| 28 Apr 2023 |
 silent_water | hmm with the sops options disabled? | 11:48:51 |
| silent_water | ok I'll take a look this morning before work | 11:49:00 |
| silent_water | I might have missed a guard somewhere | 11:49:07 |
| silent_water | @ryantrinkle are you using the flake to build or are you using the release script? | 11:51:27 |
| silent_water | * ryantrinkle: are you using the flake to build or are you using the release script? | 11:51:40 |
| silent_water | can you also share your config and a log of the error you're seeing? | 11:58:01 |
| silent_water | found the issue. I had it reading sopsDecrypt.keyType without a guard to make sure sops decryption was actually enabled | 12:25:09 |
| silent_water | try the fix I just pushed and let me know if you have issues | 12:26:26 |
| 30 Apr 2023 |
 gooberpatrol66 | I get this error when building ota image | 18:23:40 |
| gooberpatrol66 | building '/nix/store/vd325v1dk21w4v53kkvlai88ag7s7rk9-crosshatch-signed_target_files-2022041111.zip.drv'...
Missing KEYSDIR directory, did you use "--option extra-sandbox-paths /keys=..." ?
error: builder for '/nix/store/vd325v1dk21w4v53kkvlai88ag7s7rk9-crosshatch-signed_target_files-2022041111.zip.drv' failed with exit code 1;
| 18:23:49 |
| gooberpatrol66 | Here is the config | 18:24:29 |
| gooberpatrol66 | {
device = "crosshatch";
flavor = "lineageos";
variant = "user";
signing.enable = true;
signing.keyStorePath = "/home/nathan/guix-configs/robotnix/keys";
apps.fdroid.enable = true;
}
| 18:24:35 |
| gooberpatrol66 | the keys from generate_keys.sh are in that directory | 18:25:12 |
| gooberpatrol66 | Ideas what the problem is? | 18:25:30 |
| gooberpatrol66 | doing nix-build --option extra-sandboxpaths /keys="/home/nathan/guix-configs/robotnix/keys" doesn't help | 18:32:02 |
| gooberpatrol66 | *-paths | 18:32:27 |
 atemu12 | gooberpatrol66: Is your user allowed to do add extra sandbox paths? | 19:25:33 |
| gooberpatrol66 | In reply to @atemu12:matrix.org
gooberpatrol66: Is your user allowed to do add extra sandbox paths? yeah, that was the problem, thanks | 21:13:57 |
| gooberpatrol66 | I'm getting this now | 21:14:10 |
| gooberpatrol66 | nix-build --option extra-sandbox-paths /keys="/home/nathan/guix-configs/robotnix/keys" --arg configuration ~/guix-configs/robotnix/crosshatch.nix -A ota
these 2 derivations will be built:
/nix/store/vd325v1dk21w4v53kkvlai88ag7s7rk9-crosshatch-signed_target_files-2022041111.zip.drv
/nix/store/jhmczwpjhhzwdxfra7fvssqfkiqqdjpx-crosshatch-ota_update-2022041111.zip.drv
building '/nix/store/vd325v1dk21w4v53kkvlai88ag7s7rk9-crosshatch-signed_target_files-2022041111.zip.drv'...
cp: /dev/shm/robotnix_keys.XXXXUZia63/chromium.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/chromiumwebview.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/com.android.connectivity.resources.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/com.android.hotspot2.osulogin.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/com.android.wifi.resources.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/crosshatch/releasekey.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/crosshatch/platform.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/crosshatch/shared.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/crosshatch/media.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/crosshatch/networkstack.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/crosshatch/avb.pem: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/dre/releasekey.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/dre/platform.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/dre/shared.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/dre/media.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/dre/networkstack.pk8: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/dre/avb.pem: Permission denied
cp: /dev/shm/robotnix_keys.XXXXUZia63/f-droid.pk8: Permission denied
| 21:14:15 |
| atemu12 | gooberpatrol66: nixbld group needs access | 21:14:51 |
| gooberpatrol66 | In reply to @atemu12:matrix.org
gooberpatrol66: nixbld group needs access how do i do that, is that set in nix.conf? | 21:15:25 |
| atemu12 | gooberpatrol66: No, the files themselves must be accessible to users belongizg to nixbld | 21:24:00 |
| atemu12 | * gooberpatrol66: No, the files themselves must be accessible to users belonging to nixbld | 21:24:09 |
| atemu12 | As in, UNIX access permissions | 21:24:35 |
| gooberpatrol66 | In reply to @atemu12:matrix.org
gooberpatrol66: No, the files themselves must be accessible to users belonging to nixbld my user is in nixbld group, tried chowning the keys to nathan:nathan and nathan:nixbld, same error | 21:32:46 |
| gooberpatrol66 | tried sysctl fs.protected_regular=0 but didn't help | 21:38:16 |
| 1 May 2023 |
| silent_water | the directory needs to be listable (g+x) and the directory + files need a chgrp -R nixbld | 13:02:39 |
| silent_water | are resource overlays working for people? my updater app doesn't seem to be picking up the URL I configured. | 14:45:02 |
| 2 May 2023 |
| silent_water | nvm got it working with a few updates that I'll push soon (validating the new grapheneos release first) | 17:07:49 |
