| 20 Oct 2025 |
QuadRadical (Ping) | that works fine when its sandboxed | 19:58:22 |
QuadRadical (Ping) | hmm, how can i run it? just enable in nix.conf? | 19:58:45 |
raitobezarius | just do sandbox = true yes | 19:58:56 |
QuadRadical (Ping) | ah okay thank you | 19:59:03 |
QuadRadical (Ping) | appreciate it | 19:59:05 |
raitobezarius | the daemon is a subreaper but it doesn't wait for children it didn't start | 19:59:08 |
raitobezarius | i wonder if we should consider that a bug | 19:59:12 |
raitobezarius | or is that an inherent limitation of running without sandboxing | 19:59:21 |
raitobezarius | the node server is completely detached from child that nix started | 19:59:31 |
raitobezarius | so it cannot know about it | 19:59:33 |
QuadRadical (Ping) | hmm i see | 20:00:15 |
raitobezarius | https://git.lix.systems/lix-project/lix/issues/1018 has been filed | 20:01:30 |
raitobezarius | we will see what we will do | 20:01:34 |
raitobezarius | in the meantime, what i would recommend | 20:02:22 |
raitobezarius | is to add yourself a kill of the nodejs server | 20:02:27 |
raitobezarius | if you keep doing unsandboxed builds | 20:02:31 |
raitobezarius | that will fix it | 20:02:33 |
raitobezarius | we probably consider that a serious bug because Darwin cannot avoid this | 20:03:05 |
raitobezarius | or reparent the nodejs long running server to any process in the sandbox hierarchy, the bash process or whatever | 20:03:57 |
raitobezarius | so that it gets autokilled at the end | 20:04:01 |
QuadRadical (Ping) | oh, how do i do that? | 20:26:52 |
QuadRadical (Ping) | yeah, ill probably just do a sandboxed build instead thx | 20:27:06 |
raitobezarius | prctl(PR_SET_CHILD_SUBREAPER, somethign something) on some process of your hierarchy | 20:27:52 |
aza_leah | use my reap tool ;) | 20:55:41 |
QuadRadical (Ping) | ah | 20:55:50 |
QuadRadical (Ping) | i think ill just use a sandbox | 20:55:55 |
QuadRadical (Ping) | thanks | 20:55:55 |
QuadRadical (Ping) | hmm warning: user namespaces do not work on this system: error: unable to fork: Operation not permitted | 20:58:57 |
QuadRadical (Ping) | i think since it runs in docker i cant | 20:59:01 |
raitobezarius | docker should be able to have nested user namespaces | 20:59:15 |