IRC channel logs


back to list of logs

<rekado_>CharlieBrown: the manual shows how to do full disk encryption
<CharlieBrown>I need FDE. I need to keep my... files... safe.
<rekado_>See Disk Partitioning
<rekado_>DoublePlusGood23: LVM is there, obviously, but the initrd doesn’t contain the code to boot from LVM
<DoublePlusGood23>I'll read through the manual here
<paroneayea>ACTION wonders if you can you do an encrypted lvm for just the sensitive partitions and swap
<paroneayea>eg /home/ /tmp/ /var/ and swap
<rekado_>I used my LVM from Fedora with GuixSD
<rekado_>that was /home only, though
<rekado_>I unlocked it manually after boot
<rekado_>I guess nowadays this could be done automatically
<rekado_>ACTION —> zzZZ
<DoublePlusGood23>x200 now has 8
<DoublePlusGood23>GB of ram
<CharlieBrown>I don't see in
<CharlieBrown>Found it. It was actually
<blu_>I'm trying to write xorg-configuration-file (a gexp defined in xorg service) out to an actual file in /etc/X11 from my operating system config, but I seem to have no idea what I'm doing. Any ideas how this should work?
<blu_>it's a computed-file actually** but that contains a gexp which I presume I need to gexp->file on
<DoublePlusGood23>does GNOME3 use x11 or wayland?
***Piece_Maker is now known as Acou_Bass
<CharlieBrown>Trying to partition disks with single root and 2GB swap.
<CharlieBrown>parted /dev/sda mklabel msdos mkpart primary ext4 0% 100%-2G mkpart primary swap 100%-2G 100% # Like this?
<CharlieBrown>rekado: Will this work?
<Apteryx>CcxWrk: I also get test failures trying to build serf. I've opened a guix issue here:
<CharlieBrown>rekado: Updated:
<Apteryx>It seems the cached gmp package is empty. I've had a failure about it before, and now I see another user has had it too (hyperreal).
<brendyn>Man deciding how many outputs to have is real frustrating
<brendyn>choices choiches
<Petter>I want to replace one character in a string with another. I'm trying (string-replace-substring myvar "/" " ") but I get "Unbound variable: string-replace-substring". How do I enable this?
<Petter>This is in terminals.scm.
<buenouanq>is it a (use-modules ... ) thing maybe?
<Petter>That's my guess, but I'm unable to find the right one.
<buenouanq>string-replace-substring is not bound because you're not including the lib that defines it
<Petter>I'm even looking at machine-learning.scm where string-replace-substring is used, and copying use-modules. But no.
<Petter>Except the correct one I assume.
<buenouanq>in the guile docs I'm only seeing string-replace
<buenouanq>is string-replace-substring defined somewhere in whatever you're working on?
<Petter>It's not in machine-learning.scm either.
<Petter>At least searching for the phrase only gives 1 result in each file.
<buenouanq>maybe one of those is a define
<Petter>These are the invocations.
<Petter>Only match in machine-learning.scm is: (string-replace-substring version "." "-")
<buenouanq>and you've traced through all (load "file")s and all the modules they call?
<Petter>No, not familiar with load.
<Petter>I get no match for "(load" in either file.
<buenouanq>it's how you include a separate file
<buenouanq>well, shucks
<buenouanq>I've no idea, sorry I can't help.
<Petter>Do you know of another way to replace a character?
<Petter>I was looking at this earlier as well, but I was unable to get string-replace to work.
<Petter>How would you use it?
<phant0mas>Hello everyone
<sneek>Welcome back phant0mas, you have 1 message.
<sneek>phant0mas, methalo_ says: this is my definition:
<janneke>hey phant0mas!
<phant0mas>Hey janneke, how are you?
<buenouanq>I don't know Petter - I haven't done anything in Guile for a long time.
<Petter>buenouanq: Ok, thanks though! :)
<buenouanq>I'd prolly do exactly what you are ;3
<janneke>phant0mas: anticpating self-hosting mes release for...wel since fosdem
<janneke>possibly today :-)
<janneke>phant0mas: how are you?
<janneke>ACTION hasn't looked at hurd since vm recipe...very busy with mes
<Petter>buenouanq: Turns out this isn't what I needed anyway. I tried hardcoding the value, but didn't get where I was hoping to go. Back to the drawing board...
<buenouanq>how do I check and/or set the locale on guixsd?
<Petter>You can set locale in config.scm.
<buenouanq>of course
<ng0>"our VPS using OnApp ( Also yes we can manually also add custom OS, but mostly these have not been working if there is no support for kvm or onapp. Example:" <- has anyone of you SysOps / Engineers ever heard of OnApp?
