Question: buildInputs = [ cmake boost openssl ]; <del> # This can be removed when updating to 0.13, see https://github.com/cpp-netlib/cpp-netlib/issues/629 propagatedBuildInputs = [ asio ]; </del> cmakeFlags = [ "-DCPP-NETLIB_BUILD_SHARED_LIBS=ON" ]; enableParallelBuilding = true; <ins> # The test driver binary lacks an RPath to the library's libs preCheck = '' export LD_LIBRARY_PATH=$PWD/libs/network/src ''; # Most tests make network GET requests to various websites doCheck = false; </ins> meta = with stdenv.lib; { <del> description = "Collection of open-source libraries for high level network programming"; </del> <ins> description = "Collection of open-source libraries for high level network programming"; </ins> homepage    = https://cpp-netlib.org; license     = licenses.boost; platforms   = platforms.all;

Upstream , but we still have many packages depending on it. I know of no issues since the last release, so I'm not marking it as vulnerable yet, but the dependents would better start migrating in advance. Stable: it's unclear to me what we do about these in 19.09, but perhaps there won't be any notable vulnerabilities before 19.09 support ends :-) 1.0.2 is the default in 19.03, but we don't support that anymore.
List of files:
I think we should mark it vulnerable. Other EOL packages have been marked vulnerable because of the EOL before, e.g. Firefox, and if there’s any package we should be extra-careful with, its OpenSSL.
I bumped it to fix the last CVE minutes before opening this ticket, so I was obviously biased against marking it immediately ;-)
BTW, it's still a decision to make, as there's surely some LTS distro that will keep shipping 1.0.2 for some time, so patching the worst probably won't be too difficult. I'm personally not willing to invest significant time into it, though :-)
Best way to motivate somebody to volunteer is to mark it as insecure. ;)
OK, I think the we've given enough time and now we should press on a bit:


Question: Type = "notify"; ExecStart = '' ${getExe cfg.package}  <del> --cfg ${mkConfig name keyboard}  </del> <ins> --cfg ${keyboard.configFile}  </ins> --symlink-path ''${RUNTIME_DIRECTORY}/${name}  ${optionalString (keyboard.port != null) "--port ${toString keyboard.port}"}  ${utils.escapeSystemdExecArgs keyboard.extraArgs}

Currently it's only possible to configure kanata by specifying specific parts one at a time. It's not possible to read a configuration from a file and use that instead of the specific parts. I use HomeManager to manage the kanata configuration file and because it's also used for Windows this is the most platform neutral way for me without duplicating parts of the configuration. As a workaround I did it like this for now: But clearly that is not ideal. What I would want is to just keep the 'readFile' and uncomment the 'defcfg' part from the configuration file ()
I created to address this issue. Could you help test it?
Thanks a lot for the fast solution! I tested it with my config and it works without any issues.


Question: "--disable-carbon_check" "--disable-gtktest" ] <ins> ++ lib.optional (guiSupport == "gtk2" || guiSupport == "gtk3") "--enable-gui=${guiSupport}" </ins> ++ lib.optional stdenv.isDarwin (if darwinSupport then "--enable-darwin" else "--disable-darwin") ++ lib.optionals luaSupport [

The package hard-codes various X11 libraries as dependencies while making many other features optional, including GUIs. It would be nice to have an option to disable the X11 feature and the related . The use case I have in mind is installing a custom Vim on a remote server. Pulling X libraries, even without enabling a GUI, adds a few dozen megabytes for something essentially useless. An approach is doing something like this: but it doesn't feel very clean... Any thoughts from or ?
I agree. It would have been nice if these X dependencies would have been to only if is or .
/me whispers neovim~~~
I'm all for testing new things and neovim is on my list. But according to , the neovim package pulls 428MiB of dependencies, half of which for Ruby, the other half for both Python 3 and Python 2 (seriously?). Is there a way, by any chance, to configure neovim to avoid this bloat ?
admittedly I've never tried to configure a mininmal version but one can unselect these ecosystems:
See .


Question: - [Envision](https://gitlab.com/gabmus/envision), a UI for building, configuring and running Monado, the open source OpenXR runtime. Available as [programs.envision](#opt-programs.envision.enable). <ins> - [realm](https://github.com/zhboner/realm), a simple, high performance relay server written in rust. Available as [services.realm.enable](#opt-services.realm.enable). </ins> - [Playerctld](https://github.com/altdesktop/playerctl), a daemon to track media player activity. Available as [services.playerctld](option.html#opt-services.playerctld). - [Glance](https://github.com/glanceapp/glance), a self-hosted dashboard that puts all your feeds in one place. Available as [services.glance](option.html#opt-services.glance).

Project description A simple, high performance relay server written in rust. Metadata homepage URL: source URL: license: mit platforms: Linux, darwin Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:


Question: <del> { stdenv, fetchurl, gmp, pkgconfig }: </del> <ins> { stdenv, fetchurl, gmp, pkgconfig, python }: </ins> stdenv.mkDerivation rec { name = "strongswan-5.2.1";

is empty. As a result plugin is not loaded and there is no socket. Relevant part of build log: There must be python instead of : before ./format- ^^^


Question: rustPlatform.buildRustPackage rec { pname = "sqlx-cli"; <del> version = "0.7.1"; </del> <ins> version = "0.7.3"; </ins> src = fetchFromGitHub { owner = "launchbadge"; repo = "sqlx"; rev = "v${version}"; <del> hash = "sha256-567/uJPQhrNqDqBF/PqklXm2avSjvtQsddjChwUKUCI="; </del> <ins> hash = "sha256-AKVNyuV9jwzmsy6tHkGkLj1fhVT8XYvEn2Ip2wCKDxI="; </ins> }; <del> cargoHash = "sha256-X7fLbih1s3sxn8vb2kQeFUKDK2DlC+sjm9ZTwj3FD1Y="; </del> <ins> cargoHash = "sha256-F3FLu/n57F8psk+d0Hf+HnqV/DvEFQwRefu/4C8A1sU="; # Prepare the Cargo.lock for offline use. # See https://github.com/NixOS/nixpkgs/issues/261412 postConfigure = '' cargo metadata --offline > /dev/null ''; buildNoDefaultFeatures = true; buildFeatures = [ "native-tls" "postgres" "sqlite" "mysql" "completions" ]; </ins> doCheck = false; <del> cargoBuildFlags = [ "--package sqlx-cli --no-default-features --features native-tls,postgres,sqlite,mysql,completions" ]; </del> <ins> cargoBuildFlags = [ "--package sqlx-cli" ]; </ins> nativeBuildInputs = [ installShellFiles

Package name: sqlx-cli Latest released version: 0.7.3 <!-- Search your package here: --- Current version on the unstable channel: 0.7.1 Current version on the stable/release channel: 0.7.1 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
I'll take a look at this tomorrow. Thanks for the ping.


Question: projectReferences = [ referencedProject ]; # `referencedProject` must contain `nupkg` in the folder structure. dotnet-sdk = dotnetCorePackages.sdk_3_1; <del> dotnet-runtime = dotnetCorePackages.net_5_0; </del> <ins> dotnet-runtime = dotnetCorePackages.net_6_0; </ins> executables = [ "foo" ]; # This wraps "$out/lib/$pname/foo" to `$out/bin/foo`. executables = []; # Don't install any executables.

Since May 10, .NET 5.0 is EOL (End Of Life), and should not be used. Should it be marked as EOF similar to dotnet 2.2 and 3.0? See All packages using dotnet 5.0 should be updated to use a newer, supported version. These packages still need updating: [x] - [x] - [x] - [x] pkgs/development/tools/build- - [x] -
There is at least one package, which currently uses dotnet 5 sdk - . So we will need to update it beforehand. Btw, I'm not sure if we have any policy regarding packages removal, for nixpkgs in general or specifically for it's dotnet part. , what do you think?
The package is also using .NET 5: . But this is because I made the PR upstream updating it from .NET 4 to 5. I suspect that the transition to 6 will be similarly easy.
I think we should just mark it as depricated, as many projects do still use it upstream. Dotnet version 3 is also still commonly used, so I dont expect it would be realistic to remove version 5 any time soon. also uses dotnet 5 by default, I'll go ahead and switch that over now. See . That doesnt mark dotnet 5 as deprecated or change anything from a SDK perspective, just some preperation work.
See as well, it adds a warning whenever dotnet version 5 is used. Not using a throw for now since a few packages depend on it and I dont have the time to clean that all up at the moment.
Can you provide a list of packages that need updating?
Based on a quick grep: pkgs/development/tools/build-
I believe that after all the above PRs are merged, we should be able to safely remove .NET 5 from nixpkgs :)


Question: smallwm = callPackage ../applications/window-managers/smallwm { }; <ins> smooth = callPackage ../development/libraries/smooth { }; </ins> smos = callPackage ../applications/misc/smos { }; spectrwm = callPackage ../applications/window-managers/spectrwm { };

Project description fre:ac is a free audio converter and CD extractor for Microsoft Windows, Linux, macOS and FreeBSD, distributed under the GNU General Public License.[1] Besides extracting audio from compact discs (with various features including hidden track detection), fre:ac can also convert audio files from one format to another or to the same format but a lower bitrate. fre:ac is compatible with many audio formats such as Ogg Vorbis, FLAC, MP3, MP4/M4A, AAC, WAV, WMA and more.[2][3] fre:ac uses the CDex library to convert from CDs and uses freedb to retrieve artist/song information from the internet which is written to the files as various types of ID3 tags; this library supports cdparanoia which aims to improve audio quality.[4] The user interface is multilingual with 43 languages and is able to be a portable install on a USB drive. Metadata homepage URL: source URL: license: GNU General Public License v2.0 platforms: Windows, macOS, Linux, FreeBSD, HaikuOS
freac is already available on my nur repo If you want to avoid building it, it should be on my cachix https://scott- (for nixos-20.9, nixpkgs-unstable and nixos-unstable)


Question: buildPackage = package: let <del> shims = final.callPackage shimsFn {inherit package redistArch;}; </del> <ins> shims = final.callPackage shimsFn {inherit package; inherit (package) redistArch; }; </ins> name = computeName package; drv = final.callPackage ./manifest.nix { inherit pname;

should have only eliminated the s and removed some of the platform-based (adding new broken/non-buildable attrs), but instead has changed the actual logic. Since that commit, no longer resolves into but into (note the wrong cuda release), later leading to evaluation errors This currently breaks on Steps to reproduce the behavior: We should probably add some tests for the selection logic as well... A clear and concise description of what you expected to happen. If applicable, add screenshots to help explain your problem. Add any other context about the problem here. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:


Question: ./generate-addons.sh ./generate-platforms.sh ./generate-sysimages.sh <ins> ./generate-sources.sh </ins>

Currently, our Android SDK derivations contain only binary files. This is unfortunate during development, when one wants to jump to a definition of a particular symbol in the SDK and it is not found. For comparison, ArchLinux is doing this in their packages, e.g. System: 16.09pre-git (Flounder) Nix version: nix-env (Nix) 1.11.4 Nixpkgs version: "16.09beta335." /cc
Created PR .


Question: , pkgsHostHost , callPackage , fetchgit <ins> , fetchpatch </ins> , ghcjsSrcJson ? null , ghcjsSrc ? fetchgit (lib.importJSON ghcjsSrcJson) , bootPkgs

As a fallout of the migration to GHC 9.0.2 got marked as broken, as it failed to build with GHC 9.0.2 and the Stackage LTS 19 package set we now have. It would be necessary to investigate if survived this (i.e. if it still builds) and if not to get it to work again. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --cc
should compile again. The bootstrap is additionally built by Hydra, so only the GHC bundled libraries will need to be compiled (which is an improvement to before at least).


