IRC channel logs
2026-07-04.log
back to list of logs
<graywolf>Sudo is not present in the container, and when I add it into the shell I *think* is complains about not being suid <graywolf>Though I could probably try to expose the privileged directory from the host, hmm <ieure>Users inside the container are different from the ones on the host running the container. <ieure>So it makes no sense to run `sudo guix shell -C'. <graywolf>That is probably a good point, I never actually tried this with the container, it was just first use case I could think of. <graywolf>I guess I could set my user as nopasswd sudo, and then use it instead of guix shell from root, though it does feel bit convoluted <RavenJoad>graywolf: What is the purpose of doing the shell command inside of a container? <graywolf>Isolation in general, I run most of my guix shells with -C, if the program does not need X11 or file system access, it does not get it. <graywolf>I am not brave enough to actually run `npm install' without *some* protection :) <RavenJoad>Ahhh.. Ok. Most of my ad-hoc shell usage is to use gcc-toolchain or info-reader for the profile hook, so 'npm install' crap is not really my concern. <graywolf>luckily limited to $dayjob, but I still have to deal with it somehow :/ <RavenJoad>Last I had to actively do (Java|Type)script dev work, I just did it in a VM. Too much pain to deal with in Guix around that. <RavenJoad>Trust me, I feel that. (System)Verilog is such a fun language... <csantosb>By the way, nextcloud-client is broken, !9701; I guess since the recent ffmpeg updates. <kratacoa>`guix pull --no-substitutes` has been going on for 7 hours now T_T <kratacoa>is glibc-mesboot-2.16 anywhere close to the end? <ryanprior>I want to try somebody's branch from a codeberg PR, but it was made with agit, so I don't know how to find that. Any tips? (I'd never heard of AGit before like two days ago) <ryanprior>I tried fetching branches from codeberg upstream repo, on the theory that maybe AGit creates upstream branches, but that does not seem to be the case <orahcio>ryanprior: I think at the end of the page you can see instructions for the command line <ryanprior>I've also tried doing a web search for "AGit source control" and I can't find a project page for it or anything. Foregejo has a page about using AGit but it's light on details. <ryanprior>orahcio: oh, I see that, interesting. The version of Magit I'm using doesn't support `fetch -u`, I wonder if somebody's got a patch for that <mattl>This may be a different 'agit' of course. <ryanprior>mattl: it is different, I found that in my web search and was like "nope don't think this is what they're talking about" <RavenJoad>ryanprior: Easiest thing might be to just pull the PR branch from Guix itself? You can do the same thing for GitHub PRs. <ryanprior>I was able to get it using the CLI instructions hidden behind the little arrow toggle. Worked fine. <ryanprior>"just pull" isn't useful advice though, if I knew how to just pull I would have done it XX <RavenJoad>I know it isn't. But GitHub has docs for how to pull a PR "branch" locally, so I figured that would be a starting point. I don't use Codeberg that way, so I was not sure if the same would be true here. <ryanprior>I fetched the refs normally (`git fetch origin`) and the "czan/luarocks-updates" branch wasn't in there, so it's somehow different from a normal upstream branch, though I don't understand how. <RavenJoad>It wouldn't be. Bu the PR might be in there. At least on GitHub, there is a distinction between those 2. <ryanprior>Presumably when I update my git knowledge I'll be able to explain it, but it's a mystery to me at present and I've been unsuccessful in finding a good knowledge source as of yet <ryanprior>PRs aren't stored in git (?? as far as I know ??) <RavenJoad>If you wanted czan/luarocks-updates, you would have to add czan as a Git remote and fetch those branches, then checkout czan/luarocks-updates as a local branch. <ryanprior>In GitHub I think PRs are accessed using their API <ryanprior>Okay yeah, I've added another remote to fetch branches before, but that's not what I did in this case. It had me run `git fetch -u origin +refs/pull/9673/head:czan/luarocks-updates` which is a fetch from origin, but then it's doing something extra that I don't know how to follow yet <RavenJoad>PRs are a little weird, because like you said, the PR itself isn't tracked in Git, but the branch (or commits) the PR holds is. <Guest73>hey everyone. i hope someone can answer my question. what is the scheme equivalent of mounting a filesystem with read-write perms? as in, `mount -o rw,remount...