<ng0>btw: I might or might not get the chance to introduce some people to GuixSD (among other systems) if my hackerspace participates in this GNU/Linux Desktop Day the Linux Foundation has announced for next month
<Petter>Can you spot the error?
<ng0>With this: I really like that we do not assign maintainers to packages and therefore make any attempts to extract more data than necessary not possible.
<MaliRemorker>i'm trying to run a program extracted from a tarball created by gnu pack
<MaliRemorker>... as a non-root user. I've found the instructions that you can do "unshare -mrf ... chroot ..."
<MaliRemorker>but my version of unshare does not have '-r' flag
<MaliRemorker>it's an old centOS system
<MaliRemorker>is ther any way to emulate the effect of -r ?
<janneke>MaliRemorker: i'm new to guix pack and unshare, what does the -r flag do?
<MaliRemorker> -r, --map-root-user
<MaliRemorker> Run the program only after the current effective user and group
<MaliRemorker> IDs have been mapped to the superuser UID and GID in the newly
<MaliRemorker> created user namespace. This makes it possible to conveniently
<MaliRemorker> gain capabilities needed to manage various aspects of the newly
<MaliRemorker> created namespaces (such as configuring interfaces in the net‐
<MaliRemorker> work namespace or mounting filesystems in the mount namespace)
<MaliRemorker> even when run unprivileged. As a mere convenience feature, it
<MaliRemorker> does not support more sophisticated use cases, such as mapping
<MaliRemorker> multiple ranges of UIDs and GIDs. This option implies --set‐
<MaliRemorker> groups=deny.
<MaliRemorker>i just copypasted from the man page
<Petter>Oh, I thought you were a fast typer. ;)
<Digit>ACTION points at MaliRemorker, to help add to the embarrasment 
<MaliRemorker>ACTION fakes embarassment
<MaliRemorker>Digit: now i'm actually embarrased for not spelling it correctly
<Digit>i just brashly pushed on, not knowing the spelling. i didnt know the right spelling, n i didnt care. ^_^
<janneke>MaliRemorker: and it does not work without -r, i presume?
<janneke>what about using fakeroot?
<MaliRemorker>i don't have access to fakeroot; i have this brand new 32 core machine running an ancient centOS system (because that's the IT dept policy) and no admin access;
<MaliRemorker>i'd prefer not to need to chroot each time i want to run a guile script
<MaliRemorker>oh, darn, i don't even have access to chroot
<MaliRemorker>ok, forget about my question :)
<MaliRemorker>i guess i need to have a few words with IT personell
<Petter>Is there a construct for disabling (commenting/removing) a range of lines?
<janneke>Petter: M-;?
<Petter>Oh, I mean for a package recipe.
<janneke>comment-region works there too?
<Petter>I want to do something like this on a file:
<Petter>Disable some ListElements.
<janneke>removing or commenting the region is not what you want?
<Petter>It is, but I want the recipe to do it.
<janneke>recipes commenting-out recipes
<Petter>Trying to use sed at the moment.
<Petter>But maybe there's a more guixy way.
<Petter>No, not a recipe commenting a recipe. A recipe disabling code in a project file.
<ng0>so you want substitute* ?
<Petter>Can it take a line number?
<ng0>(substitute* "file" (("foobar") "# foobar"))
<brendyn>Is it ok to have a 3 or 4 differnt outputs?
<ng0>probably not, but you can look at the substitute definition in whereever it was
<Petter>I want to disable certain ListElements in this file,
<Petter>They span multiple lines.
<thomasd>Petter: I don't think there's a ready-made construct for this (substitute* always looks at single lines), except adding a patch
<Petter>Patch sounds interesting. I'll look into that. I assume one can create and apply a patch within a recipe.
<thomasd>yes, you can grep for "(patches" in gnu/packages to get an idea
<thomasd>but maybe some more tools for source code manipulation during the buid could be useful
<efraim>Normally multiline means patch, its what I ended up with for onionshare with patching the
<thomasd>also inserting something is more complicated than it should be, I thnk
<thomasd>I've done it by looking for the line before/after which I want to insert using substitute*, and then adding that line again in the substitute, + what I want to insert. (not sure this is more light-weight than adding a patch ;-) )
<Petter>efraim: I don't see a patch in onionshare, only substitutes.
<efraim>Oh, I must've taken the patch out during one of the upgrades
<Petter>You don't happen to have it, or another example, nearby? I'm looking for a complete process of writing and applying a patch in a recipe.
