<{^_^}>
[nixpkgs] @erictapen opened pull request #84221 → [20.03] nixos/network-interfaces: Assert that bridges can get an address via DHCP → https://git.io/JvbWV
vykook has quit [Ping timeout: 256 seconds]
vykook has joined #nixos
cybrian has joined #nixos
gustavderdrache has quit [Quit: Leaving.]
cybrian has quit [Ping timeout: 265 seconds]
mexisme_ has joined #nixos
captjakk has quit [Remote host closed the connection]
<{^_^}>
[nixpkgs] @kalbasit opened pull request #84222 → bazel-gazelle: init at 0.20.0 → https://git.io/Jvblq
tomberek has joined #nixos
<tomberek>
adisbladis: hey
vykook has quit [Ping timeout: 265 seconds]
vykook has joined #nixos
rodarmor has quit [Ping timeout: 272 seconds]
nh2 has quit [Ping timeout: 246 seconds]
<{^_^}>
[nixpkgs] @drewrisinger opened pull request #84223 → python3Packages.uvloop: enable on python3.8 → https://git.io/JvblC
morgrimm has joined #nixos
nh2 has joined #nixos
<lejonet>
Anyone here that could help me figure out that even tho I seet a randstackSeed for my kernel, the in-tree modules and out-of-tree modules (zfs and friends) still seem to get different randstack seeds, leading to ZFS and friends not being modprobable in the end (errors out with Exec format error)
<lejonet>
s/seet/set/
lstanley has quit [Ping timeout: 240 seconds]
bgupta has quit [Ping timeout: 256 seconds]
<morgrimm>
Anyone have a good config repo example for `home-manager`? I'm trying to figure out if it's intended to keep every dotfile in the config, or if it supports symlinking/evaluating existing dotfiles as well
rodarmor has joined #nixos
<energizer>
morgrimm: #home-manager might have some
<cole-h>
colemickens: What a helpful log lol. Any chance the error occurred earlier in that log but didn't immediately halt the build?
<samueldr>
colemickens: use `nix log /nix/store/5jh8amgswp4drn3in8ljlw842kgi4r46-firefox-unwrapped-74.0.drv` and search for "error:" using / (since it's less)
<colemickens>
I don't think so, but it's a good point, I should've checked
<samueldr>
if it's a C / C++ error, it's likely using "error:" as prefix
<samueldr>
sometimes in highly-parallelized loads the error is not at the very end
pluplog has joined #nixos
<samueldr>
I would even say "often" instead of sometimes :)
<cole-h>
^
<colemickens>
oh yeah, there it is. thanks!
<samueldr>
trust me, I make errors often^W^W^W debug failing builds for a living
pluplog has quit [Remote host closed the connection]
<pjt_014>
No option for it, but It's available as a package weirdly enough
<pjt_014>
yup, just checked
<pjt_014>
it's under applications/display-managers/ly
chagra has joined #nixos
<hyper_ch>
hmmm, having issues with latest master and boot.extraModulePackages: error: The option value `boot.extraModulePackages.[definition 1-entry 1]' in `/etc/nixos/hardware-configuration.nix' is not of type `package'. --> I need to have wireguard in it
<hyper_ch>
I used to have boot.extraModulePackages = [ config.boot.kernelPackages.wireguard ]; but it complains
<hyper_ch>
the example in nixos options is: [ pkgs.linuxPackages.nvidia_x11 ] so I tried [ pkgs.wireguard ] but no luck either
<jakobrs>
I was looking at nix-community/nur-packages-template and noticed that it is licensed under the MIT license.
<pjt_014>
what is?
<jakobrs>
This sounds like a bad idea to me because, as far as I understand it, that means that any repository using it as a template would need to (1) keep the MIT notice, and (2) follow the terms of the MIT notice, neither of which is ideal.
<pjt_014>
this is new. isn't the gpl the one people usually get prissy about?
iyzsong has joined #nixos
<bdju>
pjt_014: I sorta got off-topic from before but if you find the rq thing for me to see as an example that would be great. I have like 90% of an issue filled out right now
<bdju>
I tried searching myself but can't find it
<pjt_014>
oh yeah I just found it: meta.broken = true
<jakobrs>
Yeah, but licensing a template under the MIT license doesn't exactly sound like a great idea either.
<cole-h>
What should it be licensed as, then?
<pjt_014>
wtfpl :P
<{^_^}>
[nixpkgs] @jtojnar pushed to staging-next « gobject-introspection: fix tests on darwin »: https://git.io/Jvbzv
<pjt_014>
I mean it coulda been affero
<cole-h>
WTFPL isn't OSI approved, but w/e
<jakobrs>
Yeah, that's the problem.
<jakobrs>
the Unlicense seems to be a reasonable choice.
<jakobrs>
The main gripe is that you probably can't license your repository that is based on the template under anything *more* permissive than the MIT license (because sublicensing stuff)
<jakobrs>
So you can't (I think) license your NUR repo under, for example, the Unlicense.
work_ has quit [Quit: Connection closed for inactivity]
<cole-h>
Maybe I'm misunderstanding, but it says "Licensed works, modifications, and larger works may be distributed under different terms and without source code."
<cole-h>
Wouldn't the Unlicense be covered under "different terms"?
<pjt_014>
would you consider public domain?
<jakobrs>
See the 1st paragraph of the license itself:
<jakobrs>
"permission is hereby granted [...] to use, copy, merge, publish, distribute, *sublicense*, and/or sell copies of the software [...]"
<jakobrs>
So the only way to change the license normally is if you're sublicensing
<jakobrs>
But I am not a lawyer, I may be misunderstanding it.
<jakobrs>
> However, you can only *add* conditions, you can not *remove* any of the conditions of the MIT license [...]
<{^_^}>
error: syntax error, unexpected ',', expecting ')', at (string):293:8
<cole-h>
>> However, the MIT license only applies to the original software you got under MIT from the original author. Any modifications you do to the software can be put under different conditions.
<jakobrs>
Yeah, again, IANAL.
<cole-h>
IANAL, but if you modify the template (say, with your own package) wouldn't that put you in the clear?
<cole-h>
Lol
<pjt_014>
you mentally put a space there didnt you
<jakobrs>
Hopefully? I'd rather not take any risks, even though I'm probably not going to get sued by anybody.
<simpson>
jakobrs, cole-h: Forms and templates generally aren't copyrightable, FWIW.
<colemickens>
so much juicy legal advice :) /me takes notes
<cole-h>
jakobrs: You could also ask fgaz to dual-license under MIT/Unlicense at "your" (collective) option
<simpson>
If you are that worried about it, make sure the original authors are okay, and then explicitly disclaim copyright with a notice for the templates.
<simpson>
colemickens: I am *not* giving legal advice~
<cole-h>
I am not a lawyer, and more specifically, I am not *your* lawyer :P
<colemickens>
too late. I've already begun many things based on these advices.
<cole-h>
MIT/Unlicense seems to be fairly simpatico, see: ripgrep (and most of BurntSushi's software I believe)
<jakobrs>
I'd open an issue, but again, I am not a lawyer, I don't want to do anything which might not be a good idea
<pjt_014>
you can open an issue that's just a question, we have that category
<simpson>
Starting a license fight where none previously existed would be a not-good idea, IMO.
<jakobrs>
The problem is that arguing for or against changing the license makes it more likely to seem like I have any idea what I'm talking about (which I don't)
<simpson>
Clarifying language so that existing usage patterns are made explicit and codified, OTOH, seems like a good idea.
* cole-h
heads off to bed
<cole-h>
Thanks for the conversation. See you guys later
<pjt_014>
cya
cole-h has quit [Quit: Goodbye]
drakonis has quit [Quit: WeeChat 2.7.1]
linarcx has quit [Quit: WeeChat 2.8]
<jakobrs>
... I'll open an issue pointing to this section of the IRC logs, if that seems reasonable?
<jakobrs>
I originally had a more in-depth argument, but I removed it aforementioned reasons.
<pjt_014>
hm. that'll work
<xfix>
i'm pretty sure lib/default.nix, modules/default.nix and overlays/default.nix aren't copyrightable, but it's more complicated with other Nix files in the repository
ArchFeh has quit [Remote host closed the connection]
<xfix>
IMO nur-template should use something like CC0, because I don't think it will be able to realistically protect against copyright violations
<jakobrs>
Yes, CC0 would also work
<xfix>
the closest thing to being copyrightable is ci.nix, but even then, eh...
<evanjs>
I typically refer to TL;DR Legal for things like this — although it’s not an equivalent for a lawyer, etc — https://tldrlegal.com/
<pjt_014>
idea: what about a 'null licence' whose sole legal property is that it must be replaced with something else before being used
<pjt_014>
?
<jakobrs>
Like someone's mentioned, it's a template so it probably isn't copyrigtable anyway
<xfix>
it's messy
<ZaraChimera>
I am trying to install nix in opensuse WSL. Using the command from the website gives me a message about not being able to get local issuer certificate.
koleesch_ has quit [Ping timeout: 240 seconds]
<xfix>
in some countries, you cannot put your works under public domain
<pjt_014>
ew
<jakobrs>
pjt_014: You could do that, but (1) such a license doesn't exist (afaik), and (2) why not just CC0 if you're going that far
<xfix>
i find Unlicense kinda shaky
mexisme_ has quit [Ping timeout: 250 seconds]
mexisme has joined #nixos
<pjt_014>
ZaraChimera: what is wsl? I only know that as windows subsystem for linux
<pjt_014>
which doesnt seem right
<ZaraChimera>
I was trying on Windows Subsystem, correct.
<xfix>
that being said, Unlicense is likely fine
<ZaraChimera>
Searching for nix on WSL led me to a reddit post about it working. It said to use the curl command from the nixos site.
<pjt_014>
oh. so why'd you say opensuse?
<xfix>
now that I read it
<ZaraChimera>
Because I am using the opensuse leap release for WSL as the base to try to run the command.
<jakobrs>
I didn't give mention specific license in the issue (apart from the MIT license), I only referred to this thread
<pjt_014>
oooooh. I forgot there were options besides ubuntu
<ZaraChimera>
I put that in as information about what I was using in case that made a difference to the solution.
<jakobrs>
I'm "deferring" the choice of license
<xfix>
but eh, Unlicense seems kinda problematic to me
kleisli has joined #nixos
<pjt_014>
ZaraChimera: it shouldn't as far as I know
<xfix>
i think CC0 is less problematic personally
<ZaraChimera>
pjt_014 Yeah, they have suse leap and enterprise, debian, kali, alpine and ubuntu.
