littlebenlittle has quit [Ping timeout: 260 seconds]
<evanjs>
okay I got it. it's just wl.
<{^_^}>
[nixos-common-styles] @garbas pushed to main « init »: https://git.io/JLccw
<evanjs>
so like `boot.kernelParams = [ "wl.modeset=0" ];`
<evanjs>
errr probably extraModprobeConfig :P
<{^_^}>
[nixos-homepage] @garbas pushed to extract-site-styles-to-new-flake « extract common styles that can be used for other websites »: https://git.io/JLcc7
justanotheruser has quit [Read error: Connection reset by peer]
<arushi>
@srbh Hi , Yes I just checked when I added the tensorfolw_2 pks ..the default.nix had cudaCapabilities ? [ "3.5" "5.2" ] . Thankyou so much.
badasss was kicked from #nixos by gchristensen [badasss]
CMCDragonkai has quit [Remote host closed the connection]
CMCDragonkai1 is now known as CMCDragonkai
CMCDragonkai1 has joined #nixos
rajivr has joined #nixos
stevenxl has quit [Quit: Connection closed for inactivity]
microcolonel has joined #nixos
cantstanya has quit [Remote host closed the connection]
<pumpy>
when i type a command that doesn't exist nixos sends that to a server and if it exists in packages tells me i can install it. that's a privacy leak so how can i disable it pls?
<microcolonel>
pumpy: wouldn't that sorta depend on what shell you're running?
<pjt_tmp>
It doesn't send anything out: try using a nonexistent command with not internet connection.
erasmas has joined #nixos
<pjt_tmp>
It uses a local database.
cantstanya has joined #nixos
<pjt_tmp>
pumpy: you can find it at /nix/var/nix/profiles/per-user/root/channels/nixos/programs.sqlite
<microcolonel>
I'm looking at options to do transactional whole system upgrades on some fleet machines, I basically want to fetch signed images and then set the bootloader to use them; is there a popular way that people do that, that any of you are aware of?
fuzzypixelz has quit [Quit: fuzzypixelz]
<kini>
What's the "natural" way to add ssh keys from smart cards to gpg-agent in NixOS?
<kini>
On other distros you'd do `ssh-add -e /usr/lib64/opensc-pkcs11.so` (for example), because `ssh-add` wants you to tell it directly what library to `dlopen()`, I guess. (Not great UX, but never mind...)
<kini>
But in NixOS obviously you don't want to have to type the Nix store path of your opensc-pkcs11.so. I wonder if someone has already made an easy wrapper for this.
<pjt_tmp>
kini: I see a boot.initrd.luks.devices.<name?>.gpgCard, might be relevant
erasmas has quit [Ping timeout: 246 seconds]
<kini>
I don't think that's relevant. That's about gpg encryption, this is communicating with gpg-agent's ssh-agent emulation functionality
<colemickens>
I assume most people are using OpenPGP app instead of PIV/PKCS11 but I'm sure someone has gotten it working at some point.
<kini>
OpenPGP app? Could you elaborate?
<hexa->
gpg --card-edit maybe?
ransom_ has joined #nixos
<colemickens>
There are multiple ways to use, say a Yubikey, as a smart card.
<colemickens>
One is via PIV/PKCS11, which requires what you're talking about.
<colemickens>
The other is just gnupg+OpenPGP in the Yubikey.
<colemickens>
That doesn't require mucking around with a vendor specific pkcs11 lib
<kini>
I see, but does that way allow you to store an ssh key and link it to your ssh-agent (or gpg-agent) the way the PIV/PKCS11 way does?
<colemickens>
Yes, I use my yubikey as my only key for encryption and SSH.
<colemickens>
you just tell `gpg-agent` to turn on it's ssh-agent compatibility, and then it will act as an ssh agent, using the keys stored in the OpenPGP app on the yubikey
<ornxka>
how do i stop my secrets from being copied over every time i rebuild if they are already present on /boot
<kini>
Nice, that seems a better way to go about it... :) Unfortunately I'm not in control of these keys, they were put on the yubikey by my company so I suppose I'm forced to use them the PIV/PKCS11 way.
<colemickens>
ornxka: "copied over"? what tool are you using, etc.
<colemickens>
kini: yes, I think you are likely yeah
<colemickens>
kini: I'll google a bit and let you know if I find anything useful!
<kini>
Thank you!
pushqrdx has quit [Remote host closed the connection]
<kini>
(also oops, typo in what I said above -- should have been `ssh-add -s` rather than `ssh-add -e`, the latter is for unloading the keys from the smart card)
<ornxka>
well i set boot.initrd.secrets and run nixos-rebuild switch and i see building '/nix/store/fd9079mc506xa3nk903g3xcyqf5gp1qf-nixos-system-myhost-21.03pre254279.6f0c00907bb.drv'... updating GRUB 2 menu... 557057 blocks 557057 blocks 557057 blocks 557057 blocks
<ornxka>
and it does that every time i run that command
<colemickens>
You might ask on Discourse @kini
<colemickens>
kini: discourse.nixos.org
<kini>
I tried `nix-env -i opensc` and `ssh-add -s ~/.nix-profile/lib/opensc-pkcs11.so` (to get a stable path), but it said "agent refused operation"
<kini>
aha, this option might be what controls that, let me try...
mounty has quit [*.net *.split]
weechat_1 has quit [*.net *.split]
hnOsmium0001 has quit [*.net *.split]
amerigo has quit [*.net *.split]
bitmapper has quit [*.net *.split]
h0m1 has quit [*.net *.split]
S0rin has quit [*.net *.split]
eoli3n has quit [*.net *.split]
sumner has quit [*.net *.split]
etrepum has quit [*.net *.split]
datakurre has quit [*.net *.split]
DigitalKiwi has quit [*.net *.split]
dhess has quit [*.net *.split]
benley has quit [*.net *.split]
isHavvyGhosting has quit [*.net *.split]
talyz has quit [*.net *.split]
nextloop has quit [*.net *.split]
Scriptkiddi has quit [*.net *.split]
lukegb has quit [*.net *.split]
Raito_Bezarius has quit [*.net *.split]
benschza has quit [*.net *.split]
betawaffle has quit [*.net *.split]
demize has quit [*.net *.split]
d10n-work has quit [*.net *.split]
jkkm has quit [*.net *.split]
CustosLimen has quit [*.net *.split]
valwal_ has quit [*.net *.split]
hoek has quit [*.net *.split]
zml has quit [*.net *.split]
AmandaC has quit [*.net *.split]
glowpelt has quit [*.net *.split]
{^_^} has quit [*.net *.split]
oharvey has quit [*.net *.split]
lvrp16 has quit [*.net *.split]
blackriversoftwa has quit [*.net *.split]
bougyman has quit [*.net *.split]
tnks has quit [*.net *.split]
dgpratt has quit [*.net *.split]
marcinkuzminski has quit [*.net *.split]
typetetris has quit [*.net *.split]
omnigoat has quit [*.net *.split]
lucus16 has quit [*.net *.split]
MinceR has quit [*.net *.split]
scoates has quit [*.net *.split]
lightandlight has quit [*.net *.split]
christiaanb has quit [*.net *.split]
teozkr_ has quit [*.net *.split]
Theuni has quit [*.net *.split]
jackdk has quit [*.net *.split]
c00w has quit [*.net *.split]
bennofs|ALLES has quit [*.net *.split]
yorick has quit [*.net *.split]
infinisil has quit [*.net *.split]
LeshaInc has quit [*.net *.split]
jasom has quit [*.net *.split]
siel_ has quit [*.net *.split]
lpsmith has quit [*.net *.split]
comex has quit [*.net *.split]
mumuluxi_ has quit [*.net *.split]
Forkk has quit [*.net *.split]
joepie91 has quit [*.net *.split]
f0x2 has quit [*.net *.split]
azdle has quit [*.net *.split]
wirew0rm has quit [*.net *.split]
sterni has quit [*.net *.split]
glines has quit [*.net *.split]
<colemickens>
ornxka: presumably you're running `switch`, which yes, rebuilds /boot and will likely copy any secrets over
{^_^} has joined #nixos
<{^_^}>
[nixpkgs] @lrworth opened pull request #107077 → unused: init at 0.1.0 → https://git.io/JLcuK
<colemickens>
kini: maybe, no idea, just saw that _someone_ must've added that option for a reason ;)
<ornxka>
the secrets are already there though, and /boot is on a (very slow) usb drive, and the secrets file is pretty big (a few hundred megabytes) - is there some way i can prevent the copy somehow?
