| 8 Jan 2026 |
| Diego Reis joined the room. | 02:58:54 |
| @pltrz_:matrix.org left the room. | 23:24:40 |
| 11 Jan 2026 |
| полынь changed their profile picture. | 14:24:34 |
| 12 Jan 2026 |
| jimmie joined the room. | 08:07:46 |
| jimmie changed their display name from zigzen to jimmie. | 08:12:36 |
| jappie joined the room. | 17:28:38 |
| 13 Jan 2026 |
netpleb | does enabling boot.initrd.systemd.network somehow change where the authorized_keys file is stored when doing remote luks unlocking? For example, the following config gives me the ssh error "Permission denied (publickey)":
boot.initrd = {
# Include necessary modules for networking and VLAN in initrd
availableKernelModules = [
"r8169" # NIC driver
"8021q" # For VLAN support
];
# Enable networking in initrd
network.enable = true;
# SSH for remote unlock
# enable ssh during boot so we can decrypt disks
# see https://nixos.wiki/wiki/Remote_disk_unlocking
# NOTE: the ssh host keys during boot are different! We can ignore that temporarily as follows
# ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null root@<target_ip>
# cryptsetup-askpass # will prompt to unlock disks
# the intrd ssh then exits
network.ssh = {
enable = true;
port = 22;
authorizedKeys = config.users.users.root.openssh.authorizedKeys.keys;
hostKeys = [ "/etc/secrets/initrd/ssh_host_ecdsa_key" ];
};
# Use systemd in initrd (enabled by default when network.enable = true)
systemd.enable = true;
# Configure systemd-networkd in initrd for VLAN 51 and DHCP
systemd.network = {
enable = true;
netdevs = {
"10-vlan51" = {
netdevConfig = {
Kind = "vlan";
Name = "vlan51";
};
vlanConfig.Id = 51;
};
};
networks = {
# Physical interface in initrd (replace enp1s0 if needed)
"10-phy" = {
matchConfig.Name = "enp*s*"; # Match your interface pattern (e.g., enp1s0)
networkConfig = {
LinkLocalAddressing = "no";
VLAN = [ "vlan51" ];
};
};
# DHCP on VLAN 51
"20-vlan51" = {
matchConfig.Name = "vlan51";
networkConfig = {
DHCP = "yes";
};
};
};
};
# Set shell for remote unlock
systemd.users.root.shell = "/bin/cryptsetup-askpass";
};
but I have confirmed with the nix repl that boot.initrd.network.ssh.authorizedKeys does in fact contain my public key.
| 17:33:27 |
netpleb | I do not know which command to run to build just the stuff that initrd.systemd sees so that I can inspect the actual authorized_keys file that was generated. | 17:46:02 |
netpleb | actually, sorry for the (false?) alarm. Looks like I got nabbed by this: https://github.com/NixOS/nixpkgs/issues/294032 and commenting out that root shell line lets me in | 17:54:04 |
| 14 Jan 2026 |
K900 | Did this room split | 16:24:24 |
K900 | Doesn't have a name anymore for me | 16:24:34 |
| 16 Jan 2026 |
| keiwop joined the room. | 12:44:18 |
| 19 Jan 2026 |
@emma:rory.gay | does for me, its #systems-programming:nixos.org (Systems Programming) | 00:20:22 |
| 20 Jan 2026 |
| innocentzer0 joined the room. | 14:41:06 |
| 21 Jan 2026 |
netpleb | I have a luks encrypted nbd which needs to be connected to with nbd-client before it can be unlocked, and I need to do it during boot.initrd. Anyone know a good trick for how to do that? | 19:20:25 |
netpleb | (also, is this question better asked in the general Nix / NixOS channel?) | 19:21:14 |
netpleb | I notice that there is both boot.initrd.preLVMCommands and boot.initrd.preDeviceCommands -- is that where I should add something like nbd-client 192.168.x.x 10809 /dev/nbd0? | 19:25:55 |
netpleb | * I notice that there is both boot.initrd.preLVMCommands and boot.initrd.{pre,post}DeviceCommands -- is that where I should add something like nbd-client 192.168.x.x 10809 /dev/nbd0? | 19:30:54 |
| @bezz:matrix.org joined the room. | 23:01:23 |
| 22 Jan 2026 |
mrdev023 | Hi, i write this issue https://github.com/NixOS/nixpkgs/issues/386164
When i want build rust-analyzer json file. It failed because Makefile is missing from source/rust/Makefile folder.
