IRC channel logs

2017-07-02.log

back to list of logs

<paroneayea>hm
<paroneayea>I probably need to do wrap-program I guess..
<jlicht>sneek: later tell lfam: even with your shepherd config snippet, I keep having the issue that services stopped using eg `herd stop cron' leads to a defunct mcron process. Am I misunderstanding some fundamental thing here, or is this a bug?
<sneek>Got it.
<jlicht>sneek: botsnack for you
<sneek>:)
<paroneayea>ok yeah I think I got it working.
<reepca>Hm... does a return value of 0 have any special significance from clone?
<ruunyan>is this also the channel for guixsd, or does sd have its own channel elsewhere?
<reepca>yeah, this is also for guixsd
<ruunyan>thanks
<paroneayea>well I finally sent in patches for dirvish :)
<amz3>sneek: later tell lfam, I can't add a redirection. The new url is https://gitlab.com/guile-git/guile-git
<sneek>Will do.
<Petter>Hi. Trying to update from git checkout, but having problems as shown here, http://sprunge.us/ibCa
<Petter>Anyone have any tips?
<reepca>sneek: later tell civodul: reading through run-container, I notice that nothing is done regarding the propagation type of any of the mount points, which the C++ environment setup code does. If I understand correctly, that means that it's possible that the bind-mounts mounted in the cloned process's namespace will also be mounted in the original namespace (making deleting the temp directory rather more difficult) and also possible that
<reepca>anything mounted under the bind-mounts in a different namespace might become visible inside the container depending on whether the temporary directory is in a MS_SHARED mount point. Is that an issue, and if so, should it be changed in run-container?
<sneek>Got it.
<reepca>sneek: later tell civodul: anything mounted under the bind-mounts in a different namespace might become visible inside the container depending on whether the temporary directory is in a MS_SHARED mount point. Is that an issue, and if so, should it be changed in run-container?
<sneek>Will do.
<efraim>Petter: I believe ludo fixed that one in a commit yesterday, guix pulls in gmp in a round about way, something else did too and they conflicted
<Petter>Ok. I ran git pull within an hour ago though.
<ennoausberlin>Hello guix
<ennoausberlin>I want to prevent some kernel modules from loading. Is there a blacklist.conf or can I do this during configuration stage in config.scm?
<efraim>Hmm, I normally run './pre-inst-env guix environment guix -- make' and I don't have any guile packages in my profile
<Petter>Let me try this.
<efraim>Maybe an environment with the pure flag would help, but I think it would depend on tracking down the gmp dependency
<efraim>If you do need to file a bug I'd make sure to include your profile
<efraim>sneek: later tell Efraim1 irc.pine64.xyz:6697
<sneek>Will do.
<efraim>sneek: botsnack
<sneek>Welcome back efraim, you have 1 message.
<sneek>efraim, efraim says: irc.pine64.xyz:6697
<sneek>:)
<efraim>...good enough I guess
<Petter>:D
<reepca>ennoausberlin: add module_to_blacklist.blacklist=yes to kernel-arguments in your config.scm
<reepca>(see 6.2.2 "operating-system Reference" in the manual)
<reepca>hmm ... it'd be nice if I could have sneek automatically generate a link to the online manual by just giving it a section number
<Petter>efraim: Your command was successful and it seems I'm past this issue now. Thanks!
<ennoausberlin>reepca: Thx for the pointer!
<ng0>When I don't know if something will exist but within the possibilities of occuring folders within a given source it can exists, how do I deal with them in the install phase for a build-system I write? Obviously they can not all be used in (let), or can I arrange it with (unless (null)) ?
<sneek>ng0, you have 1 message.
<sneek>ng0, catonano says: I apologize
<ng0>What I mean is, if something does not exist in a source it can not be defined in a let without a condition because the lack of the folder/file will cause an error
<lfam>ng0: In what case would this be unknown while writing the package definition?
<sneek>Welcome back lfam, you have 2 messages.
<sneek>lfam, jlicht says: even with your shepherd config snippet, I keep having the issue that services stopped using eg `herd stop cron' leads to a defunct mcron process. Am I misunderstanding some fundamental thing here, or is this a bug?
<sneek>lfam, amz3 says: I can't add a redirection. The new url is https://gitlab.com/guile-git/guile-git
<ng0>vim is mostly like: here are a bunch of folders, now I copy this to the destination - you will not always see the same folders but the ones which can exist are predefined, so you will not be able to guess what exists and what doesnÄt
<ng0>not writing the package definition
<lfam>Oh, a build system
<ng0>I'm writing the vim-build-system to shorten some vim packages
<lfam>I don't know if this is idiomatic, but you could try something like (when (file-exists? filename) ...)