Question: <ins> { lib , stdenv , fetchFromGitLab , cmake , extra-cmake-modules , pkg-config , qtbase , qtquickcontrols2 , qtx11extras , kdelibs4support , kpipewire , wrapQtAppsHook }: stdenv.mkDerivation (finalAttrs: { pname = "xwaylandvideobridge"; version = "0.2"; src = fetchFromGitLab { domain = "invent.kde.org"; owner = "system"; repo = "xwaylandvideobridge"; rev = "v${finalAttrs.version}"; hash = "sha256-79Z4BH7C85ZF+1Zivs3bTey7IdUnaDKhvZxzL6sDqUs="; }; nativeBuildInputs = [ cmake extra-cmake-modules pkg-config wrapQtAppsHook ]; buildInputs = [ qtbase qtquickcontrols2 qtx11extras kdelibs4support kpipewire ]; meta = { description = "Utility to allow streaming Wayland windows to X applications"; homepage = "https://invent.kde.org/system/xwaylandvideobridge"; license = lib.licenses.gpl2Plus; maintainers = with lib.maintainers; [ stepbrobd ]; platforms = lib.platforms.linux; mainProgram = "xwaylandvideobridge"; }; }) </ins>

Project description This allows applications like Discord that use xwayland to capture Wayland windows. Metadata homepage URL: source URL: license: GPL2+ platforms: Linux
I wanted to test this and packaged it my config repo. I'm not interested in being a maintainer, but I can submit a PR or someone else can feel free to use mine as a base. The project is definitely beta though cause it segfaulted when resizing Dolphin and crashed Plasma entirely.
If this is the wrong place to post, please let me know. I can see the package here under However I'm getting the following error after adding to systemPackages when switching:
I guess you jsut want to "cherry-pick" xwaylandvideobridge from unstable, but the rest of your system follows e.g. stable by default? First you add unstable channel if not already done and refresh the package definitions: Import it in your And then you add it to your systemPackages via .


Question: hash = "sha256-M9AjV954H1w64YGCVxDEGGSnoEbmocG3zwltob6IW04="; }; <ins> patches = [ (fetchpatch { name = "no-deprecated-pkg_resources.patch"; url = "https://gitlab.com/woob/woob/-/commit/3283c4c1a935cc71acea98b2d8c88bc4bf28f643.patch"; hash = "sha256-3bRuv93ivKRxbGr52coO023DlxHZWwUeInXTPqQAeL8="; }) ]; </ins> nativeBuildInputs = [ setuptools pythonRelaxDepsHook

When used through the command line, complains about imports and fails. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
I've opened but haven't had the time to test it quite yet. If you get around to it before me feel free to merge it
I suggest another fix in


Question: easyocr = with python3.pkgs; toPythonApplication easyocr; <del> EBTKS = callPackage ../development/libraries/science/biology/EBTKS { }; </del> ecasound = callPackage ../applications/audio/ecasound { }; edac-utils = callPackage ../os-specific/linux/edac-utils { };

For x8664-darwin, aarch64-darwin: build .#EBTKS x8664-darwin: aarch64-darwin:


Question: { stdenv, lib, fetchurl, runtimeShell , gettext, pkg-config, python3 , avahi, libgphoto2, libieee1284, libjpeg, libpng, libtiff, libusb1, libv4l, net-snmp <del> , curl, systemd, libxml2, poppler </del> <ins> , curl, systemd, libxml2, poppler, gawk </ins> , sane-drivers # List of { src name backend } attibute sets - see installFirmware below:

Describe the bug getting when trying to scan over network (scanning from the , scanner device connected to via usb) To Reproduce Steps to reproduce the behavior: server config: client config: on the : choose the network scanner : stops scanning immediately, server logs have an entry: from Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Guessing here, looking at the commit log for the service definition, apologies for pinging a lot of people: Metadata Please run and paste the result. server (managed via nixpkgs): client: Maintainer information:
I marked this as stale due to inactivity. →
Please test
nice ! will do in few days as I'm moving house :)
Hi just tested it now and it works very well !
approve the pr


Question: done for d in $(grep '^dynamic-library-dirs:' "$packageConfDir"/* | cut -d' ' -f2- | tr ' ' 'n' | sort -u); do <del> for lib in "$d/"*.dylib; do </del> <ins> for lib in "$d/"*.{dylib,so}; do </ins> ln -s "$lib" "$dynamicLinksDir" done done

Describe the bug The recent Haskell generic-builder changes for Darwin (in particular according to bisect) have broken . To Reproduce from a nixpkgs at or later on Darwin. This fails with . Additional context is a pure Haskell package, that depends on , which is what actually uses the C dynamic library. So the problem seems to be that fails to include the C library in its closure. Interestingly, this C library has filename not , even though it looks exactly like a dylib as far as I can tell (I'm not expert in macOS linking): So I can see why would fail to be included into by . However, I don't see why broke it. Nothing to do with the C or Haskell packages involved has changed for months. Updating the generic-builder to include as well as files does fix the problem for me, and seems benign, so I'll submit a PR for that. But I don't feel I understand everything going on here, so I'm opening the issue in case more qualified folks can identify a better root cause fix. Metadata system: host os: multi-user?: sandbox: version: channels(simon): nixpkgs: Maintainer information: Ping from the original changes - thanks for all your efforts!
Just noting here that there is some useful discussion .


Question: (fetchNuGet { pname = "Humanizer.Core.zh-Hant"; version = "2.14.1"; sha256 = "0qxjnbdj645l5sd6y3100yyrq1jy5misswg6xcch06x8jv7zaw1p"; }) (fetchNuGet { pname = "JetBrains.Annotations"; version = "2023.3.0"; sha256 = "0vp4mpn6gfckn8grzjm1jxlbqiq2fglm2rk9wq787adw7rxs8k7w"; }) (fetchNuGet { pname = "Markdig.Signed"; version = "0.34.0"; sha256 = "1jrs5fc8k99mh1kipvvlgwm0qlacrsh82bbpdclb84xz0h6nwwrh"; }) <ins> (fetchNuGet { pname = "Microsoft.ApplicationInsights"; version = "2.21.0"; sha256 = "1q034jbqkxb8lddkd0ijp0wp0ymnnf3bg2mjpay027zv7jswnc4x"; }) </ins> (fetchNuGet { pname = "Microsoft.AspNetCore.JsonPatch"; version = "7.0.0"; sha256 = "1f13vsfs1rp9bmdp3khk4mk2fif932d72yxm2wszpsr239x4s2bf"; }) (fetchNuGet { pname = "Microsoft.AspNetCore.Mvc.NewtonsoftJson"; version = "7.0.0"; sha256 = "1w49rg0n5wb1m5wnays2mmym7qy7bsi2b1zxz97af2rkbw3s3hbd"; }) (fetchNuGet { pname = "Microsoft.Bcl.AsyncInterfaces"; version = "6.0.0"; sha256 = "15gqy2m14fdlvy1g59207h5kisznm355kbw010gy19vh47z8gpz3"; })

Package name: ArchiSteamFarm Latest released version: 5.5.2.3 <!-- Search your package here: --- Current version on the unstable channel: 5.5.0.11 Current version on the stable/release channel: 5.4.12.5 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. -- Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
It helps if I also open the PR when doing the update


Question: ''; */ <del> meta = { </del> <ins> meta = with stdenv.lib; { </ins> description = "GNU's decentralized anonymous and censorship-resistant P2P framework"; longDescription = ''

Not sure if this is known, but I'm seeing the following error when trying to do . System: Fedora 23 Nix version: 1.11.2 Nixpkgs version: 16.09pre81657.


Question: postPatch = '' patchShebangs . <del> # Cannot find ROCm device library, pointless substituteInPlace CMakeLists.txt  --replace "add_subdirectory(tests-v2)" ""  --replace "add_subdirectory(samples)" "" </del> <ins> substituteInPlace tests-v2/featuretests/profiler/CMakeLists.txt  --replace "--build-id=sha1" "--build-id=sha1 --rocm-path=${clr} --rocm-device-lib-path=${rocm-device-libs}/amdgcn/bitcode" substituteInPlace test/CMakeLists.txt  --replace "''${ROCM_ROOT_DIR}/amdgcn/bitcode" "${rocm-device-libs}/amdgcn/bitcode" </ins> ''; <del> postBuild = '' # HSACO aren't being built for some reason substituteInPlace test/cmake_install.cmake  --replace "file(INSTALL DESTINATION "''${CMAKE_INSTALL_PREFIX}/share/rocprofiler/tests-v1" TYPE FILE FILES "" "message("" </del> <ins> postInstall = '' # Why do these not already have the executable bit set? chmod +x $out/lib/rocprofiler/librocprof-tool.so chmod +x $out/share/rocprofiler/tests-v1/test/ocl/SimpleConvolution # Why do these have the executable bit set? chmod -x $out/libexec/rocprofiler/counters/basic_counters.xml chmod -x $out/libexec/rocprofiler/counters/derived_counters.xml </ins> ''; passthru.updateScript = rocmUpdateScript {

When trying to use rocprofv2: This might have something to do with some predefined paths in Steps to reproduce the behavior: an executable with hipcc it with rocprofv2 <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result.
I need to do some work with . need to make a patch that strips. I need to fix itself. I wonder if it's because I'm stripping out the test directories? Also yes, it looks like you're right. You can fix that by prepending too, so I'm not entirely sure it'll work. Try setting `. You may just be able to run it from that as well.
I don't think that removing hsa-amd-aqlprofile-bin is a good idea, because without it, it loses performance counters support. I think there should at least be a rocprof derivation with aqlprofile.
My bad, I forgot to add that the patch is optional.
Right. Could you tell me your test environment and the source of the hip executable (or just some stub) so I can replicate this? I've never actually used rocprofiler.
You can try this, it just prints 10 numbers, it can be compiled with hipcc without any flag. I am using a radeon rx6600m(gfx1032).
see


Question: config = mkIf cfg.enable { <del> assertions = lib.singleton { assertion = cfg.driSupport32Bit -> pkgs.stdenv.isx86_64; message = "Option driSupport32Bit only makes sense on a 64-bit system."; }; </del> <ins> assertions = [ { assertion = cfg.driSupport32Bit -> pkgs.stdenv.isx86_64; message = "Option driSupport32Bit only makes sense on a 64-bit system."; } { assertion = cfg.driSupport32Bit -> (config.boot.kernelPackages.kernel.features.ia32Emulation or false); message = "Option driSupport32Bit requires a kernel that supports 32bit emulation"; } ]; </ins> systemd.tmpfiles.rules = [ "L+ /run/opengl-driver - - - - ${package}"

I currently cannot execute any 32 bit Linux binaries on my 64 bit system and this breaks updates, since I have 32 bit support enabled in the nix options: I remember that this worked about a week ago, so something has changed. I am new to NixOS, so its possible that I have done something wrong. I used ArchLinux for about 9 years before that and now NixOS for just 3 months and its concepts are still foreign for me. As a long term linux user (about 15 years) I do feel a bit out of place in NixOS. So I am not sure how to fix that myself. Not sure. I have wine installed and support for 32 bit games enabled. Then I normally do just 'nixos-rebuild switch --upgrade' to upgrade, and sometimes 'nix-channel --update'. I also regularly do 'nix-collect-garbage -d'. No idea if that is reproducible or not.
This might be from Could you see if it works without that commit? Also verify that /nix/store/4qj9vzggfzsc34ci79ckaim5cjrwc6ns-bash-4.4-p23/bin/bash executes. I can run it on my system. You can run this to verify that your store is not corrupted:
I solved it now for me. Instead of using the 'linuxPackagestestinghardened' 4.20 linux kernel I switched back to 'linuxPackages419' 4.19.2 kernel and now executing 32 binaries work again. So I guess the hardened kernel does not support executing 32 bit binaries. Does it make sense to have some kind of visible warning here? I normally would not have used the hardened kernel, if that wouldn't have been the only 4.20 version is I get. Its not clear to me when and how those changes in master appear in my nixpkgs/nixos channel (I am on unstable). I would like to use the master branch directly, but I haven't figured out how to best do that yet.
The same here, hardened kernel 4.18.17 and build failed.