dredozub- has quit [Ping timeout: 246 seconds]
adamCS has quit [Ping timeout: 246 seconds]
is_null has quit [Ping timeout: 252 seconds]
adamCS has joined #nixos
amerigo has joined #nixos
bitmapper has joined #nixos
h0m1 has joined #nixos
hnOsmium0001 has joined #nixos
weechat_1 has joined #nixos
mounty has joined #nixos
benley has joined #nixos
talyz has joined #nixos
Raito_Bezarius has joined #nixos
DigitalKiwi has joined #nixos
betawaffle has joined #nixos
nextloop has joined #nixos
isHavvyGhosting has joined #nixos
CustosLimen has joined #nixos
Scriptkiddi has joined #nixos
lukegb has joined #nixos
dhess has joined #nixos
datakurre has joined #nixos
demize has joined #nixos
hoek has joined #nixos
sumner has joined #nixos
S0rin has joined #nixos
etrepum has joined #nixos
gchristensen has joined #nixos
valwal_ has joined #nixos
benschza has joined #nixos
eoli3n has joined #nixos
d10n-work has joined #nixos
AmandaC has joined #nixos
zml has joined #nixos
glowpelt has joined #nixos
oharvey has joined #nixos
jkkm has joined #nixos
scoates has joined #nixos
MinceR has joined #nixos
omnigoat has joined #nixos
dgpratt has joined #nixos
marcinkuzminski has joined #nixos
typetetris has joined #nixos
tnks has joined #nixos
bougyman has joined #nixos
lvrp16 has joined #nixos
blackriversoftwa has joined #nixos
Theuni has joined #nixos
bennofs|ALLES has joined #nixos
infinisil has joined #nixos
c00w has joined #nixos
lightandlight has joined #nixos
jackdk has joined #nixos
teozkr_ has joined #nixos
yorick has joined #nixos
christiaanb has joined #nixos
mumuluxi_ has joined #nixos
lucus16 has joined #nixos
LeshaInc has joined #nixos
jasom has joined #nixos
siel_ has joined #nixos
joepie91 has joined #nixos
Forkk has joined #nixos
f0x2 has joined #nixos
sterni has joined #nixos
comex has joined #nixos
azdle has joined #nixos
wirew0rm has joined #nixos
glines has joined #nixos
lpsmith has joined #nixos
dredozubov has joined #nixos
<{^_^}>
[nixpkgs] @peti pushed to haskell-updates « hackage-packages.nix: automatic Haskell package set update »: https://git.io/JLczZ
Sigma has quit [Ping timeout: 246 seconds]
Sigma has joined #nixos
betawaffle has quit [Ping timeout: 249 seconds]
omnigoat has quit [Ping timeout: 249 seconds]
hnOsmium0001 has quit [Ping timeout: 260 seconds]
amerigo has quit [Ping timeout: 260 seconds]
d10n-work has quit [Ping timeout: 260 seconds]
CustosLimen has quit [Ping timeout: 260 seconds]
hoek has quit [Ping timeout: 260 seconds]
betawaffle has joined #nixos
omnigoat has joined #nixos
hoek has joined #nixos
d10n-work has joined #nixos
amerigo has joined #nixos
hnOsmium0001 has joined #nixos
nhs has quit [Read error: Connection reset by peer]
<{^_^}>
#106332 (by petersjt014, 1 week ago, open): tlsh does not build properly
KarlJoad has quit [Ping timeout: 260 seconds]
ennui has quit [Ping timeout: 256 seconds]
pushqrdx has joined #nixos
pushqrdx has quit [Remote host closed the connection]
<colemickens>
I don't understand people.
<colemickens>
Show up, ask for help but don't ask any question, leave 20 seconds later. Ok?
<KarlJoad`>
pjt_tmp: Yeah, I got to that piece of documentation as well. I'm just not sure I understand it all that well.
xelxebar has joined #nixos
<kini>
colemickens: I finally managed to get it to work, by 1) setting that `programs.ssh.agentPKCS11Whitelist` option to the suggested default, 2) using `ssh-agent` instead of `gpg-agent`, and 3) enabling `services.pcscd`
sigmundv has quit [Ping timeout: 240 seconds]
edk_ has joined #nixos
ransom_ has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<danderson>
so, with a flake-enabled nix, how do I allow unfree packages in `nix shell` ? I have allowUnfree=true in ~/.config/nixpkgs/config.nix, but the evaluation still fails for license reasons
<colemickens>
kini: cool! do you still pass the full path to the right pkcs11 so then or do you get to avoid that somehow?
<colemickens>
danderson: I expose an extra attribute from my flake that is pkgs with unfree enabled.
<danderson>
... oh, apparently I have to --impure to make `nix shell` allow unfree things? Very confused why that is.
<colemickens>
nix ignores ~/.config/nixpkgs/config.nix in flakes eval
<colemickens>
because that sort of breaks the entire seal/point of flakes.
<danderson>
ah, hm, so it's the flake.nix in $CWD that has to allow unfree things
<colemickens>
I am a bit sad to hear that it does considers user config with --impure :/
<danderson>
fair, I just think of `nix shell` as "gimme a quick way to run a thing"
<danderson>
colemickens: got a link to how you enable unfree in your flake.nix?
<{^_^}>
#106332 (by petersjt014, 1 week ago, open): tlsh does not build properly
<pjt_tmp>
I've managed to make some progress but those two tests are still failing :|
johnw has joined #nixos
<pjt_tmp>
I don't know what cmake wants from me here. I *think* it just can't find the relevant file(s) but I don't know how/when to cd to the Testing dir, if that's even what it needs.
