Question: ln -s --force "$emulator" /run/${dirName}/nix-emulators/ done <del> for helper in libexec/qemu-bridge-helper bin/qemu-pr-helper; do </del> <ins> for helper in bin/qemu-pr-helper; do </ins> ln -s --force ${cfg.qemu.package}/$helper /run/${dirName}/nix-helpers/ done

I sometimes create a qemu VM in libvirt in "session mode", meaning that the libvirt daemon is running as my non-root user, and the system-wide libvirtd does not need to be running (). This VM has a network bridge, which libvirt apparently creates by calling , which in turn uses . The problem is that doesn't get fully populated until the system libvirtd gets started. Previously, in nixpkgs (from February), this wasn't noticeable because libvirtd.service was WantedBy libvirt-guests.service (which is WantedBy multi-), so libvirtd would always be started on boot to populate that directory. Now, with , this is no longer the case, and libvirtd.service does not get started (presumably, if libvirt-guests.service actually needed to start a VM, then libvirtd.service would be socket-activated, but for me this is not the case). As a result, doesn't get populated and my session-mode libvirt can't find . python: The VM's XML file defines a network bridge, which is why gets involved. the following output: The libvirt user session should be usable without first starting the system-wide libvirtd. If you start (and optionally stop) the system libvirtd.service before following the steps to reproduce, everything works fine, because the directory gets populated. Probably, should be put somewhere else, where session-mode daemons can use it without needing to have previously started system-mode libvirtd. (The same may be true of other stuff in too.) libvirt maintainers: Okay, but I'm using flakes and that channel looks old. See relevant commit hashes above.
Oof, happy to find this, it would have taken me a long time to figure out I needed to run first. Can't the sudo wrapper point to the file in the nix store?


Question: <del> { pkgs }: self: super: { rmfuse = super.rmfuse.overridePythonAttrs ( _: { src = pkgs.fetchgit { url = "https://github.com/rschroll/rmfuse.git"; rev = "3796b8610c8a965a60a417fc0bf8ea5200b71fd2"; sha256 = "03qxy95jpk741b81bd38y51d4a0vynx2y1g662bci9r6m7l14yav"; }; } ); } </del>

The version of pillow rmfuse uses is vulnerable to CVE-2022-.
Since rmfuse is packaged using poetry2nix you are basically the only one willing to update it or its dependencies. That's problematic given that you don't do so even two weeks after being notified of a vulnerability.
I don't think interacting in this way is very constructive. There are different points of view regarding packaging Python packages, that's it. That an issue like this does not get picked up is not strange, people are typically busy. If you like to I suppose you could add the CVE to the expression. Whether the CVE can be considered a security issue in case of rmfuse should be considered as well.
Why not? I'm just articulating a problem with the way rmfuse is packaged right now that is obviously an actual problem. It's not technical though, just organizational.


Question: pname = commonDerivationAttrs.pname + "-frontend"; nativeBuildInputs = [ <del> wasm-pack wasm-bindgen-cli binaryen which rustc-wasm rustc-wasm.llvmPackages.lld </del> <ins> wasm-pack wasm-bindgen-84 binaryen which rustc-wasm rustc-wasm.llvmPackages.lld </ins> ]; buildPhase = ''

Package name: wasm-bindgen-cli Latest released version: 0.28.4 Current version on the unstable channel: 0.2.84 Current version on the stable/release channel: 0.2.84 Notify maintainers and I'd really appreciate an update it's causing me problems with a trunk build similar to Note for maintainers: Please tag this issue in your PR.


Question: postPatch = lib.optionalString stdenv.isAarch64 '' substituteInPlace build/toolchain/linux/BUILD.gn  --replace 'toolprefix = "aarch64-linux-gnu-"' 'toolprefix = ""' <ins> '' + lib.optionalString stdenv.isDarwin '' substituteInPlace build/config/compiler/compiler.gni  --replace 'strip_absolute_paths_from_debug_symbols = true'  'strip_absolute_paths_from_debug_symbols = false' substituteInPlace build/config/compiler/BUILD.gn  --replace 'current_toolchain == host_toolchain || !use_xcode_clang'  'false' </ins> ''; gnFlags = [

Describe the bug Since upgrading v8 to 8.4 () it no longer builds on darwin (at least on my 11.2.3 machine) To Reproduce Steps to reproduce the behavior: Expected behavior A successful v8 build Additional context By default it fails when trying to find the macos sdk, which I patched around with: This then gets as far as , which is avoidable with: which then produces ... and I had to admit defeat. Notify maintainers Metadata Maintainer information:
Hi! Thanks for reporting this! I've opened which I hope fixes this - at least it builds fine for me on 10.15. Please give it a try on your machine too.
Yep, looks good!


Question: echo "Checking tor-browser wrapper ..." TBB_HOME=$(mktemp -d)  $out/bin/tor-browser --version >/dev/null <ins> runHook postBuild ''; installPhase = '' runHook preInstall # Install distribution customizations install -Dvm644 ${distributionIni} $out/share/tor-browser/distribution/distribution.ini install -Dvm644 ${policiesJson} $out/share/tor-browser/distribution/policies.json runHook postInstall </ins> ''; meta = with lib; {

When you try to connect to the Tor network using the Tor browser you get the error message ! When you try to visit a website after being shown the big red error message your get the error message ! This problem appeared between one and two weeks ago. ; can't find an existing Nixpkgs issue. Steps to reproduce the behavior: the Tor browser from Nixpkgs the Tor browser on error message to go to a website When clicking on the browser should connect to the Tor network and be able to browse. The . browsers says that it can detect my internet connection. ! Tor logs doesn't seem to indicate any problems (from what I can interpret) I live in Sweden and this issue has appeared both when I've connected to the internet using my home connection (Sunet) and when I've connected over a VPN. I.e. no fuckery by an oppressive government. The timeline match up-ish with when would have become available in the binary caches. Unsure if the error appeared before or after updating around that time. After checking the original PR I see that this problem was noticed, but a workaround was applied. Doesn't seem to work for me :-/ The value is for me. I'm using root on tmpfs, and nothing under is persistently saved between boots. ! <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- and because you seem to have actually researched the problem. The system is fully up-to-date as of 2023-03-05 22:15 CEST.
The red error message indicates that Tor cannot find the tor socket. Everything else is bound to not work unless it goes over the normal internet. Please see and for the underlying problem and please check if the firefox setting points to the right socket file.
I tested to set to , but that didn't help.
Setting to also doesn't work.
Just to avoid ambiguities, did you set to (with file name part)? TBB is still working fine for me with the workaround. Likewise for me, is a tmpfs. Have you modified (and forgotten about it) your torrc, e.g. to use a different control port/mechanism? What is your XDGSESSIONTYPE?


Question: echo "Checking tor-browser wrapper ..." TBB_HOME=$(mktemp -d)  $out/bin/tor-browser --version >/dev/null <ins> runHook postBuild ''; installPhase = '' runHook preInstall # Install distribution customizations install -Dvm644 ${distributionIni} $out/share/tor-browser/distribution/distribution.ini install -Dvm644 ${policiesJson} $out/share/tor-browser/distribution/policies.json runHook postInstall </ins> ''; meta = with lib; {

The person on uses wayland (with sway). I currently still use x11 (with i3) and haven't tested it with wayland.
That did it! I missed that you should specify the file in the path. I'm using AwesomeWM.
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
The person on had the same problem and the same solution :-)
Why did you close this issue You can't seriously think that this temporary workaround is an acceptable permanent solution to this problem? While we still don't have a permanent solution, it should be as easy as possible for users to find information about this workaround. By closing this issue we signal to people that this problem has been solved. And people currently experiencing this problem on a fully up-to-date system will probably not think about looking into closed issues, because the issue is still there.
I am also experiencing this issue. The fix worked for me.
Confirmed. The issue is still present. Default installed value of is 127.0.0.1. Changing it to resolves the problem.
This issue only started happening on my machine after deleting today.
Still an issue. I'm using TBB with firejail and I have to apply the workaround at every restart. TBB creates the folder but not a profile inside (this wouldn't be a problem for me if connection works out of the box). about:config - = tor-browser-bundle-bin 12.0.5 firejail-0.9.72 nixos-unstable
By default, the service runs on port 9050 and the control port on 9051. This is configured in the torrc file: Your firewall may be blocking some of these ports bound by default to localhost which normally point to 127.0.0.1
The PR for Tor Browser 13 removes the current workaround again, because it seems the issue was fixed upstream: I would be grateful if some of you could give this a try and report if it's still working (or working again).


Question: buildInputs = [ libusb1 ]; <del> cmakeFlags = lib.optional stdenv.isLinux "-DINSTALL_UDEV_RULES=ON"; </del> <ins> cmakeFlags = lib.optional stdenv.isLinux [ "-DINSTALL_UDEV_RULES=ON" "-DWITH_RPC=ON" ]; </ins> meta = with lib; { description = "Turns your Realtek RTL2832 based DVB dongle into a SDR receiver";

<!-- Note that these are hard requirements --<!-- You can use the "Go to file" functionality on GitHub to find the package Then you can go to the history for this package Find the latest "packagename: oldversion -newversion" commit The "newversion" is the current version of the package --- <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- name: rtl-sdr <!-- The current version can be found easily with the same process as above for checking the master branch If an open PR is present for the package, take this version as the current one and link to the PR --current version: 0.6.0 desired version: 0.8.0 <!-- Search your package here: If no maintainer is listed for your package, tag the person that last updated the package --maintainers: This package is currenty using but it should probably switch to Please tag this issue in your PR.


Question: tests.mesos = callTest tests/mesos.nix {}; tests.misc = callTest tests/misc.nix {}; tests.mongodb = callTest tests/mongodb.nix {}; <ins> tests.mpd = callTest tests/mpd.nix {}; </ins> tests.mumble = callTest tests/mumble.nix {}; tests.munin = callTest tests/munin.nix {}; tests.mutableUsers = callTest tests/mutable-users.nix {};

As it stands, the NixOS MPD module runs MPD as a systemd system service. As such it expects that the MPD user account (mpd by default) has control over the audio device. This conflicts with PulseAudio when it's used as a systemd user service (the default configuration). The intent of this change is to extend the MPD module so that it can be configured to run as a systemd user service. The changes remain backwards-compatible so users can continue with a system-wide configuration or go with a per-user config. I have a proof-of-concept of the modified module which I'm currently experimenting with. It can be used in as follows: The result is MPD running within a user slice: [ ] Ability to use a different per user; Probably by providing a option which overrides the other options and simply points to a file in the users home directory (ex. ). [ ] See if it's possible to get realtime scheduling to work. [x] Add NixOS tests. Currently there aren't any. The different options make for numerous potential combinations; I'm to lazy to test all of them manually.
did you ever add support for running mpd as a user service? It looks like just tests in preparation for running it as a user service.
Wow, I forgot all about this. Perhaps because I soon after stopped using MDP. The implementation is still on Github:
An alternative could be to let it talk to pulseaudio over the network. In the past I have used a config in mpd like audio_output { type "pulse" name "pulseaudio" server "127.0.0.1" } and then some config in to allow this access.