<pjt_014>
alpine? that's new.
<jakobrs>
ZaraChimera: last time I tried to install Nix in WSL, there were
fusion809 has joined #nixos
<jakobrs>
problems
<pjt_014>
oh, important question: what does the date command tell you?
<jakobrs>
you should probably look for a relevant issue on github
<ZaraChimera>
So my issue is with a certificate that curl tries to verify when I run the command "curl -L --proto '=https' --tlsv1.2 https://nixos.org/nix/install | sh"
<ZaraChimera>
It includes the time. I screwed up the copy.
<ZaraChimera>
Time is 06:36:14 UTC
mexisme has quit [Ping timeout: 265 seconds]
<pjt_014>
I'll assume that's right.
<pjt_014>
I'm asking because certificates sometimes barf because the date is wrong. I found that out when I had a similar problem and found my date was set to sometime in 1960, outside the expiry range
<xfix>
I would recommend CC0 personally for that purpose
<xfix>
Unlicense kinda feels like a license written by a programmer who looked at various licenses, had no idea how the law works, and tried to make their own license
<pjt_014>
ZaraChimera: you can also throw a --verbose at it to get more info
<ZaraChimera>
The github issues link jakobrs provided does not list any issues relating to curl and certificate verification issues.
<ZaraChimera>
pjt_014 you mean to the curl command?
<ZaraChimera>
or date command?
<pjt_014>
yes
<pjt_014>
curl
relaxmax has quit [Quit: Leaving]
<ZaraChimera>
curl: (60) SSL certificate problem: unable to get local issuer certificate
<ZaraChimera>
how to fix it, please visit the web page mentioned above.
<ZaraChimera>
establish a secure connection to it. To learn more about this situation and
<ZaraChimera>
curl failed to verify the legitimacy of the server and therefore could not
<ZaraChimera>
Same result with --verbose as without.
<pjt_014>
hm. Also worth noting: you can download the install script with anything you want and run it as a file
<pjt_014>
for example wget might simply ignore the problem
<pjt_014>
or a browser
zaeph1 has joined #nixos
<xfix>
to be specific, the problem with Unlicense is that it's trying to be MIT license with a public domain disclaimer, but public domain is very complicated
<pjt_014>
once you have it download as install.sh or whatever, do: chmod +x install.sh; ./install.sh
<ZaraChimera>
Okay.
<pjt_014>
This is the part where the problem is fairly easy to work around, it's the installation where things might get interesting
<pjt_014>
although last time I used nix on wsl I only really came into 3 problems
<ZaraChimera>
Okay, located a cert to download so I'll try that.
<pjt_014>
sure, try that
zaeph has quit [Ping timeout: 265 seconds]
<fgaz>
cole-h, jakobrs: I don't think the license is a problem, but I guess we can change it
<jakobrs>
That would be great
<fgaz>
We'll have to ask all contributors though
<jakobrs>
Just remember the "consent from all contributors" part
Naptra has joined #nixos
<jakobrs>
There are only 4 contributors though, hopefully they won't be too hard to reach
<jakobrs>
And all of them are still active on github
<fgaz>
Open an issue, I myself am OK with that. Any suggestions? Unlicense?
<jakobrs>
I think either CC0 or the Unlicense would work (again, IANAL)
<fgaz>
AFAIK CC0 isn't for code (ianal too)
<xfix>
CC0 is fine for code
<xfix>
other Creative Commons licenses aren't, but CC0 is fine
<jakobrs>
CC licenses generally shouldn't be used for code, but CC0 is fine afaik
<fgaz>
Which makes sense, since it's just public domain
<fgaz>
Also CC0 is more mature I think?
<jakobrs>
Yeah, it's backed by the Creative Commons
<hpfr[m]>
For IRC on NixOS do I need to open a port in the firewall?
<jakobrs>
but the Unlicense is shorter
<jakobrs>
hpfr[m]: No
<hpfr[m]>
why not?
<jakobrs>
... unless you mean an IRC *daemon*
<xfix>
Unlicense has incomplete disclaimer for countries which do not recognize public domain
<xfix>
funnily enough some MIT-like licenses give more rights than Unlicense
<hpfr[m]>
port 6697 is open?
<jakobrs>
That's the IRCd port I think
<jakobrs>
If you're trying to run an IRC *server*, you're going to need to open a port.
zaeph1 is now known as zaeph
<jakobrs>
Unless the nixos module adds the port automatically
<pjt_014>
I'm using irc right now (obvs) and not open any ports in my config, so I'd assume it's done automatically
<ZaraChimera>
Interesting. Passing the --insecure option to curl still gets me that error. I think it might have to do with WSL potentially, if it isn't an issue on other systems.
<jakobrs>
sudo nixos-option networking.firewall.allowedTCPPorts should tell you what ports are actually open and why
<xfix>
CC-BY-SA 4.0 can kinda be used for code because it can be converted to GPLv3, but that's a bad idea, generally don't use CC other than CC0 for code
<xfix>
if you want GPLv3, then use GPLv3 instead of bothering with an additional step
<ZaraChimera>
wget also complains about the certificate.
<pjt_014>
ZaraChimera: can you download the install file on your host and just move it to the wsl folder?
<jakobrs>
epsilon (calculator OS) uses CC-BY-NC-SA, but that's the only code project I've seen that uses a CC license (apart from CC0)
<xfix>
worth noting that GNU recommends using CC0 instead of Unlicense
<pjt_014>
it ugly af but it work
<xfix>
"If you want to release your work to the public domain, we recommend you use CC0. CC0 also provides a public domain dedication with a fallback license, and is more thorough and mature than the Unlicense."
<ZaraChimera>
I managed to get the install with wget and passing --no-check-certificate
<hpfr[m]>
jakobrs: whoa nixos-option is kinda cool
<jakobrs>
yeah, I know
<xfix>
that being said, Unlicense is a free software license, the Unlicense's fallback is incomplete, but it still is free software
<jakobrs>
It's going to be rewritten in C (I think) in the next release, making it even faster
<jakobrs>
FWIW, GitHub indirectly sort of endorses the Unlicense
<pjt_014>
you sure it can show the whole firewall status and not just whats in the config?
<hpfr[m]>
why is speed so paramount for this command haha
<hpfr[m]>
doesn't it just parse some nix
<pjt_014>
its fooking SL O W
<pjt_014>
used to worse
<jakobrs>
pjt_014: It shows what value is actually used for your system configuration
<jakobrs>
the complete firewall rule set can be seen using iptables --list
hpfr has joined #nixos
<jakobrs>
Mic92 mentions on GitHub that all NUR repositories are required to be MIT-licensed anyway
<jakobrs>
I still think that the template should be CC0 or Unlicensed anyway, though
leonardp[m] has joined #nixos
snicket has joined #nixos
mexisme has joined #nixos
<ZaraChimera>
pjt_014 I got the install file downloaded and got it copied to my WSL /home directory, ran sudo chmod +x and then tried to run it, but it still complains about the certificate.
fragamus has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<pjt_014>
ah crap I forgot it installs stuff it downloads too
thetet has joined #nixos
<pjt_014>
and youll need network access to dl packages
<pjt_014>
luckily that means this isnt a nix(os) problem anymore
<pjt_014>
any help that has/can deal with ssl type problems is now a resource
<ZaraChimera>
I made sure my suse WSL does see the net, which it does.
<xfix>
choosealicense is eh... choosealicense decided to pick Unlicense over CC0 because it is shorter and because the Unlicense's author requested that
<xfix>
there was no real legal analysis in this case
<fgaz>
<jakobrs "I still think that the template "> Hmm but then there'd be an additional step when uaing the template
<fgaz>
using
mexisme has quit [Ping timeout: 265 seconds]
<pjt_014>
ZaraChimera: yeah but that's of limited use since so many places use ssl
<ZaraChimera>
Yep. I get the script but it doesn't help as the script itself needs ssl functioning.
<pjt_014>
actually there is one way to still use nix without usable net access now that I think about it
leonardp[m] is now known as leonardp
<pjt_014>
sideloading
<pjt_014>
ugly but it works
thetet has left #nixos [#nixos]
<ZaraChimera>
I found some results searching for the curl issue saying I need to put a reference to cacert in php.ini or similar to make it work.
eoli3n__ has joined #nixos
<pjt_014>
that dont sound right
<jakobrs>
fgaz: As it is currently, you need to keep the copyright notice of nur-packages-template *in addition to* your own
<pjt_014>
tf is php have to do with it?
<ZaraChimera>
It was an answer on SO regarding the curl error I was getting.
<ZaraChimera>
SO (stack overflow)
o1lo01ol1o has joined #nixos
<xfix>
i don't think that's an issue
<pjt_014>
but yeah you have a missing file or something somewhere. unless php stands fopr something other tham Pretty Hellish Programming lanuage
<ZaraChimera>
The php.ini might have had something to do with something like wordpress.
<xfix>
that being said, template probably should include a copyright license at top of its files
<jakobrs>
xfix: how?
<jakobrs>
as in, what do you mean?
<ZaraChimera>
I'll dig around and see what I can scare up for sideloading nix.
<fgaz>
Like template-LICENSE, I guess
<pjt_014>
nix-copy-closure is the main thing
<ZaraChimera>
WSL helpfully mounts my C drive at /mnt/c so I can access my windows user directory and all that good stuff.
<pjt_014>
I'd tell you but I haven't used wls for ages...or windows 10. :shrug:
<jakobrs>
fgaz: I think you just need two lines instead of one at the top of the license file.
<ZaraChimera>
I figure it should work as people made posts about getting nix running in WSL 2 to 3 years ago. So I am assuming PEBKAC in this case.
<pjt_014>
ZaraChimera: It sounds strictly like a web certificate problem which is distr-agnostic, but if you really want to to could try another distro under wsl
<jakobrs>
Yeah, it's definitely base 32 I just couldn't find anything which described which "variant" of base32
hpfr has joined #nixos
hpfr has quit [Remote host closed the connection]
<ZaraChimera>
I mean I may as well eliminate that as an option, just in case. It has been reported as working with Ubuntu WSL
<pjt_014>
ZaraChimera: alpine might be easier to debug (since it's fairly minimal) if it has this problem; and yeah I have gotten it towork with ubuntu
<ZaraChimera>
Alpine looks interesting as well. I went with opensuse since I know that one the best of the options.
<pjt_014>
I messed around with it for a bit. It's pleasantly minimal.
<ZaraChimera>
Since you have had success with Ubuntu I will try that. If the problem persists then you're likely correct about it being a certificate issue.
