| 27 Dec 2025 |
K900 | Secrets are mostly solved with agenix/sops-nix tbh | 18:12:16 |
K900 | Like yes there are some other issues but that covers most of the common use cases | 18:12:30 |
daslixou | Oh š«£ I'm terribly sorry, I just assumed it as it was the first commit, didn't mean to offend you | 19:10:43 |
piegames | Well I've been on it for only a couple of days so it really isn't much | 19:22:23 |
jyrama | Btw, speaking of lanzaboote, has anyone noticed any uncompression problems with lix 2.93.3 and lanzaboote? | 20:43:34 |
raitobezarius | what does that look like? | 20:43:56 |
raitobezarius | "failed to read compressed data" ? | 20:44:01 |
jyrama | Mine downloads some blob to the nix store and then fails to extract the xz archive | 20:44:04 |
raitobezarius | if so, this is not a lanzaboote interaction problem | 20:44:07 |
jyrama | Sound familiar yes⦠| 20:44:15 |
raitobezarius | curl --version ? | 20:44:20 |
jyrama | On my way home, will check that on arrival | 20:44:53 |
raitobezarius | np | 20:45:08 |
raitobezarius | i feel like there was a sensible reason which was like we should always check for cgroups, especially to discover above cases | 20:45:56 |
raitobezarius | i wonder what to think about nix on droid which doesn't seem to have a valid cgroupv2 filesystem mounted | 20:46:33 |
raitobezarius | it feels like an unsupported configuration, why it doesn't have a cgroupv2 fs? | 20:46:48 |
raitobezarius | that being said, we should probably be more graceful, for sure | 20:47:05 |
jyrama | In reply to @raitobezarius:matrix.org
curl --version ? curl 8.14.1 (x86_64-pc-Linux-gnu) libcurl/8.14.1 OpenSSL/3.4.3 zlib/1.3.1 brotli/1.1.0 zstd/1.5.7 libidn2/2.3.8 Libpsl/0.21.5 Libssh2/1.11.1 nghttp2/1.65.0
Release-Date: 2025-06-04
Protocols: dict file ftp ftps gopher gophers http https imap imaps ipfs ipns mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: alt-sve AsynchDNS brotli GSS-API HSTS HTTP HTTPS-proxy IDN IPV6 Kerberos Largefile Libz NTLM PSL SPNEGO SSL threadsafe TLS-SRP UnixSockets zstd | 21:16:58 |
raitobezarius | you are running a curl version which has a critical HTTP/2 bug that cause your error | 21:17:39 |
raitobezarius | you can either upgrade to 8.17.0 at least or run with http2 = false in Lix to avoid the problem | 21:17:51 |
raitobezarius | actually it should be curl 8.16.0, I wonder if 8.14.1 is also affected | 21:18:39 |
raitobezarius | https://github.com/curl/curl/issues/19334 | 21:18:40 |
jyrama | It was actually ādo not know how to unpack archiveā but anyway | 21:19:27 |
raitobezarius | yeah i think my root cause analysis is completely wrong | 21:19:45 |
raitobezarius | if you have more of a trace, i'm interested | 21:19:59 |
jyrama | In reply to @raitobezarius:matrix.org if you have more of a trace, i'm interested The whole log is a horrible mess (and it seems I donāt have working matrix client on the machine anyway, sorry) but it seems that the rust-docs tar.xz gets downloaded from to the store without the tar.xz in the filename. The xz cli at least doesnāt like that. | 21:49:14 |
jyrama | Gnu tar itself is quite file with that tho | 21:50:08 |
jyrama | Cool, now I get db.sqlite is busy. Thatās from my rebuild. š | 21:51:56 |
raitobezarius | it's not fatal no? | 21:53:27 |
jyrama | Well, we are at least starting a new download from cache.nixos.org ca once a minute | 21:58:40 |