Question: config = mkIf cfg.enable { <del> assertions = lib.singleton { assertion = cfg.driSupport32Bit -> pkgs.stdenv.isx86_64; message = "Option driSupport32Bit only makes sense on a 64-bit system."; }; </del> <ins> assertions = [ { assertion = cfg.driSupport32Bit -> pkgs.stdenv.isx86_64; message = "Option driSupport32Bit only makes sense on a 64-bit system."; } { assertion = cfg.driSupport32Bit -> (config.boot.kernelPackages.kernel.features.ia32Emulation or false); message = "Option driSupport32Bit requires a kernel that supports 32bit emulation"; } ]; </ins> systemd.tmpfiles.rules = [ "L+ /run/opengl-driver - - - - ${package}"

building '/nix/store/6h9asn7rc93dbwfcs6xaj3k0qgxmg0vh-libtxcdxtn-'... while setting up the build environment: executing '/nix/store/xgf4vra77qrww0n228hd80jsdccdp54w-bash-4.4-p23/bin/bash': Exec format error builder for '/nix/store/6h9asn7rc93dbwfcs6xaj3k0qgxmg0vh-libtxcdxtn-' failed with exit code 1 building '/nix/store/cfwj5yjby2xvagyj69zd1yx8hdhi27ay-'... cannot build derivation '/nix/store/maynq4fxxjc217figygdrgg5q9xnw6yy-mesa-drivers+txc-': 1 dependencies couldn't be built cannot build derivation '/nix/store/wv9b4ayvgnpkvwz81zkk0lm9w4v5pd1y-opengl-drivers-': 1 dependencies couldn't be built cannot build derivation '/nix/store/q61vc27rdbcsrhxifiw89w1qdjax1amh-nixos-system-brix-': 1 dependencies couldn't be built error: build of '/nix/store/q61vc27rdbcsrhxifiw89w1qdjax1amh-nixos-system-brix-' failed Thanks
Maybe the hardened kernel shouldn't set when NixOS' is an ?
It should be 64 bit for the x86_64-linux stdenv. But some packages use the i686 stdenv.
I am not too familiar with stdenv. Is this expected behaviour that a 64-bit system uses 32-bit binaries? This issue is reproducible building as well.
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity.


Question: config = mkIf cfg.enable { <del> assertions = lib.singleton { assertion = cfg.driSupport32Bit -> pkgs.stdenv.isx86_64; message = "Option driSupport32Bit only makes sense on a 64-bit system."; }; </del> <ins> assertions = [ { assertion = cfg.driSupport32Bit -> pkgs.stdenv.isx86_64; message = "Option driSupport32Bit only makes sense on a 64-bit system."; } { assertion = cfg.driSupport32Bit -> (config.boot.kernelPackages.kernel.features.ia32Emulation or false); message = "Option driSupport32Bit requires a kernel that supports 32bit emulation"; } ]; </ins> systemd.tmpfiles.rules = [ "L+ /run/opengl-driver - - - - ${package}"

Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . on the on .
This should be resolved by - please reopen if there's still a problem.


Question: stdenv.mkDerivation rec { pname = "rtl-sdr"; <del> version = "0.6.0"; </del> <ins> version = "0.8.0"; </ins> <del> src = fetchgit { url = "git://git.osmocom.org/rtl-sdr.git"; rev = "refs/tags/${version}"; sha256 = "0lmvsnb4xw4hmz6zs0z5ilsah5hjz29g1s0050n59fllskqr3b8k"; </del> <ins> src = fetchFromGitHub { owner = "librtlsdr"; repo = "librtlsdr"; rev = "v${version}"; sha256 = "1fgxlkgmdchbrf0nn98ivjr6css5hak3608nr4xrf2qzf7xy2kdk"; </ins> }; postPatch = ''

<!-- Note that these are hard requirements --<!-- You can use the "Go to file" functionality on GitHub to find the package Then you can go to the history for this package Find the latest "packagename: oldversion -newversion" commit The "newversion" is the current version of the package --- <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- name: rtl-sdr <!-- The current version can be found easily with the same process as above for checking the master branch If an open PR is present for the package, take this version as the current one and link to the PR --current version: 0.6.0 desired version: 0.8.0 <!-- Search your package here: If no maintainer is listed for your package, tag the person that last updated the package --maintainers: This package is currenty using but it should probably switch to Please tag this issue in your PR.


Question: keepassx2 = callPackage ../applications/misc/keepassx/2.0.nix { }; keepassxc = libsForQt5.callPackage ../applications/misc/keepassx/community.nix { }; <ins> keeweb = callPackage ../applications/misc/keeweb { }; </ins> inherit (gnome3) evince; evolution-data-server = gnome3.evolution-data-server; evolution-ews = callPackage ../applications/networking/mailreaders/evolution/evolution-ews { };

Project description Keeweb webapp is a browser and desktop password manager compatible with KeePass databases. It features an Electron-based desktop application. Metadata homepage URL: source URL: license: mit platforms: Electron (unix, linux, darwin, windows) and Web
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . on the on .
still important to me
While PR to nixpkgs is still open, I've keeweb to NUR repo () as well.


Question: , buildPythonApplication , fetchFromGitHub , gitMinimal <del> , arrow , click , sh , wheel </del> <ins> , python3 </ins> }: <ins> let py = python3.override { packageOverrides = self: super: { click = super.click.overridePythonAttrs (oldAttrs: rec { version = "7.1.2"; src = oldAttrs.src.override { inherit version; sha256 = "06kbzd6sjfkqan3miwj9wqyddfxc2b6hi7p5s4dvqjb3gif2bdfj"; }; }); arrow = super.arrow.overridePythonAttrs (oldAttrs: rec { version = "1.0.3"; src = oldAttrs.src.override { inherit version; sha256 = "0793badh4hgbk2c5g70hmbl7n3d4g5d87bcflld0w9rjwy59r71r"; }; }); sh = super.sh.overridePythonAttrs (oldAttrs: rec { version = "1.14.1"; src = oldAttrs.src.override { inherit version; sha256 = "13hxgifab9ichla13qaa7sh8r0il7vs1r21js72s0n355zr9mair"; }; }); }; }; in with py.pkgs; </ins> buildPythonApplication rec { pname = "gitlint"; version = "0.15.1";

Describe the bug Gitlint fails to build due to a dependency on click v7.1.2 To Reproduce Steps to reproduce the behavior: Expected behavior Successful build of gitlint Screenshots ! Additional context Looks like click got separated into two packages, one where it updated to 8.0.1 and is present in and one where it was kept back for . Notify maintainers Metadata system: host os: multi-user?: sandbox: version: channels(david): nixpkgs: Maintainer information:
Yeah this is interesting. As far as I know, things shouldn't just break like this. I assume this is a regression, as it used to build, it seems a LOT of stuff has started breaking.
doesn't work with later releases. We have 8.0.1 and is pinning all releases (affects also , I guess). It would requires that is overriding the releases.
could you please give a try?
Looks to be good on my system. Runs as intended with


Question: <ins> { lib , stdenv , fetchurl , pkgs , appimageTools }: let pname = "pinokio"; version = "1.3.4"; src = fetchurl { x86_64-darwin = { url = "https://github.com/pinokiocomputer/pinokio/releases/download/${version}/Pinokio-${version}.dmg"; hash = "sha256-Il5zaVWu4icSsKmMjU9u1/Mih34fd+xNpF1nkFAFFGo="; }; x86_64-linux = { url = "https://github.com/pinokiocomputer/pinokio/releases/download/${version}/Pinokio-${version}.AppImage"; hash = "sha256-/E/IAOUgxH9RWpE2/vLlQy92LOgwpHF79K/1XEtSpXI="; }; }.${stdenv.system} or (throw "Unsupported system: ${stdenv.system}"); appimageContents = appimageTools.extractType2 { inherit pname version src; }; meta = { homepage = "https://pinokio.computer"; description = "Browser to install, run, and programmatically control ANY application automatically"; license = lib.licenses.mit; maintainers = with lib.maintainers; [ ByteSudoer ]; platforms = [ "x86_64-darwin" "x86_64-linux" ]; mainProgram = "pinokio"; sourceProvenance = with lib.sourceTypes; [ binaryNativeCode ]; }; in if stdenv.isDarwin then stdenv.mkDerivation { inherit pname version src meta; sourceRoot = "."; nativeBuildInputs = with pkgs; [ undmg ]; installPhase = '' runHook preInstall mkdir -p "$out/Applications" mv Pinokio.app $out/Applications/ runHook postInstall ''; } else appimageTools.wrapType2 { inherit pname version src meta; extraInstallCommands = '' mkdir -p $out/share/pinokio cp -a ${appimageContents}/{locales,resources} $out/share/pinokio cp -a ${appimageContents}/usr/share/icons $out/share/ install -Dm 444 ${appimageContents}/pinokio.desktop -t $out/share/applications ''; } </ins>

Project description The elevator pitch: But it's mostly used to install and run AI applications pretty easily, the creator made this video: Which is the same as on the homepage. Metadata homepage URL: https://pinokio.computer/ source URL: license: MIT platforms: linux Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
I created a PR based on this packaging request.


Question: postInstall = '' install -Dm755 -t $client/bin $out/bin/tsh <del> wrapProgram $client/bin/tsh --prefix PATH : ${xdg-utils}/bin wrapProgram $out/bin/tsh --prefix PATH : ${xdg-utils}/bin </del> <ins> wrapProgram $client/bin/tsh --prefix PATH : ${lib.makeBinPath [ xdg-utils ]} wrapProgram $out/bin/tsh --prefix PATH : ${lib.makeBinPath [ xdg-utils ]} </ins> ''; doInstallCheck = true;

Describe the bug In order to be able to invoke the command from teleport is using  call. There is a wrapper around to bring into PATH . That means is invoked from without wrapper and the browser page never opens (due to missing ). To Reproduce Steps to reproduce the behavior: Expected behavior The path to the wrapper must be persisted in the Screenshots If applicable, add screenshots to help explain your problem. Additional context Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Metadata Please run and paste the result. Maintainer information:


Question: libsForQt5 = pkgs.plasma5Packages; inherit (libsForQt5) kdeGear kdeFrameworks plasma5; <del> inherit (pkgs) writeText; </del> inherit (lib) getBin optionalString literalExpression mkRemovedOptionModule mkRenamedOptionModule mkDefault mkIf mkMerge mkOption types; <del> ini = pkgs.formats.ini { }; gtkrc2 = writeText "gtkrc-2.0" '' # Default GTK+ 2 config for NixOS Plasma 5 include "/run/current-system/sw/share/themes/Breeze/gtk-2.0/gtkrc" style "user-font" { font_name="Sans Serif Regular" } widget_class "*" style "user-font" gtk-font-name="Sans Serif Regular 10" gtk-theme-name="Breeze" gtk-icon-theme-name="breeze" gtk-fallback-icon-theme="hicolor" gtk-cursor-theme-name="breeze_cursors" gtk-toolbar-style=GTK_TOOLBAR_ICONS gtk-menu-images=1 gtk-button-images=1 ''; gtk3_settings = ini.generate "settings.ini" { Settings = { gtk-font-name = "Sans Serif Regular 10"; gtk-theme-name = "Breeze"; gtk-icon-theme-name = "breeze"; gtk-fallback-icon-theme = "hicolor"; gtk-cursor-theme-name = "breeze_cursors"; gtk-toolbar-style = "GTK_TOOLBAR_ICONS"; gtk-menu-images = 1; gtk-button-images = 1; }; }; kcminputrc = ini.generate "kcminputrc" { Mouse = { cursorTheme = "breeze_cursors"; cursorSize = 0; }; }; </del> activationScript = '' ${set_XDG_CONFIG_HOME}

On a fresh install, lightdm is writing several files to / These should probably be either in /root or in some other runtime .cache and .gtkrc-2.0 Steps to reproduce the behavior: NixOS with X enabled, using the default lightdm display manager. soon as the display manager starts, files are written to / That my / will stay clean. If I stop display-manager.service, delete the files, then restart it, the files return. Looking in my /etc/passwd, shows that lightdm does have a home directory set at /var/lib/lightdm. But for some reason these files are not being written there as they should be. Please run and paste the result.
I just realized after I posted this that I used an old iso from 21.11 to install. So I reinstalled with 22.05, and this still happens
Are you using KDE Plasma? Can you reproduce the issue with SDDM?
I am using KDE. The issue also happens with SDDM. I went ahead and tested GDM as well (while still using plasma,) and it does not happen.
I can reproduce. For my case, in I saw one single file with prefix, after some search it is likely cache for kbuildsycoca5 (). I have no idea what that package does so far though.
All the files in my / are exactly the files being generated in
I can reproduce this with Plasma 5/SDDM on nixpkgs-unstable.
I also observed these files, tracked down the problem and prepared a pull-request that -- hopefully -- fixes the issue: . I came to the conclusion that it is best to entirely remove the code that creates those file. However, I feel a bit unconfident about my solution, so it would be good to have it tested by more users. If you can spare the time, please have a look at my draft pull request, maybe try my solution, and feel free to report back or even drop a review. Thanks a lot!