Maybe, i can open PR about that ? | 19:22:05 |
mrdev023 | Maybe missing line here https://github.com/NixOS/nixpkgs/blob/88d3861acdd3d2f0e361767018218e51810df8a1/pkgs/os-specific/linux/kernel/build.nix#L374 | 19:31:02 |
mrdev023 | ? | 19:31:07 |
kloenk | could you do it with an english make? much easier to read for me :) | 19:32:18 |
kloenk | right now wondering if I/we ever impelemnted that (upstream/kernel), not sure right now how the $LINUX_MODULES_FOLDER/build looks and if that has the required files for the python script generating the rust-project.json | 19:33:23 |
mrdev023 | I got this error
make : on entre dans le répertoire « /nix/store/zpqgwgibl3hdh9xzlbfmrzb57d5r608f-linux-zen-6.18.4-dev/lib/modules/6.18.4-zen1/build »
make[1] : on entre dans le répertoire « /home/florian/Projets/Perso/Learn/kernel_module_learn »
/nix/store/zpqgwgibl3hdh9xzlbfmrzb57d5r608f-linux-zen-6.18.4-dev/lib/modules/6.18.4-zen1/source/scripts/Makefile.build:37: /nix/store/zpqgwgibl3hdh9xzlbfmrzb57d5r608f-linux-zen-6.18.4-dev/lib/modules/6.18.4-zen1/source/rust/Makefile: No such file or directory
make[3]: *** Aucune règle pour fabriquer la cible « /nix/store/zpqgwgibl3hdh9xzlbfmrzb57d5r608f-linux-zen-6.18.4-dev/lib/modules/6.18.4-zen1/source/rust/Makefile ». Arrêt.
make[2]: *** [/nix/store/zpqgwgibl3hdh9xzlbfmrzb57d5r608f-linux-zen-6.18.4-dev/lib/modules/6.18.4-zen1/source/Makefile:2050: rust-analyzer] Error 2
make[1]: *** [/nix/store/zpqgwgibl3hdh9xzlbfmrzb57d5r608f-linux-zen-6.18.4-dev/lib/modules/6.18.4-zen1/source/Makefile:248: __sub-make] Error 2
make[1] : on quitte le répertoire « /home/florian/Projets/Perso/Learn/kernel_module_learn »
make: *** [/nix/store/zpqgwgibl3hdh9xzlbfmrzb57d5r608f-linux-zen-6.18.4-dev/lib/modules/6.18.4-zen1/source/Makefile:248: __sub-make] Error 2
make : on quitte le répertoire « /nix/store/zpqgwgibl3hdh9xzlbfmrzb57d5r608f-linux-zen-6.18.4-dev/lib/modules/6.18.4-zen1/build »
$ ls $LINUX_MODULES_FOLDER/build
arch include kernel Makefile Module.symvers rust scripts source tools
$ ls $LINUX_MODULES_FOLDER/source
arch block certs crypto Documentation fs include init io_uring ipc kernel lib Makefile mm net rust samples scripts security sound tools usr virt
$ ls $LINUX_MODULES_FOLDER/source/rust
bindings uapi
Note: On fedora, i have the file source/rust/Makefile
| 19:37:02 |
mrdev023 | https://packages.fedoraproject.org/pkgs/kernel/kernel-devel/fedora-43-updates.html | 19:38:43 |
kloenk | ah wait I thought in the wrong direction | 19:39:59 |
mrdev023 | No worries. Don't hesitate to ask me for more informatiosn | 19:41:58 |
mrdev023 | * No worries. Don't hesitate to ask me for more informations | 19:42:02 |
kloenk | but does the rust-project.json generated on fedora work? long time ago I last touched that make target, but don't think it was ever written for out of tree/external modules | 19:48:03 |