` here is my current config since i know im not doing it right: https://paste.debian.net/hidden/38e014c9 <RavenJoad>Depends on the filesystem type. But the documentation says the option field is either #f or a string. So your options should work fine. But does mount.ntfs accept that option? <Guest73>RavenJoad im not sure if mount ntfs accepts my current options. should `type ("ntfs")` become `type ("nfs")` ? <RavenJoad>What is the filesystem type you are trying to mount? <RavenJoad>Then you will need to pass whatever options you would normally use for mount.ntfs. <Guest73>RavenJoad how can i see what options mount.ntfs accepts? <RavenJoad>There's probably a -h/--help flag for it. And if not, a man page somewhere. <Guest73>RavenJoad by -h flag, are you referring to the `mount` command itself? <RavenJoad>Guest73: mount -t ntfs just dispatches to the mount.ntfs program. So doing mount -h and mount.ntfs -h (and maybe mount -t ntfs -h) are different. <Guest73>RavenJoad so by running `mount.ntfs -h` or `mount -t ntfs -h` could possibly show me the options im looking for? <RavenJoad>Perhaps? Probably? I never remember if any of the mount programs have useful --help output, so I usually search the manpages. <graywolf>It looks like stopped shepherd services are started on deploy. Is there a way to supress that? <graywolf>Welp, source for boost 1.83 does not build, so no --no-substitutes update for me I guess. Sigh, will continue tomorrow. <ryanprior>I just ran "bootstrap" "configure" "make clean-go" and "make" to build Guix from source, and now running it with pre-inst-env, it's still giving me a thousand "source file * newer than compiled *.go" warnings. What gives? <RavenJoad>Sounds like something didn't build when you did make. <ryanprior>Make exited zero and didn't print any errors, so I thought I was good. <ryanprior>And I saw it run a ton of commands to compile .go files XX <vagrantc>have you compared some of the .scm files to their .go counterparts ... are they in fact newer? <vagrantc>or did you update git since running the bootstrap && configure && etc ... <RavenJoad>ryanprior: What vagrantc said. That warning will only print if make has not seen the files need to be recompiled. <ryanprior>In terms of maybe make didn't build something, I re-ran make and it took a few seconds and says nothing to be done. <ryanprior>In terms of are the scm files newer: yes, because the .go files have their modified time set to unix epoch zero. <vagrantc>although *why* that happened is a bit odd <ryanprior>Yes I'm in a container, as suggested in the "building guix from git" documentation <RavenJoad>Ah. Try exiting the container to do any pre-inst-env action. The container might have time set to something unhelpful for interactive Guix usage. <RavenJoad>You need the container to build, but not necessarily to run the result. <vagrantc>although the timestamps are quite suspicious <ryanprior>Exiting the container, I'm now getting thousands of lines of spam like ";;; In procedure load-thunk-from-memory: incompatible bytecode version" <RavenJoad>Ah. Ok. I haven't seen that after a clean build. Only stale ones. <vagrantc>oh ... did something build with the wrong guile version? e.g. guile 2.x or something? <ryanprior>`./pre-inst-env guile -v` reports the exact same <vagrantc>guess thre shouldn't be much hard-coded in there ... <vagrantc>something is hardcoded somewhere, because if i "guix gc" sometimes i have to re-run the bootstrap && configure && make dance ... <ryanprior>Outside the container, I'm getting an error with configure: <ryanprior>configure: error: 'guild' binary not found; please check your Guile installation. <ryanprior>`type guile` reports guile is /gnu/store/hczf0na3q2dkqwpx6qv4g19azai8fmkx-profile/bin/guile <ryanprior>which makes sense because I ran `guix shell -D guix` to prepare to build guix <vagrantc>when i have to start from scratch this is exactly what i run: guix git authenticate && guix shell --development guix -- sh -c './bootstrap && ./configure && make -j5 check-channel-news && make -j5' <vagrantc>if i really want to be sure i'm running from a clean slate, i do: git clean -dfx . <ryanprior>That's the same as what I'm doing, except I don't normally do git authenticate, and I don't make check-channel-news first. <vagrantc>usually when i need to refresh a checkout, i seem to be able to get away with just running the check-channel-news ... <jessXP>hi i'm working on packaging sth rn using the cmake-build-syste and am running into the issue that warnings are treated as errors i'm wondering if that's a guix feature or a part of the program i'm porting as i couldn't find anything in the cmakelist <ryanprior>I just ran `git clean -dfx .