| 9 Nov 2023 |
 Janne Heß | maybe the classic deutsche telekom peering again… | 16:42:35 |
 Lily Foster | understood :) | 16:42:37 |
| Lily Foster | In reply to @janne.hess:helsinki-systems.de
maybe the classic deutsche telekom peering again… yep, a classic indeed | 16:42:50 |
| Janne Heß | yep, on my hetzner server it got to a similar state within seconds (instead of 30mins+) | 16:44:06 |
| Janne Heß | * yep, on my hetzner server it got similar progress within seconds (instead of 30mins+) | 16:44:23 |
| Lily Foster | In reply to @szucsitg:matrix.org
I am trying to build a frontend with mkYarnPackage but it fails on download for this lockfile
# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
# yarn lockfile v1
"duo_web_sdk@https://github.com/duosecurity/duo_web_sdk#v2.9":
version "2.7.0"
resolved "https://github.com/duosecurity/duo_web_sdk#378e855ce4a1de1d1b2f7fd60465e564b3e9fbda"
The error is:
error: hash mismatch in fixed-output derivation '/nix/store/yxmkgwcrvzfmhhxjqkrcnd49fr8fv1bi-duosecurity_duo_web_sdk.drv':
specified: sha1-N46FXOSh3h0bL3/WBGXlZLPp+9o=
got: sha1-DbsHW3BaLQrtZoh0x5znwdK9xAc=
I'm not sure why the hash doesn't align Okay so the answer is yarn2nix's bespoke, custom lockfile parsing is bad | 16:44:56 |
| Lily Foster | and it is assuming the git url is not a git url but a tarball url and that the rev is not a rev but the actual hash | 16:45:11 |
| Lily Foster | which is of course wrong | 16:45:14 |
| Lily Foster | and the reason it doesn't just get an eval error | 16:45:24 |
| Lily Foster | (which it should) | 16:45:27 |
 szucsitg | Thanks for debugging. I was looking through the yarn2nix code, and I think I found a work around. Use the tag's source tar.gz from github | 16:46:13 |
| Lily Foster | maybe just change this line: https://gist.github.com/szucsitg/70fe7ca82c51d30208595cd04b8bd7c5#file-package-json-L5 | 16:46:15 |
| Lily Foster | to git+https://... | 16:46:19 |
| Lily Foster | In reply to @szucsitg:matrix.org
Thanks for debugging. I was looking through the yarn2nix code, and I think I found a work around. Use the tag's source tar.gz from github Those tarballs aren't exactly guaranteed to never change (and indeed they have in the past) so that might explode some dahy | 16:46:54 |
| Lily Foster | In reply to @szucsitg:matrix.org
Thanks for debugging. I was looking through the yarn2nix code, and I think I found a work around. Use the tag's source tar.gz from github * Those tarballs aren't exactly guaranteed to never change (and indeed they have in the past) so that might explode some day | 16:46:55 |
| Lily Foster | Letting yarn2nix download it as a git repo is probably better | 16:47:05 |
| Lily Foster | And it looks like they should support git+https://github.com/duosecurity/duo_web_sdk.git#v2.9 correctly | 16:47:29 |
| szucsitg | Let me try this | 16:48:02 |
| szucsitg | It's working 🥳 now i can continue fixing missing package references in our own packages 😅 | 16:55:39 |