<kini>
(I posted in that thread just because googling led me to one of the replies there... hopefully people don't mind that it's a bit off-topic wrt the OP)
LilleCarl has quit [Quit: WeeChat 2.9]
jlamothe has quit [Ping timeout: 265 seconds]
orivej_ has joined #nixos
orivej has quit [Ping timeout: 268 seconds]
davidv7_ has joined #nixos
MarcWeber has quit [Ping timeout: 264 seconds]
MarcWeber has joined #nixos
erasmas has joined #nixos
davidv7 has quit [Ping timeout: 268 seconds]
est31 has quit [Remote host closed the connection]
est31 has joined #nixos
<growpotkin>
> let parseFloat = s: let ss = lib.splitString "." s; f = lib.elemAt ss 1; d = lib.foldl ( a: b: a * b ) 1.0 ( builtins.genList ( _: 0.1 ) ( lib.stringLength f ) ); in lib.toInt ( builtins.head ss ) + ( ( lib.toInt f ) * d ); in parseFloat "6.666"
<KarlJoad>
How can I echo to nix-build's log? I've tried `echo "Message" >> $NIX_LOG_FD`, but that didn't work.
maljub01 has quit [Quit: maljub01]
maljub01 has joined #nixos
<energizer>
what is the value of NIX_LOG_FD?
domogled has quit [Remote host closed the connection]
<KarlJoad>
energizer: In a `nix-shell` for this particular piece of software it doesn't exist. I remember that it used to.
veleiro has joined #nixos
Dotz0cat_ has joined #nixos
<KarlJoad>
energizer: I thought `echo`-ing to that log FD would work. It didn't yesterday, and now it's disappeared as an environment variable. I just want a print statement to debug my code.
<srhb>
pjt_tmp: I don't think there's a consensus on where it should go. Since it doesn't rely on patches any phase before checkPhase would do.
palo1 has joined #nixos
<{^_^}>
[nixpkgs] @FRidh pushed 142 commits to staging-next: https://git.io/JLCGd
<pjt_tmp>
srhb: patchPhase it is then. I seem to have a fresh unrelated error too: /nix/store/zlclxsmgawzkhvh3vkzl4r7i60i2rsri-pip-install-hook/nix-support/setup-hook: line 13: pushd: dist: No such file or directory
palo has quit [Ping timeout: 265 seconds]
palo1 is now known as palo
<srhb>
pjt_tmp: At a guess, your changes have caused you to end up in a different directory from what the pipInstallPhase expected.
<{^_^}>
[nixpkgs] @FRidh opened pull request #107086 → Staging next → https://git.io/JLCZc
<pjt_tmp>
sounds right, I solved a similar error with cd .. earlier
<srhb>
pjt_tmp: I'm really not the right person to give out python packaging advice, but I think you're sort of coercing a python builder into building other artifacts where the usual method is the other way around, using mkDerivation to do a normal build and the using toPythonModule afterwards to construct the module.. But I'm sure a python-capable reviewer can help sort that out :)
<pjt_tmp>
srhb: I might be, yeah. But I have not found a good example to work off where the package is a library first and a C++ application 2nd. Makes for a challenge. Also I'm not sure who knows python packaging well here.
<srhb>
True, most of the examples are C/C++ libraries with python _bindings_
<{^_^}>
[nixpkgs] @FRidh pushed commit from @r-ryantm to master « fossil: 2.12.1 -> 2.13 »: https://git.io/JLCng
<pjt_tmp>
srhb: quick related question: is there a way to stay in the nix shell after a build fails? I'm using nix-shell -I nixpkgs=. -p tlsh, and I can't inspect eg $installPhase when it exits
<pjt_tmp>
srhb: how would I know what I need to put in installPhase, if anything? the error seems to suggest it but I tried running installPhase for hello and got the exact same.
leothrix has joined #nixos
seku has joined #nixos
<srhb>
pjt_tmp: Check the scripts to see how the software expects to be installed. There is no Makefile, so the default `make install` won't work.
<angerman>
jophish: it's effectively a gpt image with the armbian kernel, and I've ported the halios64 packages to nix from the armbian setup, so you get fans, ups, ...
<jophish>
nice!
<angerman>
jophish: however, it might still crash occationally. It hasn't in the last 48hs for me, but it did crash quite a bit initially, until the zfs volumes were filled up some more.
<jophish>
I was very kindly loaned a h64 from the kobol guys down the road to debug a btrfs issue the helios64 couldn't
<angerman>
man... and I am here *buying* that shit ... loooool.
<angerman>
jophish: guess I'm not friend with the right people :D
<jophish>
you came up in conversation actually :D
<angerman>
bawahahaha
<angerman>
jophish: so the only thing you need to know about the image is that you'll need to resize the master partition yourself, as the update script won't be able to.
<angerman>
jophish: also the console is on 115200.
<jophish>
hdmi workds ootb?
<jophish>
works*
<angerman>
no. Just plug some usbc-usb cable into the usb port
fendor has joined #nixos
<angerman>
and then use your preferred tty reader (e.g. screen or something)
<jophish>
tio is pretty good
<jophish>
not sure I have a cable long enough :(
<jophish>
will have to get up
<angerman>
jophish: if you change the ssh key prior to building, you could alos just hook it up onto some dhcp network, and then ssh into it.
fuzzypixelz has quit [Remote host closed the connection]
<angerman>
jophish: the wireless stuff is for other images.
fuzzypixelz has joined #nixos
<angerman>
jophish: however the serial console is good to have if you want to kernel panics, so getting a long enough usb cable might still be worth it.
<angerman>
alternatively, just put some raspberry pi ontop of it and use that as you tty kvm :D
<angerman>
jophish: so anyway, that sd image should just work on an sd card.
<angerman>
jophish: use the community builder to build it ;-) or some other aarch64 nix builder.
<jophish>
hmm, I think I've forgotten my credentials for the community builder
<angerman>
jophish: I can build an image for you tomorrow if you send me the secrets file you want in it.
<angerman>
don't think I'll get around to it tonight, with picking up the kids and stuff.
<jophish>
that would be very kind of you, sure I'm in no hurry
kfound has joined #nixos
waleee-cl has joined #nixos
<{^_^}>
[nixpkgs] @nmattia opened pull request #107091 → Revert "niv: only build the executable (#106906)" → https://git.io/JLCd7
<Orbstheorem>
Hi, I'm trying to compile a simple hello world C file as a static binary using `gcc foo.c -O0 -g -static -o foo`. But when I try compiling I the following error: `/nix/store/b10shv9yqbgps47y0n8x7l7bq8fmp1i6-binutils-2.31.1/bin/ld: cannot find -lc`
<Orbstheorem>
(I'm using `nix shell nixpkgs#gcc` as toolchain.)
yuu[m] has joined #nixos
xelxebar has quit [Remote host closed the connection]
xelxebar has joined #nixos
m4tsa_ has joined #nixos
sevenfourk has joined #nixos
<thibm>
Orbstheorem: you need glibc.static somehow
<sevenfourk>
when i uncomment (commented out ext) it's not added back, when installing clean chromium it shows all extension again. i guess there's something wrong with ungoogled-chromium mkChromiumDerivation, or probably that just worked only after i previously used clean chromium.