<ng0>file is also a file in the unix sense as in folders are just files?
<ng0>ah, found it
<ng0>thids is used in the emacs-build-system
<ng0>oh... it is much easier!
<ng0>I think..
<ng0>I will define exclusion and inclusions, and then I will simply copy everything over wholesale :)
<ng0>but I only know how to do this with find, not guile itself. I haven't done this before. is there some reference in guix?
<ng0>or some tips/pointers in the right direction? I'm doing this on sundays because I'm curious to learn
<lfam>I usually play around in the Guile REPL to figure these things out. I can't think of any examples in the Guix code at the moment
<ng0>I really have to use that more often, didn't think of it
<ng0>I think I will do the when exists way first and figure out how what I thought of works later
<efraim>There's a file-exists? predicate that I used in GCC to only patch aarch64 lib support if it was there, something like that could work
<efraim>(when (file-exists? "foo"...
<efraim>Which also reminds me I need to patch vifm's install phase to put its vim plugin files in the right spot
<efraim>lfam: I know its a bit out, but kernel 4.13 is rumored to have 'enough' mainline support for the odroid-c2 and the pine64
<lfam>efraim: That would be great news
<efraim>Enough being no audio, emmc or graphics acceleration, but yes on USB and network, which is about the minimum to be useful
<lfam>efraim: Where do you learn about the mainlining status of these SOCs?
<efraim>This is from #Debian-arm, otherwise https://linux-sunxi.org/Linux_mainlining_effort
<efraim>The A64 and H5 is very similar to a stock A53
<lfam>Yeah, the sunxi wiki is a good resource.
<lfam>efraim: Have you heard anything about the mainline status of the MacchiatoBIN (Marvell ARMADA 8040)?
<efraim>That's the 'network board'?
<lfam>Yeah, although it's also a quad-core A72 :)
<efraim>No clue about that one
<jlicht>hi guix
<lfam>Seems useful for more than just networking
<lfam>It should offer reasonably fast I/O too
<efraim>After playing around forever with underpowered hardware I just want RAM sockets, worst case scenario is /tmp as tmpfs and spinning rust almost doesn't matter for guix
<lfam>The machiattobin has socketed RAM
<efraim>I ordered more RAM for my macbook from aliexpress, 2GB of RAM and 4 of swap on spinning rust is absolutely awful
<efraim>I'm saving my ssd for if I can find out max RAM for my ppc macbook
<lfam>I don't know the max supported, but they offer it for sale with 4 GB or 16 GB ECC DDR4
<lfam>swap on spinning rust is a nightmare. I don't even think it's worth it
<lfam>What does it matter if your application doesn't crash if the execution basically halts? Either way you lose availability
<ng0>efraim: thanks
<efraim>Np :) sometimes its easier to ask for random snippets, someone must've used something similar before
<Petter>Interesting, in systemd user accounts starting with a digit get root privileges, https://github.com/systemd/systemd/issues/6237
<Petter>Label: not-a-bug
<lfam>Yes, but you need to be root to exploit it
<lfam>So, a bug for sure, but not that useful
<lfam>Perhaps the upstream maintainers could improve their communications skills, however
<Petter>Oh. A little less interesting then.
<lfam>They always get defensive when things like this crop up. I'm sympathetic, considering how controversial their software is. But, it seems as if you really need a thick skin to be a publicly known free software developer
<lfam>Once your software gets popular, there is a never-ending stream of complaints, mostly uninformed. Sounds emotionally exhausting.
<lfam>The idea behind that bug is that if root tries to create a service for some user whose name begins with a numeral, systemd will run it as root. So, you could trick your administrator into elevating your privileges through this bug. That's bad.
<lfam>But, you need root to cooperate somehow
<davidl>I'm having issues gett git service to work. I installed it and the service is running with default values. There is a repo called /srv/testgit.git with the files test.txt and empty file git-daemon-export-ok but when I run git clone git://<ip-address/testgit.git I get the error fatal: remote error: access denied or repository not exported: /testgit.git
<davidl>I have also made an initial commit.
<ng0>have you used the full path?
<ng0>contrary what you expect it will always be the full path in git:// unless you define it otherwise
<ng0>so git://ip.no/srv/www/git/foo.git
<ng0>I think.. been a while and I didn't check my server configs
<ng0>but I had problems aswell, even when I defined the git.
<ng0>ACTION takes a look at running server
<davidl>ng0: ok. I havne't tried that but it says differently on the man page.
<davidl>ng0: it didn't work either.
<fps>lfam: thanks. what a pity
<sneek>fps, you have 1 message.