Question: in python3.pkgs.buildPythonApplication rec { pname = "textext"; <del> version = "1.8.1"; </del> <ins> version = "1.10.1"; </ins> src = fetchFromGitHub { owner = "textext"; repo = "textext"; rev = version; <del> sha256 = "sha256-Qzd39X0X3DdwZ3pIIGvEbNjl6dxjDf3idzjwCkp3WRg="; </del> <ins> sha256 = "sha256-FbUfZfVOYEyQVL1YMyNwb/sIUxJ+VhevatjuJI/ocIw="; </ins> }; patches = [

When launching the extension through Inkscape, the application freezes. Steps to reproduce the behavior: Inkscape the extension under Extensions Text Launch TexText Maybe linked to <!-- not actually involved, sorry --Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
hmm, it opens pretty much instantly for me on current nixos-unstable (). Do you see any error messages in the terminal where you opened Inkscape?
No error message is reported on the terminal. Is there a flag I should add to the command for verbosity? I had someone else test this and they reported the same behavior. Something else I noticed is that Inkscape returns to normal if I let it hang for 1 or 2 minutes, but no sign of the extension's window.
I don't know if its related, but I tried the builtin formula extension, and I get this error when clicking on apply: <details</detailsDo you see anything suspicious?
sorry for the ping again, but I just noticed that trying to launch TexText results in a file with this content:
No worries about the ping! Unfortunately the errors you found in don't seem to be related to TexText. The errors from the builtin formula extension don't immediately give me anything to go on either.
I was able to identify two problems that are (most likely) causing the issue. The first is the python bindings for gobject-introspection that were missing. I submitted a PR for this one and now at least the extension window opens when I click on it. The second is related to Inkscape throwing a segmentation fault when trying to use the extension. I opened an issue here I don't know what's causing it though. Hopefully we can figure this out. EDIT: Please ignore the first issue. For the second one, there seem to be a fix on the way. I will close this issue if it resolves it.
Great that you were able to figure it out!
Sorry to revive this thread, it doesn't work for me. the script errors out i believe because it doesn't contain the path to package.
I'm afraid we'd need a bit more information. I just tested on latest nixos-unstable () using the above and it worked for me.


Question: in python3.pkgs.buildPythonApplication rec { pname = "textext"; <del> version = "1.8.1"; </del> <ins> version = "1.10.1"; </ins> src = fetchFromGitHub { owner = "textext"; repo = "textext"; rev = version; <del> sha256 = "sha256-Qzd39X0X3DdwZ3pIIGvEbNjl6dxjDf3idzjwCkp3WRg="; </del> <ins> sha256 = "sha256-FbUfZfVOYEyQVL1YMyNwb/sIUxJ+VhevatjuJI/ocIw="; </ins> }; patches = [

Are you using inkscape on NixOS or on a different platform? Are you using the from above or some other way to create the inkscape? Exactly when do you get an error, and what does the error look like?


Question: stdenv.mkDerivation rec { pname = "nemo"; <del> version = "5.4.2"; </del> <ins> version = "5.4.3"; </ins> # TODO: add plugins support (see https://github.com/NixOS/nixpkgs/issues/78327)

I am new to nixos... When I try to use printScr Key on keyboard. it not responding. non of the printScreen optins working.. Steps to reproduce the behavior: ... press Key PrintScr ... ... Should take a screen shot ask for location to save to. If applicable, add screenshots to help explain your problem. Add any other context about the problem here. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result.
I am not too sure but according to the , cinnamon does not have a "native" screenshot tool but gnome-screenshot could be used. I am not too sure if enabling cinnamon auto includes gnome-screenshot. If it doesn't you can just add it and see if it solves your problem.


Question: stdenv.mkDerivation rec { pname = "nemo"; <del> version = "5.4.2"; </del> <ins> version = "5.4.3"; </ins> # TODO: add plugins support (see https://github.com/NixOS/nixpkgs/issues/78327)

I have user-installed Cinnamon applets, desklets, extensions, themes, which have been installed in the home folder by a different OS (as far as i remember). Many of them work under NixOS (some do not: ). However, i cannot update them. When i try, i get the message: The same happens if i try to install a new applet. Steps to reproduce the behavior: up Cinnamon desktop on NixOS and log in. to install an applet. Should be able to install and update user-installed applets, desklets, extensions, themes. ! I am just beginning to switch over to Cinnamon from GNOME 3 (having been fed up with GNOME, especially under NixOS).
Installing [][gettext] that provided solved the issue. Shouldn't be a dependency of Cinnamon desktop then? [gettext]:


Question: fingerd_bsd = callPackage ../servers/fingerd/bsd-fingerd { }; <del> firebird = callPackage ../servers/firebird { icu = null; /*stdenv = gcc5Stdenv;*/ }; firebirdSuper = firebird.override { icu = icu58; superServer = true; /*stdenv = gcc5Stdenv;*/ }; </del> <ins> inherit (callPackages ../servers/firebird { }) firebird_4 firebird_3 firebird_2_5; firebird = firebird_3; </ins> freeradius = callPackage ../servers/freeradius { };

Bug description nixos-build switch produces a build error due to firebird-2.5.7.-0 while firebird is not explicitly mentioned anywhere in the file... To Reproduce -channel --update -build switch error message a few apps from file hoping that one of them would be asking for firebird to be installed behind the scene at no avail... Expected behavior A clean error free build. Screenshot ... making all in engines/ccgost... g++ -DREENTRANT -I. -I../common -I../common -I./unicode -I./.. -DREENTRANT -DHAVECONFIGH -DULAYOUTIMPLEMENTATION -O -c -DPIC -fPIC -o HebrewLigatureData.o make[2]: Entering directory '/build/openssl-1.0.2u/engines/ccgost' gcc -I../../include -fPIC -DOPENSSLPIC -DOPENSSLTHREADS -DREENTRANT -DDSODLFCN -DHAVEDLFCNH -m64 -DLENDIAN -O3 -Wall -DOPENSSLIA32SSE2 -DOPENSSLBNASMMONT -DOPENSSLBNASMMONT5 -DOPENSSLBNASMGF2m -DRC4ASM -DSHA1ASM -DSHA256ASM -DSHA512ASM -DMD5ASM -DAESASM -DVPAESASM -DBSAESASM -DWHIRLPOOLASM -DGHASHASM -DECPNISTZ256ASM -c -o egosterr.o egosterr.c g++ -DREENTRANT -I. -I../common -I../common -I./unicode -I./.. -DREENTRANT -DHAVECONFIGH -DULAYOUTIMPLEMENTATION -O -c -DPIC -fPIC -o HebrewShaping.o g++ -DREENTRANT -I. -I./common -I./common -I./unicode -I./. -DREENTRANT -DHAVECONFIGH -DULAYOUTIMPLEMENTATION -O -c -DPIC -fPIC -o IndicClassTables.o gcc -I./.


Question: fingerd_bsd = callPackage ../servers/fingerd/bsd-fingerd { }; <del> firebird = callPackage ../servers/firebird { icu = null; /*stdenv = gcc5Stdenv;*/ }; firebirdSuper = firebird.override { icu = icu58; superServer = true; /*stdenv = gcc5Stdenv;*/ }; </del> <ins> inherit (callPackages ../servers/firebird { }) firebird_4 firebird_3 firebird_2_5; firebird = firebird_3; </ins> freeradius = callPackage ../servers/freeradius { };

/include -fPIC -DOPENSSLPIC -DOPENSSLTHREADS -DREENTRANT -DDSODLFCN -DHAVEDLFCNH -m64 -DLENDIAN -O3 -Wall -DOPENSSLIA32SSE2 -DOPENSSLBNASMMONT -DOPENSSLBNASMMONT5 -DOPENSSLBNASMGF2m -DRC4ASM -DSHA1ASM -DSHA256ASM -DSHA512ASM -DMD5ASM -DAESASM -DVPAESASM -DBSAESASM -DWHIRLPOOLASM -DGHASHASM -DECPNISTZ256ASM -c -o gost2001keyx.o gost2001keyx.c error: narrowing conversion of '' from 'unsigned int' to 'icu30::IndicClassTable::ScriptFlags' {aka 'int'} [-Wnarrowing] 229 | static const IndicClassTable teluClassTable = {0x0C00, 0x0C6F, 3, TELUSCRIPTFLAGS, teluCharClasses, teluSplitTable}; | ^ error: narrowing conversion of '' from 'unsigned int' to 'icu30::IndicClassTable::ScriptFlags' {aka 'int'} [-Wnarrowing] 231 | static const IndicClassTable kndaClassTable = {0x0C80, 0x0CEF, 4, KNDASCRIPTFLAGS, kndaCharClasses, kndaSplitTable}; | ^ make[4]: [./config/mh-linux:43: IndicClassTables.o] Error 1 make[4]: Leaving directory '/build/Firebird-2.5.7.-0/extern/icu/source/layout' make[3]: [Makefile:98: all-recursive] Error 2 make[3]: Leaving directory '/build/Firebird-2.5.7.-0/extern/icu/source' make[2]: [ libicu] Error 2 make[2]: Leaving directory '/build/Firebird-2.5.7.-0/gen' make[1]: [Makefile:193: externallibraries] Error 2 make[1]: Leaving directory '/build/Firebird-2.5.7.


Question: fingerd_bsd = callPackage ../servers/fingerd/bsd-fingerd { }; <del> firebird = callPackage ../servers/firebird { icu = null; /*stdenv = gcc5Stdenv;*/ }; firebirdSuper = firebird.override { icu = icu58; superServer = true; /*stdenv = gcc5Stdenv;*/ }; </del> <ins> inherit (callPackages ../servers/firebird { }) firebird_4 firebird_3 firebird_2_5; firebird = firebird_3; </ins> freeradius = callPackage ../servers/freeradius { };

-0/gen' make: [Makefile:6: firebird] Error 2 builder for '/nix/store/589jgyzjbbn6zl870qswm80pi4xh8ffq-firebird-2.5.7.-0.drv' failed with exit code 2 building '/nix/store/f5v53hni9pnldx4l0v4svxv0ibl62ir3-tor-browser-linux64-9.0.9en-'. cannot build derivation '/nix/store/c1wpclz112ssp5ki6m546llszn144bq8-wt-': 1 dependencies couldn't be built cannot build derivation '/nix/store/8izfzp2k51zz3385cq14ffd31l2c8bwg-fileshelter-': 1 dependencies couldn't be built cannot build derivation '/nix/store/wi7fzbgmwj9rrzm48mlcsvw51lymmcz8-system-': 1 dependencies couldn't be built building '/nix/store/75r17sql3df7jq3azd76w9fjw6870wm6-'. building '/nix/store/0zq0cb92k0w72ri9jb2zd65gzpnhx6fv-udev-'. building '/nix/store/jqc775s8a0m6r6qhwcfssjdya326s6z0-unit-NetworkManager-'. building '/nix/store/bvg0a7ah4bd77s86f16rq7jsl7sh3nxy-unit-NetworkManager-wait-'. building '/nix/store/vbnnzk9kdx828c8vi3pqcjayrf1ja43n-unit-'. building '/nix/store/df1ffd22pbca5x7ya5mwa8prm40mg54p-unit-alsa-'.


Question: fingerd_bsd = callPackage ../servers/fingerd/bsd-fingerd { }; <del> firebird = callPackage ../servers/firebird { icu = null; /*stdenv = gcc5Stdenv;*/ }; firebirdSuper = firebird.override { icu = icu58; superServer = true; /*stdenv = gcc5Stdenv;*/ }; </del> <ins> inherit (callPackages ../servers/firebird { }) firebird_4 firebird_3 firebird_2_5; firebird = firebird_3; </ins> freeradius = callPackage ../servers/freeradius { };

cannot build derivation '/nix/store/4375h9w8pmppld22s4jb6ag05riw87vg-xsession-': 1 dependencies couldn't be built cannot build derivation '/nix/store/gi689m2ph1avv6n2svvlzr5d2v2xm4p1-nixos-system-bx26-': 1 dependencies couldn't be built error: build of '/nix/store/gi689m2ph1avv6n2svvlzr5d2v2xm4p1-nixos-system-bx26-' failed Notify Weber <marco-<!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Metadata* system: host os: multi-user?: sandbox: version: channels(root): channels(k): nixpkgs:
This is pulled in as an indirect dependency of via .
I marked this as stale due to inactivity. →


Question: upstreamDoc = "See [the upstream documentation](https://github.com/jtroo/kanata/blob/main/docs/config.adoc) and [example config files](https://github.com/jtroo/kanata/tree/main/cfg_samples) for more information."; <del> keyboard = { </del> <ins> keyboard = { name, config, ... }: { </ins> options = { devices = mkOption { type = types.listOf types.str;

Currently it's only possible to configure kanata by specifying specific parts one at a time. It's not possible to read a configuration from a file and use that instead of the specific parts. I use HomeManager to manage the kanata configuration file and because it's also used for Windows this is the most platform neutral way for me without duplicating parts of the configuration. As a workaround I did it like this for now: But clearly that is not ideal. What I would want is to just keep the 'readFile' and uncomment the 'defcfg' part from the configuration file ()
I created to address this issue. Could you help test it?
Thanks a lot for the fast solution! I tested it with my config and it works without any issues.


