach is to write secrets to a file outside of the store via some other process and a service will read them at run time.
<cransom>
write file/run some script to produce output.
fasd has joined #nixos
nuncanada has quit [Ping timeout: 272 seconds]
mexisme has joined #nixos
wildtrees has quit [Remote host closed the connection]
andymandias_ has quit [Quit: ZNC 1.7.4 - https://znc.in]
<energizer>
cransom: how do i write to files outside the store? i thought that was disallowed for purity?
iqubic`` has quit [Remote host closed the connection]
andymandias has joined #nixos
<hexo_>
i've progressed!!!1
andymandias has quit [Client Quit]
<hexo_>
im getting /nix/store/1b0szbqpivpbqk6hyhbr6m7dixi8k689-bootstrap-stage1-stdenv-linux/setup: ./configure: /bin/sh: bad interpreter: No such file or directory
<hexo_>
again :D
<shor>
hyper_ch, thanks
iqubic`` has joined #nixos
andymandias has joined #nixos
<hexo_>
there is no /bin/sh in bootstrap tools?
<hexo_>
so that is it?
<hexo_>
the error?
<hexo_>
:D
<cransom>
energizer: thats for building a package. this is all runtime stuff. my approach is including an encrypted bundle of secrets that a service on the machine will decrypt via KMS and put in /run/keys. the services that need content from that require the decryption service and then start whenever that's ready.
<lordcirth_>
hexo_, are you writing a new package?
<hexo_>
i'm trying to get it to run on ppc64le (power8 cpu)
<hexo_>
just a hello package, for starters
Church- has quit [Quit: WeeChat info:version]
<energizer>
cransom: do you have some public code for that?
growpotkin has quit [Ping timeout: 250 seconds]
<hexo_>
lordcirth_: so no, i'm not writing new pkg
zaeph has joined #nixos
hyper_ch has joined #nixos
<hyper_ch>
energizer: sorry, server crashed... what kinds of passwords are you looking for to store?
iqubic``` has joined #nixos
aleph- has joined #nixos
<energizer>
hyper_ch: let's start with my irc password
iqubic`` has quit [Ping timeout: 240 seconds]
<hyper_ch>
in configuration.nix or what do you mean passwords in general?
<qyliss>
hexo_++
<{^_^}>
hexo_'s karma got increased to 1
<qyliss>
nice to see ppc64 stuff :)
<hexo_>
<3 :)
<energizer>
hyper_ch: yeah passwords in general
<hyper_ch>
I just use "pass"
<hyper_ch>
"simple" bash script that uses gpg for encryption and stores them in the filesystem
<hyper_ch>
can be setup as git which makes it nice to use on multiple devices
<hyper_ch>
there are gui frontends for it
<{^_^}>
[nixpkgs] @bbigras opened pull request #83443 → nixos/pxe: init (WIP, do not merge) → https://git.io/Jv9KM
<energizer>
afaik my irc client needs to read the creds from ~/.config/hexchat/servlist.conf. is there a way i can get nix to write creds into that file without the creds being added into the store in plaintext?