<sneek>fps, lfam says: The upstream repo URL changed, so you won't be able to build guile-git without providing the source code "manually". You'll need to get the right Git checkout, check that it has the correct hash with `guix hash --recursive --exclude-vcs`, and then use `guix download` to put it in your store
<lfam>fps: Yeah, according to the maintainer it's not possible to redirect to the new URL.
<ng0>davidl: I'm still reading up on it
<ng0>I'll tell you how to do it once I know it
<rain1>good morning
<ng0>davidl: got it. at least for when you have: (user-path "git") in your git-daemon-configuration
<ng0>it looks like this then from the outside: git clone git://somefoobla.onion/~user/youbroketheinternet-overlay.git
<ng0>where the real path is /home/user/git/...
<davidl>ng0: would be nice to be able to clone repositories from /srv/git/ also.
<ng0>what exactly did not work? which url did you try?
<ng0>on the outside this should work: git clone git://somefoobla.onion/srv/git/youbroketheinternet-overlay.git
<davidl>I tried git clone git://<ip-address>/testgit.git
<davidl>I also tried with /srv/git/testgit.git
<davidl>neither works.
<ng0>one moment
<ng0>works here
<ng0>you can test this: torify git clone git://r4kudg2ypykkacue.onion/footronic-enterprises-world-domination-plans.git
<ng0>this is basically just:
<ng0>(git-daemon-service #:config (git-daemon-configuration (user-path "git")))
<ng0>oh, and the /srv/git/ is the location of the repository I just pointed to
<ng0> /srv/git/footronic-enterprises-world-domination-plans.git
<ng0>you did init a bare repository, did you?
<ng0>I mean: 'sudo mkdir /srv/git/foo.git; cd /srv/git/foo.git; sudo git init --bare; sudo touch git-daemon-export-ok'
<davidl>yes. it's inited and committed and clean working tree.
<davidl>it has git-daemon-export-ok
<davidl>I and configured to interprest user ~ .
<davidl>neither works.
<ng0>what I meant to ask is, have you used git-daemon before?
<davidl>ng0: will try the export all by default.
<davidl>ng0: yes I have repositories on my debian computer.
<ng0>with bare I did mean the state you have on the server, not what you have on the working end
<davidl>but that one also runs gitolite.
<davidl>ah.
<davidl>uhm
<davidl>I didn't init it with bare specified...
<ng0>as far as I know you can't just point to a repository you work from. if you can, I forgot how I ever did it when we worked in an onion based project. it depends on how you want to work. there's gitolite in guix.
<davidl>ng0: alright. I assumed I just had to create /srv/git/myproject && cd /srv/git/myproject && git init . && touch git-daemon-export-ok && echo "hola" >> text.txt && git add . && git commit -am "inital commit" and that would be all.
<ng0>it's just my view.. I work like this, but I have used gitolite etc before. for the difference of bare and non-bare there is this: http://www.saintsjd.com/2011/01/what-is-a-bare-git-repository/
<davidl>ng0: thanks! :D
<davidl>it works
<davidl>maybe a little hint about this in the manual page?
<ng0>you mean guix?
<davidl>yes
<ng0>feel free to create a patch for the git-service description :)
<davidl>ng0: Im not sure but it's nice that the manual is very sleek and to the point but some practical advice/info on things would have been nice sometimes.
<davidl>Like any other wiki or blog has "step-by-step" guides on what to do, including the beloved Arch wiki.
<davidl>Guix manual reads more like a math textbook almost
<davidl>^^
<ng0>the problem with rewriting is that someone has to do it.
<lfam>I think it's useful to offer examples of how to use our services, but examples of how to use upstream software definitely belong in the upstream documentation
<ng0>davidl: until someone steps up to do it, little additions and corrections help
<davidl>lfam: I mainly agree but if you look at any other major distribution they provide info on the software they package for it and how to use and configure it in their distribution.
<lfam>Right, that's the service documentation I mentioned.
<davidl>aha ok.
<ng0>what do I have to import to make use of 'copy-recursively' ?
<lfam>`grep -rI copy-recursively | grep define | cut -f1 -d:` -> guix/build/utils.scm
<ng0>oh. tanks
<ng0>*thanks
<ng0>tanks are the opposite of thanks
<lfam>Unless they are filled with a tasty beverage
<ng0>hm I import that already, still it doesn't work
<ng0>do I need guix/build/bournish for "file-exists?" ?