Question: doCheck = true; <del> meta = with stdenv.lib; { </del> <ins> meta = with lib; { </ins> homepage = src.meta.homepage; description = "ACME client that can obtain certs and extensibly update server configurations"; platforms = platforms.unix; <del> maintainers = [ maintainers.domenkozar ]; license = licenses.asl20; </del> <ins> maintainers = with maintainers; [ domenkozar ]; license = with licenses; [ asl20 ]; </ins> }; }

Update certbot Current packaged version is 0.39.0, upstream version is 1.2.0.
Fix in


Question: ln -s $out/${executable}-c/lib-python/${if isPy3k then "3" else pythonVersion} $out/lib/${libPrefix} # Include a sitecustomize.py file <del> cp ${../sitecustomize.py} $out/lib/${libPrefix}/${sitePackages}/sitecustomize.py </del> <ins> cp ${../sitecustomize.py} $out/${if isPy38OrNewer then sitePackages else "lib/${libPrefix}/${sitePackages}"}/sitecustomize.py </ins> runHook postInstall '';

fails when building the wheel for pip. (Building the wheel for wheel succeeds.) Steps to reproduce the behavior: Build succeeds as it does for regular Python: (there are no maintainers given)
Which branch is this on?
~Can't reproduce this on master nor on nixos-22.05.~ pypy version succeeds, pypy3 version fails. master and nixos-22.05
Probably also on 21.11. -No, 21.11 is fine. -
Encountered on Nixpkgs 21.11 system: host os: multi-user?: sandbox: version: nixpkgs:
Bisected to the 7.3.7 update. Newer pypy3 versions exhibit the same problem. Our pypy3 package set is clearly unmaintained. cc
Fixed in .


Question: <del> { stdenv, fetchurl, fetchpatch, meson, ninja, pkgconfig, yacc, xkeyboard_config, libxcb, libX11, doxygen }: </del> <ins> { stdenv, fetchurl, meson, ninja, pkg-config, yacc, doxygen , xkeyboard_config, libxcb, libxml2 , python3 , libX11 }: </ins> stdenv.mkDerivation rec { pname = "libxkbcommon"; <del> version = "0.10.0"; </del> <ins> version = "1.0.3"; </ins> src = fetchurl { url = "https://xkbcommon.org/download/${pname}-${version}.tar.xz"; <del> sha256 = "1wmnl0hngn6vrqrya4r8hvimlkr4jag39yjprls4gyrqvh667hsp"; </del> <ins> sha256 = "0lmwglj16anhpaq0h830xsl1ivknv75i4lir9bk88aq73s2jy852"; </ins> }; outputs = [ "out" "dev" "doc" ]; <del> nativeBuildInputs = [ meson ninja pkgconfig yacc doxygen ]; buildInputs = [ xkeyboard_config libxcb ]; </del> <ins> nativeBuildInputs = [ meson ninja pkg-config yacc doxygen ]; buildInputs = [ xkeyboard_config libxcb libxml2 ]; checkInputs = [ python3 ]; </ins> mesonFlags = [ <del> "-Denable-wayland=false" </del> "-Dxkb-config-root=${xkeyboard_config}/etc/X11/xkb" <ins> "-Dxkb-config-extra-path=/etc/xkb" # default=$sysconfdir/xkb ($out/etc) </ins> "-Dx-locale-root=${libX11.out}/share/X11/locale" <ins> "-Denable-wayland=false" "-Denable-xkbregistry=false" # Optional, separate library (TODO: Install into extra output) </ins> ]; <del> doCheck = false; # fails, needs unicode locale </del> <ins> doCheck = true; preCheck = '' patchShebangs ../test/ ''; </ins> meta = with stdenv.lib; { description = "A library to handle keyboard descriptions"; <ins> longDescription = '' libxkbcommon is a keyboard keymap compiler and support library which processes a reduced subset of keymaps as defined by the XKB (X Keyboard Extension) specification. It also contains a module for handling Compose and dead keys. ''; # and a separate library for listing available keyboard layouts. </ins> homepage = "https://xkbcommon.org"; <ins> changelog = "https://github.com/xkbcommon/libxkbcommon/blob/xkbcommon-${version}/NEWS"; </ins> license = licenses.mit; maintainers = with maintainers; [ ttuegel ]; platforms = with platforms; unix;

name: current version: desired version: (filling out this template is tedious. especially since there's no syntax highlighting to see through the dense comments) maintainers: cc: cc: who reviewed/merged the libxkbcommon last time. draft PR is incoming. Please tag this issue in your PR.
Looks like this can be closed now? Correct me if I’m wrong!


Question: { self, callPackage }: callPackage ./default.nix { inherit self; <del> version = "2.1.0-2021-05-29"; rev = "839fb5bd72341d8e67b6cfc2053e2acffdb75567"; </del> <ins> version = "2.1.0-2021-06-25"; rev = "e957737650e060d5bf1c2909b741cc3dffe073ac"; </ins> isStable = false; <del> sha256 = "1gyzq4n0fwah0245wazv4c43q9in1mwbk3dhh6cb1ijnjcxp2bb6"; </del> <ins> sha256 = "04i7n5xdd1nci4mv2p6bv71fq5b1nkswz12hcgirsxqbnkrlbbcj"; </ins> }

Describe the bug Since made it into nixpkgs-unstable I can't install neovim on an M1 laptop anymore, error is: To Reproduce Steps to reproduce the behavior: an M1 macbook run Expected behavior neovim to successfully install Screenshots N/A Additional context Notify maintainers Metadata Maintainer information:
Is it possible for you to check if reverting fixes the issue?
Yeah, that did the trick. It is weird as I can install luajit with no issue so maybe this is just an issue with the build setup rather than with the lua interpreter?
Refs I will test this on my M1 as well tonight
Sorry, tonight came later than I expected - I encountered the same issue on M1 and filed , which fixes it. Seems that luajit version is not the issue here ( did not work), as was suggested in Guess we should do a bit more digging


Question: stdenv.mkDerivation rec { pname = "snappy"; <del> version = "1.1.8"; </del> <ins> version = "1.1.9"; </ins> src = fetchFromGitHub { owner = "google"; repo = "snappy"; rev = version; <del> sha256 = "1j0kslq2dvxgkcxl1gakhvsa731yrcvcaipcp5k8k7ayicvkv9jv"; </del> <ins> sha256 = "sha256-JXWl63KVP+CDNWIXYtz+EKqWLJbPKl3ifhr8dKAp/w8="; </ins> }; <del> patches = [ ./disable-benchmark.patch ]; </del> outputs = [ "out" "dev" ]; nativeBuildInputs = [ cmake ];

Describe the bug Because snappy does not install a pkgconfig file, you can't take snappy as a buildInput, packages will never find it. To Reproduce Expected behavior Metadata system: host os: multi-user?: sandbox: version: channels(seb): nixpkgs: Maintainer information: cc
I have opened a PR on the snappy codebase: It is waiting for review and then nixpkgs will need to be updated. Note how the PR has to handle the absolute path being configured in cmake by nix
has decided not to take the patch upstream, so I will work on adding the pkg-config file as part of the nix installation
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . 3. Ask on the on .


Question: pinentry-bemenu = callPackage ../tools/security/pinentry-bemenu { }; <ins> pinentry-rofi = callPackage ../tools/security/pinentry-rofi { }; </ins> pingtcp = callPackage ../tools/networking/pingtcp { }; pinnwand = callPackage ../servers/pinnwand { };

Project description It's a pinentry app, using rofi. I , but failed with (pls ignore metadata on that derivation, was testing): Metadata homepage URL: source URL: license: gpl-3+ platforms: linux
I just gave it try and quickly hacked together the following (based on ): Please feel free to use this as a base for a pr.


Question: pytest-httpx pytest-mock pytest-rerunfailures <del> pytest-xdist </del> pytestCheckHook ];

Package name: paperless-ngx Latest released version: 2.12.1 <!-- Search your package here: --- Current version on the unstable channel: 2.11.6 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --


Question: "treat_warnings_as_errors=false" "v8_enable_i18n_support=true" "use_gold=false" <del> "use_system_xcode=true" </del> <ins> "init_stack_vars=false" </ins> # ''custom_toolchain="//build/toolchain/linux/unbundle:default"'' ''host_toolchain="//build/toolchain/linux/unbundle:default"'' ''v8_snapshot_toolchain="//build/toolchain/linux/unbundle:default"'' ] ++ lib.optional stdenv.cc.isClang ''clang_base_path="${stdenv.cc}"''; NIX_CFLAGS_COMPILE = "-O2"; <del> nativeBuildInputs = [ gn ninja pkg-config python ] ++ lib.optionals stdenv.isDarwin [ xcbuild darwin.DarwinTools ]; </del> <ins> FORCE_MAC_SDK_MIN = stdenv.targetPlatform.sdkVer or "10.12"; nativeBuildInputs = [ gn ninja pkg-config python ] ++ lib.optionals stdenv.isDarwin [ xcbuild darwin.DarwinTools pythonPackages.setuptools ]; </ins> buildInputs = [ glib icu ]; ninjaFlags = [ ":d8" "v8_monolith" ];

Describe the bug Since upgrading v8 to 8.4 () it no longer builds on darwin (at least on my 11.2.3 machine) To Reproduce Steps to reproduce the behavior: Expected behavior A successful v8 build Additional context By default it fails when trying to find the macos sdk, which I patched around with: This then gets as far as , which is avoidable with: which then produces ... and I had to admit defeat. Notify maintainers Metadata Maintainer information:
Hi! Thanks for reporting this! I've opened which I hope fixes this - at least it builds fine for me on 10.15. Please give it a try on your machine too.
Yep, looks good!


Question: <del> { fetchurl, stdenv, lib, buildFHSUserEnv, appimageTools, writeShellScript, anki, undmg }: </del> <ins> { fetchurl, stdenv, lib, buildFHSUserEnv, appimageTools, writeShellScript, anki, undmg, zstd }: </ins> let pname = "anki-bin"; # Update hashes for both Linux and Darwin! <del> version = "2.1.49"; </del> <ins> version = "2.1.51"; </ins> sources = { linux = fetchurl { <del> url = "https://github.com/ankitects/anki/releases/download/${version}/anki-${version}-linux.tar.bz2"; sha256 = "sha256-uG39g9CXnquArFsxtFHWWoDaNwu8y2KKh+SqGt8aqi0="; </del> <ins> url = "https://github.com/ankitects/anki/releases/download/${version}/anki-${version}-linux-qt6.tar.zst"; sha256 = "sha256-ZKVc+TvkNu5mGgibhRIuoLuIfvyoVDy+c4h+Apz9P+0="; </ins> }; <del> darwin = fetchurl { url = "https://github.com/ankitects/anki/releases/download/${version}/anki-${version}-mac.dmg"; sha256 = "sha256-sEVWZQpICL7RYrOuPm1Y5XhzPxCwNk1WGP1rctTtE4Y="; </del> <ins> # For some reason anki distributes completely separate dmg-files for the aarch64 version and the x86_64 version darwin-x86_64 = fetchurl { url = "https://github.com/ankitects/anki/releases/download/${version}/anki-${version}-mac-intel-qt6.dmg"; sha256 = "sha256-wZMJEbcpezVAuBSKlwNTHlqjp0FfmyDB7XD6BBuJhyA="; }; darwin-aarch64 = fetchurl { url = "https://github.com/ankitects/anki/releases/download/${version}/anki-${version}-mac-apple-qt6.dmg"; sha256 = "sha256-6RDTYKoisX5DJ9VPWrP9VH9DCABabb9MB3nG4S8jtR0="; </ins> }; }; unpacked = stdenv.mkDerivation { inherit pname version; <ins> nativeBuildInputs = [ zstd ]; </ins> src = sources.linux; installPhase = ''

After upgrading to the current version of nixpgs (nixos-unstable) anki starts up to a blank main window. According to the documentation () that is because of the system glibc having changed to a version not compatible with anki. Their suggested fix is that users move to using the beta package instead. Steps to reproduce the behavior: -shell -p Anki working as usual Add any other context about the problem here. Please run and paste the result. Excerpt from
Can confirm the behaviour.