<{^_^}>
[nixpkgs] @NeQuissimus pushed 2 commits to release-20.09: https://git.io/JLWPA
fuzzypixelz has quit [Quit: fuzzypixelz]
m4ts has joined #nixos
<{^_^}>
[nixos-search] @ncfavier pushed to fix-nix-py « do not indent terminating double-single-quotes if the string does not end with a newline »: https://git.io/JLWXj
<g-w1>
is there a way to clean /tmp, I remember that systemd treats it as tmpfs, but it is persistent on nixos, not mounted in tmpfs, how can I clean it after a reboot?
<thibm>
g-w1: on NixOS there's an option boot.cleanTmpDir which defaults to false
<thibm>
there's also boot.tmpOnTmpfs
cosimone has joined #nixos
<g-w1>
ok, thanks
jb55 has joined #nixos
erasmas has joined #nixos
gentauro has quit [Read error: Connection reset by peer]
gentauro has joined #nixos
erasmas has quit [Ping timeout: 256 seconds]
kfound has quit [Remote host closed the connection]
sevenfourk has quit [Ping timeout: 240 seconds]
jonringer has joined #nixos
respawn_ has quit [Quit: Leaving]
werner292 has joined #nixos
werner291 has quit [Ping timeout: 272 seconds]
werner292 is now known as werner291
domogled has quit [Quit: domogled]
domogled has joined #nixos
philr has quit [Ping timeout: 240 seconds]
abathur has joined #nixos
cfricke has quit [Quit: WeeChat 3.0]
fuzzypixelz has joined #nixos
fuzzypixelz has quit [Remote host closed the connection]
fuzzypixelz has joined #nixos
<{^_^}>
[nixpkgs] @IvarWithoutBones opened pull request #107099 → joycond: init at 2020-11-05 → https://git.io/JLWbk
<qyliss>
Can I use the default stdenv buildPhase when using buildRustPackage?
<qyliss>
Or do I have to reimplement it in my mkDerivation arguments
<hugolgst>
hello, I am trying to build a python application using buildPythonApplication which imports a package which is himself
werner292 has joined #nixos
<hugolgst>
do you have an idea on how I could import it inside the propagatedBuildInputs ?
<sphalerite>
hugolgst: that shouldn't™ be necessary. What's going wrong without it?
jlamothe has joined #nixos
Fare has joined #nixos
werner291 has quit [Ping timeout: 272 seconds]
werner292 is now known as werner291
<Fare>
I'm using nix-store --export then nix-store --import to import 2GB worth of store paths, but nix-env still insists on downloading a few MB worth of paths from the cache despite that. What am I missing?
<simpson>
nix-env can take a full /nix/store path, if you want to ensure that you're adding a particular path to your environment rather than looking up a package by name.
Jackneill has quit [Ping timeout: 240 seconds]
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
hugolgst has quit [Quit: Lost terminal]
ndarwincorn has joined #nixos
cosimone_ has joined #nixos
dbmikus has joined #nixos
fuzzypixelz has quit [Quit: fuzzypixelz]
sevenfourk has quit [Quit: leaving]
<Fare>
What if I don't want to nix-env install them, only to register them fully, so that they are available to nix-env install?
<sphalerite>
Fare: probably different paths?
cosimone has quit [Read error: Connection reset by peer]
cosimone_ is now known as cosimone
<sphalerite>
Fare: you can use `nix-store -r` to "get" the paths via whatever means are known to nix
<Fare>
.gambit-bootstrap gambit-unstable.buildInputs) ++ (lib.remove gambit-unstable gerbil-unstable.buildInputs))' but after a long pause it says error: Unexpected token in brace expression.
domogled has quit [Remote host closed the connection]
justanotheruser has joined #nixos
<sphalerite>
domenkozar[m] roberth: I'm wondering about cachix, do you have some way to ensure you're not redistributing unfree software? Or is that up to the users and you'll just take it down if an oracle comes along with a DMCA notice or similar?
domogled has joined #nixos
<domenkozar[m]>
sphalerite: I'm the author of cachix, how did you get he impression its robert?
zakame has joined #nixos
<domenkozar[m]>
sphalerite: it's same as github repos, you're responsible for it
<sphalerite>
domenkozar[m]: I thought it was something you did together
<sphalerite>
must have misunderstood
<sphalerite>
domenkozar[m]: fair enough
<roberth>
sphalerite: hercules ci doesn't serve anything that could be "expected" to infringe rights
<roberth>
unless you have blasphemist attribute names or something :D
<sphalerite>
oh right it was hercules you did together, my bad
<sphalerite>
tpw_rules: as of now, it's never been garbage-collected.
<sphalerite>
in other words, "so far, forever"
<tpw_rules>
interesting
<sphalerite>
no guarantees it'll stay that way though AFAIK.
gerschtli has joined #nixos
<tpw_rules>
yeah i understand. it would be nice to have one though for at least a certain amount of time. i'm working on an integrated system where i've pinned nixpkgs for the whole nixos and everything and it would be good to know "you need to update the pinned package soon or you'll have to rebuild everything from source"
<domenkozar[m]>
a small company I know is looking for a Nix developer for 10h/week, mostly working on tasks that their developers don't know how to handle. It's 99% non-urgent tasks, sometimes it needs research sometimes hacks to be written. Lovely folks, whole team is remote and easy going. PM for details
cosimone has quit [Remote host closed the connection]
tenniscp25 has joined #nixos
<pingiun>
I'm trying to write a nixos test with pkgs.nixosTest, but I get this error: NameError: name 'webserver' is not defined
<pingiun>
but I have nodes.webserver defined
<pingiun>
is there a good example of how to use this?
<Fare>
is there a better docker image to start from than "nixos/nix:latest" that would have a configured user in addition to root?
<jaspervdj>
I'm pretty new to nix, and trying to set a password policy in /etc/pam.d/passwd. That file seems to be generated from modules/security/pam.nix. Is there a declarative way I can change that text from my configuration.nix?
<ronthecookie>
jaspervdj: have you checked the manual? `man configuration.nix` and then `/` and that path you gave to search the text for it
rajivr has quit [Quit: Connection closed for inactivity]
<jaspervdj>
ronthecookie: Hmm, I was looking through the options search and looked at the source and there's no option to change the line I want to change
malook has joined #nixos
Reventlov has quit [Quit: WeeChat 2.3]
Reventlov has joined #nixos
Reventlov is now known as Guest53414
Guest53414 has joined #nixos
Guest53414 has quit [Changing host]
<{^_^}>
[nixpkgs] @github-actions[bot] pushed 44 commits to staging-next: https://git.io/JLl2j
<{^_^}>
[nixpkgs] @github-actions[bot] pushed 45 commits to staging: https://git.io/JLlae
Guest53414 is now known as Reventlov
thc202 has quit [Ping timeout: 268 seconds]
malook has quit [Quit: malook]
<Fare>
When I nix-env -f http://... is that URL cached? If so how do I force flush this cache?
<KarlJoad>
If I need to use an old sympy (1.5.1) on python 3 in a nixpkgs package, I guess I have to create an override?
<eacameron>
jaspervdj: If there are no options for it, you'll have to fork nixpkgs and add one.
<eacameron>
jaspervdj: You can of course then use your fork until it gets merged.