<ng0>that's the grep result
<ng0>maybe I should just prepare the patch and give you a reading reference :)
<lfam>file-exists? is from Guile
<lfam>I like to look at the Guile procedure index for questions like that: https://www.gnu.org/software/guile/manual/html_node/Procedure-Index.html
<ng0>I must have some not so obvious mistake
<balduin>I get the error message `cc` command not found during the compilation of a package. How, can I define the `cc` command in the package definition. I created the package myself.
<efraim>balduin: you need to set a makeflag "CC=gcc"
<balduin>@efraim could you point me to an example?
<lfam> balduin: Check the package definition of dvtm
<balduin>@lfam: thanks.
<balduin>I saw a couple conference talks about Guix. Emacs was mentioned during those talks quite often. I would like to explore Emacs + Guix more but do not know where to find resources/material for that. Do you know some could resources websites/tutorials/books?
<cehteh>oops no git-annex in guix
<cehteh>schemers hate haskell? :)
<oriansj>cehteh: it has more to do with haskell requiring a binary blob
<cehteh>huh?
<cehteh>why that?
<cehteh>and i see that a lot ghc stuff is packaged
<oriansj>cehteh: GHC is written in haskell and requires a haskell to compile it
<cehteh>well that binary blob is free software .. now we rule out self hosted languages as well?
<oriansj>now alot of very useful programs are written in haskell (like xmonad)
<cehteh>i mean yes it sux on some language which cant be bootstrapped easily with C only
<oriansj>cehteh: well it isn't that we forbid such things, but rather we want to be able to bootstrap them from a trusted C compiler to eliminate the Trusting Trust attack
<cehteh>which is the trusted c compiler anyway? :D ..
<oriansj>cehteh: my work is reducing our trusted bootstrap down to a single 280byte hex monitor, which is then used to bootstrap a macro assembler, a lisp and a FORTH, which will be used to create our trusted C compiler
<cehteh>i mean seriously gcc is huge and complex, just define it as trusted isnt really promising
<cehteh>heh
<oriansj>cehteh: we have been able to build gcc from tcc and thanks to janneke's wonderful work we are well on our way to building tcc from a very low level bootstrap
<rain1>we are working on reducing the set of trusted bootstrap binaries
<rain1>agreed, gcc is too big and complex to trust..
<paroneayea>cehteh: have you seen mes ? :)
<cehteh>i like that ideas, but for practical purposes this is going a bit to far if some software becomes unavailable due that complexity
<paroneayea>janneke is working hard to liberate us from having to trust gcc and etc :)
<paroneayea>a fully bootstrappable system from the C compiler on up!
<oriansj>paroneayea: 280byte hex monitor is the goal
<cehteh>along with ng0's rant about 'master' broken .. guix should be partitioned and staged into more parts (core, trusted, stable, devel, (nonfree, yes yes))
<cehteh>currently its a big source blob :D
<ng0>I did not rant. I have more explicit ideas about this and wrote a mail on the very basics.
<oriansj>cehteh: yes we fully admit we still have alot of work ahead of us but multiple people have dedicated themselves to that task
<cehteh>ng0: yes i meant this 'rant' a bit more kindly, but actually i think it could be a rant, it is valid
<cehteh>i am slowly getting used to guix, eventually i'll join and will help too
<quiliro>balduin: if you install emacs and open the emac tour, then the emacs tutorial, then the emacs manual and then the emacs-guix info page, then you will be on the easy to complicated track
<sneek>quiliro, you have 3 messages.
<sneek>quiliro, rekado says: I haven’t tried ‘torify emacs’, but ‘torsocks emacs’ works for me; eww is torified.
<sneek>quiliro, thomassgn says: I wrote up a tiny thing about adding fpm to guix at https://browniehive.net/2017/07/Adding-FPM2-to-GuixSD/
<sneek>quiliro, alezost says: re "loadkeys error": did you run it as user? "loadkeys" should be run as root, otherwise it fails. BTW we have 'console-keymap-service' in GuixSD
<rain1>I have a lot of trouble getting guixsd up and working
<rain1>and updating it and reconfiguring it
<balduin>@quiliro: thank you.
<rain1>I am not sure if other guixsd users have the same problems
<cehteh>rain1: me too
<rain1>but i am working on chroot type setup with guix, not guixsd instead
<balduin>I currently get the following error message while trying to build a package: /bin/sh: bad interpreter: No such file or directory
<rain1>i feel like that might be easier to get by with
<cehteh>it works, but hydra's troubles to keep up, this broken master problem and my unfamilarity with scheme makes this all a slow mess to me, i still try but everything takes 50 times longer than it should
<cehteh>aka guix has a rather high entry barrier still, thats untrue about the ideas behind, writing package descriptions ought to be much simpler than on any other distro
<cehteh>but in practice there are so much other things around to learn
<ng0>Okay I just sent the patches for vim-build-system
<rain1>another trouble i have is no instructions how to set up my own hydra
<cehteh>search the manual for 'publish' server and 'offloading'
<rain1>writing package descriptions ought to be much simpler than on any other distro <- I made a tool that makes it easy to create packages
<rain1>it might be out of date by now
<rain1> https://notabug.org/rain1/guile-zenity/src/master/examples/guix-helper.scm
<catonano>cehteh: I sent some emacs modules as guix packages. Also some python and perl libraries. Packaging stuff is not that hard. But I agree that te entry barrier is hhigh and there's a lot to learn.