<Petter>So far all i see are (patches (search-patches...
<efraim>(patches (search-patches is how the patch gets applied
<efraim>The easiest way I've found for writing patches is to take the source tarball, unpack it, git init, git add ., git commit -m 'start', and then hack in my patch
<Petter>I see. Are the patches then stored somewhere as files?
<ng0>gnu/packages/patches OR/AND in the topdir of GUIX_PACKAGE_PATH
<ng0>i think I have an example
<efraim>I take my changes and export them as a patch
<ng0> http://qs3zumwfci4tntnd.onion/ng0/packages includes a patched "st" variant
<Petter>So one adds a patch to gnu/packages/patches and then refer to it with search-patch?
<ng0>or root of $GUIX_PACKAGE_PATH
<ng0>as can be seen with the .diff and .patch files
<Petter>Aha, now it's clearing up.
<ng0>i would like it if not the root of GUIX_PACKAGE_PATH would be used but searched in directories, but it's not important to me
<ng0>I'd rather put them in name/packages/patches or patches/
<janneke>to add a new package, i mail to
<janneke>ACTION hasn't used the debbugs workflow yet, used to git send-email to guix-devel
<ng0>hey, good news on torbrowser :) I don#t know which position gk fills, but after some time I finally have a positive reply on porting torbrowser
<ng0>all i know is georg speaks for torbrowser project and commits code to it
<ng0>might even be the maintainer, don't know al lthe names
<ng0>see the most recent mail here:
<ng0>Also, eventually someone I know wants to package icedove as a first guix package, as a roadmap task within pragmatique pragmaOS. Unless someone is secretly in the dark hacking on icedove already?
<efraim>Icedove is rebranded thunderbird?
<Digit>ACTION thinks both names sound like some kind of sex toy
<brendyn>So I'm packaging 6 fonts together, but they are all atleast 30MiB each. Is it ok to create different outputs with different combinations of each font?
<efraim>hmm, i should package vim-fugitive, i only use fugitive and airline as plugins
<wingo>why is guix still built against guile 2.0
<efraim>building against 2.2 involves rebuilding the world, 2.2 came out after the last core-updates freeze
<efraim>core-updates should be built against 2.2 though
<wingo>some corrupt nars on hydra, sadly
<wingo>ACTION rebuilding some old gcc on his poor little droplet
<wingo>uf, one of them is glibc-bootstrap-0
<wingo>i do not understand why hydra caches truncated files :/
<davexunit>a hard to fix bug :(
<wingo>ACTION pushed wip-git-https
<wingo>which has a fcgiwrap service, a certbot service, and some things to do expose git repos over https
<wingo>i think the certbot service is pretty nifty! just add (certbot-service (certbot-configuration "")) and have an (nginx-service) in your services, and it should just work
<wingo>so nobody here has perms to invalidate bad hydra cache entries?
<efraim>Just got an email from scaleway, armv8 servers
<davexunit>wingo: I think that might just be ludo and mark?
<davexunit>I don't have access to hydra, anyway.
<davexunit>this problem seems to come up more and more frequently these days :/
<wingo>i think andreas might also have perms
<wingo>and rekado
<janneke>ACTION votes to up wingo's perms
<wingo>ACTION votes to give other people perms :P
<wingo>congrats on mes release janneke :)
<janneke>thanks wingo!
<janneke>ACTION tried to make it in time for fosdem, but it slipped a bit
<efraim>i realized that if I can't figure out how to have aarch64 use grub-efi in all places instead of grub, I can always `guix system init` on top of my current aarch64 system
<bavier>janneke: congrats on the mes release
<bavier>always exciting to see the progress you've made
<wingo>i don't understand "top" any more
<wingo>i can't get it to put things in an order that makes sense
<mbakke>can someone try restarting the master evaluation on hydra?
<janneke>bavier: thanks!
<mbakke>haven't seen this error before
<mbakke>"Unable to reap all children, even after KILLing them at /usr/local/libexec/hydra/lib/Hydra/Helper/ line 499."
<wingo>that's exciting :)
<mbakke>efraim: what more do you need apart from specifying grub-efi in the system configuration?