Question: , libsodium , cffi , hypothesis <ins> , six </ins> }: buildPythonPackage rec {

The package can't be cross compiled to other architectures, tested: raspberry-pi and aarch-multiplatform Steps to reproduce the behavior: It should be compiled. This doesn't seem to a nix-only problem, but still influenced by nix. Doesn't compile on arm: AIX: Some missing support for aarch64: Doesn't compile via qemu for arm32v7 and arm64v8: The error I'm having doesn't seem to show up anywhere else though. And a few of those threads also post work arounds. There is no maintainer. $ nix-shell -p nix-info --run "nix-info -m" this path will be fetched (0.05 MiB download, 0.28 MiB unpacked): /nix/store/xq77wmzk8d306anyk9rsvl4i4h7ihchw-bash-interactive-4.4-p23-dev copying path '/nix/store/xq77wmzk8d306anyk9rsvl4i4h7ihchw-bash-interactive-4.4-p23-dev' from ''... system: host os: multi-user?: sandbox: version: channels(root): channels(nix): nixpkgs: Maintainer information:
It seems to be that every package that declares in it's is failing to cross compile. If I put it in it fails with another error though: Should I open another, conglomerate, issue for all the other packages?


Question: <del> #! @bash@/bin/bash set -eo pipefail PATH=@coreutils@/bin:$PATH export CLASSPATH=$(find @outFreenet@/deps/ -name "*.jar"|grep -v bcprov-jdk15on-1.48.jar|tr $'n' :) CLASSPATH=$CLASSPATH:@outFreenet@/share/freenet/freenet-ext.jar:@outFreenet@/share/freenet/freenet.jar export FREENET_HOME="$HOME/.local/share/freenet" if [ -n "$XDG_DATA_HOME" ] ; then FREENET_HOME="$XDG_DATA_HOME/freenet" fi mkdir -p -- $FREENET_HOME cp -u -- @seednodes@ $FREENET_HOME/seednodes.fref chmod u+rw -- $FREENET_HOME/seednodes.fref cd -- $FREENET_HOME exec @jre@/bin/java -Xmx1024M freenet.node.NodeStarter "$@" </del>

Freenet installs successfully but fails to run for both the service and the package with Steps to reproduce the behavior: Failure with Or alternatively with the service = true; to config For Freenet to start and be able to access setup wizard on 127.0.0.1:8888 Add any other context about the problem here. Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:


Question: inherit (darwin.apple_sdk.frameworks) AppKit Carbon Cocoa IOKit OSAKit Quartz QuartzCore WebKit ImageCaptureCore GSS ImageIO; <ins> stdenv = if stdenv.cc.isClang then llvmPackages_6.stdenv else stdenv; </ins> }; emacsPackagesFor = emacs: self: let callPackage = newScope self; in rec {

crashes instantly and won't start with the new Darwin stdenv. My is bundled with quite a few Emacs packages, so this may be a bit hard to isolate, but hopefully it's reproducible anyway. Build with recent . This is with . Partial Problem Report included below. I've elided most of it for privacy reasons; let me know if you need more info:
Can reproduce on current "master". "open " won't start anything, but I don't get a crash report, nothing appears in ~/Library/Logs/DiagnosticReports/. edit: got my crash report a bit later, it's the same stacktrace as reported
The regular works.
Looks like libdispatch is too old. Working on it now
I've opened up a draft that I think might fix it: I'm building it now, but if you have a beefy machine it might help to try to build it as well
I'm afraid that doesn't fix the issue. Here's a gist with the new crash, which looks more or less identical to the one I posted above: I built this with my fork here: I'm trying to confirm that this has been built with the updated . I'm having trouble tracking it down. Can you tell me how to figure it out?
Here's a simpler repro case. This happens when I try to build using and the melpa Emacs pacakge:
So the short term fix is just to use llvm6. At some point, I'll try to dig into what is actually happening, but I suspect something has changed in how llvm handles threads.
Thank you! I’m happy to use a work-around and didn’t expect you to address this complex issue so quickly! I was resigned to using the vanilla emacs for the foreseeable future, so this is a very welcome development.
I can confirm that this appears to be fixed in my Hydra builds, as well.


Question: "CXX_${rust.toRustTarget stdenv.buildPlatform}"="${cxxForBuild}"  "CC_${rust.toRustTarget stdenv.hostPlatform}"="${ccForHost}"  "CXX_${rust.toRustTarget stdenv.hostPlatform}"="${cxxForHost}"  <del> cargo build  </del> <ins> cargo build -j $NIX_BUILD_CORES  </ins> ${stdenv.lib.optionalString (buildType == "release") "--release"}  --target ${rustTarget}  --frozen ${concatStringsSep " " cargoBuildFlags}

Describe the bug Building packages that use always try to use all cores, independent of ( argument to nix-build) To Reproduce Run , and observe that it spawns many rustc processes (depending on the amount of available processors). Expected behavior The function should pass as argument to cargo. Additional notes Fixing this will probably cause a rebuild of all rust packages, so should we batch this with other changes to the cargo builder? Notify maintainers
has been merged


Question: gitless = callPackage ../applications/version-management/gitless { python = python3; }; <ins> gitlint = python3Packages.callPackage ../tools/misc/gitlint { }; </ins> gitter = callPackage  ../applications/networking/instant-messengers/gitter { }; gjs = callPackage ../development/libraries/gjs { };

Gitlint CLI tool and pre-commit hook plugin to lint commit messages with presets Metadata homepage URL: source URL: license: MIT platforms: linux, unix, darwin (python3)
This isn't my library, I simply requested for this package. should i still be included as maintainer?
Also, do I make a PR with the code above? Or is there already a PR
There is no PR yet. New packages need a maintainer and I don't want to maintain this.
I'll do it. I'll send in a PR now.


Question: ''; }; <ins> upsmon = mkOption { default = {}; description = lib.mdDoc '' Options for the `upsmon.conf` configuration file. ''; type = types.submodule upsmonOptions; }; upsd = mkOption { default = {}; description = lib.mdDoc '' Options for the `upsd.conf` configuration file. ''; type = types.submodule upsdOptions; }; </ins> ups = mkOption { default = {}; # see nut/etc/ups.conf.sample

Describe the bug I'm trying to use NixOS in a UPS client (not server). When , the and services shouldn't be running. There is a note that says that is not used currently. To Reproduce Steps to reproduce the behavior: Error: and fail. Expected behavior only upsmon should be running Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Metadata Maintainer information: See also
Looks like there's a pretty simple workaround:
I marked this as stale due to inactivity. →


Question: ''; }; <ins> upsmon = mkOption { default = {}; description = lib.mdDoc '' Options for the `upsmon.conf` configuration file. ''; type = types.submodule upsmonOptions; }; upsd = mkOption { default = {}; description = lib.mdDoc '' Options for the `upsd.conf` configuration file. ''; type = types.submodule upsdOptions; }; </ins> ups = mkOption { default = {}; # see nut/etc/ups.conf.sample

Describe the bug The following snippet: results in services failing to start due to missing config files etc. : : ( fails too, but that could be down to the fact that I haven't plugged the UPS in yet -- but for the record, it complains ) Expected behavior I'd expect the services to start successfully (and probably complain about the missing actual UPS). Notify maintainers (The UPS module appears to have received only drive-by changes for the last several years, so no idea who to bug personally). Metadata system: host os: multi-user?: sandbox: version: channels(root): nixpkgs: Maintainer information:
OK, should've read the whole module: I'm supposed to supply the missing /etc/nut files myself because it's unwise to keep them in the store (they could contain passwords and whatnot, I guess?). Declaring (in the service definitions) the state directory to be but creating for the purpose appears to be a real bug, though :)
Also (sorry for the semi-off-topic) what are best practices for referencing hand-written config files without their contents winding up in the store? Double-symlinking? If this is documented somewhere, then I haven't found where.
I was struggling with the same problem as until I noticed this bug report. After copying and editing , , and from to (and setting on all those files), I was able to get it to work. I think this should be more discoverable. If it's not appropriate to copy those sample files to on the users behalf, there should at least be detailed instructions on the option to explain what else needs to be done.
I marked this as stale due to inactivity. →
Agreed this should be more discoverable. Perhaps at least could be defaulted to empty and written, since I seem to be getting away without anything in there. In case it helps anyone, I got it working with something like this:
I was hit this bug today, too. Maybe we can fix it by using a startup unit that handles the secrets and setup the state directories like nextcloud or syncthing do
Been working on today and wanted to put some notes here. Using version 2.7.4. First, isn't used by for PIDs and it will try to write to .


Question: ''; }; <ins> upsmon = mkOption { default = {}; description = lib.mdDoc '' Options for the `upsmon.conf` configuration file. ''; type = types.submodule upsmonOptions; }; upsd = mkOption { default = {}; description = lib.mdDoc '' Options for the `upsd.conf` configuration file. ''; type = types.submodule upsdOptions; }; </ins> ups = mkOption { default = {}; # see nut/etc/ups.conf.sample

flags , , may be needed instead of environment variables until a 2.7.5 release. Ref: Using for debug makes it non-forking, requiring a change to the systemd unit . I was able to get to run as non-root: I'm still working on understanding how to manage state directories in NixOS but this was needed:
I set out to get my UPS (cyberpower CP1500 AVR UPS) working with NixOS today. This was the first issue I came across, I figured this was the best place to share my configuration. I probably made this more complex than it needed to be because I have no idea what I am doing, and it is definitely not secure; one problem at a time.
Not stale; still relevant
Thanks for providing your standalone config! I learned a ton tweaking it into a netserver config! The below config creates a working NUT netserver that other machines on your local network can be connected to. The only thing I have yet to figure out is a secure way to include passwords in .nix files that won't show up if I push my local copy to github. Any ideas? If you want to tweak when NUT shuts down your computers you can modify the values of " = <percentage" and " = <seconds" under "directives". SHUTDOWNCMD will be triggered when both conditions are met. The "ignorelb" directive is necessary to have NUT ignore the UPS's defaults. Anyone using this config may want to make sure SHUTDOWNCMD and NOTIFYCMD point to the correct binaries in their filesystem. One other thing of note is to check the value of the "schedulerRules" field under below. You must give it the path to your file. I just put a copy of it inside my /etc/nixos. Could probably add another variable to hold the path for convenience. `
For secrets in nix config, I think the current recommendation is to put it in a separate file and not include it in the repo. See also
I have been using sops-nix to commit encrypted passwords to my NixOS repo, but I have yet to put in the elbow grease to make this work with my upsmon password.
is my attempt at making generate the config files necessary for basic operation. If you are using , could you try out the changes and leave a review?