<jaspervdj>
eacameron: Okay, that makes sense. What's the most convenient way to use my fork? Fork off 20.09 and somehow reference that in configuration.nix?
<tpw_rules>
you don't need to fork anything. you should create an overlay instead
<tpw_rules>
actually perhaps i am misunderstanding
<eacameron>
tpw_rules: jaspervdj: Actually I just realized that overlay might work
evax has joined #nixos
<eacameron>
(Though I still would hope for a PR since you're probably not the only one who wants this)
<tpw_rules>
of course then you don't get to automatically build your pam configuration based on the other modules. but you can copy and paste the default with it changed, or just write a custom compliant pam config and drop it there
<KarlJoad>
tpw_rules: I need to pass python, sympy, and mpmath to an octave library for it to be used. I need python 3, but need to use sympy <=1.5.1 (which means python27 in nixpkgs).
<tpw_rules>
is this octave library already in nixpkgs?
<{^_^}>
#65398 (by matthuszagh, 1 year ago, open): Octave packages support
<eacameron>
jaspervdj: There is also a way to remove a module and re-add your own copy of it with changes all within nix. It's really hacky though.
<eacameron>
jaspervdj: I might be wrong but I think root's `nix-channel` is what controls the nixpkgs used for the system.
<tpw_rules>
KarlJoad: oh, is the old sympy already in nixpkgs? then you would want an override i guess
Izorkin has quit [Client Quit]
<eacameron>
Using your own fork would have the same steps as "upgrading" nixos but instead of using a standard channel you use your fork.
Izorkin has joined #nixos
<KarlJoad>
tpw_rules: Yes. Old sympy is still accessible through python27Packages.sympy. However, when I specify python38 as the interpreter, python can't import sympy.
<tpw_rules>
jaspervdj: you don't need to do any of that. just say something like security.pam.services.passwd.text = ''password sufficient pam_unix.so minlen=14 sha512''; in configuration.nix. then /etc/pam.d/passwd will consist of only that line
<jaspervdj>
tpw_rules: I just tried it, that works great, thanks!
<eacameron>
tpw_rules: Oh so it's already configurable! Nice!
<jaspervdj>
Is there a way to access the default and modify that string in there?
<tpw_rules>
jaspervdj: IMO the least headachey way is to just copy that entire pam.nix module, make the change, and import it in your configuration.nix
<eacameron>
tpw_rules: Won't that run into issues with the same config defined twice?
<tpw_rules>
yeah i'm not sure how to remove the old one
<eacameron>
There is a way... let me see if I can dig it up
<{^_^}>
[nixpkgs] @jonringer pushed 11 commits to release-20.09: https://git.io/JLlDR
dbmikus has quit [Ping timeout: 260 seconds]
sangoma has joined #nixos
lord| has joined #nixos
tenniscp25 has quit [Remote host closed the connection]
tenniscp25 has joined #nixos
FRidh has quit [Quit: Konversation terminated!]
tenniscp25 has quit [Ping timeout: 256 seconds]
meh` has joined #nixos
jaspervdj has quit [Quit: leaving]
<KarlJoad>
Is there a way to override a python library using a .nix file already in nixpkgs? That way I don't have to duplicate a bunch of code?
proofofkeags has joined #nixos
dbmikus has joined #nixos
<energizer>
KarlJoad: just import it?
<KarlJoad>
energizer: Well now I just feel stupid... To think it was that simple. Thanks!
<judson>
I'm returning to building a go program for my local shell.nix (although I'm got a whole list of stuff here that oughtta get contributed to nixpkgs) and frustrated all over again by the state of buildGo{Module,Package}
<KarlJoad>
energizer: Well, I can't just do a straight import, because sympy has some requirements for buildPythonPackage and others.
<judson>
I dunno if there's more here than "waaah" but yeah.
<judson>
I'd love to understand basic principles here, but I think Nix at large is still(?) converging on those.
davidv7 has joined #nixos
<energizer>
judson: i dont know anything about go but poetry2nix is really nice
<energizer>
and there are similar things for other languages, eg naersk for rust
<energizer>
KarlJoad: can you pass those requirements to it?
davidv7_ has quit [Ping timeout: 268 seconds]
<KarlJoad>
energizer: Yeah, I can. It just feels... hacky...
<proofofkeags>
How do I install nix as root?
<proofofkeags>
I'm running into a lot of trouble for what seems like should be very straight forward
<lordcirth>
proofofkeags, what do you mean "as root"? You mean running the installer as root, without sudo?
<proofofkeags>
yes
<proofofkeags>
I just provisioned a server
<proofofkeags>
I'd like to put nix on it
<proofofkeags>
I don't want to create a new user to do it
<{^_^}>
nix#936 (by davidak, 4 years ago, open): Install Nix as root
<simpson>
proofofkeags: It's purely to help you protect yourself. If you're used to a cloud/container environment, then there's ways to use Nix from inside Dockerfiles.
evanjs has quit [Ping timeout: 264 seconds]
sadmin has quit [Ping timeout: 256 seconds]
<proofofkeags>
I would have expected the multi-user installation to only work when you're the root user though, which I was surprised to find out that this was still an issue. How can one do a multi-user installation *without* being root
<KarlJoad>
energizer: I lied. I just worked out how to do it, and it feels less hacky than I thought.
<simpson>
proofofkeags: I'd read the issue lordcirth++ linked. If the issue is one of trying to avoid having any non-root users whatsoever, then that's kind of a security smell and I can understand why nobody's rushed to fix it.
<{^_^}>
lordcirth's karma got increased to 13
<simpson>
If the issue is that the script shouldn't require the user-with-sudo arrangement, then sure, I can imagine that being improved.
<proofofkeags>
I am not flat out opposed to adding a user for the purpose of installing nix. It is just a smell to me that I don't understand what's going on. I thought nix was just a package manager. It's not like I can't use apt as root. So why can't I use nix as root?
<lordcirth>
Yeah, root without nixbld is bad, but the problem is the installer
ManiacOfMadness has joined #nixos
minicom has joined #nixos
<simpson>
proofofkeags: Oh, okay. The main non-root users here are the Nix build users; Nix itself would rather do most of its work as non-root, including builds.
<simpson>
(I don't recall offhand whether Debian had special build users or just expected folks to build as their regular login user, but they also have opinions about this.)
<KarlJoad>
Is there a safe location to put files written by a program during a nix-build? /tmp? /build/some-where?
<proofofkeags>
K so it sounds like i need to create a nix user
<srhb>
proofofkeags: "how can one do a multi user installation without being root" <-- you can't? Not that I know at least.
<srhb>
proofofkeags: The installer will sudo in order to gain rights to create the build users and create /nix
<srhb>
proofofkeags: (Apologies if I misunderstood you)
<lordcirth>
srhb, that's the point. The installer requires sudo but forbids being root
<proofofkeags>
srhb: that's my point. I tried running the multi-user installation as root and it blew up on me
<proofofkeags>
yeah
<srhb>
Oh, okay, sorry. :)
werner291 has quit [Ping timeout: 260 seconds]
werner291 has joined #nixos
<simpson>
KarlJoad: If it's just build logs, why not put them into $out during installPhase? Nobody will be harmed by it. This is where we already put associated Nix expressions, into $out/nix-support/.
