Re: [Nix-dev] How to use a previous build from hydra-server

2015-12-07 Thread Teo Klestrup Röijezon
You can import a package from a specific version of nixpkgs, independent of the rest of your build, though it's a bit of a manual process. First, check on Hydra which Git revision it is that you want to build (you can see this on the Inputs tab, 144d13cf2cc6de28f8abe9e9e8c98f28ccf8fc59 in this

Re: [Nix-dev] Secure NixOS

2015-12-07 Thread phreedom
On Monday, December 07, 2015 11:14:14 zimbatm wrote: > (2) might be a bit difficult. I'm not sure NixOS has enough popularity yet > to gather that kind of funding. Also it means going into politics for > example to decide which set of packages are security-supported. That being > said, we could go

[Nix-dev] Fundraiser?

2015-12-07 Thread Bjørn Forsman
Hi all, I've been a Nix/NixOS user for a few years now. While some parts of NixOS are moving forward rather quickly (awesome!), some of the Nix tooling is improving painfully slow (IMHO). I was wondering if any core devs have considered starting a fundraiser to possibly work full-time on some

Re: [Nix-dev] Fundraiser?

2015-12-07 Thread Tomasz Czyż
https://www.bountysource.com/search?query=nixos - maybe this is good enough, no? Just needs a little more advertisement :-) 2015-12-07 16:33 GMT+00:00 Thomas Hunger : > There's the foundation https://nixos.org/nixos/foundation.html which > would be a great structure to

Re: [Nix-dev] Fundraiser?

2015-12-07 Thread Thomas Hunger
There's the foundation https://nixos.org/nixos/foundation.html which would be a great structure to collect and direct money. Eelco - I'm not sure where to look so I couldn't find anything about the foundation's activity. Do you keep meeting notes somewhere online? best, Tom On 7 December 2015

Re: [Nix-dev] Secure NixOS

2015-12-07 Thread zimbatm
Hi Seroka, just a couple of idea: (1) is really cool but could also be solved by having faster builds and binary diffs. I really liked the presentation at NixCon and think that it's a really cool hack but don't understand all of the implications. Just as an anecdote; ruby has had a release with

Re: [Nix-dev] Secure NixOS

2015-12-07 Thread joachifm
On Mon, Dec 7, 2015, at 12:14 PM, zimbatm wrote: > [...] > (3) is already supported by adding `security.grsecurity.enable` to your > configuration.nix file. To be frank, grsecurity support in NixOS is user-unfriendly. My biggest gripe is that the implementation is biased towards compile-time

[Nix-dev] How to use a previous build from hydra-server

2015-12-07 Thread rohit yadav
Hi, Currently Mesos package is broken on nixos-unstable channel, therefore, I cannot install it on my server. Is there a way to install a previous successful build? Thanks, Rohit ___ nix-dev mailing list nix-dev@lists.science.uu.nl

Re: [Nix-dev] Fundraiser?

2015-12-07 Thread Rok Garbas
Quoting Bjørn Forsman (2015-12-07 20:45:49) > On 7 December 2015 at 17:36, Tomasz Czyż wrote: > > https://www.bountysource.com/search?query=nixos - maybe this is good enough, > > no? Just needs a little more advertisement :-) > > I added some bounties :-) > I think for

Re: [Nix-dev] Secure NixOS

2015-12-07 Thread Jonn Mostovoy
Coincidentally, Jonathan Fischoff (‏@jfischoff) is talking about hardening concerns on twitter, he points out that there is already discussion and work regarding that — https://github.com/NixOS/nixpkgs/issues/7220 — Kindest regards, ¬Σ On Mon, Dec 7, 2015 at 4:12 PM, wrote:

Re: [Nix-dev] How to use a previous build from hydra-server

2015-12-07 Thread rohit yadav
One more question. Is it possible to add two channels? Say one unstable and one previous stable channel and choose module from one of them? Thanks. Rohit On Mon, Dec 7, 2015 at 8:47 PM, rohit yadav wrote: > Hi, > > Currently Mesos package is broken on nixos-unstable

Re: [Nix-dev] Secure NixOS

2015-12-07 Thread Rok Garbas
Quoting Arseniy Seroka (2015-12-06 20:29:58) > Greetings, friends and colleagues. > > This is a joint letter by me and Jonn Mostovoy, co-founders of > Serokell, regarding the state of security in NixOS and a roadmap of fixing it. > > Hopefully, all of us are using NixOS in our companies, however

Re: [Nix-dev] Fundraiser?

2015-12-07 Thread Bjørn Forsman
On 7 December 2015 at 17:36, Tomasz Czyż wrote: > https://www.bountysource.com/search?query=nixos - maybe this is good enough, > no? Just needs a little more advertisement :-) I added some bounties :-) Best regards, Bjørn Forsman

Re: [Nix-dev] Fundraiser?

2015-12-07 Thread Matthias Beyer
On 07-12-2015 16:36:50, Tomasz Czyż wrote: > https://www.bountysource.com/search?query=nixos - maybe this is good > enough, no? Just needs a little more advertisement :-) This points to the old nixos package repository (github.com/nixos/nixos <- why does this still exist???) - I'd consider this

Re: [Nix-dev] How to use a previous build from hydra-server

2015-12-07 Thread Rok Garbas
you can fetch mesos directly from hydra http://hydra.nixos.org/job/nixos/trunk-combined/nixpkgs.mesos.x86_64-linux check latest successful build for instructions. Quoting rohit yadav (2015-12-08 03:54:05) > One more question. Is it possible to add two channels? Say one unstable and > one >

Re: [Nix-dev] How to use a previous build from hydra-server

2015-12-07 Thread rohit yadav
Hi Rok, Thanks for reply. How should I fetch it? I mean how to tell the system to use that particular build? Currently, when I say nixos-rebuild {boot | switch} it assumes that that (which again I am not sure which one it refers to when I have to two channels listed) would tell it the right hash