Question: , libiconv ? null, ncurses <del> , enableDwarf ? !stdenv.targetPlatform.isDarwin && !stdenv.targetPlatform.isWindows, elfutils # for DWARF support </del> , useLLVM ? !stdenv.targetPlatform.isx86 || (stdenv.targetPlatform.isMusl && stdenv.hostPlatform != stdenv.targetPlatform) , # LLVM is conceptually a run-time-only depedendency, but for # non-x86, we need LLVM to bootstrap later stages, so it becomes a

Our can no longer link executables. For example: This issue is present in current versions of . Compiling and linking works fine with an older revision, say . It looks like this might be related to some change in binutils, maybe?
This is probably from
Yes, it is. came to the same conclusion.
This probably is GHC bug though. Things like gmp and libiconv get their paths hardcoded so this isn't a problem. I would expect the same treatment for elfutils. should provide a arg.
/cc
I guess now I know why there's a patch in branch.
I'll reopen the PR fixing the linking issues.
I opened while we wait on upstream fix.
Which one, from
Yes, although it doesn't help. See
Yes, it would have surprised me a bit if it helped against that symptom -- my patch fixes that DWARF-enabling is skipped completely.
I'm surprised this worked for you back then and now there are linking errors.


Question: owner = "Chia-Network"; repo = "chia-blockchain"; rev = version; <del> sha256 = "sha256-yS0/Fy2dj8VIbwv2J9sehP0VN0f/YDxu1k9WkaeEz8M="; </del> <ins> fetchSubmodules = true; sha256 = "sha256-nK/Zk2zgIdrRtw3+VkUXQWfI9j29XFDOR95Dvbn07eA="; </ins> }; patches = [

chia farmer fails to register with a pool over https. Relevant log contains: Steps to reproduce the behavior: a new-style chia plot with a pool up a farming node Chia should successfully run. If applicable, add screenshots to help explain your problem. Based on , the missing file is . Upstream normally but this appears to fail here. (This is in an LXC container so it's a bit weird) system: host os: multi-user?: sandbox: version: nixpkgs: Maintainer information:


Question: <xi:include href="emacs.section.xml" /> <xi:include href="firefox.section.xml" /> <xi:include href="fish.section.xml" /> <del> <xi:include href="ibus.xml" /> </del> <ins> <xi:include href="ibus.section.xml" /> </ins> <xi:include href="kakoune.section.xml" /> <xi:include href="linux.section.xml" /> <xi:include href="locales.section.xml" />

This issue tracks the conversion of from Docbook to CommonMark per . If you intend to work on this conversion, please comment below! here that you intend to work on it. (Please also post if you stop working on it.) a new branch of nixpkgs master. : change to . to . the contents from Docbook to . Follow . Use existing sections for inspiration. from the folder to build the manual. the manual on your computer at after running from folder: it looks good, submit a PR and reference this issue.
Hi Opened PR for this.


Question: })) ]; <del> postFixup = '' </del> <ins> postFixup = let libPath = lib.makeLibraryPath ([ libglvnd libxkbcommon xorg.libXcursor xorg.libXext xorg.libXrandr xorg.libXi ] ++ lib.optionals enableWayland [ wayland ]); in '' </ins> wrapProgram $out/bin/neovide  <del> --prefix LD_LIBRARY_PATH : ${lib.makeLibraryPath [ libglvnd libxkbcommon wayland xorg.libXcursor xorg.libXext xorg.libXrandr xorg.libXi ]} </del> <ins> --prefix LD_LIBRARY_PATH : ${libPath} </ins> ''; postInstall = ''

Neovide fails to install via Steps to reproduce the behavior: up a terminal (currently I'm on aarch64-darwin, but I think this should be reproducible on different platforms) (or use home-manager/nix-darwin/nixOS) for it to give the mentioned error Neovide should install and run as expected <img width="1398" alt="image" src="https://user-"(text form) Might be a result of this: Please run and paste the result. Maintainer information:
Can you try this?


Question: checkInputs = [ chex cloudpickle <ins> dill </ins> dm-tree jaxlib pytest-xdist

Build of failed on x86_64-linux as of . Maintainer cc: Other cc: n/a nixpkgs at commit This issue was automatically generated by . that created this issue. Internal tag:


Question: # May fail due to parallelism, see: # https://github.com/astropy/astropy/issues/15441 "TestUnifiedOutputRegistry" <ins> # More flaky tests, see: https://github.com/NixOS/nixpkgs/issues/294392 "test_sidereal_lon_independent" "test_timedelta_full_precision_arithmetic" </ins> ]; meta = {

Build of failed on x86_64-linux as of . This is currently breaking . maintainers cc: python311Packages.astropy maintainers cc: Other cc: n/a nixpkgs at commit Contents of : This issue was automatically generated by . that created this issue. Internal tags: -
Looks like may be the problematic line. Looks like a flaky test, we should prob disable it.
seems to fix this. If anyone wants to review it you are welcome. I will merge it otherwise myself because CI is green there.


Question: <del> {fetchzip}: { plugins.civicrm = fetchzip rec { name = "civicrm"; </del> <ins> {fetchzip, stdenv, lib}: { plugins.civicrm = stdenv.mkDerivation rec { pname = "civicrm"; </ins> version = "5.56.0"; <del> url = "https://storage.googleapis.com/${name}/${name}-stable/${version}/${name}-${version}-wordpress.zip"; hash = "sha256-XsNFxVL0LF+OHlsqjjTV41x9ERLwMDq9BnKKP3Px2aI="; </del> <ins> src = fetchzip { inherit version; name = pname; url = "https://storage.googleapis.com/${pname}/${pname}-stable/${version}/${pname}-${version}-wordpress.zip"; hash = "sha256-XsNFxVL0LF+OHlsqjjTV41x9ERLwMDq9BnKKP3Px2aI="; }; meta.license = lib.licenses.agpl3Only; </ins> }; <del> themes.geist = fetchzip rec { name = "geist"; </del> <ins> themes.geist = stdenv.mkDerivation rec { pname = "geist"; </ins> version = "2.0.3"; <del> url = "https://github.com/christophery/geist/archive/refs/tags/${version}.zip"; hash = "sha256-c85oRhqu5E5IJlpgqKJRQITur1W7x40obOvHZbPevzU="; </del> <ins> src = fetchzip { inherit version; name = pname; url = "https://github.com/christophery/geist/archive/refs/tags/${version}.zip"; hash = "sha256-c85oRhqu5E5IJlpgqKJRQITur1W7x40obOvHZbPevzU="; }; meta.license = lib.licenses.gpl2Only; </ins> }; }

The package with that are automatically fetched carry no license. ` cc
Poking upstream does not seem to yield anything. They did indicate they wouldn't support this use case, so what are you expecting from them?
I talked to the authors of wp4nix and they are happy for new contributions. It would be nice if the wp4nix script would somehow handle license informations, for example by manually defining them. Not quite sure yet how to implement it
If we don't know the licenses to these packages we honestly cannot keep them around. For example, it is absolutely unclear, whether we have a license to even redistribute them. Of course upstream will take patches, but they're not exactly in the same boat we are. I think your attitude towards the whole licensing situation around wp4nix/nc4nix and its resulting packages is alarming.
As written : Fixing this for Wordpress packages and themes (wp4nix) and Nextcloud apps (nc4nix) in a foreseeable time exceeds my skills and competence. Therefore I would like to offer to add a flag to these package sets and remove them for the next release 23.11 if it's not resolved by then.
Couldn't we mark them as unfree so they don't get cached on hydra but people can still use them if they want? Unfortunately it seems like the wordpress plugins repository doesn't seem to provide the license information in an easy manner. And I don't know whether it is stored somewhere else or can even be extracted from the derivation without import-from-derivation.
Actuallly we seem to be safe in theory. claims
In an ideal world, that would hold true, but it is up to the user and distributor to validate the final outcome. I therefore think this situation remains unresolved.


Question: # verifies: #   1. nginx generates config file with shared http context definitions above #      generated virtual hosts config. <ins> #   2. whether the ETag header is properly generated whenever we're serving #      files in Nix store paths </ins> <del> import ./make-test.nix ({ pkgs, ...} : { </del> <ins> import ./make-test.nix ({ pkgs, ... }: { </ins> name = "nginx"; meta = with pkgs.stdenv.lib.maintainers; { maintainers = [ mbbx6spp ]; }; <del> nodes = { webserver = { ... }: { services.nginx.enable = true; services.nginx.commonHttpConfig = '' </del> <ins> nodes = let commonConfig = { pkgs, ... }: { services.nginx.enable = true; services.nginx.commonHttpConfig = '' </ins> log_format ceeformat '@cee: {"status":"$status",' '"request_time":$request_time,' '"upstream_response_time":$upstream_response_time,'

If you serve files from , nginx will set last-modified header to unix timestamp 1. The result is that browser will cache indefinitely. Not sure what we should do about it really, following nginx configuration helps:
Why do you need to turn etag off?
Ah, I see. nginx's etags aren't hashes.
I wonder if we could find a way to pull the hash out of the nix store path and put it into an etag header.
Thanks for finding this. I've been having issues with broken caching on my nginx/nixos server. Even when the files on the server were updated (files in the nix store), the browser was told that no change had happened. If I'm understanding this correctly, since nginx's etags are based on filesystem modification time; you can't have proper cache invalidation (ie. it will always send 304 not modified). Or is there a workaround?
+1 this is a problem. And turning off etag seems like overkill. Is there some way to 1) set the date on a file so that Nginx can pick it up, or 2) do something else awesome?
Is the zero-timestamp rule set in stone in Nix, or is there some way to override it if you really want a file in /nix/store to have a particular timestamp?
I think we could get away with: It's not perfect, as it will change on each Nix evaluation instead of being content addressed. Another way would be to turn the store path passed to nginx directive to translate into an etag.
The etag function is at called from and . Making it dependent on the realpath of the file seems doable.
Explanation how to configure nginx to use the hash from the nix path:
In my testing, this sends the correct etag, but does not send the 304 not modified, when the etag matches. Also, the header gets stripped out when compression is enabled.
It's working perfectly for me. I've gzip compression enabled, the etag header is sent and the browser gets a 304 when querying the header.
Nice! An example with a directory would be more common:
I've to correct what I said. your statement seems to be correct. What happens in my case is that Cloudflare is actually handling the caching of the ETag correctly, not nginx.


Question: # verifies: #   1. nginx generates config file with shared http context definitions above #      generated virtual hosts config. <ins> #   2. whether the ETag header is properly generated whenever we're serving #      files in Nix store paths </ins> <del> import ./make-test.nix ({ pkgs, ...} : { </del> <ins> import ./make-test.nix ({ pkgs, ... }: { </ins> name = "nginx"; meta = with pkgs.stdenv.lib.maintainers; { maintainers = [ mbbx6spp ]; }; <del> nodes = { webserver = { ... }: { services.nginx.enable = true; services.nginx.commonHttpConfig = '' </del> <ins> nodes = let commonConfig = { pkgs, ... }: { services.nginx.enable = true; services.nginx.commonHttpConfig = '' </ins> log_format ceeformat '@cee: {"status":"$status",' '"request_time":$request_time,' '"upstream_response_time":$upstream_response_time,'

So this approach is completely useless without external caching. I'll investigate further and see if I can come up with a solution.
Here is a patch: If real path (after dereferencing symlinks) of is in Nix store, it will use path's hash as ETag. For example: I'll take some time to double check everything and only then send a PR. However, feel free to test: nix { pkgs, ... }: { = { enable = true; package = with pkgs; nginx.overrideAttrs (super: { patches = (super.patches or []) ++ [(fetchpatch { url = ; sha256 = "16pa1vwcm7kibkjsxpk3szaa2vnxdinml6v0fp4038i2qaav113k"; })]; }); }; }
This is really great! or anyone, do you have a moment to write an explanation of this new feature and its practical ramifications for anyone configuring an nginx server? Since it isn't typical nginx behavior, I think the nixos manual should explain it somewhere so it doesn't catch people by surprise.
I think is a good explanation, just needs to be put into the manual.
Cool, submitted .


