| 12 Jul 2021 |
@gtrunsec:matrix.org | David Arnold: what do you think about this https://github.com/pogobanane/lambda-pirate? | 21:45:37 |
@gtrunsec:matrix.org | * David Arnold: what do you think about this https://github.com/pogobanane/lambda-pirate? even https://github.com/Mic92/vmsh is it possible to increase our testing experience? | 21:49:29 |
David Arnold (blaggacao) | I don't entirely understand the most prominent use case for vmsh (yet). | 22:01:10 |
David Arnold (blaggacao) | I'd be greateful for some preliminary feedback on:
- https://github.com/divnix/devos/pull/338/commits/fb67fc51cc44ce685f99cbdc40d359cc501d427d
| 22:32:47 |
David Arnold (blaggacao) | * I'd be greateful for some preliminary feedback on:
- https://github.com/divnix/devos/pull/338/commits/fb67fc51cc44ce685f99cbdc40d359cc501d427d
- https://github.com/divnix/digga/pull/84/commits/e2c862ddbec87fe7c2e675ab06c4d50d8800abe0
before I (hopefully) finish those PRs off tonight.
| 22:33:28 |
David Arnold (blaggacao) | * I'd be greateful for some preliminary feedback on these two PRs that go hand in hand:
- https://github.com/divnix/devos/pull/338/commits/fb67fc51cc44ce685f99cbdc40d359cc501d427d
- https://github.com/divnix/digga/pull/84/commits/e2c862ddbec87fe7c2e675ab06c4d50d8800abe0
before I (hopefully) finish those PRs off tonight.
| 22:33:50 |
David Arnold (blaggacao) | * I'd be greateful for some preliminary feedback on these two commits that go hand in hand:
- https://github.com/divnix/devos/pull/338/commits/fb67fc51cc44ce685f99cbdc40d359cc501d427d
- https://github.com/divnix/digga/pull/84/commits/e2c862ddbec87fe7c2e675ab06c4d50d8800abe0
before I (hopefully) finish those PRs off tonight.
| 22:34:00 |
| 16 Jul 2021 |
@teutat3s:pub.solar | Does someone else get this, too? (on Devos master branch and with nixpkgs commit 53079ed913181b2f945cf1580746828b57d47edb)
error: value is null while a set was expected
at /nix/store/9vividw3p8cqwndq7k1sqknnsvinh1ql-source/flake.nix:52:19:
51| moduleDeclarationFile =
52| (builtins.unsafeGetAttrPos "modules" args).file;
| ^
53|
(use '--show-trace' to show detailed location information)
| 15:48:18 |
@kraftnix:matrix.org | I got this yesterday, my "fix" was just moving to develop branch on both devos and digga. | 15:49:40 |
@kraftnix:matrix.org | You could try track down a commit which fixes it amongst the changes in devos/digga, but I was planning on updating devos/digga anyway so I just did that. | 15:50:51 |
@teutat3s:pub.solar | Alright, thanks for the quick response, I'll wait until the next Devos release 😇 | 15:53:21 |
David Arnold (blaggacao) | THis issue is also reported her: https://github.com/divnix/digga/issues/87 | 15:56:14 |
David Arnold (blaggacao) | * This issue is also reported her: https://github.com/divnix/digga/issues/87 | 15:56:22 |
David Arnold (blaggacao) | /nix/store/9vividw3p8cqwndq7k1sqknnsvinh1ql-source/flake.nix is not a file of digga or devos. WHere does this file come from? | 15:57:58 |
David Arnold (blaggacao) | * This issue is also reported here: https://github.com/divnix/digga/issues/87 | 15:58:10 |
@teutat3s:pub.solar | In reply to @blaggacao:matrix.org This issue is also reported here: https://github.com/divnix/digga/issues/87 Thanks, subscribed | 15:58:18 |
@teutat3s:pub.solar | It looked to me like native Nix flake code | 15:58:51 |
@teutat3s:pub.solar | * It looked to me like “native” Nix flake code | 15:59:05 |
David Arnold (blaggacao) | Unrelated, but important: Since https://github.com/divnix/devos/pull/342, if you use an unpatched nix version (without https://github.com/NixOS/nix/pull/4641), then you';; need to add this anti corruption layer to your flake.nix | 16:06:35 |
@kraftnix:matrix.org | So I haven't made an iso with flk for while but there seems to be a regression (at least in terms of how I was using it. I have a basic host I use for a super slim iso that pulls in one of my VM users that has some packages + my ssh keys in authorizedKeys. It looks like this:
{ lib, suites, profiles, ... }:
{
imports = lib.flatten [
suites.base
profiles.users.operator
];
services.openssh.enable = true;
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
networking.interfaces.enp1s0.useDHCP = true;
fileSystems."/" = { device = "/dev/disk/by-label/nixos"; };
}
Previously this worked fine, and I could ssh into the VM/machine as my operator user, however in the most recent develop branches of devos/digga, the operator user is no longer included when creating an iso with flk iso, I cannot see anything obvious that removes my user, other than perhaps the disabledModules config in isoConfig in digga.
My question would be, is there an easy way to include certain profiles/suites in the iso?
| 16:24:00 |
David Arnold (blaggacao) | Maybe the quickest way is to not expose users as profiles | 16:29:51 |
@kraftnix:matrix.org | direct import the operator user as a file path rather than through profiles.users? | 16:30:36 |
David Arnold (blaggacao) | This indeed seems to be a regression of the way users are plugged into profiles in https://github.com/divnix/devos/commit/d9082066f7bc5bd6a58ab55418db3d6abf4da3d6 | 16:30:39 |
@kraftnix:matrix.org | I'll give it a test, I would normally test this kind of stuff myself by running squashimg is a PIA that takes too long :/ | 16:31:24 |
@kraftnix:matrix.org | * I'll give it a test, I would normally test this kind of stuff myself by running quickly but squashimg is a PIA that takes too long :/ | 16:31:36 |
David Arnold (blaggacao) | Wait a sec, I think my previous analysis is wrong. I'll look into it after some stuf here. | 16:33:29 |
@kraftnix:matrix.org | I wish mksquashfs was parallelisable or faster :/ i mean through pcie4 nvmes at it helps but otherwise it doesn't run much faster on my laptop vs workstation | 16:34:39 |
David Arnold (blaggacao) | I think the reason is that all profiles that are incorporated within a suite are disabled by default. So if a user is incorporated into a suite, that would be disabled as well. The reason for disabling is to avoid systemd startups that you don't need on a minimal boostrap image. | 16:35:14 |
b12f | I'm with you that stuff is so slow. We've stopped doing automated ISO builds and instead only do them manually in our CI because it just hogs server resources | 16:35:23 |
David Arnold (blaggacao) | In reply to @blaggacao:matrix.org I think the reason is that all profiles that are incorporated within a suite are disabled by default. So if a user is incorporated into a suite, that would be disabled as well. The reason for disabling is to avoid systemd startups that you don't need on a minimal boostrap image. So I guess if users.operator is also within suites (anywhere) it will get filtered. | 16:37:02 |