!coeAONBrWyDJnYMbMi:nixos.org

NixOS System Operations

615 Members
About system administration for running NixOS systems in production. Declaratively manage your operations. | Room recommendations: #networking:nixos.org168 Servers

Load older messages


SenderMessageTime
5 Apr 2026
@magic_rb:matrix.redalder.orgmagic_rbI do wonder why the servers switching ips is a problem and if it is a problem, why are they using dhcp with non-static leases at all22:47:53
@chris:kruining.euChris P Bacon But, why not disable dhcp if you want static adresses? 22:47:59
@magic_rb:matrix.redalder.orgmagic_rb That seems like relying on finicky behavior 22:48:06
@magic_rb:matrix.redalder.orgmagic_rbYeah exactly my point, or just static leases. But somehow pin the damn thing22:48:23
@magic_rb:matrix.redalder.orgmagic_rb

There are 3 options imo:

  1. Dont use dhcp
  2. Use static leases
  3. Build a overlay network

Anything else will be finicky

22:50:29
6 Apr 2026
@haruki7049:matrix.org@haruki7049:matrix.org left the room.09:42:52
@elisaado:elisaado.comEli Saado

then machine onboarding is still clunky since you'd have to manually assign an ip adress either:

  • on the routers side using the MAC (pretty clean) and then still use DHCP with that static DHCP allocation (but not all routers support this and you'd need to log in to your router each time)
  • or on the machine during the installation and enable an option in the NixOS config to make that same IP adress also it's IP after installation
09:57:54
@elisaado:elisaado.comEli Saadohaving an overlay network is nice but you'd still need to bootstrap it (and have ways around it when you're messing with its options and it restarts during a rebuild or whateverK09:58:36
@elisaado:elisaado.comEli Saado * 09:58:40
@elisaado:elisaado.comEli SaadoI'm going to experiment some more tonight, have to study for an exam first :S09:58:58
@elisaado:elisaado.comEli Saado changed their profile picture.10:36:18
@elisaado:elisaado.comEli Saado changed their profile picture.10:42:14
@elisaado:elisaado.comEli Saado changed their profile picture.11:03:14
@elisaado:elisaado.comEli Saado changed their profile picture.11:04:08
@elisaado:elisaado.comEli Saado changed their profile picture.11:05:02
7 Apr 2026
@oleg20082009:matrix.org@oleg20082009:matrix.org joined the room.21:17:34
@oleg20082009:matrix.org@oleg20082009:matrix.org left the room.21:38:35
8 Apr 2026
@johnhamelink:matrix.orgjohnhamelink joined the room.07:31:59
@johnhamelink:matrix.orgjohnhamelink Hey folks, I wrote a nix flake for https://crowci.dev/ (a woodpeckerCI fork). My flake uses podman quadlets using quadlet-nix. I'm coming across an issue when building that I'm hoping someone might be able to shed light on: when an agent (runner) container runs nix build, it seems to be able to surpass resource restrictions set in the quadlet configuration (using PodmanArgs). The result is that long builds get OOM killed. What I really want is for the container to be constrained to its resource requirements. My /etc/containers/systemd container configuration (generated by quadlet-nix) looks like this: https://gist.github.com/johnhamelink/80995130d2afc1cedee31b501cb3e689 07:51:29
@johnhamelink:matrix.orgjohnhamelink *

Hey folks, I wrote a nix flake for https://crowci.dev/ (a woodpeckerCI fork). My flake uses podman quadlets using quadlet-nix. I'm coming across an issue when building that I'm hoping someone might be able to shed light on: when an agent (runner) container runs nix build, it seems to be able to surpass resource restrictions set in the quadlet configuration (using PodmanArgs). The result is that long builds get OOM killed. What I really want is for the container to be constrained to its resource requirements. My /etc/containers/systemd container configuration (generated by quadlet-nix) looks like this: https://gist.github.com/johnhamelink/80995130d2afc1cedee31b501cb3e689

My nix flake is here in case you are interested https://codefloe.com/crowci/crowci-flake

07:52:40
@johnhamelink:matrix.orgjohnhamelinkWith the above container configuration, you can see here that the nix process run by conmon bursts right past 2G of memory:08:50:29
@johnhamelink:matrix.orgjohnhamelinkscreenshot-20260408-09:48:09.png
Download screenshot-20260408-09:48:09.png
08:50:32
@johnhamelink:matrix.orgjohnhamelink* With the above container configuration, you can see here that the nix process run by conmon bursts right past 2G of memory (PID 133965):08:51:09
@johnhamelink:matrix.orgjohnhamelinkscreenshot-20260408-09:51:29.png
Download screenshot-20260408-09:51:29.png
08:52:01
@johnhamelink:matrix.orgjohnhamelinkMeanwhile podman stats shows only 17-19MB of memory usage08:52:12
@johnhamelink:matrix.orgjohnhamelinkOK! I figured it out: The agent container uses the docker.socket to spin up its own containers - which is why the nix build process isn't a direct child of the container - and that container wasn't receiving the resource limitation. The authors thought ahead and added configuration for this, which when applied kills the container when it reaches the limit. Now I just need to figure out how to throttle the process instead of kill it outright10:35:03
@johnhamelink:matrix.orgjohnhamelink* OK! I figured it out: The agent container uses the docker.socket to spin up its own containers - which is why the nix build process isn't a direct child of the container - and that container wasn't receiving the resource limitation. The authors thought ahead and added configuration for this, which when applied kills the container when it reaches the limit. Now I just need to figure out how to throttle the spawned container instead of kill it outright10:35:27
@johnhamelink:matrix.orgjohnhamelink I was able to resolve the ram problem with zramSwap.enable = true; Problem solved :) 12:12:08
@jaredmontoya:matrix.orgjaredmontoyaDoes anyone know what to do if promtail is gone? My use case includes using promtail to scrape journald on a 1GB ram raspberry pi. promtail used 23-32MB of RAM but the supposed alternatives (both grafana alloy and fluent-bit) use more than 600MB of RAM12:14:25
@jaredmontoya:matrix.orgjaredmontoyaand I can't give up 60% of my raspberry pi ram just to send it's logs to loki12:14:54

Show newer messages


Back to Room ListRoom Version: 10