!XLCFfvFhUkYwOMLbVx:nixos.org

agenix

383 Members
age-encrypted secrets for NixOS https://github.com/ryantm/agenix/102 Servers

Load older messages


SenderMessageTime
27 Jan 2024
@k900:0upti.meK900 ⚡️ Can you try to stat /run/agenix/deepl? 23:44:54
@tornax:matrix.orgtornax
  File: /run/agenix/deepl
  Size: 40        	Blocks: 8          IO Block: 4096   regular file
Device: 0,31	Inode: 1138850     Links: 1
Access: (0400/-r--------)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2024-01-28 00:39:56.640203574 +0100
Modify: 2024-01-28 00:39:56.640203574 +0100
Change: 2024-01-28 00:39:56.646203813 +0100
 Birth: -
23:45:21
@k900:0upti.meK900 ⚡️Well, have you rebuilt since changing the owner in the config? 23:45:43
@k900:0upti.meK900 ⚡️Maybe rebuild again just to make sure 23:45:55
@tornax:matrix.orgtornaxooh23:46:39
@tornax:matrix.orgtornax
chown: invalid group: ‘tornax:tornax’
Activation script snippet 'agenixChown' failed (1)
23:46:41
@tornax:matrix.orgtornaxwohoo23:46:55
@tornax:matrix.orgtornaxnow it worsk23:46:57
@tornax:matrix.orgtornax * now it works23:46:58
@tornax:matrix.orgtornaxthank you!23:46:59
@k900:0upti.meK900 ⚡️NixOS doesn't do the "group per user" thing by default (yet) 23:47:28
@k900:0upti.meK900 ⚡️So yeah that kind of stuff can be a bit of a footgun 23:47:43
@k900:0upti.meK900 ⚡️ But the default group for all interactive users is users 23:47:55
28 Jan 2024
@zxfsee:matrix.orgzxfsee set a profile picture.22:09:54
29 Jan 2024
@lehmanator:tchncs.deSam Lehman joined the room.11:00:20
@lehmanator:tchncs.deSam Lehman set a profile picture.11:06:02
@wiryfuture:matrix.orgPhilip joined the room.17:39:01
@wiryfuture:matrix.orgPhilip

After updating nixpkgs, im getting some spurious errors in reading the decrypted secret file for my nextcloud db password. This failure occurs every time after the first rebuild after switching from the previous commit. If I checkout to the commit before the update, it works fine. I'm confused bc I can see that the decrypted file definitely exists and it has the right file owner/group perms for everything to work.

nginx[992]: 2024/01/29 17:40:49 [error] 992#992: *410 FastCGI sent in stderr: "PHP message: PHP Warning:  file_get_contents(/run/agenix/nextcloud_sql): Failed to open stream: No such file or directory in /nix/store/fg9f47jlps0wfhiyy2af9qdki7k9pxrr-nextcloud-config.php on line 11" 
18:02:42
@wiryfuture:matrix.orgPhilip

This seems started happening after I did this:

Updated input 'nixpkgs':
        'github:NixOS/nixpkgs/d2003f2223cbb8cd95134e4a0541beea215c1073' (2024-01-19)
      → 'github:NixOS/nixpkgs/a77ab169a83a4175169d78684ddd2e54486ac651' (2024-01-24)

I will say, that I had replaced agenix with ragenix prior to this, but for debugging now I switched the input back to regular agenix and this issue still occurs

18:04:17
30 Jan 2024
@xengi:xengi.deXenGi left the room.15:08:24
31 Jan 2024
@federicodschonborn:matrix.orgFederico Damián Schonborn changed their profile picture.03:36:12
@federicodschonborn:matrix.orgFederico Damián Schonborn changed their profile picture.06:21:49
@dustee:matrix.orgdusteeRedacted or Malformed Event17:11:13
@dustee:matrix.orgdustee *

how do i access specialArgs from a module? Im not sure if this is the correct use but i wanna do something like this

{inputs, ...}: let
  host-specific = {
    hostName = "myhost123";
    userName = "user";
    disk = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
    ipAddress = "192.168.1.11";
    swapSize = "5000M";
    stateVersion = "24.05";
  };
in {
  flake.nixosConfigurations = {
    "${host-specific.hostName}" = inputs.nixpkgs.lib.nixosSystem {
      specialArgs = {inherit inputs host-specific;};
      # ...
    };
  };
  flake.homeConfigurations = {
    "${host-specific.userName}@${host-specific.hostName}" = inputs.home-manager.lib.homeManagerConfiguration {
      extraSpecialArgs = {inherit inputs host-specific;};
      # ...
    };
  };
  flake.colmena = {
    meta.nodeSpecialArgs."${host-specific.hostName}" = {inherit inputs host-specific;};
    # ...
  };
}
17:13:46
@dustee:matrix.orgdustee *

how do i access specialArgs from a module? Im not sure if this is the correct use but i wanna have a couple of global vars, something like this

{inputs, ...}: let
  host-specific = {
    hostName = "myhost123";
    userName = "user";
    disk = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
    ipAddress = "192.168.1.11";
    swapSize = "5000M";
    stateVersion = "24.05";
  };
in {
  flake.nixosConfigurations = {
    "${host-specific.hostName}" = inputs.nixpkgs.lib.nixosSystem {
      specialArgs = {inherit inputs host-specific;};
      # ...
    };
  };
  flake.homeConfigurations = {
    "${host-specific.userName}@${host-specific.hostName}" = inputs.home-manager.lib.homeManagerConfiguration {
      extraSpecialArgs = {inherit inputs host-specific;};
      # ...
    };
  };
  flake.colmena = {
    meta.nodeSpecialArgs."${host-specific.hostName}" = {inherit inputs host-specific;};
    # ...
  };
}
17:14:49
1 Feb 2024
@tornax:matrix.orgtornaxhello guys, is it possible to have the decrypted file persistent after a reboot?16:05:53
@tornax:matrix.orgtornax everytime I reboot my system, my files in /run/agenix are getting removed 16:06:08
@k900:0upti.meK900 ⚡️No16:06:51
@tornax:matrix.orgtornax._.16:06:58
@k900:0upti.meK900 ⚡️But it should be re-decrypted on activation16:06:59

Show newer messages


Back to Room ListRoom Version: 6