!UNVBThoJtlIiVwiDjU:nixos.org

Staging

403 Members
Staging merges | Running staging cycles: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr+is%3Aopen+head%3Astaging-next+head%3Astaging-next-25.11 | Review Reports: https://malob.github.io/nix-review-tools-reports/132 Servers

Load older messages

SenderMessageTime
30 Jun 2026
@lach:delta.rocksLachAs for avx512... The only crates that I see affected at this moment are pgvecto-rs (deprecated) and vectorchord then... zlib-rs users are only affected if avx512 feature is enabled, and as far as I can see it is enabled by firefox and no well-known crates https://github.com/mozilla-firefox/firefox/blob/c681e91369f59d0efae43bdc465872b855e8b269/netwerk/socket/neqo_glue/Cargo.toml#L2917:59:21
@whispers:catgirl.cloudwhispers [& it/fae]oh nevermind, CVE-2026-7598 was last cycle and is on master. CVE-2025-15661, CVE-2026-55199, and CVE-2026-55200 (at least) are all unpatched for libssh2 afaik18:00:05
@debtquity:matrix.orgdebtquity * 

```
rocksdb> cmake flags: -GNinja -DCMAKE_FIND_USE_SYSTEM_PACKAGE_REGISTRY=OFF -DCMAKE_FIND_USE_PACKAGE_REGISTRY=OFF -DCMAKE_EXPORT_NO_PACKAGE_REGISTRY=ON -DCMAKE_BUILD_TYPE=Release -DBUILD_TESTING=OFF -DCMAKE_INSTALL_LOCALEDIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocksdb-10.10.1/share/locale -DCMAKE_INSTALL_LIBEXECDIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocksdb-10.10.1/libexec -DCMAKE_INSTALL_LIBDIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocksdb-10.10.1/lib -DCMAKE_INSTALL_DOCDIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocksdb-10.10.1/share/doc/rocksdb -DCMAKE_INSTALL_INFODIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocksdb-10.10.1/share/info -DCMAKE_INSTALL_MANDIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocksdb-10.10.1/share/man -DCMAKE_INSTALL_INCLUDEDIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocksdb-10.10.1/include -DCMAKE_INSTALL_SBINDIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocksdb-10.10.1/sbin -DCMAKE_INSTALL_BINDIR=/nix/store/sl8939n8g5b2wdm508a7zzlmg4jawrj5-rocks
```

https://github.com/debtquity/nixpkgs-review-gha/actions/runs/28461253865/job/84349445690#step:6:5588

but this is missing all of the flags defined in `cmakeFlags`:

https://github.com/NixOS/nixpkgs/pull/537105/changes#diff-f169fc685573d8eaee885af02b69ba1a718da48f3a9ae1ee4bb64ca67cadef28R62-R82

I looked back at a hydra build for same package, but those flags are there: https://hydra.nixos.org/build/328605767/nixlog/1

only diff i can see is:

> -- The CXX compiler identification is Clang 21.1.8
> -- The C compiler identification is Clang 21.1.8

vs

> -- The CXX compiler identification is GNU 15.2.0
> -- The C compiler identification is GNU 15.2.0

(__structuredAttrs issue)

18:00:06
@lach:delta.rocksLachThe only problem is that the bug was quite annoying to find and recognize that it is caused by nixpkgs rustc, and if someone will encounter that in their development environment...18:01:35
@emilazy:matrix.orgemilyI guess we didn't try to build Firefox yet: https://hydra.nixos.org/build/33351437718:01:48
@emilazy:matrix.orgemilyso we might have to put a bodge in there for one cycle depending18:01:58
@whispers:catgirl.cloudwhispers [& it/fae]i've built firefox on staging-next just fine for x86_64-linux, if it's just a build time thing18:02:26
@emilazy:matrix.orgemilyit's unfortunate, but it's a lot better than e.g. getting owned because security updates got delayed 5 days to fix it18:02:32
@whispers:catgirl.cloudwhispers [& it/fae]* fwiw i've built firefox on staging-next just fine for x86_64-linux, if it's just a build time thing18:02:48
@lach:delta.rocksLachimage.png
Download image.png		18:03:47
@lach:delta.rocksLachOk, it was added in firefox 15018:03:54
@lach:delta.rocksLachBut on staging we have firefox 152...18:04:13
@emilazy:matrix.orgemily otoh, if there's a PoC for an unpatched libssh2 RCE … then that might be worth rebuilding it all for anyway 😔 18:04:23
@emilazy:matrix.orgemilythat might not be super scary for Cargo where you're executing a bunch of code anyway but it's pretty bad for other uses…18:04:55
@whispers:catgirl.cloudwhispers [& it/fae]* fwiw i've built firefox on staging-next just fine for x86_64-linux, if it's just a build time thing (and i'm running it right now, but runtime avx512 detection won't trigger on my machine if that's relevant)18:05:13
@lach:delta.rocksLachOk, I'm overheated and have no idea what's going on, will submit a fix for vectorchord and lets hope there are not many packages affected by this18:05:41
@whispers:catgirl.cloudwhispers [& it/fae] * 18:07:04
@matthewcroughan:defenestrate.itmatthewcroughan

