| 18 Nov 2025 |
 522 it/its ⛯ΘΔ | i mean, i daily drive tor browser / torvpn on my phone
i'm used to """slow""" internet anyways, my normal download speed is 4MB/s, and tor can get around 1MB/s on average for me | 15:17:39 |
 Sofie 🏳️⚧️ (she/her) | I mean,,,, blocking terf island is reasonable /hj | 15:22:54 |
| 522 it/its ⛯ΘΔ | i mean yeah but like. why do people feel the need to comply with laws from countries they have no involvement in
if $oppressive_country says "hey, just so you know, all mention of homosexuality is illegal by our laws. everyone needs to remove that from their sites" they would (hopefully) be rightfully laughed at and ignored | 15:24:22 |
| 522 it/its ⛯ΘΔ | anyways not the place for that im just annoyed | 15:24:38 |
| Sofie 🏳️⚧️ (she/her) | yeah. I agree | 15:25:06 |
 Zoe Z | what does nix-eval-jobs --no-instantiate actually do? | 18:21:17 |
 raitobezarius | simply not write the .drv | 18:21:45 |
| raitobezarius | it's used in Nixpkgs CI to accelerate things from what I gather | 18:22:05 |
| raitobezarius | in practice, what it does is just enable the read only mode for the store | 18:22:30 |
| raitobezarius | which means that all code that writeDerivation will perform the hash modulo calculation without touching the disk | 18:22:54 |
| raitobezarius | a bunch of performance could be obtained without that no-instantiate with ideas like https://gerrit.lix.systems/c/lix/+/4088 | 18:23:14 |
| raitobezarius | (which is completely vapourware right now) | 18:23:34 |
 Grimmauld (any/all) | i am confused. I am trying to do remote builds with an ssh sk key. nix store ping --store ssh://grimmauld.de?ssh-key=~/.ssh/id_ed25519_sk_nix_build works, but trying to use the builder with that key does not. Using a different (non-sk key) does work. The key does not have a password, and is configured as no-touch-required. Am i missing something? | 18:27:47 |
| raitobezarius | yeah | 18:28:16 |
| raitobezarius | it's the daemon that needs to access it | 18:28:20 |
| raitobezarius | so when you do your first command | 18:28:25 |
| raitobezarius | you are not going through the daemon, it works | 18:28:32 |
| raitobezarius | when you do your second command, you are going via the daemon which cannot make use of your private key material due to SSH permissions checks | 18:28:46 |
| raitobezarius | your SSH key material needs to live owned by root | 18:28:56 |
| Grimmauld (any/all) | but sk keys should work? | 18:29:34 |
| raitobezarius | it's independent to sk or not sk | 18:29:43 |
| raitobezarius | your private key material is considered insecure by SSH | 18:29:49 |
| raitobezarius | leading it not to use it for ssh connections | 18:29:54 |
| raitobezarius | cp id_ed25519_sk_nix_build in /etc/nix/id_ed25519_sk_nix_build, chown root:root on it, point your nix builder config to there and it should work | 18:30:52 |
| Grimmauld (any/all) | (thats dumb, the key is on the yubikey, unix permissions/ownership shouldn't matter at all... but oh well, not a lix issue) | 18:30:59 |
| raitobezarius | ssh is a bit dumb about this | 18:31:13 |
| raitobezarius | patches welcome to openssh | 18:31:21 |
| raitobezarius | but uhm | 18:31:23 |
| raitobezarius | we should have a doctor command for such things | 18:31:27 |
| raitobezarius | it's number 1 biggest UX cut in my nix life | 18:31:35 |