<{^_^}>
[nixops] @grahamc closed pull request #721 → Linode support for NixOps. → https://git.io/v5LZw
<{^_^}>
[nixops] @grahamc closed pull request #665 → Support multiple versions of nixpkgs in one network → https://git.io/v9QXy
<{^_^}>
[nixops] @grahamc closed pull request #650 → Stop storing keys in the nix store for storeKeysOnMachine. → https://git.io/vS57C
<{^_^}>
[nixops] @grahamc closed pull request #303 → Add a container's host as an extra host as part of its physical spec. → https://git.io/Jv96l
<{^_^}>
[nixops] @grahamc closed pull request #202 → Add functionality to ensure the control host-only interface (vboxnet0) with a configured DHCP server exists before proce… → https://git.io/Jv968
<{^_^}>
[nixops] @grahamc closed pull request #776 → Warn about changed VBox disk size → https://git.io/vF5R9
<{^_^}>
[nixops] @grahamc closed pull request #799 → Replace use of select() by poll(). Fixes #798. → https://git.io/vbWHJ
<{^_^}>
[nixops] @grahamc closed pull request #810 → container: Block until destroy is complete. Fixes #809 → https://git.io/vbRa2
<clever>
shor: `-A system` says to get the system attribute of the attrset that file returns
<{^_^}>
[nixops] @grahamc closed pull request #1157 → Do not require a valid activation in order to use ssh key → https://git.io/fjRAg
<{^_^}>
[nixops] @grahamc closed pull request #1162 → Add support for SSH jump hosts → https://git.io/fjgqC
<{^_^}>
[nixops] @grahamc closed pull request #1174 → ssh: Read extra options from NIXOPS_SSHOPTS env var. → https://git.io/fjKfo
<shor>
so on a standard pc that would return a string like "x86_64" as an example?
<{^_^}>
[nixops] @grahamc closed pull request #1178 → Import to state functionality → https://git.io/fjirL
<{^_^}>
[nixops] @grahamc closed pull request #1180 → nixops/reboot: ask the user to confirm the reboot before actually doing it → https://git.io/fjXCv
<clever>
shor: <nixpkgs/nixos> returns a set, where system is a derivation for the entire nixos build
<shor>
how would I include that build in a configuration.nix, say for building an iso.nix config for including all base system dependencies in the iso's store
<clever>
shor: what exactly are you trying to do?
<judson_>
lordcirth_, decryption happens on my workstation, and the results are shipped via SSH to the servers.
o1lo01ol1o has quit [Ping timeout: 240 seconds]
<shor>
build an ISO that includes all installation dependencies of a base system so I can install from an ISO offline
kim0 has quit [Quit: Connection closed for inactivity]
<shor>
clever, how would I adapt that line within a configuration.nix itself to include system?
<clever>
shor: do you want one configuration.nix to include the build of another configuration.nix?
<{^_^}>
[mobile-nixos] @samueldr opened pull request #106 → oneplus-oneplus3: Document workaround for fastboot flash issue → https://git.io/Jv9iJ
<shor>
I don't think so, I'm following the wiki on building an iso, where the iso.nix is configuration.nix for the build purposes. I want the ISO to have a nix/store with all the dependencies and packages needed to install nixos to a harddrive without it attempting to connect to the internet for missing packages
<clever>
shor: then you do want that, the 2nd configuration.nix is the system you want to install
rogue_koder_ has joined #nixos
<shor>
how would this be done, or rather where would I adapt that provided line and what workflow generates the iso with the builds
<clever>
shor: let anotherSystem = (import (pkgs.path + "/nixos) { configuration = ./another-configuration.nix; }).system; in
<clever>
shor: and then do something with ${anotherSystem} somewhere
<clever>
shor: like use writeShellScriptBin to make a shell script that runs nixos-install --system ${anotherSystem}
zupo_ has joined #nixos
zeta_0 has joined #nixos
<shor>
this would generate an ISO that includes the necessary packages in system?
<clever>
shor: yeah
pluplog has quit [Remote host closed the connection]
h0m2 has quit [Quit: WeeChat 2.7.1]
<zeta_0>
do any of you guys know of a good tool that i can get to work with rcirc in emacs? the people in #emacs said this is a nixos related question: https://melpa.org/#/?q=rcirc
h0m1 has joined #nixos
<zeta_0>
i want an notifier tool that will render a pop-up message and sound when someone mentions my nick?
<zeta_0>
is there a good nix package that will work for my use-case?
<energizer>
zeta_0: what step are you stuck on?