Question: <del> { stdenv, fetchurl, makeWrapper, glibc, readline, ncurses, utillinux }: </del> <ins> { stdenv, lib, fetchurl, utillinux, makeWrapper , enableReadline ? true, readline, ncurses }: </ins> <del> with stdenv.lib; let makeFlags = '' INCDIR=${glibc.dev}/include  BINDIR=$out/bin LIBDIR=$out/lib CALC_INCDIR=$out/include/calc CALC_SHAREDIR=$out/share/calc MANDIR=$out/share/man/man1  USE_READLINE=-DUSE_READLINE READLINE_LIB=-lreadline READLINE_EXTRAS='-lhistory -lncurses'  TERMCONTROL=-DUSE_TERMIOS  ''; in </del> stdenv.mkDerivation rec { name = "calc-${version}"; version = "2.12.6.6"; src = fetchurl { <del> url = "https://github.com/lcn2/calc/releases/download/${version}/${name}.tar.bz2"; </del> <ins> urls = [ "https://github.com/lcn2/calc/releases/download/${version}/${name}.tar.bz2" "http://www.isthe.com/chongo/src/calc/${name}.tar.bz2" ]; </ins> sha256 = "03sg1xhin6qsrz82scf96mmzw8lz1yj68rhj4p4npp4s0fawc9d5"; }; <del> buildInputs = [ makeWrapper readline ncurses utillinux ]; configurePhase = '' sed -i 's/all: check_include/all:/' Makefile ''; buildPhase = '' make ${makeFlags} ''; installPhase = '' make install ${makeFlags} wrapProgram $out/bin/calc --prefix LD_LIBRARY_PATH : $out/lib </del> <ins> patchPhase = '' substituteInPlace Makefile  --replace 'all: check_include' 'all:'  --replace '-install_name ''${LIBDIR}/libcalc''${LIB_EXT_VERSION}' '-install_name ''${T}''${LIBDIR}/libcalc''${LIB_EXT_VERSION}'  --replace '-install_name ''${LIBDIR}/libcustcalc''${LIB_EXT_VERSION}' '-install_name ''${T}''${LIBDIR}/libcustcalc''${LIB_EXT_VERSION}' </ins> ''; <del> # Hack to avoid TMPDIR in RPATHs. preFixup = ''rm -rf "$(pwd)" ''; meta = { </del> <ins> buildInputs = [ utillinux makeWrapper ] ++ lib.optionals enableReadline [ readline ncurses ]; makeFlags = [ "T=$(out)" "INCDIR=${lib.getDev stdenv.cc.libc}/include" "BINDIR=/bin" "LIBDIR=/lib" "CALC_SHAREDIR=/share/calc" "CALC_INCDIR=/include" "MANDIR=/share/man/man1" # Handle LDFLAGS defaults in calc "DEFAULT_LIB_INSTALL_PATH=$(out)/lib" ] ++ lib.optionals enableReadline [ "READLINE_LIB=-lreadline" "USE_READLINE=-DUSE_READLINE" ]; meta = with lib; { </ins> description = "C-style arbitrary precision calculator"; homepage = http://www.isthe.com/chongo/tech/comp/calc/; license = licenses.lgpl21; <del> maintainers = [ ]; </del> <ins> maintainers = with maintainers; [ matthewbauer ]; </ins> platforms = platforms.all; }; }

The package won't install on macOS. It triggers an assertion in : . macOS run system: host os: multi-user?: sandbox: version: channels(root): nixpkgs:
Awesome, thanks!


Question: sundials = callPackage ../development/libraries/sundials { }; <ins> sundials_2 = callPackage ../development/libraries/sundials/2.x.nix { python = python3; }; </ins> sutils = callPackage ../tools/misc/sutils { }; svrcore = callPackage ../development/libraries/svrcore { };

I'm trying to build octave with QT5 and with GUI (of course, when I try to build it with GUI, right?). Unfortunately, after the build: Apply this patch: and then system: host os: multi-user?: sandbox: version: channels(m): nixpkgs:
I just noticed that I do not even get the GUI feature when building octave from nixpkgs (neither nor has a GUI).
Pinging: touched the package recently, is the maintainer of the package.
I’ll try to have a look when I have some time. I’ll let you know what I can achieve.
Here is what the configure script says:
yes, I got that and I fixed it. See for my attempt to build with Qt5 (which succeeds, but starting octave with gui fails - see PR).


Question: proxy_pass_request_body           off; ''; }; "@redirectToAuth2ProxyLogin" = { return = "307 https://${cfg.domain}/oauth2/start?rd=$scheme://$host$request_uri"; extraConfig = ''

OAuth2 Proxy's Nginx plugin used to forward and headers to downstream programs. This stopped working after I updated on unstable channel, which is potentially related to or . Steps to reproduce the behavior: up OAuth2 Proxy + Nginx up of header name . does not recognize the session More simply: up OAuth2 Proxy + Nginx or something similar the headers — and used to be present, but not anymore and are passed to downstream servers under Nginx. I have I went on upgrade of nixpkgs unstable from sometime late January to a few hours ago, which is what led me to the two PRs mentioned above. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --cc Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
are you able to play around a bit and confirm if the changes mentioned introduced this regression?
yes. I can't really pin-point to what exactly since there were a lot of changes. Instead, I just have a local fork from (prior to the changes mentioned in the PRs above).
I have a pretty good idea what it could be.
Can you give a try? I didn't test it yet, so it could completely break everything and be completely insecure, just as warning.
fantastic work please let us know how it goes
Sorry for the late reply, I haven't been able to have time to test it out. Now that I do, it seems like has been converted to . This won't be an easy find-and-replace for me to try in my setup, so I will have to find some time to do proper cleanup.


Question: <del> { lib, stdenv, fetchFromGitLab, rustPlatform, pkg-config, openssl </del> <ins> { lib, stdenv, fetchFromGitLab, fetchpatch, rustPlatform, pkg-config, openssl </ins> , installShellFiles , Security, AppKit

When using ffsend from nixpkgs, after uploading a file, the program segfaults. Using Nix on macOS with an M1 chip, but also tested it in a NixOS VM (arm64). Don't know if it works on x86. Steps to reproduce the behavior: The link to the file should be shown. Using the version from homebrew on macOS works. It even works when compiling it from source using cargo through nixpkgs (on macOS): only changed the version last time and last edit was four years ago Please run and paste the result. macOS: NixOS:
What version of rustc are you using to compile ffsend outside of nix?
I'm not familiar with Rust, I just ran in the ffsend git directory and it "just worked" so whichever version is currently in nixpkgs (at least on macOS). I haven't installed Rust on my machine.
Thanks, I have performed a bisection on nixpkgs and the regression was introduced in , so I just wanted to check that it could work with the latest rustc


Question: tinyscheme = callPackage ../development/interpreters/tinyscheme { }; <ins> tbox = callPackage ../development/libraries/tbox { }; </ins> inherit (nodePackages) typescript; bupc = callPackage ../development/compilers/bupc { };

Project description A lightweight cross-platform build utility based on Lua Metadata homepage URL: source URL: license: asl20 platforms: unix


Question: }; postPatch = '' <del> patchelf --set-rpath ${libXxf86vm}/lib lib/java3d-1.6/linux/amd64/libnativewindow_awt.so patchelf --set-rpath ${libXxf86vm}/lib lib/java3d-1.6/linux/amd64/libnativewindow_x11.so patchelf --set-rpath ${libXxf86vm}/lib lib/java3d-1.6/linux/i586/libnativewindow_awt.so patchelf --set-rpath ${libXxf86vm}/lib lib/java3d-1.6/linux/i586/libnativewindow_x11.so </del> <ins> addAutoPatchelfSearchPath ${jre8}/lib/openjdk/jre/lib/ autoPatchelf lib # Nix cannot see the runtime references to the paths we just patched in # once they've been compressed into the .jar. Scan for and remember them # as plain text so they don't get overlooked. find . -name '*.so' | xargs strings | { grep '/nix/store' || :; } >> ./.jar-paths </ins> ''; <del> nativeBuildInputs = [ makeWrapper unzip ]; buildInputs = [ ant jdk8 p7zip gtk3 gsettings-desktop-schemas ]; </del> <ins> nativeBuildInputs = [ makeWrapper unzip autoPatchelfHook ]; buildInputs = [ ant jdk8 p7zip gtk3 gsettings-desktop-schemas libXxf86vm ]; </ins> buildPhase = '' runHook preBuild

Describe the bug I copied a closure from one system (19.03) to a USB thumb drive and from that to another system (19.09), but the program don't work. I think nix packages should be pure and work also on another system running a different NixOS channel. (Right?) To Reproduce Steps to reproduce the behavior: sweethome3d installed in thumb drive thumb drive (i use pantheons files app and open a terminal from there, then ) a folder on the thumb drive. mine is "nixpkgs" to that folder: the nix store path of the program: the usb drive into another system and mount it, get the path the nix store path to your system: you can install it for the current user if you like: or just open a nix shell: run the program: Expected behavior Program just work. Additional context I moved to a new flat with most of my computers and want to plan where to put my furniture. I installed sweethome3d on my notebook, but it is not powerfull enough. So i want to copy the program to my iMac. I have internet from my tethered mobile phone, so i can't just install it from the internet! sweethome3d is about 500 MB, that would be 1/4 of my data plan!!! Metadata X230: system: host os: multi-user?: sandbox: version: channels(davidak): channels(root): nixpkgs: imac: system: host os: hangs after that Maintainer information:
Looks like this problem again: cc
When i run the package from unstable on stable, i get the same error: (but it will hopefully work on the imac when i copy it there again)
I get the same error when i run the package from unstable on my 19.09 branch. So it might be generally broken on unstable.
Yes, looks like be some kind of impurity. It runs on my NixOS 19.03 system, both from the stable and unstable channels. And I did the "nix run" thing you said and it works there too (I'm not sure how much isolation gives, apparently not enough).


Question: }; postPatch = '' <del> patchelf --set-rpath ${libXxf86vm}/lib lib/java3d-1.6/linux/amd64/libnativewindow_awt.so patchelf --set-rpath ${libXxf86vm}/lib lib/java3d-1.6/linux/amd64/libnativewindow_x11.so patchelf --set-rpath ${libXxf86vm}/lib lib/java3d-1.6/linux/i586/libnativewindow_awt.so patchelf --set-rpath ${libXxf86vm}/lib lib/java3d-1.6/linux/i586/libnativewindow_x11.so </del> <ins> addAutoPatchelfSearchPath ${jre8}/lib/openjdk/jre/lib/ autoPatchelf lib # Nix cannot see the runtime references to the paths we just patched in # once they've been compressed into the .jar. Scan for and remember them # as plain text so they don't get overlooked. find . -name '*.so' | xargs strings | { grep '/nix/store' || :; } >> ./.jar-paths </ins> ''; <del> nativeBuildInputs = [ makeWrapper unzip ]; buildInputs = [ ant jdk8 p7zip gtk3 gsettings-desktop-schemas ]; </del> <ins> nativeBuildInputs = [ makeWrapper unzip autoPatchelfHook ]; buildInputs = [ ant jdk8 p7zip gtk3 gsettings-desktop-schemas libXxf86vm ]; </ins> buildPhase = '' runHook preBuild

It looks like the program copies some so files to on start-up: Two of the programs match to libraries in the but I could not match the other two; also I do not have the same filenames as you. Not sure what libraries’ RPATH should be patched but perhaps adding the following to wrapper would work as well:
For the reference, the libraries loaded are listed here:
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . on the on .