Fare has quit [Ping timeout: 260 seconds]
<srhb>
proofofkeags: fwiw doing the installation by hand is not hard, but I understand the frustration at the installer not supporting that use case.
<srhb>
(Harder than creating the extra user, probably.)
<proofofkeags>
yeah I am not going to die on the hill of not adding a user. I was just really surprised.
<srhb>
Understood. :)
<KarlJoad>
simpson: Not build logs, per se. When I run tests with octave, octave writes the command run to $OCTAVE_HISTFILE. I just don't know where to put it.
<simpson>
KarlJoad: I think you can redirect stuff to /dev/null from inside builds.
meh` has quit [Ping timeout: 268 seconds]
<KarlJoad>
simpson: I've tried that, but I wasn't sure if there was a precedent for allowing programs to do that, since those logs may have some purpose that I am not aware of.
lord| has quit [Ping timeout: 256 seconds]
ziguana[m] has quit [Quit: authenticating]
lord| has joined #nixos
ziguana[m] has joined #nixos
<simpson>
Sure, they might leak valuable information about the build machine, or otherwise propagate ambient authority. If in doubt, destroy them, right?
<KarlJoad>
I do know they _shouldn't_ do that, but that's a good point.
<simpson>
There's also r13y; a lot of those logs cause problems if we want a package to build the same way twice. (Often *because* they have information about the build machine!)
<KarlJoad>
simpson: Well, using /dev/null worked, so I'm going to run with that until something happens.
jess has joined #nixos
tejing has quit [Quit: WeeChat 2.9]
mallox has quit [Quit: WeeChat 3.0]
Darkmatter66 has quit [Ping timeout: 240 seconds]
tenniscp25 has joined #nixos
tejing has joined #nixos
<ornxka>
where is prename command in nixos
<ornxka>
neither prename nor file-rename seem to have it
Darkmatter66 has joined #nixos
<ornxka>
err s/neither prename/neither rename/
andi89gi has joined #nixos
<ornxka>
ahh rename package comes with rename, the binary, which is the same as the prename binary on other systems
tenniscp25 has quit [Ping timeout: 268 seconds]
<andi89gi>
Hey mates, I am Andi from Germany and I have just started using NixOS today. It's great!
<sphalerite>
andi89gi: welcome!
<sphalerite>
but "Andi from Germany" is already taken by andi- :pp
<andi->
Am I using NixOS? ;)
<andi->
adisbladis: welcome! :)
<andi->
errr andi89gi ^
<andi89gi>
sphalerite: Thx! Welcome ;) -
<andi89gi>
andi-: Thx as well for the warm welcome here ;)
cosimone has joined #nixos
<{^_^}>
[nixpkgs] @Mic92 opened pull request #107119 → texlive: use python3 by default → https://git.io/JLlN0
<halfbit>
is there something special about pkgsMusl vs import <nixpkgs> { crossSystem = "x86_64-unknown-linux-musl"; }
redmp has joined #nixos
<ekleog>
Anyone here using emacs + rust-analyzer on nixos? My latest rustc nightly bump (from the mozilla overlay) brought rust-analyzer with it, except it's apparently broken (`rust-analyzer diagnostics .` fails due to rust-src not being anywhere) and now I no longer have anything. I'd love to switch to rust-analyzer, but… anyone solved that matter?
<halfbit>
with pkgsMusl gcc-lib is stripped, with crossSystem some stray refs are left in libquadmath and libgcc_s, leading to a dep on musl-dev -> bash -> glibc which is frustrating
<ekleog>
(worst case I'll just switch the default back to rls, but I'd love lsp-mode to work properly with rust-analyzer)
<judson>
energizer, it's naersk now?
<judson>
I mean, I think a) *2nix is the right approach and b) that there needs to be some convergence process to de-dupe whole-tree depenedencies but that c) single versions of libraries for all of nixpkgs is an antipattern (this is where we get into controversy, I think)
<judson>
I'm not clear on why the fixed-output stuff that buildGoModule is so bad, but if it is we should have some top level agreement on that fact.
<andi89gi>
Has anybody tried to run TheManaWorld on NixOS?
tdeo has quit [Read error: Connection reset by peer]
tdeo has joined #nixos
<redmp>
i'm having a build failure when i do `nix-build` for a project, but which succeeds when i do `nix-shell --pure --run 'runhaskell Setup.hs configure && runhaskell Setup.hs build'` ... the failure relates to some symbol of `th-compat` being not present: https://termbin.com/zv113
<redmp>
the error message indicates that some previous output should tell me what's wrong, but there's no previous output that recognizably indicates a missing dependency
<sphalerite>
andi89gi: I have successfully in the past
<redmp>
does anybody have experience with the nix/haskell build environment here who might be able to help me to debug this issue?
<eacameron>
redmp: Does your Setup.hs depend on th-compat?
Darkmatter66 has quit [Ping timeout: 246 seconds]
<sphalerite>
andi89gi: let me see if I can find the expression I used…
xcmw has joined #nixos
<redmp>
eacameron: no, the setup.hs is a `main = defaultMain` style
<eacameron>
redmp: How is that shell even finding runhaskell if you're running pure? Surely you need `-p ghc` at least?
<andi89gi>
sphalerite: that would be kind bc I haven't found it yet. I try searching or solving the issues due the NixOS wiki or Discourse ;)
andi89gi has quit [Remote host closed the connection]
<redmp>
eacameron: i have a `default.nix` in the directory which puts the necessary dependencies into the environment
andi89gi has joined #nixos
<eacameron>
redmp: The only time I've seen errors like that is when I've forgotten to add a dependency to cabal
<eacameron>
Or when I forgot to export a module
<eacameron>
But that doesn't really seem related... I can't think of anything else though sorry
werner292 has joined #nixos
<redmp>
hrm... eacameron well the configure and build both check out the cabal file and think it's ok before starting
<redmp>
eacameron: and the error message indicates a missing dependency, so maybe it's an external (not haskell) dependency that's been added, but then there's very clearly a reference to th-compat in the error
<redmp>
anyhow, thank you
<eacameron>
redmp: if the thing you're building depends on an upstream package that isn't exporting/declaring things correctly?? I've seen this come up before from others on rare occasions but I'm not sure what the solution was.
<redmp>
there are a number of warnings about dodgy imports; i don't have experience with TH.. is it possible that the TH code is giving this error because of imports in generated code?
<redmp>
eacameron: ^
bn_work has quit [Quit: Connection closed for inactivity]
<eacameron>
redmp: Yeah I think that's possible. TH is itself a bit dodgy. Sometimes the generated code has dependencies that aren't explicit and your downstream modules need to import things to make the generated code work.
<redmp>
ok, that's a good place for me to start looking! thank you.
<andi89gi>
You're tutorial on Discourse is great ;) I have just passed it! Amazing
jjakob has quit [Quit: Either I'm rebooting or Quassel died again.]
<energizer>
judson: there are two kinds of *2nix: the executable that writes to the filesystem, and the nix library that reads a lockfile. i like the second kind
turlando has quit [Ping timeout: 246 seconds]
jjakob has joined #nixos
<eacameron>
Is it common for normal C/C++ packages to install headers *directly* into /usr/local/include?
