!UUqahLbShAYkkrXmKs:matrix.org

DevOS

34 Members
Seeking help and geeking out together on https://github.com/divnix/devos & https://github.com/divnix/digga10 Servers

Load older messages


SenderMessageTime
2 Dec 2021
@pachumicchu:myrdd.infoPacman99
In reply to @ultranix:matrix.org
stringPassword = "${builtins.readFile ./secrets/password}"
Well if you are doing something like this, I'm pretty sure that secret will end up in the nix store at some point
00:50:39
@ultranix:matrix.orgultranix
In reply to @pachumicchu:myrdd.info
Well if you are doing something like this, I'm pretty sure that secret will end up in the nix store at some point
that doesnt matter. i use it to encrypt location.latitude or location.longitude etc, things that are of personal information for pseudonyms etc
01:30:13
@ultranix:matrix.orgultranixbut also, there's a lot of configuration ini's that still use string keys within config files01:30:46
@ultranix:matrix.orgultranixand i'm not sure that can change?01:31:14
@pachumicchu:myrdd.infoPacman99
In reply to @ultranix:matrix.org
but also, there's a lot of configuration ini's that still use string keys within config files
Thats where I think envsubst is really useful and I've seen a lot of services integrate it
01:31:45
@pachumicchu:myrdd.infoPacman99Then you can use agenix to encrypt the environment file with the secret information, and pass it along to the systemd service then you get access to that secret data in your ocnfig01:32:36
@ultranix:matrix.orgultranixok good to know01:34:23
@pachumicchu:myrdd.infoPacman99 * Then you can use agenix to encrypt the environment file with the secret information, and pass it along to the systemd service then you get access to that secret data in your config01:34:42
@ultranix:matrix.orgultranixthe part about hiding parts of your config is a niche case, but can be useful. but in that case, i suppose you'd import a private repo flake or something01:35:05
@teutat3s:pub.solar@teutat3s:pub.solar
In reply to @blaggacao:matrix.org
I now only need a strawman to submit the patch.
I’d volunteer, will submit it later today
08:24:21
@teutat3s:pub.solar@teutat3s:pub.solar
In reply to @teutat3s:pub.solar
I’d volunteer, will submit it later today
ah too slow https://github.com/NixOS/nix/pull/5709
11:30:57
@Sweenu:matrix.orgBruno

I have a few warnings when doing nix flake check:

warning: unknown experimental feature 'ca-references'
warning: unknown flake output 'homeModules'
warning: unknown flake output 'devshellModules'
warning: unknown flake output 'pkgs'
warning: unknown flake output 'outputsBuilder'
warning: unknown flake output 'homeConfigurationsPortable'

I do not use those (besides pkgs), is that a problem in digga then?

11:47:23
@Sweenu:matrix.orgBruno
In reply to @ultranix:matrix.org
by the way, i still found a lot of use for git-crypt. I use it to encrypt string secrets in public repositories
I haven't looked deeper, but this might interest you https://golangrepo.com/repo/slok-agebox in order to also use age for what you would use git-crypt for.
12:22:23
@Sweenu:matrix.orgBruno
In reply to @ultranix:matrix.org
by the way, i still found a lot of use for git-crypt. I use it to encrypt string secrets in public repositories
* I haven't looked deeper, but this might interest you https://github.com/slok/agebox in order to also use age for what you would use git-crypt for.
12:22:48
@blaggacao:matrix.orgDavid Arnold (blaggacao)The only warning that is avoidable is ca-references which is not a thing any more in newver versions of nix.12:37:22
@blaggacao:matrix.orgDavid Arnold (blaggacao) Wherever that is currently set, we should do ${lib.optional !(lib.versionAtLeast builtins.nixVersion "2.4") "ca-references"} 12:39:29
@aynish:sealight.xyz@aynish:sealight.xyz

hello, im trying to update to 21.11 but when i change the pinned version of nixpkgs i get this error:

`error: value is null while a set was expected

   at /nix/store/rlgzhd7yf0hna1drzdjnia06jz816y03-source/overlays/nix-patched.nix:5:17:

        4|
        5|   nixUnstable = prev.nixUnstable.overrideAttrs (o: {
         |                 ^
        6|     patches = (o.patches or [ ]) ++ [

(use '--show-trace' to show detailed location information) `

12:52:45
@teutat3s:pub.solar@teutat3s:pub.solar That's because digga needs an update, too 12:57:23
@aynish:sealight.xyz@aynish:sealight.xyzdang, so i can't update just yet?12:57:40
@teutat3s:pub.solar@teutat3s:pub.solar

You could try

nix flake lock --update-input digga
12:58:12
@teutat3s:pub.solar@teutat3s:pub.solar then make the change to the nixos input -> 21.11 release branch in your flake.nix like here https://github.com/divnix/devos/pull/403/files#diff-206b9ce276ab5971a2489d75eb1b12999d4bf3843b7988cbe8d687cfde61dea0 12:59:19
@teutat3s:pub.solar@teutat3s:pub.solar

and maybe after that just:

nix flake update

This will update the flake.lock for all inputs

13:00:22
@aynish:sealight.xyz@aynish:sealight.xyzoooh i'll try, thank you very much :)13:00:33
@teutat3s:pub.solar@teutat3s:pub.solar the last cmd is sufficient actually and makes the first one I mentioned redundant (it'll update the digga input as well), but I find it a handy cmd to surgically update inputs 13:01:53
@aynish:sealight.xyz@aynish:sealight.xyz

hmmmm, not quite? this is the error i get now. seems like digga didn't update?

` trace: warning: You are accessing a deprecated item of the digga lib. Please update timely, it will be remove soon.

trace: warning: Deprecated Function: lib.importModules.

Use lib.importExportableModules instead to set exportedModules option

error: ERROR: The externalModules option has been removed. Any modules that should be exported should be defined with the exportedModules option and all other modules should just go into the modules option. (use '--show-trace' to show detailed location information) `

13:07:57
@aynish:sealight.xyz@aynish:sealight.xyz *

hmmmm, not quite? this is the error i get now. seems like digga didn't update?

`trace: warning: You are accessing a deprecated item of the digga lib. Please update timely, it will be remove soon.

trace: warning: Deprecated Function: lib.importModules.

Use lib.importExportableModules instead to set exportedModules option

error: ERROR: The externalModules option has been removed. Any modules that should be exported should be defined with the exportedModules option and all other modules should just go into the modules option. (use '--show-trace' to show detailed location information)`

13:08:13
@aynish:sealight.xyz@aynish:sealight.xyz *

hmmmm, not quite? this is the error i get now. seems like digga didn't update?

`trace: warning: You are accessing a deprecated item of the digga lib. Please update timely, it will be remove soon.

trace: warning: Deprecated Function: lib.importModules.

Use lib.importExportableModules instead to set exportedModules option

error: ERROR: The externalModules option has been removed. Any modules that should be exported should be defined with the exportedModules option and all other modules should just go into the modules option. (use '--show-trace' to show detailed location information)`

13:08:43
@teutat3s:pub.solar@teutat3s:pub.solar are you using the latest devos changes in your Repo? 13:09:25
@aynish:sealight.xyz@aynish:sealight.xyz yeah, i made all the changes here: https://github.com/divnix/devos/pull/403/files#diff-206b9ce276ab5971a2489d75eb1b12999d4bf3843b7988cbe8d687cfde61dea0 13:09:43
@aynish:sealight.xyz@aynish:sealight.xyzbut i didn't pull the repo13:09:54

Show newer messages


Back to Room ListRoom Version: 6