Question: <ins> { lib , fetchFromGitHub , mkDerivation , breeze-icons , breeze-qt5 , cmake , extra-cmake-modules , kcodecs , kconfig , kcoreaddons , kfilemetadata , ki18n , kiconthemes , kio , kio-extras , kirigami2 , kxmlgui , mpv , pkg-config , qqc2-desktop-style , qtbase , qtquickcontrols2 , qtwayland , youtube-dl }: mkDerivation rec { pname = "haruna"; version = "0.6.1"; src = fetchFromGitHub { owner = "g-fb"; repo = "haruna"; rev = version; sha256 = "sha256-8MauKmvQUwzq4Ssmm6g7/y6ADkye+eg/zyR3v/Wu848="; }; buildInputs = [ breeze-icons breeze-qt5 kcodecs kconfig kcoreaddons kfilemetadata ki18n kiconthemes kio kio-extras kirigami2 kxmlgui mpv qqc2-desktop-style qtbase qtquickcontrols2 qtwayland youtube-dl ]; nativeBuildInputs = [ cmake extra-cmake-modules pkg-config ]; meta = with lib; { homepage = "https://github.com/g-fb/haruna"; description = "Open source video player built with Qt/QML and libmpv"; license = with licenses; [ bsd3 cc-by-40 gpl3Plus wtfpl ]; maintainers = with maintainers; [ jojosch ]; }; } </ins>

Project description Metadata homepage URL: source URL: license: idk, its not obvious and im not a lawyer platforms: unix/linux?


Question: ./services/networking/radicale.nix ./services/networking/radvd.nix ./services/networking/rdnssd.nix <ins> ./services/networking/realm.nix </ins> ./services/networking/redsocks.nix ./services/networking/resilio.nix ./services/networking/robustirc-bridge.nix

Project description A simple, high performance relay server written in rust. Metadata homepage URL: source URL: license: mit platforms: Linux, darwin Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:


Question: privateKey = testCerts.${domain}.key; httpPort = 80; tlsPort = 443; <del> ocspResponderURL = "http://0.0.0.0:4002"; </del> <ins> ocspResponderURL = "http://${domain}:4002"; </ins> strict = true; };

Describe the bug causes Lego to fail. To Reproduce Steps to reproduce the behavior: set on an enabled certificate. to this configuration. fail. Lego complains about an unrecognized (really misplaced) flag. Expected behavior The certificate will be successfully fetched, with Must-Staple enabled. Screenshots Additional context I think the problematic code is here: should not be in commonOpts, it should instead be in runOpts and renewOpts. Lego runs successfully when is to and . Notify maintainers (the acme team) Metadata Maintainer information:
Thanks for the report :) It appears that the --must-staple option is common to both "run" and "renew" modes, but is not actually a common option that can be specified before the mode. I'll get a PR ready for this.


Question: mirror://xorg/individual/util/makedepend-1.0.9.tar.xz mirror://xorg/individual/util/util-macros-1.20.0.tar.xz mirror://xorg/individual/util/xorg-cf-files-1.0.8.tar.xz <del> mirror://xorg/individual/xserver/xorg-server-21.1.12.tar.xz </del> <ins> mirror://xorg/individual/xserver/xorg-server-21.1.13.tar.xz </ins>

XOrg crashes when certain applications are launched. More details here: Steps to reproduce the behavior: any of the IntelliJ IDEs. You may have to set anti aliasing to greyscale. Xorg will crash. Xorg doesn't crash. This is the bug: It looks like a security fix caused this regression. Ubuntu has already applied patches that fix this for Xorg and Xwayland: see this message from the above Ubuntu thread: NixOS should use the same patches until this is fixed upstream in XOrg. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Sounds like this will be addressed by this update:
xwayland too: looks like updating xorg and xwayland to their latest versions will do the trick then
xwayland was bumped to the latest version in PR


Question: <del> { stdenv, fetchurl, pkgs, ... }: </del> <ins> { stdenv, fetchurl, pkgs, makeWrapper, mono, ffmpeg, ... }: </ins> stdenv.mkDerivation rec { name = "emby-${version}";

Emby uses ffmpeg for transcoding media and for generating thumbnails. Emby fails to find the FFmpeg binary during the setup wizard but can be specified manually if FFmpeg has been installed separately. Add to , browse to , and advance through the wizard. System: 17.03pre92039. (Gorilla) Nix version:nix-env (Nix) 1.11.4 Nixpkgs version: 17.03pre92039.
cc
Funny thing is that I was just watching a movie when I was mentioned on a system without any ffmpeg/ffprobe binary. My system was upgraded from an older version (config was already existing so no check was done by the wizard). I was able to reproduce the issue. Will take a more detailed look at it sometime tomorrow :)


Question: } ~~~ <del> This expression should fetch </del> <ins> This expression should fetch </ins> -  the *nix* vscode extension from whatever source defined in the default nixpkgs extensions set `vscodeExtensions`. <del> -  the *code-runner* vscode extension from the marketplace using the </del> <ins> -  the *code-runner* vscode extension from the marketplace using the </ins> following url: ~~~

Rofi doesn't seem to find the application for VSCode even though the .desktop file seems to be there. It shows the command when running but when running it doesn't seem it show.


Question: (wm: pkgs.gnome.gnome-flashback.mkSessionForWm { inherit (wm) wmName wmLabel wmCommand enableGnomePanel; <ins> inherit (cfg.flashback) panelModulePackages; </ins> } ) flashbackWms;

Panel applets are being picked up from environment variable in and a completely hardcoded path in . First, we will need to patch the latter manager to use an environment variable as well. Second, we will need to do something similar to what . Or better, create  derivation. Originally posted by in
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . on the on .
I'd like to tackle this, do you have any pointers? We need to get it to pick up at least right?


Question: rec { thunderbird = common rec { pname = "thunderbird"; <del> version = "91.5.1"; </del> <ins> version = "91.6.0"; </ins> application = "comm/mail"; binaryName = pname; src = fetchurl { url = "mirror://mozilla/thunderbird/releases/${version}/source/thunderbird-${version}.source.tar.xz"; <del> sha512 = "5939e09b143e440efa906d95cda06826bd3a73b2edde5eed86229b8a0e4d1434519059f37d319d26978d7eea9b3906c5e1c1543a2bc2465625d5ab5438855717"; </del> <ins> sha512 = "a11eafe1390141ee3508eea06ba8ab135d0725513977a3b37b3b35f413a1f825dc14fef530b9ac961840804be59291c7f5cba3c93b12726605d4a7255660f749"; </ins> }; patches = [ # The file to be patched is different from firefox's `no-buildconfig-ffx90.patch`.

Thunderbird fails to compile with " error: undefined symbol: wlproxymarshal_flags" when rebuilding system configuration. Steps to reproduce the behavior: updated my system configuration flake inputs () run system rebuild () Thunderbird compiles successfully. Relevant lines from the build log: So it looks like the error has something to do with Wayland support. nixpkgs lock: nix-info:
Please, search before opening issues:


Question: rm -f /tmp/.X0-lock ''; <del> script = "${cfg.displayManager.job.execCmd}"; </del> <ins> # TODO: move declaring the systemd service to its own mkIf script = mkIf (config.systemd.services.display-manager.enable == true) "${cfg.displayManager.job.execCmd}"; </ins> # Stop restarting if the display manager stops (crashes) 2 times # in one minute. Starting X typically takes 3-4s.

I believe that this prevents the use of other display managers -Don't force it?
if you enable a another dm you wouldn't get this error i submitted a pr so that this error does not happen when lightdm is disabled but a another dm isn't enabled


Question: <ins> { lib , stdenv , fetchFromGitHub , appstream-glib , desktop-file-utils , gobject-introspection , libadwaita , meson , ninja , pkg-config , python3 , wrapGAppsHook4 , apx , gnome-console }: stdenv.mkDerivation (finalAttrs: { pname = "apx-gui"; version = "0.1.1"; src = fetchFromGitHub { owner  = "Vanilla-OS"; repo   = "apx-gui"; rev    = "v${finalAttrs.version}"; hash = "sha256-orP5kAsoXX0zyDskeIPKKHNt5c757eUm9un4Ws6uFYA="; }; strictDeps = true; nativeBuildInputs = [ appstream-glib desktop-file-utils gobject-introspection meson ninja pkg-config (python3.withPackages (ps: [ ps.pygobject3 ])) wrapGAppsHook4 ]; buildInputs = [ libadwaita ]; preFixup = '' gappsWrapperArgs+=( --prefix PATH : "${lib.makeBinPath [ apx gnome-console ]}" ) ''; meta = { description = "A GUI frontend for Apx in GTK 4 and Libadwaita"; homepage    = "https://github.com/Vanilla-OS/apx-gui"; license     = lib.licenses.gpl3Only; platforms   = lib.platforms.linux; maintainers = with lib.maintainers; [ chewblacka ]; mainProgram = "apx-gui"; }; }) </ins>

A frontend in GTK 4 and Libadwaita for Apx. GUI for tool for (both are already packaged in nixpkgs) Metadata homepage URL: source URL: license: GPL-3.0 platforms: linux Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:


Question: <del> { lib , stdenvNoCC , fetchFromGitHub , fetchurl , clickgen , attrs }: stdenvNoCC.mkDerivation rec { pname = "bibata-cursors"; version = "2.0.3"; src = fetchFromGitHub { owner = "ful1e5"; repo = "Bibata_Cursor"; rev = "v${version}"; sha256 = "zCk7qgPeae0BfzhxxU2Dk1SOWJQOxiWyJuzH/ri+Gq4="; }; buildInputs = [ clickgen attrs ]; buildPhase = '' ctgen build.toml -p x11 -d 'bitmaps/Bibata-Modern-Amber' -n 'Bibata-Modern-Amber' -c 'Yellowish and rounded edge bibata cursors.' ctgen build.toml -p x11 -d 'bitmaps/Bibata-Modern-Classic' -n 'Bibata-Modern-Classic' -c 'Black and rounded edge Bibata cursors.' ctgen build.toml -p x11 -d 'bitmaps/Bibata-Modern-Ice' -n 'Bibata-Modern-Ice' -c 'White and rounded edge Bibata cursors.' ctgen build.toml -p x11 -d 'bitmaps/Bibata-Original-Amber' -n 'Bibata-Original-Amber' -c 'Yellowish and sharp edge Bibata cursors.' ctgen build.toml -p x11 -d 'bitmaps/Bibata-Original-Classic' -n 'Bibata-Original-Classic' -c 'Black and sharp edge Bibata cursors.' ctgen build.toml -p x11 -d 'bitmaps/Bibata-Original-Ice' -n 'Bibata-Original-Ice' -c 'White and sharp edge Bibata cursors.' ''; installPhase = '' install -dm 0755 $out/share/icons cp -rf themes/* $out/share/icons/ ''; meta = with lib; { description = "Material Based Cursor Theme"; homepage = "https://github.com/ful1e5/Bibata_Cursor"; license = licenses.gpl3; platforms = platforms.linux; maintainers = with maintainers; [ rawkode AdsonCicilioti ]; }; } </del>

Package name: bibata-cursors Latest released version: 2.0.4 <!-- Search your package here: --- Current version on the unstable channel: 2.0.3 Current version on the stable/release channel: 2.0.3 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR.