<pjt_014>
And I'm very sure you can use nix to cross compile for it
<pjt_014>
right
gxt has quit [Remote host closed the connection]
<jakobrs>
fgaz: I'm going /away for now. If there's any advancements on the issue please comment on the GitHub issue so that I'll see it.
<ZaraChimera>
Both Ubuntu and Alpine are free for WSL :D
<jtojnar>
Cole Mickens just drop the sha256- prefix
<pjt_014>
Wait is there one that is for-pay?
gxt has joined #nixos
<jtojnar>
Cole Mickens or use hash attribute, which requires the SRI format. But it is not supported by all fetchers
<ZaraChimera>
Huh. Alpine WSL is listed as a free trial.
<ZaraChimera>
Odd...
<{^_^}>
[nixpkgs] @jtojnar pushed 0 commits to revert-84025-auto-update/tessera: https://git.io/Jvbgb
<pjt_014>
ew
<pjt_014>
gotta be a way to bypass that
kenran has joined #nixos
<chvp>
ZaraChimera: you probably need to install ca-certificates (or a similar package) in your wsl
bvdw has quit [Read error: Connection reset by peer]
gxt has quit [Remote host closed the connection]
bvdw has joined #nixos
gxt has joined #nixos
<ZaraChimera>
chvp Okay, I'll see if I can hunt down how to do that.
puck has quit [Quit: nya]
puck has joined #nixos
cybrian has joined #nixos
orivej has quit [Ping timeout: 260 seconds]
<ZaraChimera>
A little progress downloading cacert.pem from https://curl.haxx.se/ca/cacert.pem and copying it to /etc/ssl/certs and passing --cacert<file> to the curl command got one download done before it errored out on the second.
opthomasprime has joined #nixos
cybrian has quit [Ping timeout: 260 seconds]
opthomasprime has left #nixos [#nixos]
<jakobrs>
I just wanted to be sure:
<jakobrs>
If I add my repository to nur, I have to "give permission to license the content under the MIT license"
<jakobrs>
I'm allowed to dual-license, right?
<ZaraChimera>
I have downloaded nix-2.3.3.tar.xz, is this the one I want to unpack to /tmp and run the install script from?
eoli3n__ has quit [Ping timeout: 256 seconds]
dansho has joined #nixos
<pjt_014>
ZaraChimera: I can't remember since I havent done it this way in ages, but just make sure you read what the install script does carefully and you should be good
<ZaraChimera>
Unpacked nix-2.3.3 from nixos.org/nix
<dansho>
anyone know what this error means when running ansible-playbook? 'Fatal Python error: initsite: Failed to import the site module'
<ZaraChimera>
Looking at the manual it says to run ./install but there is no install file in the directory.
<ZaraChimera>
There is an install-sh in nix-2.3.3/config/ but that doesn't do anything.
<FRidh>
dansho: that means trouble :) How are you using playbook? From a python.withPackages or python.buildEnv?
<FRidh>
I have impression python 2 and3 gets mixed. Do you have both in your environment?
<ZaraChimera>
pjt_014 I do and I copied it to the extracted nix-2.3.3 directory but running it without modification just throws the certificate error again.
<{^_^}>
#32915 (by gleber-da, 2 years ago, open): Python: PYTHONNOUSERSITE propagates from Python binaries to whatever they run
<pjt_014>
line 32 is the curl command
<ZaraChimera>
Okay I see it with the cat command.
<ZaraChimera>
When I was in vi. Line 32 was blank. I'll go back and locate the curl command and comment that out.
<FRidh>
dansho: could you try to use the following instead of just ansible (ansible.overridePythonAttrs(oldAttrs: { permitUserSite = true; })
<FRidh>
oh, that is strange
<FRidh>
as far as I can tell they use the same python
<FRidh>
anyway, another issue is mkShell
<FRidh>
I really dislike that function because people misunderstand it. What happens is that all setup hooks for all build inputs are executed, which is *not* what you want
<FRidh>
although that's a general issue with nix-shell
<ZaraChimera>
Progress. Now it is grousing about a SHA256 mismatch
<ZaraChimera>
sha256sum: /tmp/nix-binary-tarball-unpack.iqFSU8iocR/nix-2.3.3-x86_64-linux.tar.xz: No such file or directory <-- and that.
<pjt_014>
ok, there's some verification that's messed up. you could comment out the checks, or
<pjt_014>
just open up the tar.xz file manually and look in the install dir
<ZaraChimera>
I used 7-zip to look inside the .tar.xz file.
<ZaraChimera>
I am not seeing any Install dir or install file.
<ZaraChimera>
Just the install-sh file inside the config dir
<pjt_014>
there should be one at ./*/install
<ZaraChimera>
I also have the downloaded install.sh open in Notepad
<pjt_014>
* means 'anything' though, so there must be only one folder
<{^_^}>
[nixpkgs] @jtojnar pushed 3 commits to staging-next: https://git.io/Jvb2p
<ZaraChimera>
There is no */nix-2.3.3/install file
<ZaraChimera>
C:\Users\*****\Downloads\nix-2.3.3.tar.xz\nix-2.3.3.tar\nix-2.3.3\ is the path I am looking at at the moment. Inside there is nothing called install other than what I mentioned in the /config subdir
<pjt_014>
okay, I just downloaded the nix tar.xz file
<ZaraChimera>
Going to https://nixos.org/releases/ and navigating to nix and then nix-2.3.3 and trying to download or view either the tar.bz2 or tar.xz or even the install file gives this error: <Error>
<ZaraChimera>
I doublechecked to make sure my adblocker was not messing things up.
<pjt_014>
this is what my copy of the unpacked tar.xz file has at the top level:
<jD91mZM2>
Hi! This may be a dumb question, but fail2ban is now warning when you don't have a firewall enabled. I don't see the point of a firewall for my server as anything private would be bound to 127.0.0.1 instead of an outward-facing address, so what can I do to allow all ports to be open while still making fail2ban able to ban attempts?
<pjt_014>
install install-darwin-multi-user.sh install-multi-user install-systemd-multi-user.sh store
<pjt_014>
the file 'install' doesn't have an .sh extension, but it is a shell file
<pjt_014>
that *has* to be what you run
<pjt_014>
also
<pjt_014>
the store has a ca-certificate in it
<pjt_014>
so nix might work with networking once installed
<ZaraChimera>
Okay I will attempt to download it again.
<ZaraChimera>
It could be I got a borked download.
<pjt_014>
whats in the top level of it?
<pjt_014>
also, when you run sha1sum on the tar.xz file, do you get 930dde847bc81bc11bc7c728fa08ce934fdf927b?
<pjt_014>
if not it maybe broke
<ZaraChimera>
Top level has the following directories: .github config contrib corepkgs doc m4 maintainers misc mk perl scripts src tests
<ZaraChimera>
The following files: .dir-locals.el .dist-files .editorconfig .gitignore .travis.yml .version bootstrap.sh config.h.in configure configure.ac COPYING local.mk Makefile etc.
o1lo01ol1o has joined #nixos
<ZaraChimera>
Okay. That link worked.
<ZaraChimera>
I really eneded up somewhere weird.
<{^_^}>
[nixpkgs] @jtojnar pushed 2 commits to staging-next: https://git.io/JvbaW
<ZaraChimera>
>,<
chagra has quit [Ping timeout: 256 seconds]
<ZaraChimera>
Yay! It's working!
<pjt_014>
woooooooooooo
<ZaraChimera>
Well sort of. The expected install files were there.
lsix1 has joined #nixos
<ZaraChimera>
It groused about a SSL CA cert path and the nixpkgs channel fetch failed
<ZaraChimera>
So I need to go back and try commenting out the curl line you indicated earlier?
mexisme has joined #nixos
<pjt_014>
no, that was just for getting the tar.xz file
<pjt_014>
which you now have
<pjt_014>
to make sure it's intact, can you run sha1sum nix-2.3.3-x86_64-linux.tar.xz ?
<ZaraChimera>
930dde847bc81bc11bc7c728fa08ce934fdf927b nix-2.3.3-x86_64-linux.tar.xz <--the output of the sha1sum command
o1lo01ol1o has quit [Ping timeout: 260 seconds]
<pjt_014>
that's what I got, your download's intact
mexisme has quit [Ping timeout: 260 seconds]
<ZaraChimera>
Excellent, this is progress.
<pjt_014>
now once you have that unpacked, the top level has a file called install. do ./install and that should do it
<pjt_014>
you may need to chmod +x install first
<ZaraChimera>
Found a post about nix on WSL that said I needed to have a nix.conf file with sandbox = false and use-sqlite-wal = false in it as well.
o1lo01ol1o has joined #nixos
<ZaraChimera>
Okay. Trying that now.
<pjt_014>
since the nix store appears to have its own cacert file the network part might just work too
<pjt_014>
as for that nix.conf thing, dunno. sounds right, can't hurt to try
<ZaraChimera>
Still grousing about being unable to download nixpkgs-unstable due to the SSL CA cert problem (lists path or access rights as possibilities with (77) at the end of the line.
<ZaraChimera>
nix-channel --update nixpkgs failes but the WSL does at least recognize the command
<FRidh>
ZaraChimera: you've done a `nix-env-iA nix cacert` ?
<FRidh>
oh wsl, interesting
<{^_^}>
[nixpkgs] @gnidorah opened pull request #84242 → nixos/qt5: support adwaita-dark theme → https://git.io/Jvbaa
<FRidh>
-iA nix -iA cacert
<pjt_014>
that shouldn't be necessary
<pjt_014>
it's done in te install file on line 128
knupfer has joined #nixos
<ZaraChimera>
error: attribute 'cacert' in selection path 'cacert' not found
<FRidh>
otherwise checking the store if there's a cacert path and install that path in your environment
<FRidh>
i used to have to do that when creating stores at different locations
<ZaraChimera>
At least nix-env and nix-channel are recognized commands.
<ZaraChimera>
I have the basics, but I think a bunch of nixpkgs are missing from the store since the attempt to install it gets me an error because of an SSL cert problem.
<ZaraChimera>
I don't think much is installed at all.