<efraim>I tried to build an install image but it needed grub to run some commands somewhere and I haven't had time to go through it to see where I should pull in grub-efi for that
<efraim>Grub is used all over gnu/system so it wasn't so fast
<efraim>My first attempt was to just mark grub-efi as superseding grub, but then it cant inherit from grub
<efraim>I want to switch grub-efi to grub and grub to grub-legacy and switch the inheritance, but that would be a breaking change
<mbakke>efraim: I think changing grub to grub-efi in (gnu system vm) would be sufficient
<mbakke><grub-configuration> is available there, so it should be possible to factorize it to use the grub package from there
<efraim>mbakke: thanks, i'll try that
<mbakke>btw, if you've tested the jemalloc thp thingy on aarch64, could you push it to master? :)
<efraim>I'm still having issues getting the patch to work correctly. I'm having trouble with the syntax somewhere
<Petter>Hm, I want to forward a patch from a project to a fork. I've cloned the origin repo, but git tells me the commit is a "bad object". I'm tempted to just copy+paste the change. Is this kinda ok?
<brendyn>This inverview is hilarious
<Gamayun>brendyn: Yeah, it's great! :)
<bavier>The "autotools is shit" comes up often, but I've yet to see an actual breakdown of concerns
<efraim>I've learned to decipher but actually coding it seems scary
<bavier>it's not so bad once you read enough of it
<bavier>m4 is actually kinda nice
<bavier>and you can always fall back to good 'ol posix shell
<wingo>paroneayea: heya
<wingo>do i hear that you just set up a server? :)
<wingo>you want to try a letsencrypt thing? :)
<paroneayea>wingo: I sure do :)
<wingo>are you on guix master?
<wingo>or do you have a guix checkout?
<wingo>if not then it could take a while i guess
<paroneayea>wingo: I did a guix pull
<paroneayea>I could do a guix checkout
<paroneayea>wingo: what's up, I'm assuming it's a patch?
<wingo>it's wip-git-https
<wingo>i will paste my server config...
<paroneayea>wingo: great, I need this basically :)
<paroneayea>wingo: I need to set up a server for the activitypub test suite I'm working on
<paroneayea>so good timing
<wingo>i think it works but i haven't tried the activation thing that requests the initial certificate
<wingo>i am minimizing my config and will send it shortly, in the meantime there's docs in that branch
<paroneayea>wingo: could you also paste me your sample config too?
<paroneayea>wingo: ok I'll get to work on setting up a git checkout on that server
<ng0>I'm wondering about the neo2 layout description. Like, in this case it's the console layout, not for X, and it is optimized for German languages. Should the description still be in English?
<ng0>do the package descriptions get translated by translationproject?
<wingo>paroneayea: you can build locally and read docs locally, might be easier
<ng0>you can type English with it, of course, but the self description is German.
<bavier>ng0: they can be
<ng0>wha tdo you mean?
<paroneayea>wingo: ok, will do
<ng0>can be translated by translationproject?
<ng0>I take that as a "they can be translated by translationproject"
<ng0>and I have written a description in english now
<paroneayea>it's too bad that "guix system vm" takes so long to come up on this machine
<paroneayea>not guix's fault
<paroneayea>just no hardware virtualization
<efraim>i'm busy hacking it to bits here, comments everywhere trying to get lightweight-desktop.tmpl to build
***methalo is now known as methalo_
<paroneayea>wingo: I notice a git service thing is exposed in here
<paroneayea>wingo: is part of the motivation here for self-hosting git repos on
<paroneayea>s/exposed in here/part of this branch/
<wingo>paroneayea: no the motivation is more for, it has to host a git repo
<wingo>and i wanted it to be over https rather than git://
<paroneayea>wingo: aha! wise
<paroneayea>wingo: this is pretty cool, it doing the automatic renewal
<paroneayea>wow, uhoh
<davexunit>'guix import' isn't working for me because guix can't verify certs :(
<wingo>did it fail :)
<davexunit>anyone else have this issue?
<wingo>davexunit: i think you have to install nss-certs
<davexunit>is there any env var I need to set?
<davexunit>I haven't had this problem before
<davexunit>this is an ubuntu machine with guix on it, btw
<wingo>i think when you install nss-certs it will tell you which env var you need
<CharlieBrown>Why do work machines use Ubuntu?
<davexunit>wingo: I'll make sure that's installed but I guess I have to wait for openssl to build
<davexunit>thanks, though.
<paroneayea>wow, oops :\\
<paroneayea>accidentally locked myself out of the server
<paroneayea>nice job me
<paroneayea>time to do that stuff all over again...
<davexunit>CharlieBrown: easy to use, popular distro with good support
<davexunit>ACTION goes afk
<wingo>paroneayea: aw bummers
<wingo>easy to do :P
<bavier>ng0: yes, package description are included in guix's gettext digests and get sent to translationproject
<bavier>ng0: but, as one might image, with the large number of packages, many descriptions are untranslated atm
<paroneayea>let's set if this "recovery kernel" works :)
<ng0>bavier: thanks!