`, bootstrap, and configure, and I'm still getting the "guild binary not found" error. <jan0t>what is a .go in the context of C <jan0t>I thought it was an artifact of the go lang lolol <ryanprior>vagrantc: yes. But if I run bootstrap and configure inside a Guix container shell, it succeeds. This makes me suspect my .bashrc is busted <vagrantc>jan0t: no idea ... but these .go files are in the context of guile ... they're the byte-compiled guile code <vagrantc>ryanprior: you mean a container, or just a shell? <vagrantc>e.g. guix shell --container vs. guix shell <jan0t>funny how 'make' was slow asf, so i stopped and restarted it with 'make -j 4' now the lines are moving faster <vagrantc>ryanprior: anyways ... hope you figure it out ... gotta head out. good luck to you! <lavandula>hmm i have a bit of a conundrum. i just installed guix system on a server, and i set up ssh key for a user account, but i didnt set up any passwords after the graphical installer failed the first time, and set password #f on root. what do i do to resolve this? <lavandula>cant log in on tty, only over ssh to my user account <jessXP>does it query a password if you su root? <lavandula>mmm i can still use the install image to recover it right? <jessXP>wait does it just not allow you into root if you set root password to #f????? <jan0t>jessXP he didnt set up a password only a ssh key <jessXP>i thought that just meant you remove the lock <jan0t>wow there are females among us <jan0t>i saw a video that once this happens you need to enter the command line from the boot <jan0t>and you can modify the root password there <jessXP>good taste in operating systems isn't a y chromosome exclusive <jan0t>jessXP it is rare to see women in these places <jessXP>re: cmake-build-system warnings are treated as errors guix feature or the program I'm porting <lavandula>mm yes arch was getting a little too... sweaty for me <jan0t>nice my guile compilation ended <jan0t>now i can aura farm with (write "hello world") <jessXP>lavandula re: arch, like competitive? <jan0t>but it is the same as print in common lisp <jan0t>will print the object as it is read in the internal state <jessXP>my lisp knowledge is limited to guile for guix packaging and sicp sadly <jessXP>i wish i did more lisp but sadly my field of shenanigans centers arround zig and haskell <jessXP>(i still love those languages don't get me wrong) <lavandula>more just like full of testosterone... all that stuff with omarchy and it just feels like... i don't know. i was never really part of that community but lately it just seems to be picked up by people who are trying too hard? idk if that makes sense <jan0t>it is a distro made by the creator of rails <jan0t>pre configured arch that some youtubers were hyping <jessXP>i really like guix cuz it's well thought out and isn't gentrified by normies (i hate saying normies but...) <jessXP>i use niri cuz i wrote some code for it a while back <jan0t>may the parenthesis embrace me in their sexy curves <ryanprior>I'm back after a reboot to see if that changed anything. <jessXP>and i like scrollable tiling on laptop <jan0t>stumpwm is a WM made in common lisp <jan0t>its configuration is made in common lisp <ryanprior>I tried running `guix shell -D guix --check` and that reports a clean check, which is good <jan0t>jessXP why dont you use a mask? your IP is completely visible <ryanprior>however! when I try to run `guix package -u` all hell breaks loose. I get about ten thousand messages like warning: failed to delete /gnu/store/guix-directory-2410.QWgict/restored/lib/locale/2.41/C.UTF-8/LC_MESSAGES: Permission denied <ryanprior>then "guix package: error: corrupt input while restoring archive from socket" <jan0t>jessXP you need to register an account and login, libera gives a mask automatically <jan0t>but other server is might need to do /msg NickServ SET MASK ON <jan0t>or you can enter with a tor server, but it needs a bit more of a configuration <ruined>has anyone had issues after