<cehteh>that never troubled me. but system configuration is completely new, updates stall, lots things are build locally etc
<efraim>Hydra hasn't built in guix for a long time now
<rain1>how is Hydra built then?
<cehteh>do you really need hydra?
<rain1>no
<efraim>The build gets fixed whenever someone actually wants to build it, the Hydra of our build farm is quite old
<efraim>I think fps was the last one to build and configure hydra
<efraim>Or janneke
<ng0>what's left to make the switch to cuirass? the "build your own branch" posts I've read made it seem like it is rather functional already
<efraim>I just have a command that I should turn into a script to build packages at random, and I run guix publish on that machine
<balduin>I have to agree with rain. The broken hydra substitute situation is annoying.
<cehteh>i'd wish that publish and offloading could be cascaded, and an offload server could send a signed promise to some server on the upper hierarchy, that would give a complete distributed build farm with maybe one central server (optional)
<rain1> https://notabug.org/mthl/cuirass oh very interesting
<rain1>so hydra is only a temporary measure...
<janneke>efraim, rain1: yeah, i resurrected hydra last year
<civodul>rain1: it's a temporary measure that's been lasting for 4 years now :-)
<sneek>Welcome back civodul, you have 2 messages.
<sneek>civodul, reepca says: reading through run-container, I notice that nothing is done regarding the propagation type of any of the mount points, which the C++ environment setup code does. If I understand correctly, that means that it's possible that the bind-mounts mounted in the cloned process's namespace will also be mounted in the original namespace (making deleting the temp directory rather more difficult) and also possible that
<sneek>civodul, reepca says: anything mounted under the bind-mounts in a different namespace might become visible inside the container depending on whether the temporary directory is in a MS_SHARED mount point. Is that an issue, and if so, should it be changed in run-container?
<efraim>If I understand correctly, the drv includes a signature from the machine presenting it, if the signature were detached then we could have multiple signers
<janneke>rain1: getting it to run was enough inspiration for me to start contritubing to cuirass
<rain1>hmmm maybe I should experiment with it
<ng0>coming back to my question: what's left for cuirass to really replace hydra?
<janneke>rain1: depending on your needs it may need work, but it's nice and small
<lfam>The primary issue with cuirass is that its developer quit Guix
<ng0>my use case is once I have enough packages to start with building all the different GUIX_PACKAGE_PATH repositories of infotropique OS and LIVE and provide binary substitutes for them. that should work.
<ng0>oh.
<lfam>So, we need a champion to continue development
<oriansj>lfam: why?
<balduin>do I have a bash environment available by default if I use: build-system gnu-build-syste
<balduin>m
<janneke>lfam: yeah, really sad
<ng0>janneke: but does david still develop it?
<lfam>oriansj: I'm not sure
<ng0>if it was david
<oriansj>lfam: these sorts of things are important, we need to understand why people give up guix.
<lfam>Indeed but, like I said, I'm not sure
<janneke>lfam: a tragic miscommunication, i'm sure
<civodul>reepca: looks like you found a bug in linux-container.scm, or at least something that needs to be improved to fully support the daemon's use case
<civodul>reepca: perhaps it's worth discussing this with davexunit (the original author of this code) on the list?
<janneke>Mathieu Lirzin is the author or cuirass
<paroneayea>hi
<oriansj>rain1: could you figure out why Mathieu Lirzin quit Guix, it might be important perspective for us to understand
<ng0>and https://notabug.org/mthl/cuirass is the master repository and we do not develop it elsewhere?
<rain1>I'm not sure i know him, what was his irc nick?
<rain1>looks like guix is hard to set up on debian
<rain1>after installing guile-2.0 and guile-2.0-dev guix ./configure fails to find guild, even though it exists
<rain1>ill try a different distro - what distro can i run guix in easily?
<rain1>(other than guixsd)
<ng0>gentoo hsa it packaged officially to some degree
<ng0>well that is easy for me is not what might be easy for you
<rain1>I wanted to use the guix qemu image, but i don't think it has ssh?