<zeta_0>
sorry if i'm off topic, the people in #emacs said that this is nix related
erasmas has joined #nixos
rogue_koder_ has quit [Remote host closed the connection]
<energizer>
zeta_0: not your fault, they just yelled at you unsympathetically for half an hour
<clever>
shor: if you build an ISO from that, it will include a copy of other-configuration.nix fully built, and running thing will install it to /mnt
<{^_^}>
[nixops] @domenkozar pushed to parallel-send-keys « send keys in parallel »: https://git.io/Jv9ib
<ottidmes>
clever: I am going to take a shot at tweaking to have more location/position info now, it are these moments I realize my CPU is old, although I guess compiling Nix will take time even on a more modern CPU
bhipple has joined #nixos
<zeta_0>
energizer: ya it's all good, anyways, after running nixos-rebuild switch to install libnotify , do i need to reboot in order for it's environment variable to be set? because running a notify-send hi command, does not return anything? https://hastebin.com/okurumifep.rb
jboy has joined #nixos
<aterius>
[Errno 28]
<aterius>
*
<energizer>
zeta_0: it shouldn't return anything. it sends a notification to dbus or something, and if you have a notification daemon running, that will receive the notification from dbus and display a notification. are you running a graphical server (like x11)? are you running a desktop manager (like lightdm, sddm, ...)? are you running a notification daemon (like dunst)? if the answer to any of those is no, it won't work
<{^_^}>
[nixops] @domenkozar pushed to parallel-send-keys « send keys in parallel »: https://git.io/Jv9PZ
<aterius>
Is there a way to increase the temp directory filesize? When using poetry I"m having issues of the form ```ERROR: Could not install packages due to an EnvironmentError: [Errno 28] No space left on device``` when trying to install large python packages, even if I override the TMP and TMPDIR environmental variables
<energizer>
aterius: where is the directory?
<aterius>
```/run/user/1000```
ottidmes has quit [Ping timeout: 258 seconds]
<energizer>
is that normal? mine is just in ~/.cache
<energizer>
poetry env list --full-path
<aterius>
If I install with pip with the following command it works
<shor>
I was not, but now attempting to to so it states by trying to connect to cache.nixos.org
<clever>
shor: does it say what its trying to build?
<ivegotasthma>
Can I do something like this in nix? I'm not sure how to pass a parameter to an import https://dpaste.org/35rb/raw
<shor>
it does not
<ivegotasthma>
I'm getting an unexpected ; error
<shor>
it just says unable to downloads http://......./nix-cache-info
<clever>
shor: read the shell script, then re-run nixos-install with `--option substituters ''` added to the cmd
<shor>
same result
<shor>
wait typo
<shor>
its building
arahael2 has joined #nixos
<elvishjerricco>
ivegotasthma: You can't pass `...` as an argument. NixOS modules are easiest to use with the `imports` option rather than the `import` function
<shor>
clever, thank you kindly for your patience and help, this has plagued me for nearly two days
<ivegotasthma>
elvishjerricco: thanks, I did not know that
<shor>
and I learned quite a bit about how the build process works
<ivegotasthma>
elvishjerricco: what's the difference between the two?
kenji has joined #nixos
<elvishjerricco>
ivegotasthma: import is just a function that reads a file and turns it into the nix expression it represents
kenji__ has quit [Quit: Leaving]
<elvishjerricco>
ivegotasthma: The imports option causes the nix code in nixos to import the file, pass it the appropriate arguments, and merge its options with options of other imports
<elvishjerricco>
So imports is just an abstraction (written in nix) over the import function, essentially
<elvishjerricco>
Whereas the import function is a builtin function of the language
<energizer>
adisbladis: when i'm using poety2nix, i often get a `ERROR: Could not find a version that satisfies the requirement toml (from versions: none)` for some package, which i think usually means a package needed `toml` in setup_requires. how do i find out which package it was that i need to override?
<zeta_0>
energizer: M-x rcirc-notify-page-test, renders a pop-up now, so that works, i think all that's left is to setup a hook: https://github.com/nicferrier/rcirc-notify
<zeta_0>
on the bottom it has an example of using afplay, but that's native to mac os, is there an alternative nix package that will work similarly?'
