!SgYlXivkogarTVcnZO:nixos.org

Nix Flakes

609 Members
121 Servers

Load older messages


SenderMessageTime
2 Jul 2024
@emilazy:matrix.orgemily does nix flake update without any parameters make a difference? if not, can you post your flake.nix maybe? 18:47:04
@flyx:klacker.euflyx

nix flake update does update other referenced flakes, but not nixpkgs. my flake is a longer business, here's the inputs section:

inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.05";
    nixpkgs-unstable.url = "github:NixOS/nixpkgs/nixos-unstable";
    utils.url = "github:numtide/flake-utils";
    home-manager = {
      url = "github:nix-community/home-manager/release-24.05";
    };
    colmena = {
      url = "github:zhaofengli/colmena/v0.3.2";
      inputs.utils.follows = "utils";
    };
    dsa41heldendokument = {
      url = "github:flyx/DSA-4.1-Heldendokument";
      inputs.nixpkgs.follows = "nixpkgs";
      inputs.utils.follows = "utils";
    };
    nimyaml = {
      url = "github:flyx/NimYAML";
      inputs.utils.follows = "utils";
    };
    nyarna-web = { url = "github:nyarnalang/website"; };
  };
18:50:06
@emilazy:matrix.orgemily are you sure it's not that there are other nixpkgs inputs in your dependencies that you're not overriding and that aren't getting updated? 18:51:09
@emilazy:matrix.orgemily often you'll have e.g. nixpkgs_2 etc. in the lock 18:51:19
@flyx:klacker.euflyx ah, that makes sense. yeah, I looked at the wrong nixpkgs, silly. thanks! 18:56:04
@flyx:klacker.euflyx my original problem was that after the update, I wouldn't get a patched OpenSSH on my server, so I tried to figure out why that would be as it should be in nixos-24.05. the lock file apparently was the wrong place to look for the problem 18:56:30
@emilazy:matrix.orgemilyare you sure it's not patched?19:04:44
@emilazy:matrix.orgemilythe version wasn't bumped or anything19:04:47
@emilazy:matrix.orgemily(yes, this means it's kind of hard to tell whether you're vulnerable, sorry; it was a big rush)19:05:07
@mewp:nurupo.pl@mewp:nurupo.pl left the room.19:05:12
@emilazy:matrix.orgemily you can check your ssh matches nix path-info github:NixOS/nixpkgs/nixos-24.05#openssh or such 19:06:11
@flyx:klacker.euflyx ah. I was checking for 9.8p1 and my sshd shows 9.7p1 but the path does match. thanks again! 19:08:49
@emilazy:matrix.orgemilyyeah, 9.8p1 is a major release with breaking changes so we used upstream's few-line patches for old versions on stable instead19:09:29
@emilazy:matrix.orgemilyI imagine this is going to keep coming up though, so maybe we should consider adding some kind of indication19:09:47
@emilazy:matrix.orgemilyI think upstream does not care about releasing official security fix releases for old versions unfortunately :(19:10:17
@emilazy:matrix.orgemily how were you checking, -V output? 19:10:35
@flyx:klacker.euflyx I did systemctl status sshd.service and looked at the nix store path in the last line under CGroup 19:12:40
@emilazy:matrix.orgemilythanks19:21:22
@emilazy:matrix.orgemilyso maybe changing the derivation name would have helped19:21:27
@flyx:klacker.euflyxyeah, that would have been noticeable19:22:49
3 Jul 2024
@-=h0p3=-:matrix.org-=h0p3=- joined the room.03:22:13
@winston:milli.ng@winston:milli.ng left the room.13:42:52
@inkbottle:matrix.orgzebrag joined the room.19:06:19
@vandycarlos:matrix.orgvandycarlos joined the room.19:37:27
4 Jul 2024
@monadam:matrix.orgmonadam joined the room.00:25:13
@petrichor:envs.net@petrichor:envs.net left the room.07:48:51
@d:bugpara.de@d:bugpara.de left the room.08:47:06
@philiptaron:matrix.org@philiptaron:matrix.org left the room.15:46:12
@soispha:vhack.euBenedikt changed their display name from Soispha to Benedikt.19:10:45
@mindslight:matrix.orgmindslight emily: ft ft ft were were were were we were were k 21:33:36

Show newer messages


Back to Room ListRoom Version: 6