Question: test2.psk = "@PSK_SPECIAL@";            # should be replaced test3.psk = "@PSK_MISSING@";            # should not be replaced test4.psk = "P@ssowrdWithSome@tSymbol"; # should not be replaced <ins> test5.psk = "@PSK_AWK_REGEX@";          # should be replaced </ins> }; # secrets environmentFile = pkgs.writeText "wpa-secrets" '' PSK_VALID="S0m3BadP4ssw0rd"; # taken from https://github.com/minimaxir/big-list-of-naughty-strings <del> PSK_SPECIAL=",./;'[]-= <>?:"{}|_+ !@#$%^&*()`~"; </del> <ins> PSK_SPECIAL=",./;'[]/-= <>?:"{}|_+ !@#$%^&*()`~"; PSK_AWK_REGEX="PassowrdWith&symbol"; </ins> ''; }; };

Using the NixOS option to specify the configuration, I noticed that if an ampersand () is present, the password field of isn't generated correctly. the option along with the option. The environment file should contain . the field "password= the content of . The password is decrypted to . The password shuld be decrypted to . The global variable's name shouldn't show. Here are some nix code that is tested to trigger this issue instead. The environment file: Generated in the aforementioned path, note how the field is erroneous. A hack to get around this is to split your password in two halves, and put the & in plain text. . Of course I would still like to see this get fixed :p Thank you for maintaining this module and reading this issue ! Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
It looks like a missed a metacharacter: I don't know if escaping it as works, or it interacts somehow with other systemd/shell/nix metacharacters. I lost counts of how many level of escaping we are in. I hope to get rid of all of this nonsense with , but next release of wpasupplicant is taking forever.
Done in The fix should be in NixOS 24.05.


Question: broken = builtins.compareVersions qtbase.version "5.7.0" < 0; }; nativeBuildInputs = [ extra-cmake-modules ]; <del> buildInputs = [ hunspell qttools ]; </del> <ins> buildInputs = [ aspell qttools ]; </ins> propagatedBuildInputs = [ qtbase ]; }

Currently we build with support for . Sonnet typically looks in for dictionaries That means it won't be able to find any dictionaries and thus spellchecking won't work.
Is this still a problem? It seems that hunspell paths are not hardcoded in hunspelldict.h anymore: But they are still hardcoded in
Yes, this is still a problem. It seems like we should disable hunspell and use aspell, which is configured correctly in NixOS.
I marked this as stale due to inactivity. →
I marked this with "good first bug" because I think we need only to change to depend on , and do some testing.
This issue has been mentioned on NixOS Discourse. There might be relevant details there:


Question: buildDotnetModule rec { pname = "ArchiSteamFarm"; # nixpkgs-update: no auto update <del> version = "5.4.13.4"; </del> <ins> version = "5.5.0.11"; </ins> src = fetchFromGitHub { owner = "JustArchiNET"; repo = "ArchiSteamFarm"; rev = version; <del> hash = "sha256-RQx+E/lxdSgB2ddNIeWOd/S2OMMiznXCbYUXdYKRvCM="; </del> <ins> hash = "sha256-VlJiTCdoH6hlVtQgECIlbsQvg3S58B5IIy1zRxh1eOg="; </ins> }; <del> dotnet-runtime = dotnetCorePackages.aspnetcore_7_0; dotnet-sdk = dotnetCorePackages.sdk_7_0; </del> <ins> dotnet-runtime = dotnetCorePackages.aspnetcore_8_0; dotnet-sdk = dotnetCorePackages.sdk_8_0; </ins> nugetDeps = ./deps.nix;

Looks like it now uses .NET 8 which probably made all existing plugins incompatible - Package name: ArchiSteamFarm Latest released version: 5.5.0.11 <!-- Search your package here: --- Current version on the unstable channel: 5.4.13.4 Current version on the stable/release channel: 5.4.12.5 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
The package/module has no official way to use plugins, so there is no way to use them unless people are using overlays which should be constructed in a smart way to re-use the same methods as archisteamfarm does. Anyway, here is the update


Question: disabled = pythonOlder "3.8"; <del> src = fetchPypi { pname = "snowflake_connector_python"; inherit version; hash = "sha256-/ZvCqxv1OE0si2W8ALsEdVV9UvBHenESkzSqtT+Wef0="; </del> <ins> src = fetchFromGitHub { owner = "snowflakedb"; repo = "snowflake-connector-python"; rev = "refs/tags/v${version}"; hash = "sha256-A6QnKCROd1vJpFCTrLEoHVo43xojdjpgYS3qQm64gcY="; </ins> }; build-system = [ cython setuptools <del> wheel </del> ]; dependencies = [ asn1crypto certifi cffi charset-normalizer <ins> cryptography </ins> filelock idna <del> oscrypto </del> packaging platformdirs <del> pycryptodomex </del> pyjwt pyopenssl pytz

package lists and as dependencies but upstream uses instead. Steps to reproduce the behavior: dependencies of package it to the dependencies listed by upstream and should not be in the dependencies list, but should n/a <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
That's a bot.
Thank you for the quick turnaround!


Question: composable_kernel = throw "'composable_kernel' has been replaced with 'rocmPackages.composable_kernel'"; # Added 2023-10-08 cpp-ipfs-api = cpp-ipfs-http-client; # Project has been renamed. Added 2022-05-15 crispyDoom = crispy-doom; # Added 2023-05-01 <ins> cryptowatch-desktop = throw "Cryptowatch Desktop was sunset on September 30th 2023 and has been removed from nixpkgs"; # Added 2023-12-22 </ins> clash = throw "'clash' has been removed, upstream gone. Consider using 'clash-meta' instead."; # added 2023-11-10 clasp = clingo; # added 2022-12-22 claws-mail-gtk3 = claws-mail; # Added 2021-07-10

Steps to reproduce the behavior: cryptowatch-desktop download url redirects to a blog Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
As of September the 30th 2023, Cryptowatch was sunset and users were advised to use their parent companies offering Kraken Pro. I'll create a pull request to remove cryptowatch from nixpkgs as there aren't any archives available that contain it that are reliable


Question: stdenv.mkDerivation rec { pname = "gmic"; <del> version = "3.1.6"; </del> <ins> version = "3.2.0"; </ins> outputs = [ "out" "lib" "dev" "man" ]; src = fetchFromGitHub { owner = "dtschump"; repo = "gmic"; <del> rev = "326ea9b7dc320b3624fe660d7b7d81669ca12e6d"; sha256 = "RRCzYMN/IXViiUNnacJV3DNpku3hIHQkHbIrtixExT0="; </del> <ins> rev = "v.${version}"; hash = "sha256-lrIlzxXWqv046G5uRkBQnjvysaIcv+iDKxjuUEJWqcs="; </ins> }; # TODO: build this from source

Steps to reproduce the behavior: gmic in a nix shell using the unstable channel Add any other context about the problem here.
Will be fixed by
Thanks! Note that it makes darktable fail to build.
This issue has been mentioned on NixOS Discourse. There might be relevant details there:


Question: stdenv.mkDerivation rec { pname = "zotero"; <del> version = "5.0.96.3"; </del> <ins> version = "6.0"; </ins> src = fetchurl { <del> url = "https://download.zotero.org/client/release/${version}/Zotero-${version}_linux-x86_64.tar.bz2"; sha256 = "sha256-eqSNzmkGNopGJ7VByvUffFEPJz3WHS7b5+jgUAW/hU4="; </del> <ins> url = "https://download.zotero.org/client/release/${version}/Zotero-${version}_linux-x86_64.tar.bz2"; sha256 = "0zkgmmflcj6vbyv8rs51jf3vx1zq8pl7b5d5asgayhrdlwi0qgff"; </ins> }; nativeBuildInputs = [ wrapGAppsHook ]; <del> buildInputs= [ gsettings-desktop-schemas glib gtk3 gnome.adwaita-icon-theme dconf ]; </del> <ins> buildInputs = [ gsettings-desktop-schemas glib gtk3 gnome.adwaita-icon-theme dconf ]; </ins> dontConfigure = true; dontBuild = true; dontStrip = true; dontPatchELF = true; <del> libPath = lib.makeLibraryPath [ stdenv.cc.cc atk cairo curl cups dbus-glib dbus fontconfig freetype gdk-pixbuf glib glibc gtk3 libX11 libXScrnSaver libXcomposite libXcursor libxcb libXdamage libXext libXfixes libXi libXinerama libXrender libXt libnotify libGLU libGL nspr nss pango ] + ":" + lib.makeSearchPathOutput "lib" "lib64" [ stdenv.cc.cc ]; </del> <ins> libPath = lib.makeLibraryPath [ stdenv.cc.cc atk cairo curl cups dbus-glib dbus fontconfig freetype gdk-pixbuf glib glibc gtk3 libX11 libXScrnSaver libXcomposite libXcursor libxcb libXdamage libXext libXfixes libXi libXinerama libXrender libXt libnotify libGLU libGL nspr nss pango ] + ":" + lib.makeSearchPathOutput "lib" "lib64" [ stdenv.cc.cc ]; </ins> postPatch = '' sed -i '/pref("app.update.enabled", true);/cpref("app.update.enabled", false);' defaults/preferences/prefs.js

<!-- Note that these are hard requirements --<!-- You can use the "Go to file" functionality on GitHub to find the package Then you can go to the history for this package Find the latest "packagename: oldversion -newversion" commit The "newversion" is the current version of the package --- <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- name: zotero <!-- The current version can be found easily with the same process as above for checking the master branch If an open PR is present for the package, take this version as the current one and link to the PR --current version: 5.0.96.3 desired version: 6.0 <!-- Search your package here: If no maintainer is listed for your package, tag the person that last updated the package --maintainers: Please tag this issue in your PR.


Question: doCheck = false; # fails with "ModuleNotFoundError: No module named 'gi'" doInstallCheck = doCheck; <del> preFixup = '' for f in $out/libexec/*; do wrapProgram $f  ${stdenv.lib.optionalString gnomeSupport "--prefix GIO_EXTRA_MODULES : "${stdenv.lib.getLib gnome.dconf}/lib/gio/modules""}  --prefix XDG_DATA_DIRS : "$GSETTINGS_SCHEMAS_PATH" done ''; </del> passthru = { updateScript = gnome3.updateScript { packageName = pname;

Inkscape has support for openclipart but it doesn't work in the package provided by nixpkgs. inkscape to File -Import Clip Art... a search term and click the Search button. the in the GUI and in the terminal. NixOS 18.09 and nixpkgs master.
I researched a bit and thought adding glib-networking would fix it. I wrote the following patch, but it doesn't seem to have any effect:
I wonder whether it really is because TLS support is unavailable, or because uses an invalid security certificate?
Good point. Hm, that's weird. I followed that URL () a day or two ago (when I first noticed this) and was redirected to https:// without problems. But now I see the certificate warning in firefox.
I think it may be a packaging bug after all. Look at this grep: The message only appears in the glib tree, in the gdummytlsbackend.c file. No matches from glib-networking, which AFAIK, provides TLS support.
I tried the patch and am getting Probably because the site is down.
is not down for me.
Thank you!