<zeta_0>
ok great, do you guys know if there is a simple linux pkg that comes with beeping sounds, i a want to use them with my rendered notifier pop-up?
hmpffff has quit [Remote host closed the connection]
nikivi has joined #nixos
<evils>
beep
relaxmax has quit [Quit: Leaving]
hmpffff has joined #nixos
minicom has joined #nixos
matthiaskrgr has quit [Quit: Free ZNC ~ Powered by LunarBNC: https://LunarBNC.net - currently broken?]
<gchristensen>
beep is for using the pcspeaker and you have to give it pitches
vandenoever has quit [Read error: Connection reset by peer]
vandenoever has joined #nixos
vandenoever has joined #nixos
vandenoever has quit [Changing host]
<johnw>
Has anyone setup Gerrit as a service on NixOS?
shibboleth has quit [Quit: shibboleth]
lsix has quit [Ping timeout: 240 seconds]
<jared-w>
cole-h: how do I get that locate script on my laptop? Is it available anywhere?
rogue_koder_ has quit [Ping timeout: 240 seconds]
<evils>
,locate nix-index
<{^_^}>
Found in packages: nix-index
<jared-w>
so locate is just nix-index?
rogue_koder_ has joined #nixos
<evils>
jup
linarcx has quit [Quit: WeeChat 2.7.1]
<jared-w>
noice, thx
<evils>
well, nix-locate, and i think the bot does some filtering
<jared-w>
I'll figure it out. As a side note, 27" and 1080p is way too hideously large for me now after using a 27" 4k monitor at no scaling for a while.
<jared-w>
it's like "where'd all my screen real estate space go"
<Yaniel>
make that 24" 4K
<Yaniel>
granted, I do have a bit of scaling on it
<Yaniel>
probably similar to 27" 4K but text looks a bit better
lsix has joined #nixos
<evils>
i recently got a second 24" 1200p monitor, i've got more space than i know what to do with xD
<{^_^}>
[nixpkgs] @orivej-nixos pushed 5 commits to master: https://git.io/Jv996
<xfix>
"We reverted the change for an undetermined amount of time to better enable access to critical government sites sharing COVID19 information."
gustavderdrache has joined #nixos
<xfix>
however, there is no 74.0.1, so my assumption is that it was done by use Studies mechanism
<gchristensen>
gustavderdrache: I'm annoyed about some Vault trade-offs
<shor>
is there a way to include all of the buildInputs required for stdenv in environment.systemPackages ?
tokudan has joined #nixos
<shor>
I've tried the attribute names of stdenv-linux (i.e. gccStdenv, et al.) and tests.stdenv-inputs (which fails)
erictapen has quit [Ping timeout: 258 seconds]
<gustavderdrache>
gchristensen: any particular trade-offs?
<gchristensen>
gustavderdrache: I want to deploy vault to a single server, using nixops. this is fine but after reboot, this creates a new step I have to run: unlocking vault. this is ... fine ... but nixops has no way to run the command from my machine over to Vault to unseal. I could transfer a key over to /run/keys and have service slurp it up and unseal, but then I'm sending a key over and just plopping it on
<gchristensen>
the disk -- probably not what hashicorp had in mind.
cosimone has quit [Ping timeout: 256 seconds]
<gchristensen>
then again, even doing that send-and-slurp method is probably better than the alternative, which is where I have ALL my tokens in /run/keys available all the time to a certain set of users, without auditing.
<gustavderdrache>
yeah... you can auto-unseal, but you basically can only use cloud providers for that
<gchristensen>
yeah
<gchristensen>
my basement doesn't have many cloudy features
<gustavderdrache>
pretty sure it's a bad thing if that's the case
<gchristensen>
:D
xkapastel has quit [Quit: Connection closed for inactivity]
<gchristensen>
so then my choices are (a) have a script which SSH's over and unseals, which I have to remember to run (b) do this but add super sketchy extension to nixops which does it for me or (c) this /run/keys slurp-and-unseal thing. uh ... any thoughts? :/
erictapen has joined #nixos
<gustavderdrache>
i wonder... what if you did the slurp-and-unseal thing and then rekeyed vault afterwards?