<ZaraChimera>
nix-instantiate complains there's not file default.nix
<FRidh>
yes but you probably installed from the binary tarball
<FRidh>
right, binary tarball, and cacert should have been installed in the profile
<FRidh>
nix-env -q to see what is in your profile
<ZaraChimera>
Only thing in the profile is nix-2.3.3
<FRidh>
yes so find cacert in your store and install it in your profile
<pjt_014>
I gotta sleep
<ZaraChimera>
Good night pjt_014 and thank you for all the help
cybrian has quit [Ping timeout: 265 seconds]
<pjt_014>
good luck, I will maybe be able to help again in like 12 hours
<ZaraChimera>
I found nss-cacert in my /nix/store
<FRidh>
right
<{^_^}>
[nixpkgs] @doronbehar opened pull request #84243 → comedilib: init at 0.11.0 → https://git.io/Jvbai
<FRidh>
nix-env -i that path
zupo has joined #nixos
<{^_^}>
[nixpkgs] @rnhmjoj opened pull request #84245 → riot-desktop: add gsettings schemas to the wrapper → https://git.io/Jvba1
hoplaahei has joined #nixos
m0rphism has joined #nixos
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
jahor has joined #nixos
<ZaraChimera>
Okay. Took me a moment to realize I needed to write the entire path :D
<ZaraChimera>
Says 9 symlinks have been created.
<hoplaahei>
hi. What are the minimum options to pass to dnscrypt2? It won't start without a server, but I'm not sure how to pass the list of servers to the "settings" option.
<jahor>
Hello, Nix. I've been using NixOS for a long time but I'm wondering how I would install packages from a defined list with just Nix on other GNU/Linux distribution. So I'd like to define something like environment.systemPackages and run nix-env -i environmentWithPackages to install everything I've added in this file. Is it possible?
<typetetris>
jahor, here is a description of how to create an environment for you as a user. Be aware, that you should not follow the advice of altering the PATH on a nixos host, as that is already taken care of.
fendor has joined #nixos
<NobbZ[m]>
jahor as I'm not a friend of `nix-env`, `home-manager` works very well on nin-noxOS systems
<jahor>
That's what I wanted. Thank you very much, typetetris!
<ZaraChimera>
Added channel nixpkgs-unstable but when I try to run nix-channel --update it still fails because of SSL CA cert problem. I have installed nss-cacert from the store path on my local machine.
<ZaraChimera>
Clearly I haven't defined something in the right way for this to work.
pluplog has quit [Remote host closed the connection]
<stevenroose>
So I have a question that my go-to NixOS guru friend couldn't answer.
<jahor>
NobbZ[m], I'm already using it on NixOS to install packages for a specific users by fetching home-manager directly from NixOS configuration but the last time I tried it on Arch there were a lot of bugs. Even though thank you. I guess things have changed since there.
<stevenroose>
I want to, mark my words, add a port to the allowed ports on the firewall.
<stevenroose>
That doesn't seem to be possible.
Darkmatter66 has quit [Ping timeout: 256 seconds]
<stevenroose>
I can set networking.firewall.allowedTCPPorts = [ 123 ]; but if I later want to _add_ another port 789, I can't do that..
<qyliss>
really?
<qyliss>
what happens if you try?
<simpson>
stevenroose: When is "later"? I think that if you set it in two different modules, then you'll get both lists of ports together.
<stevenroose>
error: attribute 'networking.firewall.allowedTCPPorts' at /home/<redacted>/configuration.nix:88:3 already defined at /home/<redacted>/configuration.nix:81:3
<stevenroose>
simpson: yeah but in the same top-level configuration.nix I can't
<qyliss>
Correct
<qyliss>
That's how the module system works
<qyliss>
You need to do networking.firewall.allowedTCPPorts = [ 123 789 ];
<NobbZ[m]>
jahor I used it successfully on arch until start of February when I got rid of all my non-nixOS systems
Darkmatter66 has joined #nixos
<stevenroose>
Like if I'm defining a bunch of services in a sequence, I'd like to add the port of that sequence in that same code block.
<qyliss>
You can't assign multiple values to the same key in a Nix attrset.
<qyliss>
Then you should use multiple modules.
<stevenroose>
Instead of adding all ports at the bottom. So that if I remove a service, I can just remove the section.
<stevenroose>
qyliss: why?
<qyliss>
Because you can't assign twice to the same value in a single attribute set
<jahor>
NobbZ[m], That's nice. I'll give it a try.
<stevenroose>
let's say openssh and znc didn't have the openFirewall option (like many other services don't).
<qyliss>
> { a = 1; a = 2; }
<{^_^}>
error: attribute 'a' at (string):293:10 already defined at (string):293:3
<qyliss>
^ It would be like doing that.
<qyliss>
The module system does some clever stuff to merge modules together
<qyliss>
But a single module is just a normal attribute set
<clever>
and thats a parse time error, rather then an eval-time error, so it happens somewhat earlier
<qyliss>
So it can't do that.
<simpson>
stevenroose: This isn't specific to NixOS, but is a general behavior of the Nix language. The idea is that it's likely a programmer mistake to declare something twice in a single scope.
<stevenroose>
I'll add comments under my services that the port for that service is down below :D
<simpson>
I mean, I *do* agree up to the point that I wish that Nix had inline syntax for declaring NixOS-style modules. But other than that, meh; just make multiple files. You'll thank yourself later when you come back in a couple months and realize that you didn't leave any comments.
<clever>
i was expecting the config to get more complex, but then stopped using the service
<clever>
simpson: you can do config = lib.mkMerge [ {...} {...} ];
tilpner has quit [Ping timeout: 256 seconds]
tilpner_ is now known as tilpner
<clever>
simpson: and it will then merge things, using the module framework
<stevenroose>
clever: haha, I actually exactly did this because of murmur. You know murmur doesn't open the firewall port, right? So if you have that module, you either have firewall disabled or you add the port outside of the module
<ZaraChimera>
Okay, looks like it's looking for ca-bundle.crt or ca-bundle.pem in the ~/.nix-profile/etc/profile.d/nix.sh file.
<ZaraChimera>
Which aren't in /etc/ssl/certs so that would be an issue.
<simpson>
clever: I guess~ That's not ergonomic enough IMO, but I'm not sure what would be better. Thanks.
<stevenroose>
clever: how do you merge/use that module into configuration.nix?
<clever>
stevenroose: imports = [ ./murmur.nix ];
vykook has joined #nixos
linarcx has joined #nixos
<{^_^}>
[nixpkgs] @lostnet opened pull request #84246 → couchdb: add support for version 3.0.0 → https://git.io/JvbVO
<stevenroose>
So one thing that is annoying here is that services.openssh.enable = true; automatically opens port 22. While services.anyother.enable usually doesn't. And then some of them have services.cleverservice.openFirewall to let you open the firewall conveniently.
<simpson>
stevenroose: Common code moves up, specialized code moves down. Just because we know the principle, doesn't mean that we're always good at applying it.
<clever>
simpson: i forgot murmur was even running on that machine!
<clever>
stevenroose: ^
<clever>
i havent used it in several years
<stevenroose>
clever: perhaps if you didn't have an import but an actual 2 lines `services.murmur.enable = true; networking.firewall.allowedTCPPorts = [ 64738 ];` you'd spot it more easily :)
<simpson>
clever: I have exactly one machine with perfectly factored configuration, and I literally never use it. CLV.
<clever>
stevenroose: more that i havent audited things lately, a lot of this could be cleaned up
<stevenroose>
:D
<stevenroose>
kk
<ZaraChimera>
Since opensuse WSL does not seem to be working, I'm going to wipe the slate and try over with a clean slate on both opensuse WSL and Ubuntu WSL
<clever>
stevenroose: also, its much much better to do networking.firewall.allowedTCPPorts = [ config.services.murmur.port ];
<clever>
stevenroose: then it will always open the right port
<clever>
even when you change it and forget to update things
<ottidmes>
and I make sure the opening of the ports is dependend on it being enabled and not separate
laduke has quit [Ping timeout: 252 seconds]
<stevenroose>
clever: yeah that's what I do down below now
lostnet has quit [Remote host closed the connection]
<stevenroose>
clever: actually, to avoid forgetting to set it, can I declare a temporary variable?
<clever>
stevenroose: let foo = 123; in { stuff = foo; }
<stevenroose>
Ah you *HAVE* to declare all variables at the top?
<stevenroose>
Otherwise they become part of the config object? Is that a big issue?
<clever>
stevenroose: you have to declare them at some common point, in this case, networking and services are split, so the only common point is the top
<clever>
stevenroose: but, config.services.murmur.port is better, it lets you read the 1st part, even if its since been changed with mkForce elsewhere
<ottidmes>
stevenroose: it has to be in scope through some binding, be it let/with/a name from a rec attrset, function argument, etc.
<clever>
you can do `services = let foo = 123; in { mysql.port = foo; httpd.port = foo; }`, but that will obviously fail due to a port collision
<clever>
when networking and services both need it, you must do `let foo = 123; in { services.foo.port = foo; networking.foo.port = foo; }
<stevenroose>
hmm
kaliumxyz has joined #nixos
ok2` has quit [Ping timeout: 240 seconds]
ixxie has quit [Ping timeout: 265 seconds]
ok2` has joined #nixos
laduke has joined #nixos
ixxie has joined #nixos
<eyJhb>
What is the best way to remove duplicates in a list in nix? Unique is quite slow when the list contains 100.000+
<clever>
eyJhb: its slow due to the lib.subList function, partially
<{^_^}>
nix#2459 (by cleverca22, 1 year ago, open): add a sublist primop
knupfer has quit [Quit: knupfer]
knupfer1 has joined #nixos
<ottidmes>
eyJhb: converting it to an attrset might be faster
knupfer1 has quit [Client Quit]
knupfer has joined #nixos
<eyJhb>
How so ottidmes ?
<eyJhb>
clever: looking at it
thc202 has joined #nixos
<clever>
eyJhb: behind the scenes, an attrset is a int->value mapping, not a string->value mapping
<clever>
eyJhb: it will invisibly translate all strings to ints as new keys are found
<clever>
eyJhb: and builtins.listToAttrs is a single primop, to turn a list of { name = "foo"; value = "something"; } into { foo = "something"; }
<ottidmes>
eyJhb: by mapping the values to the keys, and the lookups should be much faster than what unique does behind the seens to determine duplicates, AFAIK
<clever>
eyJhb: if you have duplicate keys, it will silently drop the duplicates (cant remeber if first or last is kept)
<ottidmes>
also attrNames is once again a primop
<clever>
the problem with lib.uniq, is that its based around lib.sublist
<clever>
and lib.sublist, will call lib.sublist recursively
<clever>
along with array concat
<clever>
and array concat, has a cost equal to the output array size
<clever>
so lib.uniq on a 100,000 element list, will have a cost of 100000 + 99999 + 99998 + 99997 ....