<wingo>paroneayea: yeah i had to do that at some point too!
<wingo>if you're on digital ocean there's a console too, if you have the root pw
<wingo>a web html/js console
<paroneayea>wingo: I hadn't set the root password yet stupidly
<wingo>paroneayea: if you are on digitalocean i think you can reset the password too!
<wingo>i think i had to do that too
<wingo>probably linode/etc that's an option
<wingo>my experience report omitted all my blunders :)
<ng0>I think with the file download now, I can try to just make an input of kbd
<ng0>like I tried before but gave up
<ng0>for whatever reason
<paroneayea>wingo: ha :)
<paroneayea>wingo: well I'm in the recovery thing now
<paroneayea>hilariously, there's a chmod in the recovery system
<paroneayea>but no chown!
<paroneayea>which is what I need
<wingo>o noes
<paroneayea>I mounted the system to /mnt
<paroneayea>and then bind-mounted /mnt/gnu to /gnu
<paroneayea>and now I'm using guix's chown :)
<wingo>so i just submitted those service patches upstream
<wingo>and i didn't hear back anything on my potluck patches, oddly
<wingo>i guess i will just commit over the weekend
<paroneayea>ok that worked I think
<ng0>so I have a file without a version name which is downloaded in a package definition as an input. does this mean it ends up with just the name in the store, like /gnu/store/hashthing-foo.extension?
<ng0>*without a version string
<ng0>I could use the (version) of the package and not the input, but that would be wrong
<ng0>no, doesn't work like that. I'll figure something out
<ng0>ah… /gnu/store/ ... well that works.
<paroneayea>wingo: I've got it back!
<paroneayea>wingo: btw I recommend you add this to the example config
<paroneayea> (password-authentication? #f)
<paroneayea>on the openssh service thing
<ng0>that's in the default i think
<paroneayea>ng0: apparently not!
<paroneayea>I was able to log in with a password.
<ng0>ah yes. makes sense
<ng0>then I changed it already
<paroneayea> (x11-forwarding? #f)
<paroneayea>is also a good idea
<paroneayea>I don't remember the default on that one.
<ng0>and port something other than 22 because of automated attempts... but I guess you know that
<paroneayea>I'm not as sure about changing the port number
<paroneayea>I feel like if you're key only
<paroneayea>changing the default port number kind of feels like the terrorists win
<ng0>it's irritating when there are millions of login attempts each day
<ng0>and you come back and the log is full of bloat…
<paroneayea>it is irritating
<CharlieBrown>regex it out
<wingo>paroneayea: i thought it was off by default for root at least?
<wingo>pw login
<wingo>good idea tho
<ng0>rename-file when I have to do it anyway can replay install-file, right? It's been a while since I used it
<ng0>try and break
<ng0>nope. but I know how to do it again
<paroneayea>wingo: seems not
<paroneayea> (password-authentication? openssh-configuration-password-authentication?
<paroneayea> (default #t))
<paroneayea>I think it *should* be #f by default though
<paroneayea>wingo: maybe I should submit a patch
<ng0>no, root password is off
<ng0>that is OpenSSH default
<paroneayea>right, password auth is dangerous in general tho
<paroneayea>we should turn it off unless people want it
<ng0>and how do you expect the keys to end up in the config?
<ng0>or on the machine? via root?
<paroneayea>ng0: use a keyboard, jk jk jk
<ng0>well it's for servers, headless
<ng0>I don't see the problem
<ng0>well let me take a look at my config first
<ng0>welp. okay it's still on
<ng0>thanks for reminding me
<ng0>I think that install-images should provide this unchanged though
<ng0>not every hoster has some out-of-band console
<paroneayea>ng0: so this has been discussed before also
<paroneayea>and we've discussed having some sort of service that just installs some flat files if they aren't there
<paroneayea>so they could drop your keys in place
<paroneayea>I think that's the right route.
<ng0>doesn't exist yet, but I agree
<ng0>is x11-forwarding #f really necessary when there is no x?
<paroneayea>ng0: I think it's a good idea in general to put on on all your systems as a default, because you might reuse the config for something that does have X
<paroneayea>and it's pretty damn insecure
<paroneayea>can allow the remote machine to access stuff on *your* machine
<buenouanq>isn't #f the default for that though?
<paroneayea>buenouanq: oh ok yeah
<paroneayea>that one is :)
<buenouanq>not always smart to just trust defaults though, especially given that they may change in the future
<wingo>ACTION zzzzzzz