<eacameron>
As opposed to having their own directory in there?
andi89gi has quit [Remote host closed the connection]
<pinpox>
Hi, I recently converted my nixos config to use flakes. My old config was split up into smaller files like these: https://github.com/pinpox/nixos/blob/main/common/sound.nix to be able to "compose" differnt hosts with things I want to reuse. How can I convert those importable snippets into modules so I can import them here directly:
<pinpox>
oh ok. So I could define options aswell? That whould be nice for something like wireguard, where the only thing I would want to change is the public key
<pinpox>
thanks!
<sphalerite>
yep!
<pinpox>
sphalerite: One last question, this seems to be working but would you consider it a good solution? Is there anything I should change?
<judson>
If there aren't some kind of hash of the dependency packages, I think that's a big leak in nixpkgs.
<judson>
Rubygems, IIRC, doesn't produce hashes of upstream in the lockfile, just fixed versions
<judson>
There's also an argument for the nix-ruby ecosystem gem configs - overrides and patches for the gems themselves to build native components etc.
werner291 has quit [Ping timeout: 260 seconds]
werner292 has joined #nixos
<sphalerite>
pinpox: I'm not familiar enough with flakes to comment on the flakes stuff ¯\_(ツ)_/¯
werner292 is now known as werner291
<pinpox>
Ok, thanks! If someone is experienced with flakes I would love to get some feedback, I feel like I could/should be making more use of them
<pinpox>
I've heard a lot of praise and it seemed like a clever idea
<sphalerite>
not my opinion, but that person is clearly not satisfied with the direction of flakes. And from what I know of it, the criticism is valid
<pinpox>
I get the "no docs" criticism, but what is otherwise so "bad" about them? I havn't experienced bugs yet (though I'm not using them for very long)
<notgne2[m]>
unstable nix in general is aptly named in my experience
<numkem>
I can't figure out through the functions on how to convert a string to an int
zupo has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
andymandias has joined #nixos
<notgne2[m]>
> lib.toInt "69"
<{^_^}>
69
<sphalerite>
yep what notgne2[m] says. I have a colleague who uses unstable nix and to some extent flakes as well and we've spent many an hour trawling through the C++ code for funny bugs.
<pinpox>
{^_^}: nice.
<sphalerite>
{^_^} is a bot :p
<KarlJoad>
Is there a way to get the default value that buildPhase has? I want to do an if expression saying `buildPhase if emptyBuild then "" else defaultVal;`.
<numkem>
notgne2[m]: how did I not find this in the repl... I looked for `to`
<sphalerite>
KarlJoad: are you sure you want that and not to set dontBuild conditionally?
<notgne2[m]>
KarlJoad: are you using overrideAttrs?
<pinpox>
sphalerite: I know, but someone had to complete the joke
<KarlJoad>
numkem: `nix repl` doesn't immediately provide Nix's library. You have to import it.
<pinpox>
sphalerite++
<{^_^}>
sphalerite's karma got increased to 119
<sphalerite>
nixpkgs's library*
<numkem>
KarlJoad: I did, I think it's time for the week to end
<numkem>
notgne2[m]++
<{^_^}>
notgne2[m]'s karma got increased to 1
philr has joined #nixos
<KarlJoad>
sphalerite: Yes. I need buildPhase to run for checkPhase to run. So, I have an empty buildPhase, buildPhase = "";. If I use dontBuild = true, then checkPhase won't run because there is a non-default buildPhase.
<Fare>
Is it a blocker to inclusion that I rely on my own object system to extend my packages?
<sphalerite>
KarlJoad: I'm pretty sure an empty buildPhase will result in the default build phase being used
<sphalerite>
Fare: inclusion of what, where?
<sphalerite>
Fare: and what's this "object system"?
andi89gi has quit [Remote host closed the connection]
<KarlJoad>
sphalerite: Correct. For this package, make's testing target is `make test`, not `make check`, so I changed `checkTarget`. In a grander scheme, I want a python-like setup, where if an Octave package is defined, both octave and the package are built together and can find each other, like Python.
lord| has quit [Ping timeout: 240 seconds]
<infinisil>
Fare: No this wouldn't be accepted into nixpkgs like that. Main reasons: It deviates from everything else in nixpkgs; you're the only one that understands it and can maintain it; it adds to the standard library, which is unfit for experiments like these
<Orbstheorem>
I want a central machine to build and distribute derivations to other machines. (And ideally call switch-to-configuration). What's the best way to achieve this?
<sphalerite>
Orbstheorem: "best" is debatable, but nixops could well be an option :)
lord| has joined #nixos
<Fare>
infinisil, where may I put it?
<Orbstheorem>
sphalerite: cool, will look into that.
tejing has quit [Quit: WeeChat 2.9]
<infinisil>
Fare: Anywhere else, e.g. as sphalerite suggested NUR, or just your own repository
<Fare>
obviously, putting it in pkgs/development/compilers/ creates infinite loops
<infinisil>
You won't be able to depend on NUR or other repos from nixpkgs though
<Orbstheorem>
Ideally, I'd love machines to pull, but secrets are public in the nix-store... so I don't want machines pulling secrets from other machines :/
<Orbstheorem>
So push it is...
<Orbstheorem>
Unless somebody has a better idea x)
<sphalerite>
Orbstheorem: if you want to go really fancy with secrets, you could use something like vault.
<Fare>
I don't inline things, it's just available as a attrset lib.POP.
<Orbstheorem>
vault?
<Orbstheorem>
The only vault I know it's ansible vault :D
<infinisil>
Fare: I really don't think nixpkgs is the place for this at the moment
<sphalerite>
Orbstheorem: it's orthogonal to deploying software on the machines though.
<Orbstheorem>
yeah, I don't think that solves my issue.
<Orbstheorem>
Simplest example: ssh host keys or wg keys.
<sphalerite>
gchristensen: since we've reached the topic: do you have (plans for) a blog post about how you use vault? I'd be very interested in reading about it :)
<Fare>
nobody will be hit by mistake (also, it should be understandable by anyone who cares thanks to the documentation included, that is IMNSHO clearer than the documentation for the existing extension mechanisms. Actually my documentation also doubles as a comparative description of the previous mechanisms that IMNSHO is more understandable than the sparse documentation for said mechanisms.)
dbmikus has quit [Ping timeout: 256 seconds]
<infinisil>
Fare: As previously mentioned, the docs you wrote are way too hard to digest, and I still suggest you to write a tutorial
<gchristensen>
and a lot of people understand the current mechanisms at a funcitonal level
<infinisil>
^
<gchristensen>
not implementation or whatever ,but as a how to do a thing
<Fare>
I will write a tutorial eventually, but that will only make said documentation longer.
<sphalerite>
infinisil: that's not fair, have you _seen_ our cross-compilation docs? :p
<sphalerite>
(sorry, just trolling, please ignore)
Rusty1 has joined #nixos
<infinisil>
sphalerite: Hehe, that section should honestly be removed and put into some non-rendered markdown or so
<infinisil>
(as an explanation-type documentation)
Dasto[m] has left #nixos ["User left"]
sadmin has joined #nixos
<gchristensen>
I'm not keen on adding Yet Another to nixpkgs
<gchristensen>
on casually*
<pinpox>
sphalerite: one more question: If I where to convert some of the modules to the "complex" ones that define options, how would I set such an defined option in the imports (https://github.com/pinpox/nixos/blob/main/flake.nix )?
