!UKDpaKNNsBpOPfLWfX:zhaofeng.li

Colmena

311 Members
A simple, stateless NixOS deployment tool - https://github.com/zhaofengli/colmena110 Servers

Load older messages


SenderMessageTime
28 Apr 2023
@sumner:nevarro.space@sumner:nevarro.space

Oh, I was trying to use su to shell in.

root@matrix:~/ > sudo -u msclinkbot cat /var/lib/msclinkbot
cat: /var/lib/msclinkbot: Is a directory
18:14:38
@hexa:lossy.networkhexacat expects a file ÖD18:14:52
@hexa:lossy.networkhexa * cat expects a file 😄18:14:54
@hexa:lossy.networkhexa * cat expects a file 🐱18:15:05
@sumner:nevarro.space@sumner:nevarro.spaceack, I copied the wrong output lol18:15:13
@sumner:nevarro.space@sumner:nevarro.space *

Oh, I was trying to use su to shell in.

root@matrix:~/ > sudo -u msclinkbot cat /run/keys/mscbot_password
cat: /run/keys/mscbot_password: Permission denied
18:15:35
@sumner:nevarro.space@sumner:nevarro.spacerunning the same command as root works just fine18:15:55
@hexa:lossy.networkhexa so try sudo -u msclinkbot ls /run/keys 18:16:25
@sumner:nevarro.space@sumner:nevarro.spacethat got permission denied as well... interesting18:16:49
@hexa:lossy.networkhexawill probably fail, so your user lacks the executable permission on that folder18:16:52
@hexa:lossy.networkhexa the unit likely needs SupplementaryGroups = [ "keys" ]; 18:17:17
@hexa:lossy.networkhexaor something similar18:17:20
@hexa:lossy.networkhexa
In reply to @sumner:nevarro.space
running the same command as root works just fine
root has CAP_DAC_READ_OVERRIDE fwiw
18:17:57
@sumner:nevarro.space@sumner:nevarro.space
In reply to @hexa:lossy.network
the unit likely needs SupplementaryGroups = [ "keys" ];
this seems to have worked. I should probably add this to to the documentation...
18:19:03
@sumner:nevarro.space@sumner:nevarro.spaceThanks for your help!18:19:09
29 Apr 2023
@zhaofeng:zhaofeng.liZhaofeng Li I kind of want to tag 0.4.0 now (it's long over due) and do some large refactoring for flake evaluation. The current way we evaluate flakes (emitting a wrapper flake in a temporary directory) is hacky and won't work when lazy-trees drops (which would be a while as it seems). To make a simple nix eval against the user's flake work, I think we will require the user to have Colmena evaluator as an input in their flake and only support colmena.lib.makeHive which is currently experimental. 16:52:30
30 Apr 2023
@obsidianical:matrix.org@obsidianical:matrix.org joined the room.16:00:51
@obsidianical:matrix.org@obsidianical:matrix.org

hello, i'm trying to deploy a system on a hetzner ARM vps. it worked well so far, until I tried to use arion for a docker compose app.

these are the resulting logs: https://s10e.de/p/bkjN5a

16:05:32
@shyim:matrix.orgShyimdid you tried to use buildOnTarget?16:07:00
@obsidianical:matrix.org@obsidianical:matrix.orgyes, it doesn't work with buildOnTarget16:07:16
@obsidianical:matrix.org@obsidianical:matrix.orgthis previously only worked with buildOnTarget anyway16:07:35
@obsidianical:matrix.org@obsidianical:matrix.orgthat's why i'm surprised it stopped working now with arion16:07:53
@me:indeednotjames.comemily
In reply to @obsidianical:matrix.org

hello, i'm trying to deploy a system on a hetzner ARM vps. it worked well so far, until I tried to use arion for a docker compose app.

these are the resulting logs: https://s10e.de/p/bkjN5a

I highly recommend setting boot.binfmt.emulatedSystems = [ "aarch64-linux" ]; in your desktop's configuration.nix if you do aarch64 stuff.

This will enable cross compilation, meaning you will be able to eval and build your ARM VPS on x86_64 :)

16:12:30
@me:indeednotjames.comemily(should fix your issue)16:13:11
@shyim:matrix.orgShyimor add your machine as remote builder to your local nix :D 16:13:20
@me:indeednotjames.comemily
In reply to @shyim:matrix.org
or add your machine as remote builder to your local nix :D
or copy your hive config onto that VPS and use apply-local xd
16:13:56
@obsidianical:matrix.org@obsidianical:matrix.orgi prefer remote building generally bc i work from my laptop a lot and have significant storage and performance constraints there16:14:01
@obsidianical:matrix.org@obsidianical:matrix.org
In reply to @me:indeednotjames.com
or copy your hive config onto that VPS and use apply-local xd
i mean.. that kinda defeats the point
16:14:24
@shyim:matrix.orgShyimBut I assume arion does some evaluation locally16:14:35
@shyim:matrix.orgShyimdo you spawn only docker containers?16:14:41

Show newer messages


Back to Room ListRoom Version: 6