<balduin>what are good resources to start learning scheme? Books/tutorials etc.? I like learning from books.
<oriansj>rain1: his email is mthl@gnu.org that is the best I could find
<lfam>balduin: I haven't done it yet, but Structure and Interpretation of Computer Programs is the classic
<janneke>rain1: i built deb packages for 0.10, .11, .12 using Diane Trout's debian-guix repo
<lfam>balduin: We offer it as a package called sicp
<balduin>@lfam: sicp is the answer to my bash question, is this correct.
<balduin>??
<lfam>balduin: No, your question about books to learn Scheme.
<lfam>We offer it as an "ebook" in the sicp package
<civodul>oriansj, rain1: re mthl: https://lists.gnu.org/archive/html/guix-devel/2017-03/msg00652.html
<civodul>in practice Cuirass development now takes place on Savannah, see https://lists.gnu.org/archive/html/guix-devel/2017-04/msg00488.html
<ng0>ah, savannah. thanks
<civodul>anyway, Cuirass needs love, so help welcome! :-)
<rain1>hmm i am trying to give cuirass a go but i am not sure how to set a dev environment - I think gentoo would take a bit too much work for me to learn to set up just now
<oriansj>civodul: that is interesting
<oriansj>basically mthl felt unwelcome to contribute as a member of the community
<rain1>what exactly happened? it is not stated in the ML thread
<janneke>balduin: re your bash question: i don't know what you mean by `bash environment', but gnu-build-system has bash and coreutils
<balduin>I get this message: : /bin/sh: bad interpreter: No such file or directory
<janneke>balduin: lots of inspiration can be found by looking at outher recipes in gnu/packages/*.scm
<ng0>rain1: look in the same month or the one before that (or both) in the top view for the longest thread you find
<janneke>balduin: yes, you'll have to use /gnu/store/deadbeaf1345-bash-x.y/ + "bin/bash"
<ng0>it has like 80 messages or more
<janneke>balduin: prolly something like (string-append (assoc-ref %build-inputs "bash") "/bin/bash")
<lfam>janneke, balduin: I recommend not changing the shell from 'sh' to 'bash' because they have different behaviour.
<lfam>But, 'sh' is provided by the Bash package
<balduin>@janneke: thanks.
<lfam>So, what janneke said but use "bin/sh" at the end :)
<balduin>first to I have to specify any module dependency in the header of before I can use: "something like (string-append (assoc-ref %build-inputs "bash") "/bin/bash")"
<balduin>??
<janneke>lfam: thanks :-)
<quiliro>i installed sicp...where is the book?
<quiliro>how do i read it? i am using emacs on i3 on guixsd
<janneke>quiliro: C-h i m SICP RET
<quiliro>janneke: that easy?
<quiliro>ok
<lfam>I wonder if we can get our security updates into the LWN security meta-advisories
<rain1>may I just ask what linux distributions can guix be easily installed and used in?
<lfam>I think it would be good exposure and we are pushing fixes before most of the other distros ;)
<janneke>rain1: if you provide .deb's it's trivial in debian and ubuntu -- i did so earlier
<rain1>ah..
<janneke>rain1: sadly, we don't have support from debian yet, and someone needs to provide those .deb's, or at least maintain Diane Trout's debian-guix archive
<janneke>i lost interest maintaining debian/ubuntu stuff when i had GuixSD running on all my iron
<ng0>can we have some 'make .deb'? isn't is as easy as that?
<janneke>ng0: almost, for 0.10, 0.11, 0.12 see: https://gitlab.com/janneke/debian-guix
<quiliro>Does GuixSD respect FHS?
<janneke>quiliro: it holds FHS in high respect, but does sadly cannot adhere to it [yet]
<catonano>what is fhs ?
<janneke>catonano: https://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard
<catonano>janneke: thanks
<ng0>hm, haunt keeps complaining about commonmark not being found when guile-commonmark is installed. did someone experience this recently?
<efraim1>is it all the same version of guile?
<ng0>yes
<___albert___>Whenever I t ry to boot from the Guix usb install image, my computer says it is not a bootable device. How can I fix this?
<ng0>efraim1: eh. it has to be something with the website I am in. another website just build fine
<catonano>ng0: were do you find so many sites made with Haunt ? I only found the one made by sirgazil
<ng0>those are sites I write myself
<ng0>I know at least 5 websites excluding my own sites which are made with haunt.
<rain1>drat
<rain1>configure: error: C compiler cannot create executables
<ng0>guile,guix,8something (8ball?),one other person in guix, a blog I forgot
<catonano>ah I was missing guile and 8sync
<efraim1>rain1: I remember that error
<rain1>ill make a guide for setting up and building guix on alpine if i get this to work
<OrangeShark>ng0: are you just using the commonmark-reader?
