Colmena | 302 Members | |
| A simple, stateless NixOS deployment tool - https://github.com/zhaofengli/colmena | 101 Servers |
| Sender | Message | Time |
|---|---|---|
| 25 Jan 2023 | ||
if you want as little fuss as possible at the cost of disk space (and being more dependent on your upstreams for security updates), don't use any follows | 14:57:09 | |
| Hmmm ok. | 14:57:49 | |
| I think I need to get a better understanding of some of the inner workings of Nix.. | 14:58:02 | |
| Thank you for the help! | 14:58:06 | |
| 17:13:12 | ||
| Hi. We're still on 22.05 and get warnings like Given that we set Does anyone have an idea? | 17:15:44 | |
In reply to @dminuoso:matrix.orgIf you aren't setting any of the configs, this warning should be harmless. The warning will disappear once you upgrade to 22.11 where most nixpkgs config keys became typed so merging would work as expected. | 18:23:46 | |
| Well I am setting in nixpkgs.config inside the host config. Im just curious whether I can even make the warning disappear. | 18:44:03 | |
I think you can explicitly set all of them in meta.nodeNixpkgs but it's quite tedious. The warning is defined here: https://github.com/zhaofengli/colmena/blob/64c46fa0169233d4faed70c52583cd3183c7f5aa/src/nix/hive/eval.nix#L132-L141 | 20:18:56 | |
| dminuoso: can I ask what's holding you back? Interested from a security team perspective. | 20:36:01 | |
| I assume this is work related? | 20:36:12 | |
| hexa: Oh yeah. Updating closures for 22.11 is scheduled right after we're done with a critical project, so probably next week or so. | 20:54:16 | |
| It was a bit of a mismanagement on my side, at the time it was released we had a lot of folks on vacation. Next time we should probably prepare closures for a new nixos release before the release, but oh well. | 20:55:44 | |
| It's a bit of an effort because we have a lot of nixos machines involved, so we have to do audits, backport changes, etc.. | 20:56:28 | |
| * It's a bit of an effort because we have a lot of nixos machines involved, so we have to do audits, rebase changes, etc.. | 20:56:39 | |
| you can probably start evaluating the new release as soon as it is branched, which happens roughly ten days before the actual release | 20:58:39 | |
| then you have like 5 weeks to migrate, which might sound short, but I think nixos makes updating far easier than other distros | 20:59:15 | |
In reply to @dminuoso:matrix.orgsame here | 22:11:48 | |
| for 22.11, we *did* start working on the upgrade in time, but it still took us til mid January to finish it because there was so much breakage this time | 22:12:22 | |
| ok | 22:28:20 | |
| 26 Jan 2023 | ||
| hexa: Sure, at the end its on our schedule, we're just lagging behind ever so slightly., | 07:48:58 | |
| It's sometimes difficult to do what seems to be the right thing when there's additional external constraints. Priorities over priorities. | 07:51:12 | |
| Zhaofeng Li: The warning still persists in nixos-22.11. Something is quirky here. | 08:13:29 | |
Let me ask differently. Am I supposed to configure nixpkgs inside the initialization import sources.nixpkgs { allowFree = true; } or as a nixos option nixpkgs.config.allowUnfree = true;? | 08:14:05 | |
In reply to @dminuoso:matrix.orgOh right, you may be using the released 0.3 version which doesn't have this: https://github.com/zhaofengli/colmena/commit/b5629dca | 08:15:47 | |
| I was going to cut the 0.4.0 release but got sidetracked by so much other stuff 🙁 | 08:16:21 | |
In reply to @dminuoso:matrix.orgEither should work and it should merge the configs correctly | 08:17:19 | |
| But only on the not-yet-released colmena. | 08:17:31 | |
| Is there anything I can do to speed up the release? :) | 08:18:31 | |
In reply to @dminuoso:matrix.orgRight, at the moment | 08:18:33 | |