<clever>
__monty__: the firewall can block pings over the vpn, after the vpn itself is working
<clever>
nakkle: the imports value must not depend on the args the module receives, because the args you receive can come from other modules in imports
<clever>
__monty__: and most systems dont block outgoing traffic, or the replies to that
<clever>
__monty__: toxvpn uses udp, and the firewall lets replies to udp come back in, it treats it like an outgoing connection
<clever>
__monty__: linux rarely blocks outgoing traffic
<clever>
__monty__: if ssh works one way, then the vpn is fully working, and its just firewalls
<clever>
__monty__: that sounds like its just the nixos firewall, can mac ping 192.168.2.4?
<clever>
__monty__: what ip's are you using, and what is your lan?
<clever>
__monty__: you cant exchange packets until toxvpn says the other peer is online
<clever>
__monty__: does toxvpn show the 2 peers as being connected, and having non-conflicting IP's?
<clever>
__monty__: sounds like your using the wrong ip
<clever>
waleee-cl: i have seen nixos-unstable-small update a few times since then
<clever>
__monty__: run the tcpdump on the tun interface, of both machines, local and remote, does something going in one end, come out the other?
<clever>
Ariakenom: nope
<clever>
`This is a demo appliance for VirtualBox (in OVA format) that has X11 and Plasma 5 enabled, as well as the VirtualBox guest additions.`
<clever>
and it will then rebuild whatever it needs to
<clever>
jasom: if you need a certain library with debug, you can do `--arg config '{ packageOverrides = pkgs: { libfoo = pkgs.enableDebugging pkgs.libfoo; }; }'`
<clever>
hyperfekt: nix-shell is handy when the thing is burried in let blocks and imposible to access with -A
<clever>
hyperfekt: nix-copy-closure can copy the drv files to a remote machine, nix-store -r /nix/store/foo.drv can re-build a drv, and skip the expensive eval, nix-shell /nix/store/foo.drv can shell into a drv to reproduce failures
<clever>
Stuck_: i'm not sure why it isnt working when you install it system wide, but ^^
<clever>
Stuck_: it works perfectly fine on this end
<clever>
Stuck_: i also prefer to not install ghc system-wide, and to only use it from within a nix-shell
<clever>
Stuck_: that should just work..., what does `type ghci` return?
<clever>
Stuck_: how are you running ghci?
<clever>
Stuck_: did you add random to your cabal file as a dependency?
<clever>
Stuck_: what is claiming its hidden?
<clever>
srhb: this bakes it into the sqlite state, so you dont need a shell.nix
<clever>
kraem: nixos overlays are set with the nixpkgs.overlays option, in configuration.nix
<clever>
kraem: yeah
<clever>
kraem: might be simpler to just read that git rev, and then write an overlay that changes the versions of both vulkan packages
<clever>
,howoldis Shyim[m]
<clever>
Shyim[m]: youll need to wait until unstable updates
<clever>
.howoldis Shyim[m]
<clever>
Shyim[m]: or just wait a day for somebody else to fix it
<clever>
Shyim[m]: the assertion means that the headers and main package for vulkan are of different versions
<clever>
and X wants it to have the same sticky bit as /tmp, so anybody can create a socket, and own it properly
<clever>
fresheyeball: its a directory, with sockets for each server
<clever>
$ ls -lh /tmp/.X11-unix/
<clever>
srwxrwxrwx 1 root root 0 Sep 1 15:01 X0
<clever>
total 512
<clever>
fresheyeball: also, that is not the right path to the socket
<clever>
fresheyeball: that sounds like X is still creating the unix socket, not socat
<clever>
Shyim[m]: do you have any overrides on vulkan?
<clever>
Shyim[m]: what does line 8 of that file say?
