| 26 Feb 2026 |
 raitobezarius | (exactly like systemd's PID1 helpers ;-)) | 12:33:41 |
 neobrain | One of my machine is doing this when I try to nix build nixpkgs#hello:
warning: error: unable to download 'https://cache.lix.systems/lm0p74rwcx1pq6i22wdr4g58xh5rlgb4.narinfo': SSL peer certificate or SSH remote key was not OK (60) SSL certificate problem: unable to get local issuer certificate; retrying in 342 ms
Is that a server-side problem or something I can fix locally?
| 13:16:14 |
 K900 | Works fine here | 13:19:33 |
| K900 | But also cache.lix.systems is mostly for internal CI use | 13:19:43 |
| K900 | You're very unlikely to get useful hits from it | 13:19:50 |
| neobrain | I'm not sure I explicitly added it. I assumed it was set up by the Lix installer (I get the same problem after removing it in favor of cache.nixos.org either way) | 13:21:52 |
| K900 | Now that sounds very wrong | 13:22:27 |
| K900 | Is the date on your machine correct? | 13:22:32 |
| neobrain | yup | 13:23:03 |
| neobrain | Weirdly enough the quoted url returns a 404? | 13:23:23 |
| K900 | And this is presumably non-NixOS? | 13:23:26 |
| K900 | That's perfectly normal | 13:23:31 |
| neobrain | ah ok. Yeah, it's non-nixos. And my other machines on the same network have no problem either | 13:24:01 |
| K900 | What kind of non-NixOS? | 13:24:17 |
| K900 | Do you have CA certificates available? | 13:24:19 |
| neobrain | opensuse (also this machine worked just fine before). Not sure how to check the CA certs | 13:25:19 |
| neobrain | the ca-certificates package is installed | 13:26:35 |
| K900 | Can you curl that URL? | 13:26:34 |
| neobrain | yea, no issue (besides returning 404) | 13:26:47 |
| K900 | Do you have /etc/ssl/cacerts or something? | 13:27:36 |
| K900 | I don't know what the opensuse path is for CA certs but if it's not whatever openssl default is then nix probably won't find it without explicitly being pointed there | 13:28:05 |
| raitobezarius | nix config show | grep -i ssl-cert | 13:28:46 |
| neobrain | returns /etc/ssl/ca-bundle.pem, which exists | 13:29:13 |
| neobrain | let me try turning it off and on again | 13:29:46 |
| neobrain | same issue after reboot D: | 13:32:01 |
| neobrain | ooooooh I'm so sorry. This machine isn't actually running Lix? Which makes it even more confusing why there would be a lix.systems cache in my nix.conf | 13:33:23 |
| neobrain | Apparently running it as root (but not with sudo) works?
I tried installing lix to get back into a reasonable state, but it says "couldn't figure out how Nix is installed, so I can't upgrade it" 🤔 | 14:01:18 |
|  Lily Foster changed their profile picture. | 14:01:24 |
| raitobezarius | upgrade-nix is very stupid | 14:11:52 |
| raitobezarius | i recommend uninstalling lix then rerunning the installer | 14:11:58 |