<ottidmes>
ouch
ottidmes has quit [Quit: WeeChat 2.7.1]
hmpffff has joined #nixos
nomeata has joined #nixos
<{^_^}>
[nixpkgs] @alyssais opened pull request #84247 → git-cinnabar: init at 0.5.4 → https://git.io/JvbVy
<{^_^}>
[nixpkgs] @primeos pushed 2 commits to release-20.03: https://git.io/JvbVH
lucasvo has joined #nixos
<eyJhb>
It can't even do it on the list... But if I have two sets, e.g. {"mydomain.com": 1, "lal.com": 1} and {"mydomain.com": 1}, can I then + them together and it will remove dups?
<clever>
eyJhb: // will merge sets
<clever>
> { a = 1; b = 2; } // { b = 3; c = 4; }
<{^_^}>
{ a = 1; b = 3; c = 4; }
<eyJhb>
Hmm... So it makes the most sense to have them as a set to begin with?
knupfer has quit [Quit: knupfer]
<eyJhb>
Or convert the list to a set?
knupfer has joined #nixos
cybrian has joined #nixos
<clever>
> :p builtins.listToAttrs [ { name = "foo"; value = 42; } { name = "bar"; value = 43; } ]
<{^_^}>
{ bar = 43; foo = 42; }
koleesch_ has joined #nixos
<stevenroose>
Any clever ways to use nixos on a machine that doesn't have much memory? Like compile on the host or so? I keep getting "error: unable to fork: Cannot allocate memory" on my 1GiB RAM VPS.
<stevenroose>
(Sometimes if I try a few times it works..)
<eyJhb>
clever: but atm. it is the format [ "domain.com" ]
<clever>
> :p builtins.listToAttrs (map (x: { name = x; value = x; }) [ "domain.com" ])
<{^_^}>
{ "domain.com" = "domain.com"; }
<clever>
stevenroose: nixops can build it on one machine, then deploy to another
<MichaelRaskin>
stevenroose: you have an OK RAM amount on your local machine, right?
<clever>
eyJhb: map can translate it over easily enough ^
<MichaelRaskin>
stevenroose: You can actually _instantiate_ locally and copy the closure of derivation, build + switch
<stevenroose>
MichaelRaskin: yeah
<MichaelRaskin>
(if you have better connection on VPS than locally)
<stevenroose>
I read online that if you nix-env with -iA it doesn't use as much memory
<stevenroose>
But.. I just use nixos-rebuild switch..
<eyJhb>
clever: thanks, will try!
<stevenroose>
Can I somehow get that -iA functionality with nixos-rebuild?
<clever>
stevenroose: thats a performance problem with `nix-env -i`, nixos-rebuild doesnt have that problem to begin with
<stevenroose>
I just added a single service to the config
<MichaelRaskin>
stevenroose: -i evaluates like all packages, -iA evaluates the closure of one package, nixos-rebuild evaluates the closure of your system which is in-between
<stevenroose>
MichaelRaskin: it seems that nixos-rebuild switch is going to update a bunch of dependencies while I just added a single service. Is that desired behavior?
<stevenroose>
(I'm quite new to this, I just have a few machines with pretty basic setups.)
cjpbirkbeck has joined #nixos
<ZaraChimera>
Something is definitely different between the way WSL sets up opensuse leap and ubuntu. nix install was not working under WSL opensuse, but no issues under ubuntu WSL.
<MichaelRaskin>
stevenroose: it definitely should evaluate all the dependencies
<ZaraChimera>
Has to do with where the CA certs are kept.
<MichaelRaskin>
Because Nix does not think «what is the closest system that looks kind of similar to what you requested»
<MichaelRaskin>
It builds a plan from scratch, then looks what to reuse
<stevenroose>
MichaelRaskin: I read about nixos-rebuild --build-host. So if I had one strong machine accesible by vps it could do the build?
<qyliss>
yes
<MichaelRaskin>
stevenroose: right now you seem to have problems already with evaluation though
<MichaelRaskin>
You can evaluate locally, nix-copy-closure the derivation, then realise using a build host, yec
<stevenroose>
The line before that error is "created 9682 symlinks in user environment"
<clever>
and it will auto-create a 2gig file for you
<MichaelRaskin>
you can nix-copy-closure it and nix-store -r on VPS
<clever>
MichaelRaskin: given the `created 9682 symlinks in user environment` msg, it got past the eval, and was building systemPackages when it failed
<MichaelRaskin>
Ah indeed
<MichaelRaskin>
Then just --build-host might be enough
<clever>
so would a small swap file
chagra has joined #nixos
<MichaelRaskin>
Or local building of the entire system and pushing it to VPS
<clever>
which nixops can automate
<stevenroose>
Worked with the swapfile epic
<stevenroose>
I suppose adding a swap partition after-the-fact is not an easy task :p
<stevenroose>
So swapfile it is
<clever>
i made the mistake of mixing up units when i setup my laptop
<clever>
it has a 40mb swap, not a 40gig swap
<clever>
and since i choose zfs, i cant use swap files
<MichaelRaskin>
Adding a swap partition in VPS conditions might be easy if the recovery tooling is great
<clever>
MichaelRaskin: depending on the VPS, it might be simpler to just add a whole swap disk!
<clever>
ignore the partitions entirely
<MichaelRaskin>
That might be more expensive, though
<clever>
some hosting providers encourage that thought
<stevenroose>
Meh it worked with a swap file, I'll just make the swap file permanent.
<stevenroose>
It's not an important machine :)
<{^_^}>
[nixpkgs] @jtojnar pushed 2 commits to staging-next: https://git.io/JvbwL
<clever>
ehmry[m]: not really, you have to modify the derivation to print it to the logs
iyzsong- has joined #nixos
iyzsong has quit [Ping timeout: 272 seconds]
chagra has quit [Ping timeout: 256 seconds]
<cjpbirkbeck>
hello, hope you are doing well. what happened to the links to the nix expressions on the online search tool? they all say "not specified" now.
mexisme has quit [Ping timeout: 265 seconds]
chagra has joined #nixos
<ehmry[m]>
clever: ok, thanks
<tilpner>
ehmry[m]: What do you need it for?
<tilpner>
cjpbirkbeck: There have been a few changes to that page recently, it may well have been broken by that
<clever>
eyJhb: thats why unique isnt as shit as i remember it! lol
<clever>
eyJhb: though, i still cant reproduce the poor perf on the older ver...
<{^_^}>
[nixpkgs] @JJJollyjim opened pull request #84250 → nixos/heartbeat: Bring heartbeat in-line with other ELK stack modules → https://git.io/Jvbr8
<clever>
eyJhb: ah, there it is, now i feel less insane, a rev of nixpkgs from 2014, requires 500500 list concats, to do the same nix expr!
gerschtli has quit [Quit: WeeChat 2.7.1]
gerschtli has joined #nixos
xkapastel has joined #nixos
<alexgood>
Hey folk, anyone got any tips on how to set up a development environment for a javascript package? I dont' want to build the package, I want to have an environment where all the dependencies are isntalled so I can run `yarn add` and `yarn run` etc.
<clever>
alexgood: oh, but also dont forget the name = "something";, oops
yourname has joined #nixos
<eyJhb>
clever: that is the new version I sent you. The other would not finish, however I get this error `error: value is a function while a set was expected, at`, when I use this `'' + (dns.unboundString (dns.removeDuplicates [ dns.stevenblack-standard dns.yoyo-trackers ]));`
<alexgood>
Thanks! The problem I've run into with this approach has been that there are some packages which build native extensions using `node-gyp`, and those seem to be breaking in ways I don't understand.
gerschtli has quit [Quit: WeeChat 2.7.1]
<clever>
alexgood: those tend to work for me, when using nix-shell
<alexgood>
I was wondering if there was anything that handles that off the shelf. `yarn2nix` seems to only handle building the package, rather than setting up a shell
<alexgood>
Oh interesting, maybe it's something specific to my setup
cosimone has quit [Quit: Terminated!]
gerschtli has joined #nixos
<alexgood>
Or in particular, to libsodium, which is what's breaking
<clever>
alexgood: yarn2nix also deals with building node_modules in a pure and read-only manner
gerschtli has quit [Client Quit]
<clever>
alexgood: you may need to add libsodium to the buildInputs then
chagra has quit [Ping timeout: 256 seconds]
<alexgood>
Ah, nice, that's probably what I'm missing. Thanks!
markus1189 has quit [Ping timeout: 265 seconds]
lsix1 has joined #nixos
markus1189 has joined #nixos
erictapen has quit [Ping timeout: 265 seconds]
yourname has left #nixos [#nixos]
leocp1 has joined #nixos
smeag0l has joined #nixos
<eyJhb>
No clue why it won't work, works locally.. Code https://termbin.com/hu9k `'' + dns.unboundString (dns.removeDuplicates [ dns.stevenblack-standard dns.yoyo-trackers ]);`
<smeag0l>
Is this the correct way to find #include <Python.h>? gcc -o prog prog.c `pkg-config --cflags --libs python`
hmpffff has quit [Read error: Connection reset by peer]
<smeag0l>
was asking as i thought it should be able to find, after i `nix-shell` and thought no more needing pkg-config
hmpffff has joined #nixos
leocp1 has left #nixos [#nixos]
<clever>
smeag0l: that kind of mess is only needed if packages are going out of their way to avoid collisions in /usr/include
<clever>
which is exactly the kind of mess nix prevents
lsix has joined #nixos
knupfer has quit [Remote host closed the connection]
knupfer has joined #nixos
knupfer has quit [Remote host closed the connection]
chagra has joined #nixos
<jluttine>
which one is correct in shebang: "#!/usr/bin/env sh" or "#!/bin/sh" ?
<tilpner>
bqv[m]: I'm guessing it's not stopping just before the end, but it's a single connection (out of many parallel connections) that has stalled, and you only notice at the end
<bqv[m]>
right.
<bqv[m]>
symphorien: is there a way to get terminal output with nix-du?
<symphorien>
no
<bqv[m]>
bummer. thanks anyway
<symphorien>
the most direct way is | tred | dot -Txlib
kleisli has quit [Remote host closed the connection]
<learnday20>
hello nixos experts, I would like to customize my emacs basic customization for orgmode. How do I begin? I and in ~/.emacs.d directory but all I see is session info and elpa folder. thank you!
kwork has quit [Remote host closed the connection]
leocp1 has joined #nixos
kwork has joined #nixos
<{^_^}>
[nixpkgs] @lheckemann pushed 5 commits to structured-attrs: https://git.io/Jvb6F
alina has joined #nixos
iyzsong- has quit [Ping timeout: 260 seconds]
leocp1 has left #nixos [#nixos]
cosimone has quit [Quit: Terminated!]
mallox_ has joined #nixos
cosimone has joined #nixos
<teto>
sphalerite: regarding https://github.com/NixOS/nixpkgs/pull/72074, should I just push directly to the PR ? shouldn't we announce which packages we are going to work on ?