upgrading to the latest guix today, after the announcement of the security issues that had been fixed? <ruined>Since performing a guix pull as both a user and as root (guix on debian), all attempts to install software fail. Rolling back to the previous generation fixes this. <lavandula>wait im silly! i forgot i also made a system account with the same ssh key!!! <ryanprior>ruined: I am seeing lots of weird behavior since yesterday, and my attempts to work around it are perhaps leading me further into the weeds <jan0t>some process was eating my cpu after the compilation <ruined>ryanprior are you using guix system or guix on a foreign distro? <ruined>i see. i haven't heard the same issues from people using guix system, so far <lavandula>oh i have been having some issues around using newer channels but that seems to be because of issues with time-machine? i am installing system now, ill see if theres anything weird going on after <jan0t>be careful with your ips, use tor and vpns <jan0t>jessXP but with ip there is nothing much relevant, the maximum i can get from you is the country you are located <jessXP>i need 2 get a mullvad subscription ngl <jan0t>register you an account in libera, silly <jan0t>you will get a mask automatically <jessXP>i been up 24 hours and drunk af rn <jan0t>use temp mail to not register your real email <jessXP>i just want a solution to my cmake-build-system woes <jan0t>we got a slavic person or a german one to be drunk while doing things lolol <jessXP>it's morning now tho so i gotta clean up my bottles b4 i get yelled at <jessXP>anyways i think i'm gonna head out if noone can help me <jessXP>and then go read more cmake documentation or build-system source codee <czan>ryanprior: Regarding your error from https://codeberg.org/guix/guix/pulls/9673, is it reproducible? I've just run the command again on my system and it worked (including compilation), so I'm interested in what's happening on your machine. <ryanprior>czan: I am not confident in my results because a lot of guix-related things are messed up on my system since yesterday. I can't `guix package -u` for example, I get a thousand errors <ryanprior>But weirldy not everything is broken, I was able to reproduce my workflow from my blog post. <czan>Ah, okay. That's unfortunate. Your error message sounds more like it's coming from Luarocks, but if your system is unstable then it might not be worth investigating heaps right now. <ryanprior>Yeah, if everything else were looking good I'd be more inclined to dig into it. <ryanprior>Folks here have tried giving me suggestions based on the errors I'm seeing and it's been helpful but there's a lot I don't understand, like why running `guix package -u` is trying and failing to delete seven thousand files in the Guix store <ryanprior>In the spirit of trying things, I tried running "guix gc" and it deleted my user profile XX <ryanprior>Luckily I have a manifest backup. Going to try and recreate it <czan>Oh, that's interesting! Is your user profile not visible to the daemon? Usually that would be a gc root... <ryanprior>I'm back! Emacs couldn't stay running for long after `guix gc` deleted my profile, the bottom fell out pretty quickly <ryanprior>I've deleted my profile, uninstalled Guix, deleted all the directories and symlinks where I'd had profiles, re-installed, and so far so good. I was able to restore my main profile from a backup. <ruined>oof. ryanprior i found rolling back guix seemed to fix my issues <ryanprior>Nice, I saw somebody else say similar. For me, most "guix package" commands were vomiting errors and crashing, so I decided to reach for more drastic measures. <ryanprior>This is actually the first time I've broken my Guix install in a way a rollback couldn't fix, in the ~9 years I've been using it, and it's probably my fault <ruined>brutal. i'm still pretty new to guix so i haven't been able to diagnose anything <trev>ruined: that is a never-ending guix problem <trev>not being able to diagnose anything <lavandula>mm the biggest issue im running into right now, having just installed a new system, is with guix 2ef8ed9 (the security fix) guix pull keeps spitting out 'guix/ui.scm:1033:18: In procedure getaddrinfo: Name or service not known' <lavandula>which seems to be a native c function somewhere? *sigh* <futurile>lavandula: do you have general network access, I thought there was a news entry for restarting network manager due to some resolv.conf