<ng0>It must be something else.. this website has been running fine for a long time
<ng0>OrangeShark: yes, just commonmark-reader
<ng0>the project where I don't use it in haunt builds. the haunt with commonmark in it stopped building
<ng0>even the commit which is published
<ng0>davexunit: your certificate for https://haunt.dthompson.us/ expired
<rain1>I am trying to build guix using ./bootstrap
<rain1>I didn't understand this error
<rain1> http://lpaste.net/7506650759417561088 do you know what it means?
<rain1>solved!
<efraim1>rain1: I would go with 'guix environment guix -- ./bootstrap'
<rain1>i dont have guix yet
<efraim1>ah
<rain1> http://lpaste.net/4859084591467593728 now I have this problem
<rain1>dnl We require pkg.m4 (from pkg-config) and guile.m4 (from Guile.)
<rain1>it seems the guixd autoconf stuff is not finding guiles m4 files, but I did make install guile earlier
<rain1>/usr/local/share/aclocal/guile.m4 exists
<rain1>/usr/share/aclocal/pkg.m4 too
<ng0>OrangeShark: ok. I miss some inputs in my profile, that's all. I used the guix.scm I had adapted from the guix website
<ng0>I mean, I used it now instead of simply "haunt build" and it worked
<rain1>solved: export ACLOCAL_PATH=/usr/local/share/aclocal:$ACLOCAL_PATH
<ng0>this just got into my inbox, and everthing which happened around grsecurity recently and in the past I think it's good we stick with getting SELinux and not grsecurity. https://lists.alpinelinux.org/alpine-devel/5744.html
<rain1>oh is SELinux good? It didn't seem very nice to me
<ng0>at least it doesn't have the horrible power dynamics and company of grsecurity attached to it
<cehteh>but its still overly complex
<rain1>it is made by NSA
<rain1>gosh gnutls prints out many many warnings when building
<ng0>I will be following the reflections of alpinelinux on "was it wise to choose grsecurity". I have no opinion on either
<ng0>either of SELinux or grsecurity
<ng0>well almost no opinion
<rain1>i don't know what the value of these tools is
<rain1>i like plain linux
<cehteh>there are some other systems now SMACK etc .. dunno about their featureset
<cehteh>execpt i once looked into smack, which is very simple, almost to simple and limiting
<rain1>nix/nix-daemon/guix-daemon.cc:30:18: fatal error: argp.h: No such file or directory
<rain1> #include <argp.h>
<rain1>hmmm
<efraim1>apt-file shows its in libc
<rain1>alpine linux is based on musl libc instead of gnu libc, so I don't have argp
<rain1>trying with argp-standalone
<davidl>I think I ran into a bug when trying to configure openvpn-client-service. I get this output: http://sprunge.us/AUhM can someone confirm whether I should post it to the mailing list or not=
<quiliro>updating the whole guixsd is done by 'guix pull' and then 'guix package update' or 'guix system reconfigure' when configuration has not changed?
<quiliro>for security fices
<quiliro>fixes
<rain1>darn im really stuck with undefined reference to `libintl_gettext'
<rain1>I verified that the library has that symbol with: nm -D /usr/lib/libintl.so.8.1.5 | grep libintl_gettext
<davidl>quiliro: I think it's guix package -u '.*' and not update.
<rain1>can i build guix without gettext?
<efraim1>probably, its only for the translations
<rain1> https://www.gnu.org/software/gettext/FAQ.html#integrating_undefined ive been looking at this
<rain1>./configure has no --without-gettext option
<efraim1>you might need to edit it out yourself
***dTal_ is now known as dTal
<quiliro>davidl: true...thanks for the correction
<quiliro>is '.*' necessary?
<davidl>quiliro: it's just a regular-expression (see man guix package) which I think captures all packages.
<quiliro>the manual says to use guix system reconfigure config.scm
<davidl>quiliro: ok, then perhaps upgrades from guix package -u won't survive reboot.
<civodul>rain1: --disable-nls maybe?
<civodul>rain1: but note that we pretty much assume a GNU system (gcc, glibc, GNU make, etc.)
<rain1>oh. I am trying efraim1 idae right now
<rain1>i will try thath next
<quiliro>davidl: you tell me that AFTER i had run guix package -u '.*'!!!!
<quiliro>i am running guix system reconfigure config.scm
<quiliro>now
<quiliro>i hope it reboots
<quiliro>i had non booting system before...i think it was because of running 'guix package -u' on root
<quiliro>i hope reconfigure recovers it
<quiliro>before i cannot access the system
<civodul>i have the CUPS service on a machine and when i print it just says (in the web interface of CUPS) "Filter failed"
<civodul>does that ring a bell?