<clever>
Shyim[m]: and consider getting an FS that doesnt scramble everything at the slightest problem
<clever>
Shyim[m]: that .drv file was also corrupted, do a `nix-collect-garbage` to just nuke all unused things
<clever>
Shyim[m]: yep
<clever>
Shyim[m]: do a `nix-channel --rollback` as root to undo the last change
<clever>
Shyim[m]: you had an improper shutdown after updating your channels and the manifest.nix has been corrupted
<clever>
Shyim[m]: ls -lL /nix/var/nix/profiles/per-user/root/channels/manifest.nix
<clever>
to get around X being upset about /tmp having the wrong permissions
<clever>
you can use socat to create such a socket, and proxy it to the tcp port X is listening on
<clever>
fresheyeball: which routes to the X server
<clever>
fresheyeball: most X programs expect a unix socket in /tmp/.X11-unix/
<clever>
fresheyeball: then just tell X to not listen on unix
<clever>
fresheyeball: have a look at the socat man page, you should be able to make socat listen on a unix socket, and forward everything to a tcp port
<clever>
fresheyeball: same problem then, its upset about the uid's of /tmp things, try `--option sandbox false` ?
<clever>
which costs you a whole 12mb!!
<clever>
but it will still install legacy-bios modules to /boot/grub/
<clever>
that will instruct grub to not update the stub in the MBR
<clever>
thoughtpolice: ive yet to find a motherboard in my collection that is supported
<clever>
pbb: which is actually what you want, when grub is the payload, the cfg, without the loader!
<clever>
so you only get the config file, with no binary
<clever>
so if you switch from grub to systemd-boot, it doesnt even install the systemd-boot binaries!
<clever>
pbb: but systemd-boot does have anything like that, at all
<clever>
pbb: nixos grub uses /boot/grub/state to detect when the version in the boot partition is out of sync with nixos, and auto-reinstalls the bootloader
<clever>
pbb: that reminds me of a recent bug i discovered with systemd-boot, lol
<clever>
thoughtpolice: yeah, ive heard about the whole payload stuff, and i think there was something about how you need the seabios payload if you want the legacy bios api available to grub
<clever>
ahhh
<clever>
enless that coreboot was very minimal?
<clever>
pbb: i would expect most x86 bios to provide working graphics
<clever>
pbb: x86 or arm?
<clever>
pbb: cant grub already do that with its normal background image stuff?
<clever>
pbb: ah, yeah, definitely a use for buildEnv
<clever>
pbb: why do you want to merge 2 together?
<clever>
pbb: nixos option definitons or plain sets?
<clever>
fresheyeball: what error does it give?
<clever>
fresheyeball: what error does it give?
<clever>
fresheyeball: if your not connecting to its vnc port, it should be functionally identical to Xvfb
<clever>
,locate Xvnc
<clever>
fresheyeball: you may also want to try Xvnc to see if it has the same trouble
<clever>
fresheyeball: you can still use socat to proxy a unix socket to a tcp socket, which could hack around that
<clever>
fresheyeball: i think its trying to set the sticky bit on .X11-unix
<clever>
ivan: neat
<clever>
oh, nice
<clever>
i also discovered, that if you add invalid entries to fstab (i had escaping trouble with a space in a mount point), systemd will happily kill the entire machine, the instant you rebuild-switch
<clever>
but nixos will undo that at the next boot or switch
<clever>
sphalerite: yeah, delete the /etc/fstab symlink, replace it with a file containing the same contents, then edit-away
<clever>
sphalerite: you need to add a nofail thing to the fstab options
<clever>
i cant remember why i didnt use screen, because i use screen for everything
<clever>
mikky: and there isnt much point in putting rainloop into systemPackages, it doesnt do antyhing
<clever>
mikky: once you add that to the nginx config, it should immediatelly spring to life and copy it over
<clever>
mikky: and nixops is copying the runtime closure, so it ignores rainloop-community
<clever>
mikky: i think the problem, is that rainloop-community doesnt contain any bin directories, so systemPackages only depends on it at buildtime, not runtime
<clever>
mikky: which will insert the proper path into the config files
<clever>
mikky: rainloop-community isnt meant to go in systemPackages, your meant to use it in an expression that configures the http server
<clever>
mikky: what files do you expect rainloop-community to provide once installed?
<clever>
mikky: run that nix-store command on the machine with nixops, not the target
<clever>
mikky: ls -l /run/current-system/sw/index.php
<clever>
mikky: why do you think rainloop-community is not appearing in systemPackages?