Question: git = gitMinimal; }; <ins> # Build summary for this flavor # - Build Octave Qt GUI:                  no (missing:QtCore QtGui QtNetwork QtHelp QtXml) # - JIT compiler for loops:               no # - Build Java interface:                 yes # - Build static libraries:               no # - Build shared libraries:               yes # - Dynamic Linking API:                  dlopen # - Include support for GNU readline:     yes # - 64-bit array dims and indexing:       yes # - 64-bit BLAS array dims and indexing:  yes # - OpenMP SMP multithreading:            yes # - Truncate intermediate FP results:     yes # - Build cross tools:                    no # - Build docs:                           yes </ins> octave = callPackage ../development/interpreters/octave { <del> qt = null; qscintilla = null; ghostscript = null; graphicsmagick = null; llvm = null; hdf5 = null; glpk = null; suitesparse = null; jdk = null; </del> <ins> python = python3; </ins> openblas = if stdenv.isDarwin then openblasCompat else openblas; }; <del> octaveFull = (lowPrio (octave.override { qt = qt4; inherit qscintilla; overridePlatforms = ["x86_64-linux" "x86_64-darwin"]; </del> <ins> # Build summary for this flavor # - Build Octave Qt GUI:                  no (missing:QtCore QtGui QtNetwork QtHelp QtXml) # - JIT compiler for loops:               yes # - Build Java interface:                 yes # - Build static libraries:               no # - Build shared libraries:               yes # - Dynamic Linking API:                  dlopen # - Include support for GNU readline:     yes # - 64-bit array dims and indexing:       yes # - 64-bit BLAS array dims and indexing:  yes # - OpenMP SMP multithreading:            yes # - Truncate intermediate FP results:     yes # - Build cross tools:                    no # - Build docs:                           yes octave-jit = callPackage ../development/interpreters/octave { python = python3; </ins> openblas = if stdenv.isDarwin then openblasCompat else openblas; <ins> enableJIT = true; }; # Build summary for this flavor # - Build Octave Qt GUI:                  yes # - JIT compiler for loops:               no # - Build Java interface:                 yes # - Build static libraries:               no # - Build shared libraries:               yes # - Dynamic Linking API:                  dlopen # - Include support for GNU readline:     yes # - 64-bit array dims and indexing:       yes # - 64-bit BLAS array dims and indexing:  yes # - OpenMP SMP multithreading:            yes # - Truncate intermediate FP results:     yes # - Build cross tools:                    no # - Build docs:                           yes # Build summary for this flavor octaveFull = (lowPrio (libsForQt512.callPackage ../development/interpreters/octave { python = python3; openblas = if stdenv.isDarwin then openblasCompat else openblas; enableQt = true; overridePlatforms = ["x86_64-linux" "x86_64-darwin"]; </ins> })); ocropus = callPackage ../applications/misc/ocropus { };

I'm trying to build octave with QT5 and with GUI (of course, when I try to build it with GUI, right?). Unfortunately, after the build: Apply this patch: and then system: host os: multi-user?: sandbox: version: channels(m): nixpkgs:
I just noticed that I do not even get the GUI feature when building octave from nixpkgs (neither nor has a GUI).
Pinging: touched the package recently, is the maintainer of the package.
I’ll try to have a look when I have some time. I’ll let you know what I can achieve.
Here is what the configure script says:
yes, I got that and I fixed it. See for my attempt to build with Qt5 (which succeeds, but starting octave with gui fails - see PR).


Question: description = "Library for registering global key bindings"; homepage = "https://github.com/kupferlauncher/keybinder/"; license = licenses.mit; <del> platforms = platforms.linux; </del> <ins> platforms = platforms.unix; </ins> maintainers = [ maintainers.cstrahan ]; }; }

is built without X11 support on darwin because the Meson build file disables it. The GTK build system was changed to Meson by , and it removed the configure flags that enabled X11 on darwin: But the file of GTK3 disables X11 support on darwin, and : should provide X11 support on darwin. I was trying to fix on darwin and I found that is marked as broken () because of a missing GKT/X11 header. It seems that it is the same problem that motivated to change Vim to use "gtk2" (same missing header ). Maintainer information:
In that case I'd probably take the discussion upstream.
It was disabled in 3.24.9 by commit , without much explanation. But that commit never landed into master and GTK 4.x does build with X11 support as I understand ( and ).


Question: description = "Library for registering global key bindings"; homepage = "https://github.com/kupferlauncher/keybinder/"; license = licenses.mit; <del> platforms = platforms.linux; </del> <ins> platforms = platforms.unix; </ins> maintainers = [ maintainers.cstrahan ]; }; }

Describe the bug peek fails to build on macOS To Reproduce Clone then Notify maintainers Log
I marked this as stale due to inactivity. →
sadly its not supported though getting keybinder3 to compile would be good
I marked this as stale due to inactivity. →


Question: systemd libxml2 poppler <ins> gawk </ins> ]; enableParallelBuilding = true;

Describe the bug getting when trying to scan over network (scanning from the , scanner device connected to via usb) To Reproduce Steps to reproduce the behavior: server config: client config: on the : choose the network scanner : stops scanning immediately, server logs have an entry: from Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Guessing here, looking at the commit log for the service definition, apologies for pinging a lot of people: Metadata Please run and paste the result. server (managed via nixpkgs): client: Maintainer information:
I marked this as stale due to inactivity. →
Please test
nice ! will do in few days as I'm moving house :)
Hi just tested it now and it works very well !
approve the pr


Question: <del> { copyDesktopItems , fetchurl , jre , lib , makeDesktopItem , makeWrapper , stdenvNoCC </del> <ins> { copyDesktopItems, fetchurl, jre, lib, makeDesktopItem, makeWrapper, stdenvNoCC, </ins> <del> , gamemodeSupport ? stdenvNoCC.isLinux , textToSpeechSupport ? stdenvNoCC.isLinux , additionalLibs ? [ ] </del> <ins> gamemodeSupport ? stdenvNoCC.isLinux, textToSpeechSupport ? stdenvNoCC.isLinux, additionalLibs ? [ ], </ins> <del> , # dependencies flite , gamemode , libglvnd , libpulseaudio , udev , xorg </del> <ins> # dependencies flite, gamemode, libglvnd, libpulseaudio, udev, xorg, </ins> }: stdenvNoCC.mkDerivation (finalAttrs: {

Using AtLauncher to launch Minecraft 1.20.6 crashes immediately: <details<summarylog</summary[13/06/2024 11:48:21 AM] Checking for updated files! [13/06/2024 11:48:24 AM] Preparing for launch! [13/06/2024 11:48:24 AM] Launching pack Minecraft 1.20.6 (Vanilla) for Minecraft 1.20.6 [13/06/2024 11:48:24 AM] Logging into Minecraft! [13/06/2024 11:48:24 AM] Using Java runtime java-runtime-delta (Java 21.0.3) at path USERSDIR/runtimes/minecraft/java-runtime-delta/linux/java-runtime-delta [13/06/2024 11:48:24 AM] Launching Minecraft with the following arguments (user related stuff has been removed): [gamemoderun, USERSDIR/runtimes/minecraft/java-runtime-delta/linux/java-runtime-delta/bin/java, -Xmx4096M, -XX:MetaspaceSize=256M, -Duser.language=en, -Duser.country=US, -, -Dlog4j.configurationFile=USERSDIR/assets/logconfigs/client-, -XX:+UnlockExperimentalVMOptions, -XX:+UseG1GC, -XX:G1NewSizePercent=20, -XX:G1ReservePercent=20, -XX:MaxGCPauseMillis=50, -XX:G1HeapRegionSize=32M, -Xss1M, -, -, -, -, -, -Dminecraft.launcher.version=3.4.36.4, -cp, USERSDIR/libraries/com/github/oshi/oshi-core/6.4.10/oshi-core-, , --username, REDACTED, --version, 1.20.6, --gameDir, USERSDIR/instances/Minecraft1206, --assetsDir, USERSDIR/assets, --assetIndex, 16, --uuid, REDACTED, --accessToken, REDACTED, --userType, msa, --versionType, release, --width=854,


Question: <del> { copyDesktopItems , fetchurl , jre , lib , makeDesktopItem , makeWrapper , stdenvNoCC </del> <ins> { copyDesktopItems, fetchurl, jre, lib, makeDesktopItem, makeWrapper, stdenvNoCC, </ins> <del> , gamemodeSupport ? stdenvNoCC.isLinux , textToSpeechSupport ? stdenvNoCC.isLinux , additionalLibs ? [ ] </del> <ins> gamemodeSupport ? stdenvNoCC.isLinux, textToSpeechSupport ? stdenvNoCC.isLinux, additionalLibs ? [ ], </ins> <del> , # dependencies flite , gamemode , libglvnd , libpulseaudio , udev , xorg </del> <ins> # dependencies flite, gamemode, libglvnd, libpulseaudio, udev, xorg, </ins> }: stdenvNoCC.mkDerivation (finalAttrs: {

--height=480] [13/06/2024 11:48:27 AM] [Datafixer Bootstrap/INFO] 222 Datafixer optimizations took 173 milliseconds [13/06/2024 11:48:29 AM] [Render thread/INFO] Environment: Environment[, , name=PROD] [13/06/2024 11:48:29 AM] [Render thread/INFO] Setting user: MINECRAFTUSERNAME [13/06/2024 11:48:29 AM] [Render thread/INFO] Backend library: LWJGL version 3.3.3+5 [13/06/2024 11:48:29 AM] ---- Minecraft Crash Report ---- [13/06/2024 11:48:29 AM] // Don't be sad, have a hug! <3 [13/06/2024 11:48:29 AM] [13/06/2024 11:48:29 AM] Time: 2024-06-13 11:48:29 [13/06/2024 11:48:29 AM] Description: Initializing game [13/06/2024 11:48:29 AM] [13/06/2024 11:48:29 AM] Failed to initialize GLFW, errors: GLFW error during init: [0x1000E]Failed to detect any supported platform [13/06/2024 11:48:29 AM] at (SourceFile:78) [13/06/2024 11:48:29 AM] at (SourceFile:846) [13/06/2024 11:48:29 AM] at ffh.<init(SourceFile:509) [13/06/2024 11:48:29 AM] at (SourceFile:223) [13/06/2024 11:48:29 AM] [13/06/2024 11:48:29 AM] [13/06/2024 11:48:29 AM] A detailed walkthrough of the error,


Question: <del> { copyDesktopItems , fetchurl , jre , lib , makeDesktopItem , makeWrapper , stdenvNoCC </del> <ins> { copyDesktopItems, fetchurl, jre, lib, makeDesktopItem, makeWrapper, stdenvNoCC, </ins> <del> , gamemodeSupport ? stdenvNoCC.isLinux , textToSpeechSupport ? stdenvNoCC.isLinux , additionalLibs ? [ ] </del> <ins> gamemodeSupport ? stdenvNoCC.isLinux, textToSpeechSupport ? stdenvNoCC.isLinux, additionalLibs ? [ ], </ins> <del> , # dependencies flite , gamemode , libglvnd , libpulseaudio , udev , xorg </del> <ins> # dependencies flite, gamemode, libglvnd, libpulseaudio, udev, xorg, </ins> }: stdenvNoCC.mkDerivation (finalAttrs: {

its code path and all known details is as follows: [13/06/2024 11:48:29 AM]
[13/06/2024 11:48:29 AM] [13/06/2024 11:48:29 AM] -- Head -- [13/06/2024 11:48:29 AM] Thread: Render thread [13/06/2024 11:48:29 AM] Stacktrace: [13/06/2024 11:48:29 AM] at (SourceFile:78) [13/06/2024 11:48:29 AM] at (SourceFile:846) [13/06/2024 11:48:29 AM] at ffh.<init(SourceFile:509) [13/06/2024 11:48:29 AM] [13/06/2024 11:48:29 AM] -- Initialization -- [13/06/2024 11:48:29 AM] Details: [13/06/2024 11:48:29 AM] Modules: [13/06/2024 11:48:29 AM] Stacktrace: [13/06/2024 11:48:29 AM] at (SourceFile:223) [13/06/2024 11:48:29 AM] [13/06/2024 11:48:29 AM] -- System Details -- [13/06/2024 11:48:29 AM] Details: [13/06/2024 11:48:29 AM] Minecraft Version: 1.20.6 [13/06/2024 11:48:29 AM] Minecraft Version ID: 1.20.6 [13/06/2024 11:48:29 AM] Operating System: Linux (amd64) version 6.1.92 [13/06/2024 11:48:29 AM] Java Version: 21.0.3, Microsoft [13/06/2024 11:48:29 AM] Java VM Version: OpenJDK 64-Bit Server VM (mixed mode),