<immae>
Hello there, the release notes https://nixos.org/nixos/manual/release-notes.html don’t include the 20.03 "big" changes, is there any place were I can see a draft / hints about it, or is it just not redacted yet? (if so, by which means do people agregate all this data so that I can reconstitute it myself in the meantime?)
<immae>
Ah it even contains the notes for unstable, which was my next question
<immae>
Thanks tilpner++
<{^_^}>
tilpner's karma got increased to 77
gustavderdrache has joined #nixos
<kraem>
i've added 'networking.firewall.extraCommands = "iptables -I DOCKER-USER ..";' to block containers to be reached on my dev machine from the outside. however firewall.service is failing because the chain DOCKER-USER isn't set up just yet when starting the machine. do i have any other option than to define a new service which runs the iptables command?
ehmry[m] is now known as ehmry
<the_pumpkin_man[>
Hello, I was wondering if there is a way to get libcrypto.so.1.0.0 on NixOS, I don't find it in the nixpkgs and I need it for a game
<tilpner>
kraem: I probably should be quiet, but if you know exactly when that chain is added, and it's somewhere in docker.service, perhaps it can be added in ExecStartPre
<tilpner>
the_pumpkin_man[: Exactly that one, or 1.0.2?
<the_pumpkin_man[>
exactly that one
lsix has quit [Ping timeout: 265 seconds]
<the_pumpkin_man[>
Tested 1.0.2, and the game still complains `error while loading shared libraries: libcrypto.so.1.0.0: cannot open shared object file: No such file or directory`
<tilpner>
Then you'll need to try older nixpkgs versions
<the_pumpkin_man[>
Oh, Im actually on nixos-unstable, how can I do that ?
<peelz>
kraem: maybe you could try creating the DOCKER-USER chain in networking.firewall.extraCommands?
<magnetophon>
can "rev" in a pkg have a space? As in: rev = "Ninjas2 v${version}"; Seems to break it: nix-prefetch-git: line 92: v0.2.0: command not found
<peelz>
tilpner: you could override the `extraLibraries` attribute on the steam derivation, like this: steam.override (self: { extraLibraries = pkgs: [ ./libcrypto-1.0.0 ]; })
<magnetophon>
tilpner: oops, my bad, sorry!
fenedor has joined #nixos
alina has quit [Quit: leaving]
<tilpner>
peelz: And where does the_pumpkin_man[ get that ./libcrypto-1.0.0?
alina has joined #nixos
captjakk has joined #nixos
<peelz>
you're gonna have to make it yourself or find an older version of libcrypto on the nixpkgs repo history
<tilpner>
Yeah, and I wish the_pumpkin_man[ good luck with that
<the_pumpkin_man[>
Oh well, I only have basic knownledge about NixOS
<the_pumpkin_man[>
Thank you, but idk how to create a derivation or to use it at the moment
<peelz>
oh I misread, I thought tilpner was asking x)
fendor has quit [Ping timeout: 240 seconds]
<the_pumpkin_man[>
I will just keep searching
<the_pumpkin_man[>
no xD
<peelz>
the_pumpkin_man[, libcrypto is from the openssl package
<the_pumpkin_man[>
I know, but I specifically need the 1.0.0 version
captjakk has quit [Ping timeout: 256 seconds]
teto has quit [Ping timeout: 272 seconds]
<peelz>
the_pumpkin_man[: be815e7639d819f2d899367c09356c30603ed2f7 seems to be the last commit before openssl was upgraded to 1.0.1b
<peelz>
you should be able to use that libcrypto derivation
<kraem>
peelz: thanks! wen't with ExecStartPost on the docker.service because that way it won't fail silently if docker /docker.service changes implementation :)
<the_pumpkin_man[>
So if I understan correctly, the URL points to an old nixpkgs repository ?
<peelz>
it downloads and imports that nixpkgs repo yeah
<the_pumpkin_man[>
and adds the openssl 1.0.0 as a library to the steam environment
<peelz>
yup
<the_pumpkin_man[>
Great, thanks, I will test it !
chagra has quit [Ping timeout: 240 seconds]
teto has joined #nixos
<tilpner>
That's 2012 nixpkgs, don't let it send anything you care about over the network
turion has joined #nixos
<pbogdan>
libcrypto.so.1.0.0 is also in openssl_1_0_2 which is still even in current unstable (marked as insecure though..)
<turion>
I'm looking into purchasing a graphics tablet. Any recommendation on what plays well with NixOS? Huion? Wacom? ...?
<the_pumpkin_man[>
pbogdan: strange thing, I tried to install it but the game wasn't finding libcrypto.so.1.0.0
<peelz>
the_pumpkin_man[: you have to supply it to the steam environment. Steam games won't find "globally-installed" libraries afaik
mexisme has joined #nixos
fragamus has joined #nixos
ambroisie has joined #nixos
teto has quit [Ping timeout: 272 seconds]
chagra has joined #nixos
<bqv[m]>
help, i'm stuck in a git rebase
<bqv[m]>
my objects are corrupt :')
<peelz>
yikes
chagra_ has quit [Read error: Connection reset by peer]
teto has joined #nixos
mexisme has quit [Ping timeout: 260 seconds]
arjen-jonathan has quit [Ping timeout: 260 seconds]
<peelz>
the_pumpkin_man[: as pbogdan said, openssl_1_0_2 does indeed build libcrypto.so.1.0.0. Try this instead: https://termbin.com/st7q
<the_pumpkin_man[>
Thank you, I was trying to add this lib to Steam
<the_pumpkin_man[>
But `he option value ```environment.systemPackages.[definition 1-entry 34]' in `/etc/nixos/packages.nix' is not of type `package'```
<tilpner>
Add parentheses around line 3
<peelz>
oh yeah, wrap the entire thing in parentheses
<AmandaC_>
on behalf of all people, I say: You'rewelcome
magnetophon has quit [Read error: Connection reset by peer]
AmandaC_ is now known as AmandaC
<the_pumpkin_man[>
I just don't understand one thing
<the_pumpkin_man[>
Because my whole expression steam.override ...
lsix has quit [Quit: WeeChat 2.7.1]
<the_pumpkin_man[>
Is in environment.systemPackages = with pkgs; [
kleisli has quit [Remote host closed the connection]
<the_pumpkin_man[>
* Is in environment.systemPackages = with pkgs; [ ... ];
kleisli has joined #nixos
captjakk has joined #nixos
<the_pumpkin_man[>
So why in `extraLibraries = pkgs: [ openssl_1_0_2 ];` it wasn't like `extraLibraries = pkgs: [ pkgs.openssl_1_0_2 ];`
morgrimm has quit [Ping timeout: 240 seconds]
<the_pumpkin_man[>
And why did it let me build with the first thing ? Because just openssl_1_0_2 alone makes no sense for Nix
<peelz>
`with pkgs;`
<tilpner>
the_pumpkin_man[: "with pkgs;" adds everything from pkgs to the current scope
<eyJhb>
Anyone up for helping with this error? `error: value is a function while a set was expected, at /home/eyjhb/projects/nixos/learning/dns/test.nix:7:19` test.nix - https://termbin.com/e8pu , default.nix - https://termbin.com/9p4tb
<tilpner>
the_pumpkin_man[: So just a plain name will get that attribute from the surrounding pkgs
<tilpner>
the_pumpkin_man[: But the important part about extraLibraries is, that a special pkgs is passed, and you need to use that
<tilpner>
the_pumpkin_man[: In pkgs: [ pkgs.foo ], foo comes from the pkgs that is passed in
<tilpner>
the_pumpkin_man[: In pkgs: [ foo ], foo comes from somewhere else, and the pkgs that is passed in, is ignored
<kraem>
anyone solved iwd and udev race condition renaming wifi interfaces? i've tried having iwd.service wait for udevd.service, having the unit start after 'sys-subsystem-net-devices-wlp3s0.device', used 'use_default_interface=true' in iwd conf, define 'iwd --nointerfaces "wlan[0-9]"' in ExecStart of iwd.service. still it renames wlp3s0 to wlan0 after suspend..
<tilpner>
the_pumpkin_man[: This is important when the passed pkgs is actually pkgsi686Linux, where you get your 32-bit libraries
<the_pumpkin_man[>
Ok I now understand it thank you
<tilpner>
the_pumpkin_man[: pkgs: with pkgs; [ foo ] is equivalent to pkgs: [ pkgs.foo ]
captjakk has quit [Ping timeout: 256 seconds]
<the_pumpkin_man[>
Ok
<the_pumpkin_man[>
Thanks again for all this time you spent for me :D
<the_pumpkin_man[>
You should say that in the nixos wiki
<peelz>
have you tried the nix pills?
<the_pumpkin_man[>
I only tried
<peelz>
there's a lot to read, but all of this is covered
<bqv[m]>
fixed my objects
<the_pumpkin_man[>
But I stopped to first read the Nix manual
<bqv[m]>
git is a bizarre utility
<peelz>
bqv[m]: what happened to your objects?
<the_pumpkin_man[>
And then the nixpkgs manual, in order to create my first derivation
<the_pumpkin_man[>
* And then the nixpkgs manual, in order to create my first derivations
<bqv[m]>
decades on and i'm still learing things about it
<bqv[m]>
peelz: they got corrupted
<peelz>
how? lol
<bqv[m]>
i'm not sure, a bad reboot, i think
philr has quit [Ping timeout: 260 seconds]
<bqv[m]>
my system crashed while compiling linux
<peelz>
damn
Blessjah has quit [Ping timeout: 265 seconds]
johnny101m has joined #nixos
teto has quit [Ping timeout: 260 seconds]
teto has joined #nixos
magnetophon has joined #nixos
domogled has joined #nixos
teto has quit [Ping timeout: 272 seconds]
linarcx has quit [Quit: WeeChat 2.8]
fusion809 has quit [Remote host closed the connection]
fusion809 has joined #nixos
cole-h has joined #nixos
sullyj3 has joined #nixos
<sullyj3>
How there, how do I set my shell to ion? I've found a method for changing shells but it seems to rely on an option existing for that shell - there's no programs.ion.enable
<sullyj3>
Hi there hahaha
Blessjah has joined #nixos
linarcx has joined #nixos
zebrag has quit [Quit: Konversation terminated!]
smatting_ has quit [Ping timeout: 265 seconds]
zebrag has joined #nixos
bqv has joined #nixos
<bqv[m]>
no need. users.users.sullyj3.shell = pkgs.ion3;
<the_pumpkin_man[>
Or if you want for all users `users.defaultUserShell = pkgs.youShell;`
<the_pumpkin_man[>
* Or if you want for all users `users.defaultUserShell = pkgs.YourShell;`
<sullyj3>
perfect, cheers. Is that documented somewhere? Where should I have looked to find that info?