WilliamHamilton has joined #nixos
<gchristensen>
:o
Rusty1 has quit [Remote host closed the connection]
<WilliamHamilton>
is there a way of getting the nix store path of a package, from the shell?
<gustavderdrache>
if done right you'd limit the window where you're leaking the Really Important™ bits
maddo has quit [Quit: See ya]
<gchristensen>
gustavderdrache: that'd require me getting the key back from that machine to my host, which might be tricky too
<gustavderdrache>
hrm
<gchristensen>
but I like where your head is at
<shor>
WilliamHamilton, echo $(nix-build "<nixpkgs>" --no-out-link --readonly-mode -A pkgs.$1)
<shor>
where $1 is the attribute name of the package
<kalbasit>
question regarding Nix modules: If I have an option of type `types.listOf types.str` and has a default value of `[ "a" "b" ]`. How can I make it always include `[ "a" "b" ]` in addition to whatever is set by other modules? As a workaround, I'm setting in the `config = {}` part like this: `config.my-option = mkBefore options.my-option.default;`
<WilliamHamilton>
thanks shor
<shor>
np, I put this into a script in my PATH called nix-path and use cd $(nix-path $pkg) for finding things
<ottidmes>
kalbasit: you can use the apply attribute of an option
<gchristensen>
gustavderdrache: (kill me) I could have it request its unlock keys over the wireguard tunnel to my laptop's vault , which reuires a yubi-tap to allow :)
iqubic has quit [Remote host closed the connection]
iqubic has joined #nixos
<gustavderdrache>
first, you should encrypt the unlock keys using a third-party service, then wrap that in a different third-party service, mail it to yourself, read the values in via OCR, and then ingest the keys
<gchristensen>
there you go
<gchristensen>
now you're cooking with portals.
fendor has quit [Read error: Connection reset by peer]
<gustavderdrache>
:)
<gchristensen>
gustavderdrache: I think I'll just send the token over to /run/keys and pretend its fine
<gustavderdrache>
yeah
<kalbasit>
ottidmes: oh I see, I'll try that
<gustavderdrache>
if you're worried you can rekey manually
<gchristensen>
there's no state secrets here
<gustavderdrache>
how often are you nixops'ing on this machine, anyway?
<gchristensen>
not super lots?
<gchristensen>
and I can delete the key as soon as it is done
<gustavderdrache>
yeah, you're probably fine
<ottidmes>
kalbasit: here is an example: options.my-option = mkOption { apply = list: [ "a" "b" ] ++ list; };
<kalbasit>
ottidmes: it worked! thanks!
playful-owl has quit [Quit: leaving]
<gchristensen>
thanks for noodling, gustavderdrache
<gustavderdrache>
any time
<ottidmes>
nixpkgs master with local nix master checkout added as one of the nix'es fails with: /libstore/s3-binary-cache-store.cc:308: undefined reference to `Aws::Transfer::TransferManager::UploadFile
rogue_koder_ has quit [Remote host closed the connection]
rogue_koder_ has joined #nixos
<ottidmes>
am trying to just use nix-build release.nix -A build.x86_64-linux instead, is probably the most likely to succeed, hopefully I don't get the same error as when I use the nix-shell build executable
civodul has quit [Quit: ERC (IRC client for Emacs 26.3)]
justanotheruser has quit [Ping timeout: 256 seconds]
<zeta_0>
energizer: is there a way for me to setup the beep package to work with rcirc? or am i better off looking online to download beeping sounds?
<energizer>
zeta_0: no idea
vandenoever has quit [Ping timeout: 264 seconds]
o1lo01ol1o has quit [Ping timeout: 264 seconds]
<zeta_0>
energizer: i'm pretty much good to go, i just need some beeping sound files to integrate with rcirc-notify, i guess time to search the internet
<zeta_0>
that has to be some gnu website with free downloads to music, i have no idea