!VhzbGHamdfMiGxpXyg:robins.wtf

NixOS LXC

33 Members
lxc, lxd, incus discussions related to NixOS14 Servers

Load older messages


SenderMessageTime
18 Mar 2024
@mkg20001:mkg20001.iomkg20001you need networking.firewall.filterForward = true;14:27:21
@adam:robins.wtfadamcstephenshttps://github.com/NixOS/nixpkgs/blob/3551c607f454ee855e54db5686464c8dcf83ceae/nixos/modules/services/networking/firewall-nftables.nix#L9214:27:50
@mkg20001:mkg20001.iomkg20001ah wait, yes, i had it added manually. thought filterForward would do that.14:28:55
@mkg20001:mkg20001.iomkg20001we could add something that packets with iifname or oifname contained in trustedInterfaces be allowed14:29:27
@mkg20001:mkg20001.iomkg20001 * we could add something that packets with iifname and/or oifname contained in trustedInterfaces be allowed14:29:33
@adam:robins.wtfadamcstephensi've not used filterForward myself14:29:36
@adam:robins.wtfadamcstephensi'd honestly rather not get too tricky with this. i think the goals should be a working out of box experience for those who are taking a simple/default setup, without making assumptions that will affect those who have more complex/advanced needs.14:32:30
@adam:robins.wtfadamcstephensor we just solve this with documentation14:34:10
@adam:robins.wtfadamcstephensif you want to pursue some automation with hooks, i'd recommend reaching out to stgraber though irc/github/discourse and see what his thoughts are14:39:58
@mkg20001:mkg20001.iomkg20001ok, will do14:41:37
19 Mar 2024
@mjolnir:nixos.orgNixOS Moderation Botchanged room power levels.00:29:52
@adam:robins.wtfadamcstephens🤞i can finally move this PR forward02:30:11
@adam:robins.wtfadamcstephenstook some digging to fix this test which was already failing. because you know we can't mark failed builds as failed 😿02:30:52
@adam:robins.wtfadamcstephens https://github.com/NixOS/nixpkgs/pull/294548 03:30:22
@hexa:lossy.networkhexa lib.mdDoc is obsolete 23:38:05
20 Mar 2024
@adam:robins.wtfadamcstephens I added none. Are there plans for a bulk cleanup? 00:46:11
@hexa:lossy.networkhexa also … sometimes using with should be ok 😄 00:49:32
@hexa:lossy.networkhexaimage.png
Download image.png
00:49:34
@adam:robins.wtfadamcstephens Pkgs is so short :) I prefer to be explicit myself but understand others prefer with in this case. I’d say it’s ok but not my preference  01:05:33
@adam:robins.wtfadamcstephens Lots of dependencies for this package  01:08:45
@adam:robins.wtfadamcstephens If you insist I’ll use with ;) 01:08:56
@hexa:lossy.networkhexahow could I?01:09:39
@hexa:lossy.networkhexa I think it's silly to complain about every with that we have in nixpkgs 01:10:07
@hexa:lossy.networkhexa it started at toplevel with lib and now they're coming for meta =with lib; 01:10:30
@hexa:lossy.networkhexa * it started at toplevel with lib and now they're coming for meta = with lib; 01:10:57
@adam:robins.wtfadamcstephens I just tend not to use them out of preference. I don’t really like a global with lib, but smaller scopes seem fine to me  01:11:52
@adam:robins.wtfadamcstephens I’m definitely not trying to convince others  01:12:10
@hexa:lossy.networkhexaI tend to inherit from lib01:12:29
@adam:robins.wtfadamcstephens Yeah that’s better for sure  01:12:44
@hexa:lossy.networkhexaand with lists like the one above I generally don't like to repeat myself01:12:52

Show newer messages


Back to Room ListRoom Version: 10