Question: for line in f: result = line result = re.sub( <del> fr'^    version = ".+"; #{variant}', f'    version = "{version}"; #{variant}', </del> <ins> fr'^      version = ".+"; #{variant}', f'      version = "{version}"; #{variant}', </ins> result) result = re.sub( <del> fr'^    suffix = ".+"; #{variant}', f'    suffix = "{suffix}"; #{variant}', </del> <ins> fr'^      suffix = ".+"; #{variant}', f'      suffix = "{suffix}"; #{variant}', </ins> result) result = re.sub( <del> fr'^    sha256 = ".+"; #{variant}', f'    sha256 = "{sha256}"; #{variant}', </del> <ins> fr'^      sha256 = ".+"; #{variant}', f'      sha256 = "{sha256}"; #{variant}', </ins> result) print(result, end='')

Mainline / hardened / testing / ... kernels can be painlessly modified via : Sadly, this does not work with a bunch of other kernel variants: All kernels should honor I am not entirely sure how dynamic binding is implemented in kernel stuff, however slightly changing xanmod parts this way seems to fix : zen and lqx look similar to xanmod, no idea about libre Pinging people who seem to update affected packages often Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
same underlying issue as it seems
Can confirm that this patch fix the issue for zen and lqx kernels:
have you submitted these changes as a PR that I can review?
sorry for the late response. I created a new PR with this changes.
This issue has been mentioned on NixOS Discourse. There might be relevant details there:


Question: libsecret ]; <del> preBuild = '' </del> <ins> # FIXME add back once upstream moves to Electron >= 26 # we use electron_26 because electron_25 is EOL /*preBuild = '' </ins> if [[ $(jq --raw-output '.devDependencies.electron' < package.json | grep -E --only-matching '^[0-9]+') != ${lib.escapeShellArg (lib.versions.major electron.version)} ]]; then echo 'ERROR: electron version mismatch' exit 1 fi <del> ''; </del> <ins> '';*/ </ins> postBuild = '' pushd apps/desktop

Steps to reproduce the behavior: bitwarden Please run and paste the result.
Will be fixed by


Question: <ins> diff --git a/networkd-dispatcher b/networkd-dispatcher index ef877ce..8c341f2 100755 --- a/networkd-dispatcher +++ b/networkd-dispatcher @@ -171,6 +171,8 @@ def check_perms(path, mode=0o755, uid=0, gid=0): if not os.path.exists(path): raise FileNotFoundError +    if re.search('^/nix/store/.*', str(path)): +        return True st = os.stat(path, follow_symlinks=False) st_mode = st.st_mode & 0x00FFF if st.st_uid == uid and st.st_gid == gid and st_mode == mode: </ins>

refuses to work since it requires the directories containing the scripts to have mode 755, but the nixos module creates them with mode 750. Steps to reproduce the behavior: (re)-configure an interface (for example by unplugging and replugging a network cable) something like in the journal and that does not exist, i.e. the hook was never run. networkd-dispatcher works. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result.
Thank you for the report! I'm thinking about adding a rules option to the networkd-dispatcher module so this might solve your issue


Question: let <del> requiredPackages = map lib.lowPrio </del> <ins> requiredPackages = map (pkg: setPrio ((pkg.meta.priority or 5) + 3) pkg) </ins> [ config.nix.package pkgs.acl pkgs.attr

I have installed a very barebones server with NixOS. Whenever I run it shows the following warnings: I get that it does not matter that much which of these are used, but it makes these commands not very transparent. Why is being used from and not , while is apparently part of ? Should we make sure these packages will not both be part of or should we make sure the files are only available in one of the two packages? up a minimal version of NixOS. the log
These are usually fixable by just setting priority values. coreutils should probably have a lower priority as they are usually cross platform but not as many supported features. The getconf and getent are interesting because they are actually symlinks to glibc. But we might as well make unixtools lower priority as well.
Is this something we should do nixpkgs-wide? Will that avoid the warning messages? I was thinking why these are providing the same files and why both packages are being used. For instance, do we really need openresolv or is that included unintentionally? The priorities is a way to solve this safely, but I feel like there shouldn't be any conflicts for the base packages at all.
Maybe openresolv we can leave out of systemPackages. But, some of these collisions are kind of unavoidable. We need both procps and coreutils even though they both provide kill bunary. It might be interesting to see which other distros use but IIRC they are almost identical
For coreutils, ArchLinux seems to leave out the kill binary: This also feels a bit wrong, as it isn't the original package anymore. Changing the priority does indeed sound like a better option. Coreutils should have a lower priority.
I tried giving coreutils a lower priority, but it doesn't seem to have made a difference for those warnings.
oh it already has lowprio: but it doesn't really work when everything has the same priority.
systemd-resolved is not enable by default so resolvconf shouln't be really pointing to resolvectl. I think the dummy command provided for compatibility doesn't work correctly if resolved is not running and dhcpcd needs it to configure interfaces.
Should we just give openresolv a higher priority than systemd?
Yes, correct.


Question: let <del> requiredPackages = map lib.lowPrio </del> <ins> requiredPackages = map (pkg: setPrio ((pkg.meta.priority or 5) + 3) pkg) </ins> [ config.nix.package pkgs.acl pkgs.attr

The dhcpcd resolvconf hook check if resolvconf is installed and, because the command is in the PATH, it won't fall back to writing directly but will attempt to execute something like this: echo 'nameserver 10.0.1.1' | resolvconf -a wlan0 Failed to get global data: Unit dbus-org.freedesktop.resolve1.service not found.
Reproducible way to see these collisions: With a file set to I ran in the (the latest commit on the branch), and I get these collision messages:
ping
Hi all nixos-version 03. (Koi) I have the same collision on kill gnutar resolvconf but also on collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/128x128/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/64x64/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/22x22/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/16x16/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/scalable/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.


Question: let <del> requiredPackages = map lib.lowPrio </del> <ins> requiredPackages = map (pkg: setPrio ((pkg.meta.priority or 5) + 3) pkg) </ins> [ config.nix.package pkgs.acl pkgs.attr

0/share/icons/hicolor/48x48/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/128x128/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/64x64/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/22x22/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/16x16/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/scalable/apps/phonon-' collision between /nix/store/mrfyscriilpbyqvnfpgwa87ly4hky3jr-phonon-backend-gstreamer-qt5-4.9.0/share/icons/hicolor/48x48/apps/phonon-'
This seems to include many more collisions than related to this issue.
Maybe rather than changing the nix-env priority, a better solution is to remove some of these programs (e.g. delete in util-linux's ).
That seems hacky to me. What if you want util-linux's version of kill? Presumably if the maintainer thinks it's worth including, someone has a use for it. Nixpkgs shouldn't be making these decisions at the derivation level. Something like meta seems ideal because you can change it without effecting the derivation.
Since and were merged, does that mean this issue can be closed now?
I think so, I don't see these collisions anymore.
Let me know if this isn't fixed after all.
sorry, but i see these collisions.


Question: let <del> requiredPackages = map lib.lowPrio </del> <ins> requiredPackages = map (pkg: setPrio ((pkg.meta.priority or 5) + 3) pkg) </ins> [ config.nix.package pkgs.acl pkgs.attr

it's a different issue: it seems you're installing both the wrapped and unwrapped version of the same packages. I'd say there's something wrong with your configuration, but if you think otherwise open a new issue.


Question: # Rename the binary mv "$out/bin/Pinta" "$out/bin/pinta" <ins> # Copy runtime icons mkdir -p $out/share/icons/hicolor/16x16/ cp -r Pinta.Resources/icons/hicolor/16x16/* $out/share/icons/hicolor/16x16/ </ins> # Install dotnet build installer/linux/install.proj  -target:Install

I am encountering the following error after launching Pinta 2.0.2. I thought initially that it was a problem in the Adwaita theme itself, but whatever the GTK theme I use, I always have the problem. I tried on two different machines and had the same problem with both. NixOS with unstable channel Ubuntu + Nix 2.5.1 with unstable channel I did not have this problem in the last packaged version of Pinta. Maybe it is there since the 2.0.2 upgrade? Pinta should launch without this error. ! Please run and paste the result.
This looks like exactly the same problem discussed on Except that it should be fixed. Not sure what is happening here, and I don't have access to a Linux machine right now to debug. Maybe can help?
I also have this issue. It also causes the toolbar on the left to not appear.
Can someone show me the contents of the directory inside the package? It should have a directory/file somewhere, inside the icons directory (I don't remember the exact path). If this is missing, this is probably the issue.
It is missing:
Huh... I think I can blindly patch this issue, however someone will need to test on the PR.
Wait, I was wrong, it is there, but not in :
It shouldn't be in , it should be in . This is the issue. This can be probably fixed later correctly by setting some setting on , but since I don't have access to a Linux system for now I will just duplicate the assets for now. Later on I can do a proper fix.
Can someone test this PR please:
Waouh that was fast. Thanks a lot, both of you for your reactivity!


Question: <ins> { lib , mkDerivation , fetchurl , extra-cmake-modules , kirigami2 , ktextwidgets , libksane , qtquickcontrols2 }: mkDerivation rec { pname = "skanpage"; version = "1.0.0"; src = fetchurl { url = "mirror://kde/stable/skanpage/${version}/${pname}-${version}.tar.xz"; hash = "sha256-kPVAG64oPkKF3ztHB4V7M2xc1AcvwiHnYpMMLMQNYGA="; }; nativeBuildInputs = [ extra-cmake-modules ]; buildInputs = [ kirigami2 ktextwidgets libksane qtquickcontrols2 ]; meta = with lib; { description = "KDE utility to scan images and multi-page documents"; homepage = "https://apps.kde.org/skanpage"; license = licenses.gpl2Plus; maintainers = with maintainers; [ samuelgrf ]; platforms = platforms.linux; }; } </ins>

Project description Skanpage is a simple no-frills scanner KDE application that is a bit more comprehensive than skanlite. Most importantly, it has multi page support, that skanlite is painfully lacking. cc Metadata homepage URL: source URL: license: gpl2+ platforms: KDE


