!UKDpaKNNsBpOPfLWfX:zhaofeng.li

Colmena

304 Members
A simple, stateless NixOS deployment tool - https://github.com/zhaofengli/colmena103 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
22 Apr 2023
@n0emis:noemis.men0emis changed their display name from n0emis to ember.22:24:55
23 Apr 2023
@thornavery:matrix.orgthornAvery joined the room.06:22:11
@thornavery:matrix.orgthornAvery

Hello, im trying to import my configuration into colmena, and Im getting the following when running "colmena build", the same configuration builds when i lib.nixosSystem it and "nixos-rebuild build" it.

 error: You're trying to define a value of type `string'
       rather than an attribute set for the option
       `system'!

       This usually happens if `system' has option
       definitions inside that are not matched. Please check how to properly define
       this option by e.g. referring to `man 5 configuration.nix'!

the stack trace is showing its happening in my configurations deployments attrset, but I dont really know enough information to go debugging from there. Is this some meta option I havent set properly?

06:31:02
@thornavery:matrix.orgthornAvery(Please ignore I rubberducked myself out of it by sending this message, I had some stray configs in the wrong level)06:35:20
@blaggacao:matrix.orgDavid Arnold (blaggacao)

Hey! I know there have been ideas to generalize the activation package so that colmena can be a wrapper to any activation sequence (e.g. Home Manager, NixOS, Liminix).

I now have another candidate, for which I'd be glad to make colmena my go-to tool: Mikrotik Routers managed with Nix

17:15:47
@blaggacao:matrix.orgDavid Arnold (blaggacao)Can a knowledgeable member point me to the current state of discussion / design thinking on this topic/generic feature?17:16:26
26 Apr 2023
@errisnotnil:matrix.orgYuddite G changed their display name from Yuddite Pilot to Yuddite Groyper.04:49:25
@errisnotnil:matrix.orgYuddite G changed their display name from Yuddite Groyper to Yuddite G.21:02:57
27 Apr 2023
@eisfunke:eisfunke.comNicolas joined the room.15:21:46
28 Apr 2023
@sumner:nevarro.space@sumner:nevarro.space joined the room.17:20:19
@sumner:nevarro.space@sumner:nevarro.space I'm having trouble with running a systemd service that reads from a secret that I uploaded via colmena. I uploaded the secret and set the user and group to msclinkbot and I am using the same user and group for the systemd service. But I get permission denied whenever I try to access that file (even if just via cat /run/keys/mscbot_password. Does anyone have suggestions for what could be going wrong? 17:22:53
@hexa:lossy.networkhexaneeds more details17:44:39
@hexa:lossy.networkhexastat on the secret17:44:44
@hexa:lossy.networkhexaand ideally the systemd unit17:44:47
@hexa:lossy.networkhexaand you could try if the user used in the unit can stat the secret17:45:10
@hexa:lossy.networkhexa and if it cannot, try to ls the directory above 17:45:22
@sumner:nevarro.space@sumner:nevarro.space
deployment.keys = {
  mscbot_password = {
    keyCommand = [ <something> ];
    user = "msclinkbot";
    group = "msclinkbot";
  };

My config is:

   systemd.services.msclinkbot = {
      description = "MSC Link Bot";
      after = [
        "matrix-synapse.target"
        "mscbot_password-key.service"
      ];
      wantedBy = [ "multi-user.target" ];
      serviceConfig = {
        ExecStart = ''
          ${pkgs.coreutils}/bin/cat /run/keys/mscbot_password
        '';
        Restart = "on-failure";
        User = "msclinkbot";
        Group = "msclinkbot";
      };
    };

    users = {
      users.msclinkbot = {
        group = "msclinkbot";
        isSystemUser = true;
        home = cfg.dataDir;
        createHome = true;
      };
      groups.msclinkbot = { };
    };

I can't get into the msclinkbot user because it says that it's currently unavailable

18:03:11
@hexa:lossy.networkhexa just run sudo -u msclinkbot <command> 18:13:16
@hexa:lossy.networkhexaRedacted or Malformed Event18:14:18
@sumner:nevarro.space@sumner:nevarro.space

Oh, I was trying to use su to shell in.

root@matrix:~/ > sudo -u msclinkbot cat /var/lib/msclinkbot
cat: /var/lib/msclinkbot: Is a directory
18:14:38
@hexa:lossy.networkhexacat expects a file ÖD18:14:52
@hexa:lossy.networkhexa * cat expects a file 😄18:14:54
@hexa:lossy.networkhexa * cat expects a file 🐱18:15:05
@sumner:nevarro.space@sumner:nevarro.spaceack, I copied the wrong output lol18:15:13
@sumner:nevarro.space@sumner:nevarro.space *

Oh, I was trying to use su to shell in.

root@matrix:~/ > sudo -u msclinkbot cat /run/keys/mscbot_password
cat: /run/keys/mscbot_password: Permission denied
18:15:35
@sumner:nevarro.space@sumner:nevarro.spacerunning the same command as root works just fine18:15:55
@hexa:lossy.networkhexa so try sudo -u msclinkbot ls /run/keys 18:16:25

Show newer messages


Back to Room ListRoom Version: 6