Re: [Nix-dev] How to package Heroku Toolbelt?

2013-11-18 Thread Alex Berg
Thanks for the idea Jonas. I gave it a try, and I finally got it working. But, I encountered some problems on the way, so I want to ask here. I am using Ruby 1.9, which includes Rubygems out-of-the-box, I believe. $ gem install heroku ERROR: While executing gem ...

Re: [Nix-dev] How to package Heroku Toolbelt?

2013-11-18 Thread Jonas Pfenniger (zimbatm)
What's the output of `gem env` if you unset the GEM_HOME that you have exported ? Normally you should have $HOME/.gem/ruby/1.9.1 in your gem paths and `gem install --user-install your-gem` should place it there. You still have to add $HOME/.gem/ruby/1.9.1/bin in your PATH. Later versions of

[Nix-dev] Mount /nix/store from NFS during Stage 1 boot

2013-11-18 Thread deCube.net | Danny Wilson
Hi list, I have another challenge for you :-) I’m trying to get /nix/store mounted during boot from an NFS server. I completed nixos-install successfully on this NFS mount. I’m having 2 issues: 1) DHCP is not queried during stage 1. - worked around this for now by booting into recovery

Re: [Nix-dev] Mount /nix/store from NFS during Stage 1 boot

2013-11-18 Thread Eelco Dolstra
Hi, On 18/11/13 14:22, deCube.net | Danny Wilson wrote: I’m having 2 issues: 1) DHCP is not queried during stage 1. BusyBox (used in the initrd) contains a DHCP client called udhcpc that might be useful here. Googling around it looks like NFS mounting at boot was supported back in 2011,

Re: [Nix-dev] How to package Heroku Toolbelt?

2013-11-18 Thread Vladimír Čunát
On 11/18/2013 12:17 PM, Jonas Pfenniger (zimbatm) wrote: Regarding readline, it seems that it's only compiled if a cursesSupport flag is enabled : https://github.com/NixOS/nixpkgs/blob/master/pkgs/development/interpreters/ruby/ruby-19.nix#L5 but I don't know how to compile ruby with it or not

Re: [Nix-dev] Enabling CUPS unconditionally allows UDP/631 on the firewall

2013-11-18 Thread Peter Simons
Hi Eelco, I've been wanting to enable the firewall by default in NixOS for a while (https://github.com/NixOS/nixos/issues/55) and disabling port 22 would lock out people who have sshd enabled without having port 22 opened explicitly in their configuration.nix. you are right, that would

Re: [Nix-dev] Mount /nix/store from NFS during Stage 1 boot

2013-11-18 Thread Rickard Nilsson
On 11/18/2013 04:01 PM, Eelco Dolstra wrote: Hi, On 18/11/13 14:22, deCube.net | Danny Wilson wrote: I’m having 2 issues: 1) DHCP is not queried during stage 1. BusyBox (used in the initrd) contains a DHCP client called udhcpc that might be useful here. Googling around it looks like

Re: [Nix-dev] Hardened NixOS

2013-11-18 Thread Marc Weber
Securing nixos I guess we all want to be secure :) I'd also like you to start a wiki page talking about - what could be done - what you want to be done - how to verify that the goal has been achieved (if this does make sense) - what else could be done to have a secure system .. -

Re: [Nix-dev] Hardened NixOS

2013-11-18 Thread phreedom
On Tuesday, November 19, 2013 01:58:28 AM Ricardo M. Correia wrote: I am currently working on integrating grsecurity/PaX and making various software packages work under a grsec-enabled kernel (well, the packages I use): https://github.com/NixOS/nixpkgs/pull/1187 With those patches and a

Re: [Nix-dev] Hardened NixOS

2013-11-18 Thread Ricardo M. Correia
On Tue, Nov 19, 2013 at 2:12 AM, Marc Weber marco-owe...@gmx.de wrote: Securing nixos I guess we all want to be secure :) I'd also like you to start a wiki page talking about - what could be done - what you want to be done - how to verify that the goal has been achieved (if this

Re: [Nix-dev] Hardened NixOS

2013-11-18 Thread Marc Weber
Yes, start the wiki page. Don't forgett that nixos has the nesting features for builds. Thus you can build i686,x86_64 and hardened/not hardened systems at the same time. Ther is not much which can go wrong other than that you have to download nix* stuff twice. Its on my todo list to improve

Re: [Nix-dev] How to package Heroku Toolbelt?

2013-11-18 Thread Alex Berg
Yes --user-install option[1] will install Gems into my home directory. (Related: Bundler can also do this, with the --path option. [2]) But, should storing gems in Home directory be the default behavior for Ruby on NixOS? If so, we should configure this when installing Ruby or Rubygems. We I see

Re: [Nix-dev] How to package Heroku Toolbelt?

2013-11-18 Thread Alex Berg
Thanks Vlad! I added the following attribute in the `top-level/all-packages.nix` file, right below the `ruby` attribute. rubyCurses = ruby.override { cursesSupport = true; }; Then I reinstalled Ruby and found success. Nice! $ nix-env --uninstall ruby $ nix-env --uninstall rubygems

Re: [Nix-dev] How to package Heroku Toolbelt?

2013-11-18 Thread Vladimír Čunát
On 11/19/2013 01:38 AM, Alex Berg wrote: Vlad, is rubycurses intended as a new attribute in all-packages.nix, sibling to ruby? Yes, if could be if it's likely to be useful on more places, or it could be the default. Or it could e.g. be herokuToolbelt = callPackage path { ruby =