issue <futurile>hmm hard to say - anything show in codeberg issues <futurile>it look be something failing to resolve software heritage for some reason <graywolf>is gcc-mesboot1 supposed to take eternity to build? <graywolf>10 hours later, the build is still running, but it does not seem to be stuck <graywolf>Is there a way to install icecat without *any* extensions? <graywolf>Yeah, luckily this is on a VPS, so it is at least not heating the appartment :) <yelninei>graywolf: It has parallel builds disabled so this is expected. There is a fix for that on core-packages-team but that branch has stalled a bit <graywolf>yelninei: good to know; I realize this will be quite hardware dependent, but how long should I expect it to run? <graywolf>yelninei: it seems it finally finished, now I am onto binutils-mesboot-2.20.1a <yelninei>graywolf: Once it starts using a real bash instead of gash it gets faster, but yeah it is not fast. Once you have the final gcc you can start building multiple things in parallel. Depending on what you want to build there are also some tests that take extremely long <graywolf>well I do not really want to build anything, I am just doing guix pull --no-substitutes.. :) <graywolf>In a way the whole source bootstrap is really impressive, but somewhat slow <yelninei>youll need at least 3 more guiles (guile-final, guile 3.0.9, guile 3.0.11), 2 gccs (gcc-final and gcc-14), cmake, curl, python and python-minimal, bison, libtool, ... it will take a while <futurile>I guess maybe I don't understand the CVE from yesterday. My read of it is that any existing substitute server could pretend to be another. And someone on my local network could trick me into using their substitute server (if I had --discover) switched on <spiderbit>is it possible to find out which package requests a dependency that I don't want qt-declerative-debug which is 1gb big... whatever package it is I probably be ok without it. <spiderbit>I install just my system packages with system reconfigure <spiderbit>I don't think that answers my question. even the poster says at the end that it's not answered and the bug is still open so not answered/fixed. <graywolf>futurile: Reading the blog post, being able to tamper with the traffic to legitimate substitute server would suffice for the exploit <yelninei>the issue is if you have anything that depends on qt-declarative and something is grafted guix needs the debug output to compute the grafts <spiderbit>I can't just understand why any user package would ever have such a dependency... why would a normal user ever need a debug package? <futurile>futurile: yeah, so someone at my provider who can see those packets and mess with them as they go through. It's a stretch for me. <graywolf>Or the operator of the data center where the substitute server runs, possibly due to legal warrant <graywolf>They could, hypothetically, target specific users based on their IPs. Not saying it happened, but per my reading of the blog post it sounds possible. <graywolf>For me the unexpected part is that https in substitues urls does not really do anything useful <graywolf>I get the "To avoid depending on the X.509 Public Key Infrastructure" argument, but maybe it should be re-considered <futurile>Yeah, I didn't quite understand _why_ that part of the metadata isn't signed. <futurile>Under normal circumstances I think I'm depending on the fact that we have two substitute servers to make sure that one of them isn't back doored. <spiderbit>I have to hold myself back so I have to download apparently download with horrible slow 300kb server useless 1GB file I don't want because guix decides against my will to require it. <futurile>spiderbit: yeah #3617 is complicated aka not going to be solved <krisbalintona>Hello! Inexperienced Guix user here. Does anyone who uses Emacs know if there's a way to have "find definition" functionality working for my Guix config symbols? <ieure>krisbalintona, You need Geiser for that, I believe "The Perfect Setup" in the Guix manual has some info about getting it set up. <ieure>I'm assuming you mean that if you open the config and put point on like avahi-service-type, hitting M-. to open the definition. <ieure>The main bit of setup Geiser needs is (setq geiser-guild-binary '("guix" "repl")) <krisbalintona>ieure: Yes, I mean going to a definition after pressing M-.. Can you explain the effect (setq geiser-guild-binary '("guix" "repl")) has? <graywolf>krisbalintona: Geiser works by spawning a guile REPL and talking to it. <graywolf>Normally it uses `guile', but that does not have your Guix load path <ieure>krisbalintona, It tells Geiser to run "guix repl" to spawn the Guile inferior it needs, doing so puts the source for your configured channels in Guile's %load-path. If you don't do that, it won't be able to find the code for the definitions you want. <graywolf>depends... the setup is easy and it mostly works; though in my experience sometimes it jumps just to a file but not to the definition itself <krisbalintona>I'm surprised "The Perfect Setup" page doesn't list this as an instruction for how to get go to definition (and similar?) working <graywolf>great, Codeberg silently truncates too long bug reports <ieure>krisbalintona, The manual does not tell you to set geiser-guile-binary. <ryanprior>My Guix install is broken, in that `guix pull` crashes, and `sudo -i guix pull` also crashes. <jan0t>you compiled it by yourself? <jan0t>all my installs of guix were through their install script and i got no issues <ryanprior>I have in the past, but currently I'm using it as installed by install-guix.sh <graywolf>ryanprior: gonna need bit more info, ideally paste a error message into some paste service and share a link <ryanprior>graywolf: I'll do that, though I doubt that'll be much use. I'm going to share some more context. <ryanprior>What pastebin do yall recommend lately? The one I've been using lately just banned me for trying to upload this error log <lavandula>ryanprior: i am experiencing the same issue on a fresh system install <ryanprior>graywolf: paste.debian.net also just banned me for uplading my error log <lavandula>tracking down issues with ntp, i think it might be a dns issue <ryanprior>I can describe it to you, or I can send it to you via magic wormhole, or if you're on the Guix zulip I could send it to you there <ryanprior>guix pull starts out normally, updating the channel and looking for substitutes, then it prints about 50 lines similar to this: <ryanprior>warning: failed to delete /gnu/store/guix-directory-3074.qH5ANE/restored/gcrypt/hash.go: Permission denied <graywolf>Right, that is a known bug in the update guix-daemon <graywolf>Alternatively you can roll back to previous Guix version, but that would leave you exposed to the CVEs this changed fixed <ryanprior>oh, okay, great. let me try that. (guix pull with no substitutes is going to take hours though right?) <graywolf>on my VPS it is running for 24h+ already <ryanprior>okay so Guix is functionally unusable at present and it's a known issue? <graywolf>But on my laptop it was just ~4 hours, so depends on how up to date your system is <ryanprior>that at least reassures me that this isn't something I screwed up on my system <graywolf>This affects only unpriveleged daemon, so GuixSD (where daemon is under root by default) works, but foreign systems are somewhat fucked, yes <ryanprior>strange that multiple pastebin services consider error logs from guix pull to be abusive content <ryanprior>This also seemingly indicates that most/all of Guix core are using Guix System? <graywolf>Or they installed their foreign system before the unprivileged became the default <ryanprior>If so, that's a problem, albeit a better problem than software devs who actively avoid relying upon their own software <graywolf>But yeah, they are definitely problems with the unpriveled daemon (and apparmor) :/ <ryanprior>I'm glad they're working on that, I wouldn't run the guix daemon on my laptop at all if I couldn't run it unprivileged. It'd have to run in a VM on another machine. <graywolf>Meh, I get the idea behind non-root daemon and look forward to it being ready, but IMO it is not quite there yet. But that is just my opinion, not shared by other people. <ruined>graywolf thanks for the info. I was affected by this as well. <muaddibb>just wanted to say that I wrote my first package and it worked!!! :DDDD Guix is so cool! <jresich>does anyonw know a good way to test out different desktop portals? <n|Phreak>damn came back at gesier is eating my CPU lol <YARs2>Ollama doesn't seem to be in the repo. Is there an alternetive I can use? <ryanprior>YARs2: I haven't tried it, but searching for packages with "llm" in their descriptions (guix search llm) led me to koboldcpp, which claims to build off llama.cpp, so it might be worth looking at. <YARs2>Thanks for the suggestion. Will check it out