<sullyj3>
20.03? I'm using the virtualbox image I downloaded from the front page today, is that likely to out of date? how do I check?
<sullyj3>
oh im guessing it's in the config
<cole-h>
,nixpkgsversion
<{^_^}>
nix-instantiate --eval '<nixpkgs/lib>' -A version
<cole-h>
20.03 hasn't been released yet, by the way
<sullyj3>
my configuration.nix says 19.09 at the bottom
<sullyj3>
ah, right
<clever>
sullyj3: the stateVersion means nothing
<clever>
,stateVersion sullyj3
<{^_^}>
sullyj3: Changing stateVersion doesn't upgrade anything and can only break your setup at best. To actually upgrade NixOS see https://nixos.org/nixos/manual/#sec-upgrading. If you need to change stateVersion for some odd reason regardless, Ctrl-F for "stateVersion" in https://nixos.org/nixos/manual/release-notes.html to see things that need to be manually migrated with the new value
<sullyj3>
are 03 and 09 like ubuntu 04 and 10?
xkapastel has quit [Quit: Connection closed for inactivity]
<sullyj3>
Yeah, I wasn't about to try change it
mehlon has quit [Client Quit]
<sullyj3>
thanks though
palo has joined #nixos
hmpffff__ has quit [Ping timeout: 272 seconds]
<clever>
sullyj3: all it tells you, is what release you began on
<clever>
but not the gitrev of the current nixpkgs
<sullyj3>
To expand on my question, is 03 an LTS type deal whereas 09 is newfangled cool stuff?
mexisme has quit [Ping timeout: 265 seconds]
<clever>
both 03 and 09 are releases
<clever>
a new release is made every 6 months, and nixos-unstable is the rolling channel
<cole-h>
The earliest 20.03 will be released, according to the go/no-go meeting yesterday, is Thursday/Friday
<sullyj3>
Would you recommend against switching to unstable, as opposed to just grabbing packages from it when I want them? I've already run into other packages that I'd prefer more up to date versions for.
<clever>
sullyj3: you can also grab just a few things from unstable if you choose to
<clever>
sullyj3: but i just run unstable on everything, since i have rollbacks
<sullyj3>
I understand that. I'm trying to get a sense of whether I'd want to switch
<sullyj3>
Is it comparably stable to say, arch?
<clever>
it does go thru fairly heavy automated testing before it gets to users
<sullyj3>
{^_^} I'm not sure? How should I decide?
<Guest7156>
unstable is like arch but with an 'undo button' for me. That was the main reason I switched.
<sullyj3>
Ok, that sounds like I probably want it
<sullyj3>
I'm in a VM anyway, it's not the end of the world if it breaks
<est31>
you can use 20.03 before the release btw
<est31>
I've done that
<est31>
installed it and it works great
<est31>
except for the fact that hydra isn't updated very often
<cole-h>
Because it's not finished. Why do mass-rebuilds when there could be even more coming just before release :P
<sullyj3>
What's the difference between nixpkgs unstable and nixos unstable? I'm used to arch where there aren't releases
<sullyj3>
do I need to be on nixos unstable to use nixpkgs unstable?
<clever>
sullyj3: nixos-unstable goes thru extra testing, to make sure it wont brick a nixos machine
<clever>
sullyj3: a few years ago, a bug came up in grub config generation, that corrupted grub.conf, nixos-unstable correctly didnt update, protecting most users
<est31>
sullyj3: no you don't have to be, you can install packages from nixpkgs unstable if you want
<est31>
ouchy
<sullyj3>
Oh so they're the same type of thing
<sullyj3>
they're both channels
<clever>
sullyj3: then dozens of nixpkgs-unstable users started to come out of the woodwork, because they where on the wrong channel and it ceased to boot :P
<sullyj3>
I assumed nixos-unstable was like, a release, and then you choose which channel to use with your release
justanotheruser has joined #nixos
<clever>
sullyj3: nope, nixos-19.03, nixos-19.09, nixos-20.03, nixos-unstable, and nixpkgs-unstable are all channels
<clever>
sullyj3: each updates when a cerain branch passes a certain set of tests
drakonis has joined #nixos
<clever>
unstable follows master, the others follow the release branches
<sullyj3>
Ok, right. And ion was in 20.03 which is the same as nixos unstable?
<clever>
nixos does extra testing for nixos
<bqv[m]>
> pkgs.linuxPackages.version
<clever>
i havent checked to see what ion is at there
<{^_^}>
attribute 'version' missing, at (string):293:1
waleee-cl has joined #nixos
<bqv[m]>
how old is linuxPackages compared to _latest normally
<sullyj3>
Ok I think I get it
linarcx has quit [Quit: WeeChat 2.8]
<clever>
bqv[m]: linuxPackages is a set containing the kernel and every optional module
<cole-h>
The updated ion shell is in both unstable and 20.03
<mudri>
Is there any way at all to edit Nix store files without rebuilding the entire package that produced it? I'm not looking for anything reproducible, just a quick something to help with debugging. I'd expect to, maybe, be able to generate a new package based on the output of another (the one I'm trying to edit).
<{^_^}>
attribute 'linuxLatestPackages' missing, at (string):293:1
<bqv[m]>
mudri: guix has a system of grafts, i think. nix does not.
<clever>
bqv[m]: nixos also has it
<bqv[m]>
clever: gotcha. but ditto question
<bqv[m]>
ah
<bqv[m]>
ok
<mudri>
Is it still called “grafts”?
<cole-h>
What are grafts, and in what way does nixos have it?
<clever>
mudri: something along the lines of replace dependencies
<clever>
mudri: but it may be simpler to just copy the file out of the store, and patch the thing that was referencing it (after also copying it)
<clever>
system.replaceRuntimeDependencies
<clever>
List of packages to override without doing a full rebuild. The original derivation and replacement derivation must have the same name length, and ideally should have close-to-identical directory layout.
<{^_^}>
[nixpkgs] @globin pushed 2 commits to structured-attrs: https://git.io/Jvby6
koleesch_ has quit [Read error: Connection reset by peer]
<__monty__>
Haven't heard of a convention. I'd be partial to haskell's signatures. But I suspect you'd need something more like Purescripts to express extensible record-like things.
sullyj3 has quit [Remote host closed the connection]
koleesch_ has joined #nixos
<__monty__>
Maybe a contract based approach'd work better.
<clever>
__monty__: ive seen people putting haskell type signatures in comments, but its purely just to help the user understand things, nix ignores it all
<{^_^}>
[nixpkgs] @bhipple pushed 2 commits to release-20.03: https://git.io/JvbSq
<energizer>
"If package A is using nixpkgs-1 and package B is using nixpkgs-2 then it would be great to be able to resolve nixpkgs to a single instance to avoid the long evaluation. That's what flake.nix is solving." (https://github.com/nix-community/flake.nix/issues/11#issuecomment-477561442) How does flake.nix solve that problem?
<clever>
mudri: by default, it has only 1 output, but you can do `runCommand "name" { outputs = [ "out" "dev" ]; }` like any other derivation
<clever>
mudri: and then just make sure to populate both $out and $dev
<clever>
mudri: but, the files your copying, may refer to the original $dev, not the new $dev
<bqv[m]>
<energizer ""If package A is using nixpkgs-1"> because unless nixpkgs is pinned in either of the flakes, nix will use one of the nixpkgs already available
cjpbirkbeck has joined #nixos
<mudri>
Okay, I think I can make that work. Cheers!
opthomasprime has quit [Remote host closed the connection]
<energizer>
bqv[m]: if A doesn't pin nixpkgs version that's what already happens, and if they do pin nixpkgs version, flakes will used the pinned version, no?
lsix1 has quit [Ping timeout: 265 seconds]
<bqv[m]>
energizer: without flakes, it isn't always. it's reasonably common to pin a working nixpkgs to a package, and if you were to import those into your pre-flakes config, you could end up with 3 or more copies of nixpkgs
<bqv[m]>
flakes make it a lot more transparent. a flake has inputs, and outputs, the inputs can be pinned, and the can be overriden
<bqv[m]>
hard to override an import (builtins.fetchTarball "https://....")
<energizer>
so does flakes deprecate builtins.fetchTarball?
<__monty__>
It's a bit like opting to adhere to the `{ pkgs ? import pinned-nixpgks {} }: something` convention.
<bqv[m]>
energizer: no, because fetchTarball is unrelated, people just often use it to import a custom nixpkgs
<bqv[m]>
flakes just allow you a more expressive way to declare that you want "this input" or "this version of nixpkgs"
<energizer>
ok
raypatterson has quit [Ping timeout: 240 seconds]
<bqv[m]>
the alternative would be to rely on channels, where you're forced, with no other option, to only have one instance of nixpkgs in the whole evaluation
hoplaahei has quit [Quit: Konversation terminated!]
<ornxka>
it even tells me what dependencies will be built
* ornxka
save that to my list of useful invocations
<clever>
ornxka: you can even swap in aarch64-linux or x86_64-darwin, to see what it would need for those platforms
ALLES_bennofs is now known as bennofs
zaeph1 has quit [Ping timeout: 256 seconds]
<colemickens>
Jan Tojnar: I found some instances in nixpkgs of sha256 = "sha256-..." so I followed that for now. I guess I'll try to update it to hash = "256-.."
<colemickens>
Do we know if this is documented somewhere?
ixxie has quit [Quit: Lost terminal]
zaeph1 has joined #nixos
zaeph1 is now known as zaeph
<colemickens>
I tried googling "new new hashes" and a bunch of other stuff and couldn't find much relevant.
<__monty__>
colemickens: Pretty sure nix is supposed to give SRI hashes now?
<__monty__>
So that'd include sha.
bgamari has joined #nixos
<bqv[m]>
nixpkgs is still rife with old style hashes though
<bqv[m]>
i use sri hashes locally, at least
vesper11 has joined #nixos
<__monty__>
Yep.
<__monty__>
I don't really understand whether SRI hashes are already preferred.
vesper11 has quit [Read error: Connection reset by peer]
<zeta_0>
has the new nixos stable been released yet?
<cole-h>
No.