Question: <ins> diff --git a/pdf-create-empty b/pdf-create-empty index e4768af..5caf34c 100755 --- a/pdf-create-empty +++ b/pdf-create-empty @@ -20,7 +20,7 @@ def main(args): except: die('Invalid dimensions') subprocess.run([ -        'gs', '-dBATCH', '-dNOPAUSE', '-dSAFER', '-dQUIET', +        '@gs@', '-dBATCH', '-dNOPAUSE', '-dSAFER', '-dQUIET', f'-sOutputFile={o}', '-sDEVICE=pdfwrite', f'-dDEVICEWIDTHPOINTS={w}', f'-dDEVICEHEIGHTPOINTS={h}', diff --git a/pdf-sign b/pdf-sign index 64be231..37d508d 100755 --- a/pdf-sign +++ b/pdf-sign @@ -17,7 +17,7 @@ def main(args): if args.flatten: outFile=intmp('input.pdf') subprocess.run([ -                    'pdftk', filePath, +                    '@pdftk@', filePath, 'output', outFile, 'flatten' ], check=True) @@ -28,7 +28,7 @@ def main(args): if args.page < -pageCount or args.page==0 or pageCount < args.page: die('Page number out of range') pageNumber=Cell(args.page if 0 < args.page else pageCount+args.page+1) -        pagePDF=Cell(lambda: subprocess.run(['pdftk', inputPDF(), 'cat', str(pageNumber()), 'output', intmp('page.pdf')], check=True) and intmp('page.pdf')) +        pagePDF=Cell(lambda: subprocess.run(['@pdftk@', inputPDF(), 'cat', str(pageNumber()), 'output', intmp('page.pdf')], check=True) and intmp('page.pdf')) pageSize=Cell(lambda: pdfGetSize(pagePDF())) # The chosen signature if not args.signature and args.batch: @@ -52,7 +52,7 @@ def main(args): dy=h*(1-signaturePositionY())/resize - sh/2 outFile=intmp('signature-positioned.pdf') subprocess.run([ -                'gs', '-dBATCH', '-dNOPAUSE', '-dSAFER', '-dQUIET', +                '@gs@', '-dBATCH', '-dNOPAUSE', '-dSAFER', '-dQUIET', f'-sOutputFile={outFile}', '-sDEVICE=pdfwrite', f'-dDEVICEWIDTHPOINTS={w}', f'-dDEVICEHEIGHTPOINTS={h}', '-dFIXEDMEDIA', @@ -62,7 +62,7 @@ def main(args): return outFile # The signed page signedPagePDF=Cell(lambda: subprocess.run([ -            'pdftk', +            '@pdftk@', pagePDF(), 'stamp', signaturePositionedPDF(), 'output', intmp('signed-page.pdf'), @@ -80,7 +80,7 @@ def main(args): (w, h)=displaySize() outFile=intmp('display.png') subprocess.run([ -                'gs', '-dBATCH', '-dNOPAUSE', '-dSAFER', '-dQUIET', +                '@gs@', '-dBATCH', '-dNOPAUSE', '-dSAFER', '-dQUIET', f'-sOutputFile={outFile}', '-sDEVICE=pngalpha', '-dMaxBitmap=2147483647', @@ -258,7 +258,7 @@ def main(args): if args.existing=='backup': backupFilePath=f'{signedFilePath}.backup{time.strftime("%Y%m%d_%H%M%S")}' subprocess.run([ -                        'mv', +                        '@mv@', signedFilePath, backupFilePath, ], check=True) @@ -269,7 +269,7 @@ def main(args): assert args.existing=='overwrite' pnr=pageNumber() subprocess.run([ -                'pdftk', +                '@pdftk@', f'A={inputPDF()}', f'B={signedPagePDF()}', 'cat', @@ -352,10 +352,10 @@ def tkthrottle(frequency, root): return decorator def pdfCountPages(filePath): -    return int(fromCmdOutput(["pdfinfo", filePath], "^.*nPages: +([0-9]+)n.*$")[1]) +    return int(fromCmdOutput(["@pdfinfo@", filePath], "^.*nPages: +([0-9]+)n.*$")[1]) def pdfGetSize(filePath): -    [ignored, w, h, *ignored2]=fromCmdOutput(['pdfinfo', filePath], '^.*nPage size: +([0-9.]+) x ([0-9.]+) pts( ([A-Za-z0-9]+))?n.*$') +    [ignored, w, h, *ignored2]=fromCmdOutput(['@pdfinfo@', filePath], '^.*nPage size: +([0-9.]+) x ([0-9.]+) pts( ([A-Za-z0-9]+))?n.*$') return (float(w), float(h)) def m(pattern, string): </ins>

Project description From the project page: A tool to sign PDF files with Linux support. Why There appears to be a lack of applications that run on Linux and allow for attaching free-hand signatures to PDF files in a good way. (Non-)alternatives include: Xournal and Xournal++: Allows free-hand annotations but not saving those for later use. Allows inserting images and .pdf files but will rasterize them rather than retain the vector graphics, resulting in lower quality. LibreOffice Draw: Allows inserting images and .pdf files but will rasterize them rather than retain the vector graphics, resulting in lower quality. Okular: Allows free-hand annotations but not saving those for later use. Allows inserting custom saved stamps, but these will not be visible in other PDF readers. Evince: Allows certain kinds of annotations, but nothing that can look like a free-hand signature. pdftk, Ghostscript, and other command-line tools: Allows superimposing .pdf files, but not interactively selecting where. Metadata homepage URL: source URL: license: MIT platforms: linux
Working on it


Question: # To avoid this issue, debugpy should be installed using python.withPackages: # python.withPackages (ps: with ps; [ debugpy ]) ./fix-test-pythonpath.patch <ins> # Support disabling process timeouts when set to 0 # See https://github.com/microsoft/debugpy/pull/1286 (fetchpatch { url = "https://github.com/microsoft/debugpy/commit/1569cc8319350afcc5ba8630660f599d514ac3bb.patch"; hash = "sha256-v4GKLb2M20F1egAGtix9cTkSzBnvSgSSphSQST5p63w="; }) </ins> ] ++ lib.optionals stdenv.isLinux [ # Hard code GDB path (used to attach to process) (substituteAll {

Steps to reproduce the behavior: (warning: veeery long) Seems caused by Also previously reported (if I'm reading the many thousands of lines of output right) to be another instance of Breaks: .
This appears to have been fixed somewhere between and
I have no idea how you tested, but after a (pulling branch), I fail to build this same package. Now with the newer hash: I vote for this issue to be marked as "prematurely-closed", and thus re-opened.
debugpy was blocking my nixos rebuilds through . Updating to resolved it for me. That's about all the testing I did at the time, and figured it was good. Sorry about that.
Yep! Looks like this is related to flaky process test timeouts (which are more likely to fail on less powerful / overworked devices). should fix this!
You can checkout to see when the fix will be applied to the channel you're using.


Question: r2mod_cli = callPackage ../games/r2mod_cli { }; <ins> r2modman = callPackage ../games/r2modman { }; </ins> racer = callPackage ../games/racer { }; randtype = callPackage ../games/randtype { };

Project description A simple and easy to use mod manager for several Unity games using Thunderstore. Support for Risk of Rain 2, Dyson Sphere Program, Valheim, GTFO, Outward, TaleSpire, H3VR, ROUNDS, Mechanica, Muck, BONEWORKS, Lethal League Blaze, and Timberborn. Metadata homepage URL: source URL: license: mit platforms: linux
I marked this as stale due to inactivity. →


Question: hashType=$NIX_HASH_ALGO hashFormat=$hashFormat format=nix <del> skopeoCmd="skopeo --insecure-policy --tmpdir=$TMPDIR" </del> usage(){ echo  >&2 "syntax: nix-prefetch-docker [options] [IMAGE_NAME [IMAGE_TAG|IMAGE_DIGEST]]

Describe the bug Running fails with To Reproduce Extra info On of that script scopeoCmd isn't called correctly. Seems like introduced the problem in this PR


Question: netfilterRPFilter = true; grsecurity = false; xen_dom0 = false; <ins> ia32Emulation = true; </ins> } // features) kernelPatches; intermediateNixConfig = import ./common-config.nix {

I currently cannot execute any 32 bit Linux binaries on my 64 bit system and this breaks updates, since I have 32 bit support enabled in the nix options: I remember that this worked about a week ago, so something has changed. I am new to NixOS, so its possible that I have done something wrong. I used ArchLinux for about 9 years before that and now NixOS for just 3 months and its concepts are still foreign for me. As a long term linux user (about 15 years) I do feel a bit out of place in NixOS. So I am not sure how to fix that myself. Not sure. I have wine installed and support for 32 bit games enabled. Then I normally do just 'nixos-rebuild switch --upgrade' to upgrade, and sometimes 'nix-channel --update'. I also regularly do 'nix-collect-garbage -d'. No idea if that is reproducible or not.
This might be from Could you see if it works without that commit? Also verify that /nix/store/4qj9vzggfzsc34ci79ckaim5cjrwc6ns-bash-4.4-p23/bin/bash executes. I can run it on my system. You can run this to verify that your store is not corrupted:
I solved it now for me. Instead of using the 'linuxPackagestestinghardened' 4.20 linux kernel I switched back to 'linuxPackages419' 4.19.2 kernel and now executing 32 binaries work again. So I guess the hardened kernel does not support executing 32 bit binaries. Does it make sense to have some kind of visible warning here? I normally would not have used the hardened kernel, if that wouldn't have been the only 4.20 version is I get. Its not clear to me when and how those changes in master appear in my nixpkgs/nixos channel (I am on unstable). I would like to use the master branch directly, but I haven't figured out how to best do that yet.
The same here, hardened kernel 4.18.17 and build failed.


Question: netfilterRPFilter = true; grsecurity = false; xen_dom0 = false; <ins> ia32Emulation = true; </ins> } // features) kernelPatches; intermediateNixConfig = import ./common-config.nix {

building '/nix/store/6h9asn7rc93dbwfcs6xaj3k0qgxmg0vh-libtxcdxtn-'... while setting up the build environment: executing '/nix/store/xgf4vra77qrww0n228hd80jsdccdp54w-bash-4.4-p23/bin/bash': Exec format error builder for '/nix/store/6h9asn7rc93dbwfcs6xaj3k0qgxmg0vh-libtxcdxtn-' failed with exit code 1 building '/nix/store/cfwj5yjby2xvagyj69zd1yx8hdhi27ay-'... cannot build derivation '/nix/store/maynq4fxxjc217figygdrgg5q9xnw6yy-mesa-drivers+txc-': 1 dependencies couldn't be built cannot build derivation '/nix/store/wv9b4ayvgnpkvwz81zkk0lm9w4v5pd1y-opengl-drivers-': 1 dependencies couldn't be built cannot build derivation '/nix/store/q61vc27rdbcsrhxifiw89w1qdjax1amh-nixos-system-brix-': 1 dependencies couldn't be built error: build of '/nix/store/q61vc27rdbcsrhxifiw89w1qdjax1amh-nixos-system-brix-' failed Thanks
Maybe the hardened kernel shouldn't set when NixOS' is an ?
It should be 64 bit for the x86_64-linux stdenv. But some packages use the i686 stdenv.
I am not too familiar with stdenv. Is this expected behaviour that a 64-bit system uses 32-bit binaries? This issue is reproducible building as well.
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity.


Question: netfilterRPFilter = true; grsecurity = false; xen_dom0 = false; <ins> ia32Emulation = true; </ins> } // features) kernelPatches; intermediateNixConfig = import ./common-config.nix {

Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . on the on .
This should be resolved by - please reopen if there's still a problem.