Anyone getting this when building for musl on staging?

error: Cannot build '/nix/store/y35bzmydcql0sln0c16iww3p6gnlk56v-lkl-2025-11-13.drv'.
       Reason: builder failed with exit code 2.
       Output paths:
         /nix/store/3fbj6ra6lfnbn5g5dbbf9rmjaf441mby-lkl-2025-11-13
         /nix/store/3gjknsy2bbmbnd5mbdfys7bzw14dry3k-lkl-2025-11-13-lib
         /nix/store/a8zh338klkkbw1ccvvhk7wjm05b47j68-lkl-2025-11-13-dev
       Last 25 log lines:
       > /build/source/tools/lkl//include/lkl.h:235:52: error: unknown type name ‘mode_t’
       >   235 | static inline long lkl_sys_mknod(const char *path, mode_t mode, dev_t dev)
       >       |                                                    ^~~~~~
       > In file included from /build/source/tools/lkl//include/lkl_host.h:9,
       >                  from lib/vfio_pci.c:6:
       > /build/source/tools/lkl//include/lkl.h:155:52: error: unknown type name ‘mode_t’
       >   155 | static inline long lkl_sys_chmod(const char *path, mode_t mode)
       >       |                                                    ^~~~~~
       > /build/source/tools/lkl//include/lkl.h:235:65: error: unknown type name ‘dev_t’
       >   235 | static inline long lkl_sys_mknod(const char *path, mode_t mode, dev_t dev)
       >       |                                                                 ^~~~~
       > /build/source/tools/lkl//include/lkl.h:215:52: error: unknown type name ‘mode_t’
       >   215 | static inline long lkl_sys_mkdir(const char *path, mode_t mode)
       >       |                                                    ^~~~~~
       > /build/source/tools/lkl//include/lkl.h:235:52: error: unknown type name ‘mode_t’
       >   235 | static inline long lkl_sys_mknod(const char *path, mode_t mode, dev_t dev)
       >       |                                                    ^~~~~~
       > /build/source/tools/lkl//include/lkl.h:235:65: error: unknown type name ‘dev_t’; did you mean ‘div_t’?
       >   235 | static inline long lkl_sys_mknod(const char *path, mode_t mode, dev_t dev)
       >       |                                                                 ^~~~~
       >       |                                                                 div_t
       > make[1]: *** [/build/source/tools/build/Makefile.build:106: /build/source/tools/lkl/lib/virtio_net_macvtap.o] Error 1
       > make[1]: *** [/build/source/tools/build/Makefile.build:106: /build/source/tools/lkl/lib/vfio_pci.o] Error 1
       > make: *** [Makefile:105: /build/source/tools/lkl/lib/liblkl-in.o] Error 2
       >   LD      /build/source/tools/lkl/lklfuse-in.o
       For full logs, run:
         nix log /nix/store/y35bzmydcql0sln0c16iww3p6gnlk56v-lkl-2025-11-13.drv
20:28:02
@xokdvium:matrix.orgSergei Zimmerman (xokdvium)Ugh, curl thingy did fuck up nix too. We just have more a bounded wakeup on the curl worker thread23:12:35
@xokdvium:matrix.orgSergei Zimmerman (xokdvium)Nix on 26.05 is fucked23:13:00
@xokdvium:matrix.orgSergei Zimmerman (xokdvium)Seems to have fucked it in a hard to notice way though, i.e. most stuff is fine but there are cases when the worker thread is slow to start23:30:28
@emilazy:matrix.orgemily so what are we doing for libssh2? 23:42:47
@emilazy:matrix.orgemilyRCE with a public PoC seems pretty bad23:43:02
@emilazy:matrix.orgemilyif we pick the fix patches, then we can also bump Rust to 1.96.1 for free to pick up the miscompilation fix23:43:33
@xokdvium:matrix.orgSergei Zimmerman (xokdvium)FWIW https://github.com/NixOS/nixpkgs/pull/537230, I don't know whether we want to eat the rebuilds.23:48:36
@hexa:lossy.networkhexastaging-nixos-26.0523:51:24
@hexa:lossy.networkhexabecause it will certainly rebuild all nixos tests23:51:46
@xokdvium:matrix.orgSergei Zimmerman (xokdvium)Oh we have it now?23:52:45
@hexa:lossy.networkhexawe do23:52:49
@xokdvium:matrix.orgSergei Zimmerman (xokdvium)K23:52:50

Show newer messages

Back to Room ListRoom Version: 6