<cole-h>
It was decided in the go/no-go meeting that the earliest it might be released is Thursday.
linarcx has quit [Read error: Connection reset by peer]
<nextloop>
i have trouble getting nix to work on my opensuse tumbleweed installation
zaeph1 is now known as zaeph
<nextloop>
when i want to invoke nix-shell default.nix for my new project, I get error: while setting up the build environment: getting attributes of path '/etc/services': No such file or directory
<nextloop>
indeed there is no /etc/services in tumbleweed
teto has joined #nixos
jumper149 has joined #nixos
jumper149 has quit [Client Quit]
jumper149 has joined #nixos
jumper149 has quit [Client Quit]
<nextloop>
tumbleweed uses /usr/etc/services
<tilpner>
nextloop: Does your shell.nix mention services?
<kini>
Often when I run `nixos-rebuild switch --upgrade`, I see "error: cannot connect to daemon at '/nix/var/nix/daemon-socket/socket': Connection refused" near the end of the output. Is this normal? If I run `nixos-rebuild switch --upgrade` again (which essentially does nothing), the error is no longer there. I guess it seems like an issue caused by upgrading `nix-daemon` itself?
<tilpner>
It seems as if the exact path should be taken from <netdb.h> (_PATH_SERVICES), instead of hardcoded like that
<cole-h>
kini: What's the output of `systemctl status nix-daemon.socket`? Sounds like the socket isn't being enabled.
zeenk has joined #nixos
<peelz>
cole-h, I've run into the same situation kini is describing multiple times... I'd like to know as well
<cole-h>
I'm mostly just going off gut feeling right now. It just sounds like the socket isn't enabled (and thus isn't listening by default)
kenran has quit [Ping timeout: 260 seconds]
o1lo01ol1o has quit [Ping timeout: 256 seconds]
<{^_^}>
[nixpkgs] @Ma27 opened pull request #84266 → nixos/systemd-nspawn: disallow multiple packages with `.nspawn`-units → https://git.io/JvbHl
linarcx has quit [Quit: WeeChat 2.8]
linarcx has joined #nixos
<ornxka>
nix-build -j0 '<nixpkgs>' -A emacs25-nox --builders 'ssh://192.168.1.128 x86_64-linux'
jumper149 has joined #nixos
lsix1 has joined #nixos
<ornxka>
i run this and it complains error: unable to start any build; either increase '--max-jobs' or enable remote builds
<ornxka>
but i have nix.buildMachines set, nix.distributedBuilds = true; i have the keys all set up and i can do nix ping-store --store ssh://192.168.1.128
<ornxka>
emacs doesnt specify any requirements so i am confused as to why it wont work
<cole-h>
Maybe you meant to do `--option builders ssh://...`?
<cole-h>
There's no `--builders` flag for nix-build.
<{^_^}>
[cabal2nix] @mryndzionek opened pull request #449 → Added mappings for SoapySDR and liquid-dsp → https://git.io/JvbHb
<ornxka>
hm i get the same behavior with that but when i remove the x86_64-linux part at the end it copying path '/nix/store/26chg1cf05rzal8c6mksdvpbwlxc0rch-libICE-1.0.9' to 'ssh://192.168.1.128' copying path '/nix/store/26chg1cf05rzal8c6mksdvpbwlxc0rch-libICE-1.0.9' to 'ssh://192.168.1.128'...
<ornxka>
error: cannot add path '/nix/store/26chg1cf05rzal8c6mksdvpbwlxc0rch-libICE-1.0.9' because it lacks a valid signature
<ornxka>
oops
<ornxka>
double paste
<ornxka>
but yeah it seems to try to use the remote builder if i dont have the last bit and then fails for some reason
bvdw has quit [Read error: Connection reset by peer]
bvdw has joined #nixos
<kraem>
if anyone (or me) finds my last question regarding iwd and udev race condition; this (https://bbs.archlinux.org/viewtopic.php?id=241803) solution seems to work. to be able to override (and clear the previous ExecStart statement) with Nix one can assign a list of commands.
<lovesegfault>
How can I make a attr in my attrset in default.nix that just collects other wrappers so that I can then have a single `result/` with the symlinks all in there
<lovesegfault>
so like foo = [ a b c d]; if I nix-build -A foo I get result/{a,b,c,d}
<cole-h>
Without being completely confident or knowing if it will actually work, that maybe sounds like something that SymlinkJoin could help with?
<{^_^}>
[nixpkgs] @jhillyerd opened pull request #84274 → chezmoi: update build tags to chezmoi 1.7.18 format → https://git.io/Jvb53
<peelz>
bqv[m]: I don't know if it means anything special in nixpkgs, but afaik it's usually just so you know who's responsible for the code you're looking at
<cole-h>
I wonder if removing the requested reviewers removes the notification...
<colemickens>
I don't even have permissions, so :/
<cole-h>
infinisil: You do ;^)
<infinisil>
Eh it doesn't matter that much
<infinisil>
Btw, the way to change the base branch without causing this is to use `git merge-base upstream/master upstream/staging` to find out the commit you need to rebase on
cybrian has quit [Ping timeout: 265 seconds]
<infinisil>
`git rebase --onto $(git merge-base ...) HEAD~1` if you have 1 commit in the PR
<colemickens>
I am pretty lost.
<colemickens>
I did `git rebase -i nixpkgs/staging` and it formed the right commit. AFAICT the notification was because I hadn't changed the base branch on GH before pushing.
<bqv[m]>
can't you just git rebase --onto upstream/staging HEAD~1?
<infinisil>
The problem is that changing the base branch in the github ui and rebasing on that branch and pushing that has to happen at the exact same time
<infinisil>
Otherwise you get extra commits from the other branch temporarily
<colemickens>
Oh I guess it would happen both directions.
<bqv[m]>
oh
<infinisil>
Yeah
<infinisil>
So just rebasing on staging won't work
<bqv[m]>
what on earth
<bqv[m]>
ugh
<colemickens>
infinisil: are you saying that if I (comprehend first, then )use your instructions that I can avoid this?
vykook has joined #nixos
<infinisil>
Which is why you need merge-base, which determines the commit both branches have in common, meaning neither of them won't have extra commits from the other one
<colemickens>
Aha.
<infinisil>
Yeah, rebase onto the merge-base commit first, push that, *then* change the branch in the github ui
mallox has quit [Quit: WeeChat 2.7.1]
<bqv[m]>
oh god now i'm building linux AND firefox... switching to master may have been a mistake
* cole-h
adds this to his nixos.txt notes file
<infinisil>
Probably fetch upstream first too
* cole-h
adds that to his nixos.txt notes file, as well
<{^_^}>
[nixpkgs] @worldofpeace opened pull request #84285 → riot-desktop: wrap with wrapGAppsHook → https://git.io/JvbFE
<jtojnar>
Cole Mickens it is possible to use SRI hashes in `outputHash` attribute (nixpkgs fetchers translate `sha256 = "foo"` to `outputHashAlgo = "sha256"; outputHash = "foo";`) but it is redundant. You should either strip the SRI prefix and use the plain base64 value or pass the SRI hash to `hash` attribute
<{^_^}>
[nixpkgs] @samueldr pushed 9 commits to release-20.03: https://git.io/Jvbbc
hmpffff_ has quit [Ping timeout: 272 seconds]
<romildo>
cole-h, I am using nix edit in a shell script to find the file path containing a derivation definition. It is not working for xfce packages. Any clues?
<cole-h>
No idea.
<cole-h>
Maybe related to the fact that it's not `mkDerivation`'d
<{^_^}>
[nixpkgs] @elitak opened pull request #84287 → vcs: init at 1.13.4 → https://git.io/JvbbR
<bqv[m]>
cole-h: you're always on master, right? how do you deal with having to randomly recompile 3 different things that each take 8 hours
<cole-h>
I'm not on NixOS, so I don't usually have to.
<bqv[m]>
that'll do it
<cole-h>
:P
fendor has quit [Read error: Connection reset by peer]
<bqv[m]>
well this has been an exercise in pain. guess i'll head back to unstable-small
<cole-h>
What I would do is just `git checkout origin/master@'{1 day ago}'` (yes, this works) and hope your packages were cached for that day.
<cole-h>
Run most of system on nixpkgs@{1 day ago}, take packages from master that you need (and are hopefully small enough)
<kraem>
bqv[m]: they're still not built on unstable-small either :'(
<bqv[m]>
doesn't apply directly to me cause i'm on a flake, but yeah thats mostly my intention now. i just hate having to declaratively do something so hacky
<bqv[m]>
kraem: so i've just found out
<bqv[m]>
gonna have to head back to unstable-large! the horror
<bqv[m]>
actually. hey. why don't i do what that FAQ does but in reverse. have most of my system unstable, but cherry pick some stable packages
hoplaahei has joined #nixos
<cole-h>
That works too
<kraem>
that's what i do for when i need new versions of pkgs but some big build is blocking
<lovesegfault>
Hmm, I can't get symlinkFarm to work
<lovesegfault>
Apparently the things I am building "don't evaluate to a derivation"
<bqv[m]>
good idea, i'm gonna do that and just have nixos-unstable as a hanging flake input for when i need to
<hoplaahei>
hi. I have installed firefox package in 20.03, but some videos do not play. quirksmode reports no h264, ogg, or theora. How can I get Firefox to pass these tests? Installing openh64 package, for instance, doesn't work.
<{^_^}>
[nixpkgs] @jonringer pushed commit from @bhipple to master « python3Packages.PyGithub: 1.45 -> 1.47 »: https://git.io/JvbNB
kaliumxyz has quit [Ping timeout: 265 seconds]
<bdju>
have this awful problem lately where my dock seems to reconnect and I can't use my keyboard or mouse for several seconds and then my default soundcard changes to the internal laptop speakers, always while I'm playing a video... then I can't pause and the sound is coming out of the wrong place until it all starts working again and I have to kill pulseaudio to get the right soundcard selected again
<bdju>
happened 3 times in the last hour and only started happening in the last few days I think
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<pbogdan>
you are somehow feeding it empty lists lovesegfault
<bdju>
NixOS unstable, ThinkPad T440p, USB mouse/keyboard, USB soundcard... the monitors plugged into the dock seem to keep showing stuff fine during the blip
<pbogdan>
I think your filter may need to look at v.system == arch and not just v
<hoplaahei>
Anyone know what packages firefox requries to pass quirks mode video test and play e.g., h264?
awygle_working is now known as awygle
<bdju>
I see that transmission-gtk and transmission are not the same package, and I don't see a transmission-qt. By any chance is the regular transmission the qt version?