| 9 Nov 2023 |
 Lily Foster | oh, idk. i'm on a mobile hotspot rn so i don't have good enough internet to test and see if it's slow for me too | 16:41:55 |
| Lily Foster | i guess i could ssh into something | 16:42:00 |
| Lily Foster | it could just be you though | 16:42:03 |
 @janne.hess:helsinki-systems.de | dw, i'll just wait, the time is billed ;) just wanted to vent a bit | 16:42:27 |
| @janne.hess:helsinki-systems.de | maybe the classic deutsche telekom peering again… | 16:42:35 |
| Lily Foster | understood :) | 16:42:37 |
| Lily Foster | In reply to @janne.hess:helsinki-systems.de
maybe the classic deutsche telekom peering again… yep, a classic indeed | 16:42:50 |
| @janne.hess:helsinki-systems.de | yep, on my hetzner server it got to a similar state within seconds (instead of 30mins+) | 16:44:06 |
| @janne.hess:helsinki-systems.de | * yep, on my hetzner server it got similar progress within seconds (instead of 30mins+) | 16:44:23 |
| Lily Foster | In reply to @szucsitg:matrix.org
I am trying to build a frontend with mkYarnPackage but it fails on download for this lockfile
# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
# yarn lockfile v1
"duo_web_sdk@https://github.com/duosecurity/duo_web_sdk#v2.9":
version "2.7.0"
resolved "https://github.com/duosecurity/duo_web_sdk#378e855ce4a1de1d1b2f7fd60465e564b3e9fbda"
The error is:
error: hash mismatch in fixed-output derivation '/nix/store/yxmkgwcrvzfmhhxjqkrcnd49fr8fv1bi-duosecurity_duo_web_sdk.drv':
specified: sha1-N46FXOSh3h0bL3/WBGXlZLPp+9o=
got: sha1-DbsHW3BaLQrtZoh0x5znwdK9xAc=
I'm not sure why the hash doesn't align Okay so the answer is yarn2nix's bespoke, custom lockfile parsing is bad | 16:44:56 |
| Lily Foster | and it is assuming the git url is not a git url but a tarball url and that the rev is not a rev but the actual hash | 16:45:11 |
| Lily Foster | which is of course wrong | 16:45:14 |
| Lily Foster | and the reason it doesn't just get an eval error | 16:45:24 |
| Lily Foster | (which it should) | 16:45:27 |
 szucsitg | Thanks for debugging. I was looking through the yarn2nix code, and I think I found a work around. Use the tag's source tar.gz from github | 16:46:13 |
| Lily Foster | maybe just change this line: https://gist.github.com/szucsitg/70fe7ca82c51d30208595cd04b8bd7c5#file-package-json-L5 | 16:46:15 |
| Lily Foster | to git+https://... | 16:46:19 |
| Lily Foster | In reply to @szucsitg:matrix.org
Thanks for debugging. I was looking through the yarn2nix code, and I think I found a work around. Use the tag's source tar.gz from github Those tarballs aren't exactly guaranteed to never change (and indeed they have in the past) so that might explode some dahy | 16:46:54 |
| Lily Foster | In reply to @szucsitg:matrix.org
Thanks for debugging. I was looking through the yarn2nix code, and I think I found a work around. Use the tag's source tar.gz from github * Those tarballs aren't exactly guaranteed to never change (and indeed they have in the past) so that might explode some day | 16:46:55 |
| Lily Foster | Letting yarn2nix download it as a git repo is probably better | 16:47:05 |
| Lily Foster | And it looks like they should support git+https://github.com/duosecurity/duo_web_sdk.git#v2.9 correctly | 16:47:29 |
| szucsitg | Let me try this | 16:48:02 |
| szucsitg | It's working 🥳 now i can continue fixing missing package references in our own packages 😅 | 16:55:39 |
| szucsitg | Thanks again for your help 🙂 | 16:55:48 |
| Lily Foster | oh good! glad it was that easy to fix | 16:58:37 |
| szucsitg | The next one will be more difficult because our own packages are not in the lock file | 17:02:30 |
| 10 Nov 2023 |
| @janne.hess:helsinki-systems.de | Soooo Lily Foster I found my issue. The lock file was too old. Is this issue known in nix-prefetch-npm? | 09:11:03 |
| @janne.hess:helsinki-systems.de | Issue is that the downloads just deadlock at some point | 09:11:21 |
| @janne.hess:helsinki-systems.de | Full reproducer with the original files: https://github.com/dasJ/broken-npm-test | 09:20:23 |
| Lily Foster | In reply to @janne.hess:helsinki-systems.de
Full reproducer with the original files: https://github.com/dasJ/broken-npm-test Spooky, i'll try your reproducer later and see what's up | 12:21:05 |
