| 28 Apr 2023 |
@sumner:nevarro.space | that got permission denied as well... interesting | 18:16:49 |
hexa | will probably fail, so your user lacks the executable permission on that folder | 18:16:52 |
hexa | the unit likely needs SupplementaryGroups = [ "keys" ]; | 18:17:17 |
hexa | or something similar | 18:17:20 |
hexa | In reply to @sumner:nevarro.space running the same command as root works just fine root has CAP_DAC_READ_OVERRIDE fwiw | 18:17:57 |
@sumner:nevarro.space | In reply to @hexa:lossy.network the unit likely needs SupplementaryGroups = [ "keys" ]; this seems to have worked. I should probably add this to to the documentation... | 18:19:03 |
@sumner:nevarro.space | Thanks for your help! | 18:19:09 |
| 29 Apr 2023 |
Zhaofeng Li | I kind of want to tag 0.4.0 now (it's long over due) and do some large refactoring for flake evaluation. The current way we evaluate flakes (emitting a wrapper flake in a temporary directory) is hacky and won't work when lazy-trees drops (which would be a while as it seems). To make a simple nix eval against the user's flake work, I think we will require the user to have Colmena evaluator as an input in their flake and only support colmena.lib.makeHive which is currently experimental. | 16:52:30 |
| 30 Apr 2023 |
| @obsidianical:matrix.org joined the room. | 16:00:51 |
@obsidianical:matrix.org | hello, i'm trying to deploy a system on a hetzner ARM vps. it worked well so far, until I tried to use arion for a docker compose app.
these are the resulting logs: https://s10e.de/p/bkjN5a | 16:05:32 |
Shyim | did you tried to use buildOnTarget? | 16:07:00 |
@obsidianical:matrix.org | yes, it doesn't work with buildOnTarget | 16:07:16 |
@obsidianical:matrix.org | this previously only worked with buildOnTarget anyway | 16:07:35 |
@obsidianical:matrix.org | that's why i'm surprised it stopped working now with arion | 16:07:53 |
emily | In reply to @obsidianical:matrix.org
hello, i'm trying to deploy a system on a hetzner ARM vps. it worked well so far, until I tried to use arion for a docker compose app.
these are the resulting logs: https://s10e.de/p/bkjN5a I highly recommend setting boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; in your desktop's configuration.nix if you do aarch64 stuff.
This will enable cross compilation, meaning you will be able to eval and build your ARM VPS on x86_64 :) | 16:12:30 |
emily | (should fix your issue) | 16:13:11 |
Shyim | or add your machine as remote builder to your local nix :D | 16:13:20 |
emily | In reply to @shyim:matrix.org or add your machine as remote builder to your local nix :D or copy your hive config onto that VPS and use apply-local xd | 16:13:56 |
@obsidianical:matrix.org | i prefer remote building generally bc i work from my laptop a lot and have significant storage and performance constraints there | 16:14:01 |
@obsidianical:matrix.org | In reply to @me:indeednotjames.com or copy your hive config onto that VPS and use apply-local xd i mean.. that kinda defeats the point | 16:14:24 |
Shyim | But I assume arion does some evaluation locally | 16:14:35 |
Shyim | do you spawn only docker containers? | 16:14:41 |
@obsidianical:matrix.org | arion is only one part of the config, there's also some other things that work fine, both a nixos container and some stuff running directly on the vps | 16:15:20 |
@obsidianical:matrix.org | without container i mean | 16:15:32 |
Shyim | if you want to run normal containers with arion you can build your a workaround with docker-compose + systemd unit :D | 16:16:03 |
@obsidianical:matrix.org | In reply to @me:indeednotjames.com
I highly recommend setting boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; in your desktop's configuration.nix if you do aarch64 stuff.
This will enable cross compilation, meaning you will be able to eval and build your ARM VPS on x86_64 :) okay that indeed fixes it, thanks | 16:17:23 |
emily | In reply to @obsidianical:matrix.org okay that indeed fixes it, thanks awesome :) | 16:21:49 |