<civodul>do i have to install ghostscript or something in the system profile?
<rain1> GUILEC gnu/packages/bash.go <- why are these being compiled?
<rain1> GUILEC gnu/packages/bioinformatics.go
<adfeno>I can't wait for my current packages upgrade to finish so that I can test upgrading the GNUnet package using the package recipe provided by the GNUnet repository itself. I might have found a bug with gnunet-pubish.
<adfeno>Gess.... Building WebKitGTK takes around 6h here. ;)
<joshuaBPMan_>adfeno: wow.
<mekeor>hello guix! – when i try to use mpv to view a youtube video, i get this error http://sprunge.us/DMMO . at https://github.com/mpv-player/mpv/issues/4425 it's described that "recompiling ffmpeg with --enable-openssl indeed resolves the errors". do you also get this error? is it because the guix-package for ffmpeg doesn't use --enable-openssl?
<adfeno>If I'm not mistaken, using OpenSSL can cause both security issues and also licensing issues.
<adfeno>Some effort has been made to provide/patch some software so that it also accepts GnuTLS.
<mekeor>alright, but is there a work-around? i remember that some while ago, mpv worked for viewing youtube, on GuixSD
<mekeor>i mean, mpv just worked out-of-the-box before... i wonder if i miss something, like an env-var, or a package or so
<adfeno>I'll see the sprunge URL so that I can perhaps help... wait a sec.
<adfeno>mekeor: Hm... Show us what is the output of: echo $SSL_CERT_DIR; echo $SSL_CERT_FILE
<mekeor>adfeno: /etc/ssl/certs # and # /etc/ssl/certs/ca-certificates.crt # respectively
<adfeno>And you are using GuixSD, not just Guix, right?...
<mekeor>adfeno: exactly
<adfeno>Hm, I wonder if installing openssl solves the problem. I'm using Guix in a foreign system distribution, so my copy of OpenSSL comes from the foreign system distribution, but I do have a copy of mpv that comes from Guix. Although I n longer use youtube-dl because of a uncofirmed GNU FSDG issue that is being discussed in gnu-linux-libre mailing list --- the workgroup for free/libre system distributions, not just "GNU Linux-libre" as the
<adfeno>name wrongly suggests.
<davidl>quiliro: you should be able to boot into an old system configuration regardless of running guix package -u. That's just a system change which I don't think creates a new entry in grub but Im unsure. the guix system reconfigure will definitely include an entry and a rollback.
<rain1>does anybody know why building guix compiles these gnu/packages files?
<rain1>(it takes an extremely long time)
<adfeno>rain1: If you are talking about the long time `guix pull` takes, then I also agree that it's taking a long time ;)
<rain1>no im running 'make' inside the guix/ git clone source code
<rain1>i'm not sure if guix pull does the same thing
<adfeno>Oh... then I don't know if this is related.
<mekeor>rain1: yes, i think it's the same
<mekeor>rain1: if i understand correctly, the package definitions in gnu/packages/* are just a part of guix itself. so they have to be compiled
<rain1>aw
<rain1>i wonder if they could be decoupled in some way
<mekeor>rain1: i'd guess you can just remove them from your local clone
<rain1>im at letter e just now
<rain1>so hmm maybe i should stop it but then I'm not sure how id get them back
<quiliro>guix system: error: build failed: some substitutes for the outputs of derivation `/gnu/store/3hp49xsxwy5mw6jyrq2lncn1nhdfb2z8-linux-libre-4.11.8.drv' failed (usually happens due to networking issues); try `--fallback' to build derivation from source
<quiliro>i am using fallback now
<quiliro>but i wonder how much time it will take my core2duo compile linux-Libre
<adfeno>quiliro: what is the error that precedes the one you just pasted?
<adfeno>Generally, this one is caused by other error, and by other, and so on and on, :)
<quiliro>adfeno: i cannot see it now
<quiliro>adfeno: thank you for the tip
<quiliro>next time it will be useful
<quiliro>it is already useful...i feel more sage!
<adfeno>Yup, me too. I remember the first time I saw how errors in Guix are shown, even the last error message is useful ;)
<adfeno>It's not some vague words like "Error.". :)
<rain1>oh no
<rain1>GC Warning: Out of Memory! Heap size: 613 MiB. Returning NULL!
<rain1>Warning: Unwind-only `out-of-memory' exception; skipping pre-unwind handler.
<rain1>my guix build failed :(*
<rain1> http://lpaste.net/5838499772482191360
<rain1>retried and it build