<infinisil>
gchristensen: I mean, having the different documentation types would be a big step up imo
<gchristensen>
I mean YA objec tsystem :) docs are yes
<infinisil>
Ahh
<sphalerite>
Fare: to put a more positive spin on it, at a glance, this thing sounds really cool and maybe it would be better than our current module system and/or overlays, and that could be a great way to bring it in. But I'm sure you can imagine that that's a sliiiightly big deal :p
Acou_Bas- has joined #nixos
<sphalerite>
pinpox: you'd just define it wherever suits you.
<sphalerite>
pinpox: in machines/kartoffel/configuration.nix for instance.
tejing has joined #nixos
<pinpox>
sphalerite: would they be just "there" when I import them in the flake.nix? and what is the name then?
<pinpox>
let's say I add an option called "publickey" in a wireguard module I put in common/wireguard.nix. How do I set the option to "something" in configuration.nix?
<sphalerite>
pinpox: it's no different from using modules that don't define options.
<sphalerite>
if it's a toplevel option (which it probably shouldn't be), publickey = "something";
<pinpox>
oh ok. I thought it would be something like wireguard.publickey
<pinpox>
and what If I have two modules with "publickey" options? like openssh.nix and wireguard.nix?
<Orbstheorem>
it'll be wireguard.publickey if you define `options.wireguard.publickey = mkOptions...` in your module.
<pinpox>
Orbstheorem: I understand
<Orbstheorem>
pinpox: They'll be merged, I believe.
<sphalerite>
pinpox: only if you define the option as wireguard.publickey in the module that defines it
<gchristensen>
,locate scrnsaver.h
<{^_^}>
Found in packages: xlibs.libXScrnSaver
<Fare>
sphalerite, it's a big deal to tell people to use it outside of pkgs/development/compilers/gerbil but I don't see why it's a big deal to use it in gerbil.
<Orbstheorem>
Yeah, you can also query an IRC bot :D
<pinpox>
sphalerite: Ok, thank you. That was actually easy
* Orbstheorem
queries lambdabot all the time x)
<pinpox>
Brainknot
<gentauro>
gchristensen: I have the package in my /etc/nixos/configuration
<gentauro>
/etc/nixos/configuration.nix I mean
<judson>
Does go2nix work with gomodules?
erasmas has quit [Quit: leaving]
<Fare>
I can move the file somewhere else too, and maybe create a link directly from pkgs without a link in lib -- but it needs to exist outside gerbil-support, so I can extend gerbil-support with it.
<infinisil>
Fare: What I mentioned before: It deviates from everything else in nixpkgs, and you're the only one that understands it and can maintain it
<adisbladis>
judson: No, there are several other solutions that do however.
<judson>
Best option?
<sphalerite>
pinpox: yep! I'd suggest prefixing all of your options in custom modules with your own namespace, e.g. pinpox.wireguard.publicKey, to avoid collisions with potential other modules. Not that a wireguard module is likely to be introduced at the top level in nixpkgs, but who knows :)
<adisbladis>
judson: For now I'd say buildGoModule
<adisbladis>
I want to mention vgo2nix, but it's a huge mistake of mine
civodul has quit [Quit: ERC (IRC client for Emacs 27.1)]
<adisbladis>
I built it on entirely the wrong abstractions
<adisbladis>
Which I didn't realise until much later
<gentauro>
so the file is in the system (the package is) by when I try to build something that has that file as dependency, it gives me this error: `X11 > checking for X11/extensions/scrnsaver.h... no` and `X11 > configure: error: X11/extensions/scrnsaver.h (from libXss) is required`
<infinisil>
Fare: By moving your code into nixpkgs you essentially give away the responsibility of maintaining it to the nixpkgs maintainers
<Fare>
not anymore than for the rest of the gerbil packages.
<Fare>
That I've been maintaining for a few years, now.
<Fare>
with regular updates.
<infinisil>
But this isn't just a new package, it's an entirely new way to define packages, and the implementation for it
<KarlJoad>
How do I allow the default checkPhase to happen when I have a preCheck to fix-up stuff and a postCheck to copy results out? I keep having "no Makefile or custom checkPhase, doing nothing" unless I allow a build to happen.
<infinisil>
New packages, when they're declared like all the other packages, are very easy to maintain
<judson>
abisbladis, which would work but the package needs more than one build argument :(
<Fare>
it's just a principled replacement for things like extend and makeScope.
<adisbladis>
judson: Hm? What's the problem?
<infinisil>
Fare: How about creating an RFC for this?
<judson>
Does everyone but me work at tweag now? :)
<judson>
The buildFlagsArray in buildGoModules is a snare and a delusion.
<Fare>
Also I meant 'alternative' rather than 'replacement' -- I am not proposing to replace anything by it right now.
{^_^} has quit [Ping timeout: 260 seconds]
<judson>
Honestly, I'd be v happy with an improved buildGoModules, but it sounds like there's resistences to its fixed output stage
<Fare>
indeed, the surface API needs to be improved, and the underlying implementation should use C3.
gchristensen has quit [Ping timeout: 260 seconds]
<sphalerite>
Right, it's really about time I went to bed. Night, folks!
<infinisil>
sphalerite: o/
<Fare>
I would do two RFCs, then: one for adding lib.experimental, which should be straightforward, and two for making POP an official part of lib eventually, which is a longer term project.
<judson>
adisbladis, specifically "buildFlagsArray" winds up concatenating its value with spaces and presenting it as a single string to `go build`
<judson>
Which barfs as a result. It's only good for one argument.
evanjs has joined #nixos
<Fare>
How do I get assigned an RFC number?
<Orbstheorem>
I think you can just open a draft with XXX
<qyliss>
Fare: it's just the PR number
<qyliss>
you set it to 0000, open a PR, then use the PR number
werner292 has joined #nixos
<qyliss>
I think this should all be explained in the rfcs README
werner291 has quit [Ping timeout: 268 seconds]
werner292 is now known as werner291
werner291 has quit [Client Quit]
terrorjack has quit [Quit: Ping timeout (120 seconds)]
blub has joined #nixos
blub has quit [Remote host closed the connection]
terrorjack has joined #nixos
kirc has joined #nixos
pjt_tmp has joined #nixos
<adisbladis>
judson: Could you create an issue?
<adisbladis>
And CC me please
<adisbladis>
I'm interested in solving this, but I can't give it the attention it deserves right now
<judson>
I was pretty sure there was one. Let me look
ddellacosta has joined #nixos
b42 has quit [Ping timeout: 258 seconds]
tsrt^ has joined #nixos
__monty__ has quit [Quit: leaving]
coderobe has quit [Quit: Ping timeout (120 seconds)]
daGrevis has quit [Quit: Ping timeout (120 seconds)]
daGrevis has joined #nixos
coderobe has joined #nixos
schweby has quit [Quit: No Ping reply in 180 seconds.]