| 28 Apr 2023 |
@sumner:nevarro.space | Oh, I was trying to use su to shell in.
root@matrix:~/ > sudo -u msclinkbot cat /var/lib/msclinkbot
cat: /var/lib/msclinkbot: Is a directory
| 18:14:38 |
hexa | cat expects a file ÖD | 18:14:52 |
hexa | * cat expects a file 😄 | 18:14:54 |
hexa | * cat expects a file 🐱 | 18:15:05 |
@sumner:nevarro.space | ack, I copied the wrong output lol | 18:15:13 |
@sumner:nevarro.space | * Oh, I was trying to use su to shell in.
root@matrix:~/ > sudo -u msclinkbot cat /run/keys/mscbot_password
cat: /run/keys/mscbot_password: Permission denied
| 18:15:35 |
@sumner:nevarro.space | running the same command as root works just fine | 18:15:55 |
hexa | so try sudo -u msclinkbot ls /run/keys | 18:16:25 |
@sumner:nevarro.space | that got permission denied as well... interesting | 18:16:49 |
hexa | will probably fail, so your user lacks the executable permission on that folder | 18:16:52 |
hexa | the unit likely needs SupplementaryGroups = [ "keys" ]; | 18:17:17 |
hexa | or something similar | 18:17:20 |
hexa | In reply to @sumner:nevarro.space running the same command as root works just fine root has CAP_DAC_READ_OVERRIDE fwiw | 18:17:57 |
@sumner:nevarro.space | In reply to @hexa:lossy.network the unit likely needs SupplementaryGroups = [ "keys" ]; this seems to have worked. I should probably add this to to the documentation... | 18:19:03 |
@sumner:nevarro.space | Thanks for your help! | 18:19:09 |
| 29 Apr 2023 |
Zhaofeng Li | I kind of want to tag 0.4.0 now (it's long over due) and do some large refactoring for flake evaluation. The current way we evaluate flakes (emitting a wrapper flake in a temporary directory) is hacky and won't work when lazy-trees drops (which would be a while as it seems). To make a simple nix eval against the user's flake work, I think we will require the user to have Colmena evaluator as an input in their flake and only support colmena.lib.makeHive which is currently experimental. | 16:52:30 |
| 30 Apr 2023 |
| @obsidianical:matrix.org joined the room. | 16:00:51 |
@obsidianical:matrix.org | hello, i'm trying to deploy a system on a hetzner ARM vps. it worked well so far, until I tried to use arion for a docker compose app.
these are the resulting logs: https://s10e.de/p/bkjN5a | 16:05:32 |
Shyim | did you tried to use buildOnTarget? | 16:07:00 |
@obsidianical:matrix.org | yes, it doesn't work with buildOnTarget | 16:07:16 |
@obsidianical:matrix.org | this previously only worked with buildOnTarget anyway | 16:07:35 |
@obsidianical:matrix.org | that's why i'm surprised it stopped working now with arion | 16:07:53 |
emily | In reply to @obsidianical:matrix.org
hello, i'm trying to deploy a system on a hetzner ARM vps. it worked well so far, until I tried to use arion for a docker compose app.
these are the resulting logs: https://s10e.de/p/bkjN5a I highly recommend setting boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; in your desktop's configuration.nix if you do aarch64 stuff.
This will enable cross compilation, meaning you will be able to eval and build your ARM VPS on x86_64 :) | 16:12:30 |
emily | (should fix your issue) | 16:13:11 |
Shyim | or add your machine as remote builder to your local nix :D | 16:13:20 |
emily | In reply to @shyim:matrix.org or add your machine as remote builder to your local nix :D or copy your hive config onto that VPS and use apply-local xd | 16:13:56 |
@obsidianical:matrix.org | i prefer remote building generally bc i work from my laptop a lot and have significant storage and performance constraints there | 16:14:01 |
@obsidianical:matrix.org | In reply to @me:indeednotjames.com or copy your hive config onto that VPS and use apply-local xd i mean.. that kinda defeats the point | 16:14:24 |
Shyim | But I assume arion does some evaluation locally | 16:14:35 |
Shyim | do you spawn only docker containers? | 16:14:41 |