Question: makeShellWrapper = makeSetupHook { deps = [ dieHook ]; substitutions = { <del> shell = targetPackages.runtimeShell; </del> <ins> # targetPackages.runtimeShell only exists when pkgs == targetPackages (when targetPackages is not  __raw) shell = if targetPackages ? runtimeShell then targetPackages.runtimeShell else throw "makeWrapper/makeShellWrapper must be in nativeBuildInputs"; </ins> }; passthru = { tests = tests.makeWrapper;

Describe the bug I need to list the out paths of cross compiled packages beforehand which causes an eval error. To Reproduce Steps to reproduce the behavior: Expected behavior List all out paths like `. Additional context I need this feature for nixpkgs-review when cross compiling. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Metadata system: host os: multi-user?: sandbox: version: channels(user): nixpkgs: Maintainer information:
I think its because of the lack of splicing for perl-packages. Note however, that when that is fixed, other package sets will fail with the same issue. cc
Probably multiple issues. Have seen that problem with building xwayland for aarch64 too. Removing makeWrapper helps but probably breaks it :(. But the deps don't cross-build anyway so never got that far for now. Was thinking about opening an issue but got caught up trying to find the issue -- to no avail. Not currently at my machine, might post it later.
I marked this as stale due to inactivity. →
still important to me
Fix in


Question: { stdenv, fetchurl, gfortran, readline, ncurses, perl, flex, texinfo, qhull <del> , libX11, graphicsmagick, pcre, pkgconfig, mesa, fltk </del> <ins> , libsndfile, libX11, graphicsmagick, pcre, pkgconfig, mesa, fltk </ins> , fftw, fftwSinglePrec, zlib, curl, qrupdate, openblas , qt ? null, qscintilla ? null, ghostscript ? null, llvm ? null, hdf5 ? null,glpk ? null , suitesparse ? null, gnuplot ? null, jdk ? null, python ? null

Octave needs library to process audio (e.g. ). System: NixOS: Nix version: Nixpkgs version:
See
Closing in favor of


Question: <del> diff --git a/src/color_dialog/src/main.ts b/src/color_dialog/src/main.ts index 9522499..9911530 100644 --- a/src/color_dialog/src/main.ts +++ b/src/color_dialog/src/main.ts @@ -1,4 +1,4 @@ -#!/usr/bin/gjs +#!/usr/bin/env gjs imports.gi.versions.Gtk = '3.0'; @@ -84,4 +84,4 @@ function launch_color_dialog() { Gtk.init(null); -launch_color_dialog()  No newline at end of file +launch_color_dialog() </del> diff --git a/src/extension.ts b/src/extension.ts index 7417c46..00d5829 100644 --- a/src/extension.ts

In 's tray menu the options "Floating Window Exceptions" & "Active Hint Color" don't work. Steps to reproduce the behavior: & enable pop-shell in GNOME (Wayland). pop-shell's tray menu and try clicking the mentioned options. Further dialogs should open for the respective features.
I found the problem: the compiled (g)js are not executible in filesystem. I do not know a solution yet. Most beautiful solution, fix chmod in pop-shell (but how ...). Or after compiling with an workaround in nix. Other solutions are set path to gjs during patching. Till fixing, you can run this features in your in, with calling it per gjs ...


Question: owner = "bpozdena"; repo = "OneDriveGUI"; rev = "v${version}"; <del> hash = "sha256-HutziAzhIDYP8upNPieL2GNrxPBHUCVs09FFxdSqeBs="; </del> <ins> hash = "sha256-d5NAcT3x9R/2DVQKZsw4GH63nTlVFsvkWwMrb42s18s="; </ins> }; <del> nativeBuildInputs = [ copyDesktopItems makeWrapper ]; </del> <ins> nativeBuildInputs = [ copyDesktopItems makeWrapper ]; </ins> <del> propagatedBuildInputs = with python3Packages; [ pyside6 requests ]; </del> <ins> propagatedBuildInputs = with python3Packages; [ pyside6 requests ]; </ins> # wrap manually to avoid having a bash script in $out/bin with a .py extension dontWrapPythonPrograms = true;

A recent update on unstable broke compatibility between OneDriveGui and OneDrive client. Steps to reproduce the behavior: unstable to current version ( ) a OneDrive profile configured in OneDriveGui OneDriveGui window OneDriveGui correctly recognizing the cli client ! After some investigation on their respective repos, it appears that OneDriveGui 1.0.3 is not compatible with OneDrive 2.5.x, now in rc (and in Nixos unstable) so this is going to stay broken until OneDriveGui releases their 1.1.0 version. There's an open issue on their repository... which points to an alpha release of the new gui... it might be of interest to package that one on unstable. Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
FYI , v2.5.0 will GA 16th September 2024 AEST


Question: <ins> diff -Naur terraform.old/internal/command/init.go terraform.new/internal/command/init.go --- terraform.old/internal/command/init.go +++ terraform.new/internal/command/init.go @@ -3,6 +3,7 @@ import ( "context" "fmt" +	"os" "log" "strings" @@ -55,6 +56,11 @@ var diags tfdiags.Diagnostics +	val, ok := os.LookupEnv("NIX_TERRAFORM_PLUGIN_DIR") +	if ok { +		flagPluginPath = append(flagPluginPath, val) +	} + if len(flagPluginPath) > 0 { c.pluginPath = flagPluginPath } </ins>

Project description OpenTofu is a fork of Terraform, which is no longer under a free license (and should be marked as unfree for releases = 1.6.0). This fork is from the free sources before the license change to a source-available BSL license. Metadata homepage URL: source URL: license: mpl platforms: unix
cc some active maintainers of terraform:
Related issue:
I think it would be a good idea to wait for it to be actually named, see OpenTF is a placeholder name, and at this point OpenTF didn't release an alpha.
Will to take this on later today if nobody else grabs it.
Pull request has been opened, if the current Terraform maintainers are okay with it I can add them to the maintainers section of the new package. Otherwise more than happy to take responsibility for it.


Question: python3.pkgs.buildPythonApplication rec { pname = "radicale"; <del> version = "3.1.3"; </del> <ins> version = "3.1.4"; </ins> src = fetchFromGitHub { owner = "Kozea"; repo = "Radicale"; rev = "v${version}"; <del> hash = "sha256-a1oapCktJPvNO+MTsB9COtxSFB/ZIZvJiuqX+s+lncY="; </del> <ins> hash = "sha256-vX6lYiDqpQeWVLotyt2ODwcjskWB6EuCky3/V8m1m7Q="; </ins> }; postPatch = ''

Since won't build () From the above logs: Steps to reproduce the behavior: <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --
Can reproduce on my ZFS system, not on my ext4 system though.
I can't reproduce by running on any system.
I was able to build from that commit nix store is zfs backed
It's more relevant whether is.
The renameat2 syscall used isn't (fully?) supported by ZFS: I'm not sure how that relates to this issue only occurring with , I guess it's related to the sandbox.
/tmp is tmpfs for me
Thanks for filing the upstream issue!


Question: <ins> # pkgs.ociTools {#sec-pkgs-ociTools} `pkgs.ociTools` is a set of functions for creating containers according to the [OCI container specification v1.0.0](https://github.com/opencontainers/runtime-spec). Beyond that it makes no assumptions about the container runner you choose to use to run the created container. ## buildContainer {#ssec-pkgs-ociTools-buildContainer} This function creates a simple OCI container that runs a single command inside of it. An OCI container consists of a `config.json` and a rootfs directory.The nix store of the container will contain all referenced dependencies of the given command. The parameters of `buildContainer` with an example value are described below: ```nix buildContainer { args = [ (with pkgs; writeScript "run.sh" '' #!${bash}/bin/bash exec ${bash}/bin/bash '').outPath ]; mounts = { "/data" = { type = "none"; source = "/var/lib/mydata"; options = [ "bind" ]; }; }; readonly = false; } ``` - `args` specifies a set of arguments to run inside the container. This is the only required argument for `buildContainer`. All referenced packages inside the derivation will be made available inside the container - `mounts` specifies additional mount points chosen by the user. By default only a minimal set of necessary filesystems are mounted into the container (e.g procfs, cgroupfs) - `readonly` makes the container's rootfs read-only if it is set to true. The default value is false `false`. </ins>

This issue tracks the conversion of from Docbook to CommonMark per . If you intend to work on this conversion, please comment below! here that you intend to work on it. (Please also post if you stop working on it.) a new branch of nixpkgs master. : change to . to . the contents from Docbook to . Follow . Use existing sections for inspiration. from the folder to build the manual. the manual on your computer at after running from folder: it looks good, submit a PR and reference this issue.
Hi Already opened a PR for that ().


Question: owner = "WerWolv"; repo = pname; rev = "v${version}"; <del> hash = "sha256-H2bnRByCUAltngmVWgPW4vW8k5AWecOAzwtBKsjbpTw="; </del> <ins> hash = "sha256-meOx8SkufXbXuBIVefr/mO9fsUi3zeQmqmf86+aDMaI="; </ins> }; nativeBuildInputs = [ cmake llvm python3 perl pkg-config ];

Package name: imhex Latest released version: 1.27.1 <!-- Search your package here: --- Current version on the unstable channel: 1.26.2 Current version on the stable/release channel: 1.19.3 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR.


Question: <ins> { lib , python3 , fetchFromGitHub }: python3.pkgs.buildPythonApplication rec { pname = "rstfmt"; version = "0.0.13"; format = "pyproject"; src = fetchFromGitHub { owner = "dzhu"; repo = "rstfmt"; rev = "refs/tags/v${version}"; hash = "sha256-SJRA14CfoT8XMt3hMB7cLdmuLwsJnBSwhKkD1pJvQCI="; }; propagatedBuildInputs = with python3.pkgs; [ black docutils sphinx ]; # Project has no unittest just sample files doCheck = false; pythonImportsCheck = [ "rstfmt" ]; meta = with lib; { description = "A formatter for reStructuredText"; homepage = "https://github.com/dzhu/rstfmt"; license = licenses.mit; maintainers = with maintainers; [ fab ]; }; } </ins>

Project description Formatter for rst (reStructuredText) files Metadata homepage URL: source URL: license: MIT platforms: unix, linux, darwin, ...


Question: <ins> --- a/mesonbuild/coredata.py +++ b/mesonbuild/coredata.py @@ -266,18 +266,13 @@ ''' if option.endswith('dir') and os.path.isabs(value) and  option not in builtin_dir_noprefix_options: -            # Value must be a subdir of the prefix # commonpath will always return a path in the native format, so we # must use pathlib.PurePath to do the same conversion before # comparing. -            if commonpath([value, prefix]) != str(PurePath(prefix)): -                m = 'The value of the {!r} option is {!r} which must be a '  -                    'subdir of the prefix {!r}.nNote that if you pass a '  -                    'relative path, it is assumed to be a subdir of prefix.' -                raise MesonException(m.format(option, value, prefix)) -            # Convert path to be relative to prefix -            skip = len(prefix) + 1 -            value = value[skip:] +            if commonpath([value, prefix]) == str(PurePath(prefix)): +                # Convert path to be relative to prefix +                skip = len(prefix) + 1 +                value = value[skip:] return value def init_builtins(self, options): </ins>

To prevent issues like , meson setup hook should define install directories just like stdenv and cmake do Unfortunately, simple patch like the following will not work Meson does not like it very much when the directories are not descendants of prefix See also


Question: <ins> From 74fb65a2574c93a2b20a51875a5e336f727ff4bc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jos=C3=A9=20Romildo=20Malaquias?= <malaquias@gmail.com> Date: Wed, 25 Dec 2019 18:48:38 -0300 Subject: [PATCH] Search system themes in system data dirs --- capplets/common/gtkrc-utils.c     | 20 ++++++++++++-------- capplets/common/mate-theme-info.c | 18 +++++++++++------- 2 files changed, 23 insertions(+), 15 deletions(-) diff --git a/capplets/common/gtkrc-utils.c b/capplets/common/gtkrc-utils.c index 011c8a1..27e01da 100644 --- a/capplets/common/gtkrc-utils.c +++ b/capplets/common/gtkrc-utils.c @@ -60,15 +60,19 @@ gchar* gtkrc_find_named(const gchar* name) if (!path) { -		gchar* theme_dir = gtk_rc_get_theme_dir(); -		path = g_build_filename(theme_dir, name, subpath, NULL); -		g_free(theme_dir); +		const gchar * const * dirs = g_get_system_data_dirs(); -		if (!g_file_test(path, G_FILE_TEST_EXISTS)) -		{ -			g_free (path); -			path = NULL; -		} +		if (dirs != NULL) +			for (; !path && *dirs != NULL; ++dirs) +			{ +				path = g_build_filename(*dirs, "themes", name, subpath, NULL); + +				if (!g_file_test(path, G_FILE_TEST_EXISTS)) +				{ +					g_free (path); +					path = NULL; +				} +			} } return path; diff --git a/capplets/common/mate-theme-info.c b/capplets/common/mate-theme-info.c index 54ae3ae..a738f0b 100644 --- a/capplets/common/mate-theme-info.c +++ b/capplets/common/mate-theme-info.c @@ -1763,6 +1763,7 @@ mate_theme_color_scheme_equal (const gchar *s1, const gchar *s2) void mate_theme_init () { +  const gchar * const * dirs; GFile *top_theme_dir; gchar *top_theme_dir_string; static gboolean initted = FALSE; @@ -1783,13 +1784,16 @@ mate_theme_init () theme_hash_by_uri = g_hash_table_new_full (g_str_hash, g_str_equal, g_free, NULL); theme_hash_by_name = g_hash_table_new_full (g_str_hash, g_str_equal, g_free, NULL); -  /* Add all the toplevel theme dirs. */ -  /* $datadir/themes */ -  top_theme_dir_string = gtk_rc_get_theme_dir (); -  top_theme_dir = g_file_new_for_path (top_theme_dir_string); -  g_free (top_theme_dir_string); -  add_top_theme_dir_monitor (top_theme_dir, 1, NULL); -  g_object_unref (top_theme_dir); +  /* Add all the toplevel theme dirs following the XDG Base Directory Specification */ +  dirs = g_get_system_data_dirs (); +  if (dirs != NULL) +    for (; *dirs != NULL; ++dirs) { +      top_theme_dir_string = g_build_filename (*dirs, "themes", NULL); +      top_theme_dir = g_file_new_for_path (top_theme_dir_string); +      g_free (top_theme_dir_string); +      add_top_theme_dir_monitor (top_theme_dir, 1, NULL); +      g_object_unref (top_theme_dir); +    } /* ~/.themes */ top_theme_dir_string  = g_build_filename (g_get_home_dir (), ".themes", NULL); -- 2.24.1 </ins>

Describe the bug Themes are not listed anymore in the Appearance Preferences for the Mate desktop environment. Some screenshots of a VM running Mate to demonstrate the issue: ! ! Metadata system: host os: multi-user?: sandbox: version: channels(root): nixpkgs:
Is the value of clobbered in the session? In an unwrapped program like , what is its value?
In in a VM with almost only Mate installed:
With the following patch find the themes.
It seems that the function to locate the system themes. This function is returning something like , which is not suitable for NixOS, I suppose. If this is really true, than is not being used. How it used to work before, I do not know.
 uses the environment variable , if it is defined. Does it used to be defined in some NixOS module, and has that changed?
We patch gtk2 like so that function works there without having to set which isn't good. By all means mate shouldn't use this totally deprecated function at all, especially in gtk3.
I may patch it to use and submit upstream.


Question: <del> { pkgs, lib }: </del> <ins> { __splicedPackages, lib }: let pkgs = __splicedPackages; in </ins> rec { /* Similar to callPackageWith/callPackage, but without makeOverridable


Question: }; in python.pkgs.buildPythonApplication rec { pname = "spotdl"; <del> version = "4.1.10"; </del> <ins> version = "4.1.11"; </ins> format = "pyproject";

Failure happens locally as well when trying to build spotdl on the nixos-23.05 branch. this the tail of the log: The last line is apparently unrelated: (maintainer) (recent bumps)
This test doesn't fail if spotdl is built using version from this nixpkgs commit , I'm not sure if this is an upstream issue with spotdl while using newer yt-dlp versions (newer than ).


Question: sources = { "aarch64-darwin" = fetchurl { url = "https://github.com/oven-sh/bun/releases/download/bun-v${version}/bun-darwin-aarch64.zip"; <del> hash = "sha256-aPFKKCqjKZSz/ZX5G3RiIkLHIj89MGPp+PgFbE4vpgE="; </del> <ins> hash = "sha256-xwKNDTlghNkq36wMAKSa+reROqGwMm4dZ/Hfos1zuP4="; </ins> }; "aarch64-linux" = fetchurl { url = "https://github.com/oven-sh/bun/releases/download/bun-v${version}/bun-linux-aarch64.zip"; <del> hash = "sha256-u2UlimmIE2z7qsqkAbSfi7kxuOjlJGkX4RAsUGMklGc="; </del> <ins> hash = "sha256-gaquYp4q22IJHV7Fx5GxZWVFvJzU30HOmL32lkxJeQ8="; </ins> }; "x86_64-darwin" = fetchurl { url = "https://github.com/oven-sh/bun/releases/download/bun-v${version}/bun-darwin-x64.zip"; <del> hash = "sha256-MO01plCsZRR+2kC2J0/VhXJIhchMfLtMFvidPNAXtB4="; </del> <ins> hash = "sha256-DPVnTzdGprjZ16kme3Y6xBognjWHt+0N/zk0J3dm8jY="; </ins> }; "x86_64-linux" = fetchurl { url = "https://github.com/oven-sh/bun/releases/download/bun-v${version}/bun-linux-x64.zip"; <del> hash = "sha256-yw17x8DmKktE5fNBF3JQdVSEXFwAotA7hCzfLcd6JoI="; </del> <ins> hash = "sha256-Er7QiWBhENTa9xhCIVqECCzexWejBwBC59u3CJKQiwc="; </ins> }; }; updateScript = writeShellScript "update-bun" ''

Package name: bun Latest released version: 1.0.9Current version on the unstable channel: 1.0.7 Current version on the stable/release channel: 0.6.2 Notify maintainers People who've also recently updated the package: Note for maintainers: Please tag this issue in your PR.


Question: rm ./texmf.cnf sed  -e 's,texmf-dist,texmf,g'  <del> -e 's,texmf-local,texmf,g'  </del> -e "s,$SELFAUTOLOC,$out,g"  -e "s,$SELFAUTODIR,$out/share,g"  -e "s,$SELFAUTOPARENT,$out/share,g"

TEXMF defines the order in which files are read in The idea is that TEXMFSYSVAR and TEXMFCONFIG files take precedence over files distributed with TEXMFDIST, so there is a way for the user to override configuration files. Our lists: This seems all fine, except that our derivation also makes TEXMFLOCAL point to TEXMFDIST as well, and this destroys override-ability. My suggestion is to use a separate and empty $out/share/texmf-local for TEXMFLOCAL.
Could you please provide an example of the override that doesn't work?
I dropped my customization here: It boils down to adding a custom package (minionpro availble for my ) and running: in postBuild.
I investigated your override. I see that you sneak the original , then add your font to it and regenerate the mappings which go to share/texmf-var. At the same time our texlive setup just reuses prebuilt maps provided by (for pdftex), individual font packages and others and those are installed into share/texmf which happens to be also pointed by TEXMFLOCAL. I also now discover that the line does nothing for us. Your change makes sense to me. Makes me wonder if we could do better. For example, not deleting should not hurt anything. I could not find any way to automatically scan for new entries for The Gentoo documentation mentions [1] concatenating it from /etc/texmf/updmap.d. [1]
First of all thank you for taking such a careful look at my code snippet. I really appreciate it! First, yes, I sneak out and later sneak back in. I do think that there are no adverse side-effects from not deleting in texlive.combine. I will submit a PR to remove it. This will minimize my postBuild override to just: That looks much cleaner :) As there is no real "hooks" functionality in our texlive package derivation, it seems to be a good idea to optimistically merge (by concatenation) separate snippets. I will file a separate issue to discuss this.
Thank you!


Question: '') plugins} ''; <ins> # Function that automatically links the default NDK plugin. linkNdkPlugin = {name, plugin, check}: lib.optionalString check '' ln -s ${plugin}/libexec/android-sdk/${name} ${name} ''; </ins> # Function that automatically links a plugin for which only one version exists linkPlugin = {name, plugin, check ? true}: lib.optionalString check ''

Starting with it is not possible to build the android sdk with ndk included. I tried varous ndk versions which have different failure messges: fails with fails with Steps to reproduce the behavior: the following with : Dropped into a nix-shell with androidsdk in <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. --Please run and paste the result.


Question: <del> { stdenv, fetchFromGitHub, autoreconfHook, pkgconfig, perl, pythonPackages, libiconv }: </del> <ins> { stdenv, fetchFromGitHub, autoreconfHook, pkgconfig, perl, pythonPackages, libiconv, jansson }: </ins> stdenv.mkDerivation { pname = "universal-ctags";

universal-ctags is not built with jansson, which means that universal-ctags does not have support for outputting JSON files. Steps to reproduce the behavior: universal-ctags with error: Expected: Tags file created with json format. Additional context I think this can be resolved by simply adding to the , but I've never written a nix package before so I'm not certain. I did this locally and it seemed to work, but I don't know if there's a better way to do it. Metadata Maintainer information:
cc I took a whack at fixing this locally. If this looks good to you, let me know and I can create a PR. I'm really new to Nix so it's likely I did something wrong.
Welcome and thanks a lot for the wonderful bug description Open the PR of course! You can update the package to the last version or add yourself to maintainers too if you are agree Don't hesitate to ask if your find any troubles


Question: buildInputs = [ ffmpeg qtbase qtdeclarative qtlocation qtquickcontrols2 qtwebchannel qtwebengine ]; nativeBuildInputs = [ qmake qttools ]; <del> postPatch = lib.optionalString (ffmpeg != null) '' </del> <ins> patches = [ ./yt-dlp-path.patch ]; postPatch = '' substituteInPlace youtube_dl.cpp  --replace 'QString YoutubeDl::path = QString();'  'QString YoutubeDl::path = QString("${yt-dlp}/bin/yt-dlp");' '' + lib.optionalString (ffmpeg != null) '' </ins> substituteInPlace converter_ffmpeg.cpp  --replace '"ffmpeg"' '"${ffmpeg.bin}/bin/ffmpeg"'  --replace '"ffmpeg ' '"${ffmpeg.bin}/bin/ffmpeg '

When started, ClipGrab always want to download youtube-dl. When after that, ClipGrab never finds the video and stays stuck on «please wait while ClipGrab downloads video info» (translated from french). Steps to reproduce the behavior: ... or ... Start ClipGrab ... youtube-dl dependency should be accessible, and video info should be fetched ! !


Question: <del> { stdenv, config, lib, fetchFromGitHub, cmake, libusb1, ninja, pkg-config, gcc </del> <ins> { stdenv , config , lib , fetchFromGitHub , fetchpatch , cmake , libusb1 , ninja , pkg-config , gcc </ins> , cudaSupport ? config.cudaSupport or false, cudatoolkit <del> , enablePython ? false, pythonPackages ? null }: </del> <ins> , enablePython ? false, pythonPackages ? null }: </ins> assert cudaSupport -> cudatoolkit != null; assert enablePython -> pythonPackages != null;

Describe the bug librealsense cannot be built on/for aarch64-linux. I see that the derivation says it is not supported on aarch64-linux but I also know it is possible to compile the library normally on that platform as I have done it before. So I think its just a problem with the derivation for now. I am willing to help in the work to fix the recipe, and test the fixes, but I am relatively new to the nix language and build system. I have attached the error message I get, could someone point me in the direction I should be looking to fix it? To Reproduce Steps to reproduce the behavior: Screenshots Additional context Add any other context about the problem here. Notify maintainers <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Metadata Maintainer information:
Hello! I tried it and got similar errors building graphite, though I can get it to build when I use the versions of the libraries so maybe that's a good place to start? I'm not sure what the issue is unfortunately.
I fixed the build of on aarch64-darwin and aarch64-linux in PR will not work on aarch64 unless somebody fixes the build of package on aarch64 theoretically should work, but in reality the build of which is a dependency fails on aarch64 Will you please open two new issues for and not available for aarch64? The build failures you see have nothing to do with librealsense.


Question: postInstall = '' mkdir -p $out/lib/password-store/extensions <del> cp ${src}/import.bash $out/lib/password-store/extensions/import.bash </del> <ins> cp import.bash $out/lib/password-store/extensions/import.bash </ins> wrapProgram $out/lib/password-store/extensions/import.bash  --prefix PATH : "${python3Packages.python.withPackages (_: propagatedBuildInputs)}/bin"  --prefix PYTHONPATH : "$out/${python3Packages.python.sitePackages}"  --run "export PREFIX" <del> cp -r ${src}/share $out/ </del> <ins> cp -r share $out/ </ins> ''; postCheck = ''

Package name: Latest released version: 3.5 <!-- Search your package here: --- Current version on the unstable channel: 3.2 Current version on the stable/release channel: 3.2 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]: