jiebi/CodeConvo huggingface dataset:
Code change:
- Nix has been updated to version 2.4, reference its [release notes](https://discourse.nixos.org/t/nix-2-4-released/15822) for more information on what has changed. The previous version of Nix, 2.3.16, remains available for the time being in the `nix_2_3` package. <del> - `iptables` now uses `nf_tables` backend. </del> <ins> - `iptables` is now using `nf_tables` under the hood, by using `iptables-nft`, similar to [Debian](https://wiki.debian.org/nftables#Current_status) and [Fedora](https://fedoraproject.org/wiki/Changes/iptables-nft-default). This means, `ip[6]tables`, `arptables` and `ebtables` commands  will actually show rules from some specific tables in the `nf_tables` kernel subsystem. - systemd got an `nftables` backend, and configures (networkd) rules in their own `io.systemd.*` tables. Check `nft list ruleset` to see these rules, not `iptables-save` (which only shows `iptables`-created rules. </ins> - PHP now defaults to PHP 8.0, updated from 7.4.

Related discussion:
text: On NixOS 21.05, when setting , I could see the result of this settings by running: Since NixOS 21.11 however, altought the masquerade works, I cannot see anything with iptables commands: As discussed on the Discourse topic , I suspect this is linked to the following change in NixOS 21.11 (PR ): Steps to reproduce the behavior: an interface with on a system running NixOS 21.11 the lack of information about the IP masquerade The IP masquerade should be visible like in NixOS 21.05:
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
Actually, this is due to systemd since v248 preferring to use nftables if available, see Systemd does not use the iptables binaries and but a separate library that creates iptables rules directly without translation to nft by iptables-nft. So even without using the legacy iptables tools, these rules in nftables by networkd would not be visible. Other services that need to add firewall rules like libvirtd, docker or podman are likely getting proper nftables support soon and users still using iptables will run into the same issues. Since we are not the only distribution dealing with this, this should either be solved in systemd (can rules be generated that are compatible to and can be parsed by iptables-nft?) or in iptables-nft by displaying a warning that other nftables rules are active. The only related problem remaining in NixOS is that since our module is heavily based around iptables, our users assume NixOS is using iptables when in fact it is using nftables with iptables compatibility. cc
This particular issue is also giving me issues running docker on NixOS 21.11 in WSL2 on Windows 10. It requires iptables and the docker service fails to start due to docker trying to issue iptables a command and the nftables reply throws docker as an error. Same configuration using systemd v247 via 21.05 works fine
What you're seeing is directly caused by and has nothing to with this issue since the problem described here is that not all active rules are visible. Are we even supporting WSL officially?
Code change:
- Nix has been updated to version 2.4, reference its [release notes](https://discourse.nixos.org/t/nix-2-4-released/15822) for more information on what has changed. The previous version of Nix, 2.3.16, remains available for the time being in the `nix_2_3` package. <del> - `iptables` now uses `nf_tables` backend. </del> <ins> - `iptables` is now using `nf_tables` under the hood, by using `iptables-nft`, similar to [Debian](https://wiki.debian.org/nftables#Current_status) and [Fedora](https://fedoraproject.org/wiki/Changes/iptables-nft-default). This means, `ip[6]tables`, `arptables` and `ebtables` commands  will actually show rules from some specific tables in the `nf_tables` kernel subsystem. - systemd got an `nftables` backend, and configures (networkd) rules in their own `io.systemd.*` tables. Check `nft list ruleset` to see these rules, not `iptables-save` (which only shows `iptables`-created rules. </ins> - PHP now defaults to PHP 8.0, updated from 7.4.

Related discussion:
text: You might want to open a separate issue for this if you're interested in seeing support or getting this fixed. We would need to detect if nftables support is available and use the correct iptables package everywhere. Not sure if it's worth it, though.
this seems to also cause problems when upgrading systems from before the nftables bump. In my case, these were fixed after a reboot, but it's still a pretty annoying thing, for which we probably should at least make sure there's a release note entry. cc
Hmmh, I'm also a bit baffled about how to interpret defaulting to false. ~It seems and are mutually exclusive, but since we now configure nftables in other places, the firewall module is just broken?~
It seems only supports defining all rules exclusively, which doesn't play very nicely together with other things invoking iptables, or managing rules by themselves (like networkd , libvirt and other programs invoking iptables). Maybe that module needs a bit of a re-vamp - with merged we might want to configure most of what the module was doing, except managing the ruleset by default. However, that's a bit offtopic from the original issue.
you should see nftable tables when invoking , which is where systemd keeps its nft rules. iptables rules configured with the command are in . I think this is mostly a matter of updating the release notes, and raising awareness, that nftables is used, the command is only managing some tables in the nft system, and that there's more rules than what you can see with . I'll try to come up with a PR updating the release notes in that regard. It might not be possible to translate some nftable rules to a iptables syntax - I'm not sure if logging a warning breaks backwards compat with some tools relying on iptables output…
I improved the docs in , PTAL. Fixing the nftables module, and using less iptables in the firewall module should probably be left to another PR.
I opened to track the nftables NixOS module improvements.
Code change:
# Brute force: since nix-worker chroots don't provide # /etc/{resolv.conf,hosts}, replace all references to `localhost' # by their IPv4 equivalent. <del> for i in $(find . ( -name *.c -or -name *.conf )  -exec grep -l '<localhost>' {} ;) do echo "$i: substituting `127.0.0.1' to `localhost'..." sed -i "$i" -e's/<localhost>/127.0.0.1/g' done </del> <ins> find . ( -name *.c -or -name *.conf ) |  xargs sed -ie 's|<localhost>|127.0.0.1|g' </ins> # Make sure the tests don't rely on `/tmp', for the sake of chroot # builds. <del> for i in $(find . ( -iname *test*.c -or -name *.conf )  -exec grep -l /tmp {} ;) do echo "$i: replacing references to `/tmp' by `$TMPDIR'..." substituteInPlace "$i" --replace "/tmp" "$TMPDIR" done </del> <ins> find . ( -iname *test*.c -or -name *.conf ) |  xargs sed -ie "s|/tmp|$TMPDIR|g" </ins> # Ensure NSS installation works fine configureFlags="$configureFlags --with-nssdir=$out/lib" patchShebangs src/gns/nss/install-nss-plugin.sh <ins> sed -ie 's|@LDFLAGS@|@LDFLAGS@ $(Z_LIBS)|g'  src/regex/Makefile.in  src/fs/Makefile.in </ins> ''; doCheck = false;

Related discussion:
text: Not sure if this is known, but I'm seeing the following error when trying to do . System: Fedora 23 Nix version: 1.11.2 Nixpkgs version: 16.09pre81657.
Code change:
makeWrapper ]; <ins> buildInputs = lib.optionals stdenv.isDarwin (with darwin.apple_sdk.frameworks; [ CoreServices ]); </ins> postFixup = '' wrapProgram $out/bin/rustlings --suffix PATH : ${ lib.makeBinPath [

Related discussion:
text: Steps to reproduce the behavior: the package Offending line Seems to me like the darwin framework is missing Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Posted a PR to fix this:
Code change:
buildNpmPackage rec { pname = "asf-ui"; <del> version = "c582499d60f0726b6ec7f0fd27bd533c1f67b937"; </del> <ins> version = "f84a296f0ab029e56baba3cca45e5cf21129fd76"; </ins> src = fetchFromGitHub { owner = "JustArchiNET";

Related discussion:
text: Looks like it now uses .NET 8 which probably made all existing plugins incompatible - Package name: ArchiSteamFarm Latest released version: 5.5.0.11 <!-- Search your package here: --- Current version on the unstable channel: 5.4.13.4 Current version on the stable/release channel: 5.4.12.5 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
The package/module has no official way to use plugins, so there is no way to use them unless people are using overlays which should be constructed in a smart way to re-use the same methods as archisteamfarm does. Anyway, here is the update
Code change:
cp ../application/resources/multimc/scalable/multimc.svg $out/share/pixmaps cp ../application/package/linux/multimc.desktop $out/share/applications wrapProgram $out/bin/MultiMC --add-flags "-d $HOME/.multimc/" --set GAME_LIBRARY_PATH /run/opengl-driver/lib:${libpath} --prefix PATH : ${jdk}/bin/ <ins> # As of https://github.com/MultiMC/MultiMC5/blob/7ea1d68244fdae1e7672fb84199ee71e168b31ca/application/package/linux/multimc.desktop, # the desktop icon refers to `multimc`, but the executable actually gets # installed as `MultiMC`. Create compatibility symlink to fix the desktop # icon. ln -sf $out/bin/MultiMC $out/bin/multimc </ins> ''; meta = with stdenv.lib; {

Related discussion:
text: Errors with: This error has already been fixed in by (See also MultiMC/MultiMC5.) MultiMC successfully builds if you set the version to develop: Attempt to build MultiMC. Please run and paste the results. system: host os: multi-user?: sandbox: version: channels(root): nixpkgs:
Would also be fixed by (Edit: only the CMake errors, include patches are probably still necessary)
Probably best to just patch the release. I'll see if I can do anything about this. I need to fix the desktop file anyway.
Patching doesn't work, and calling the commit directly results in this. Not sure what to do. If someone does fix this, please include in to fix the desktop file.
I managed to fix it by using the unstable version, but I'm not sure if that's the right approach. I can make a pull request with that if you'd like.
It should be fine, just note that it's a temporary workaround until MultiMC increments a release, since IIRC stable packages aren't generally supposed to be using non-stable repos.
Code change:
passthru = { isClang = unwrappedCC.isClang or false; isGNU = unwrappedCC.isGNU or false; <ins> isCcache = true; </ins> }; inherit (unwrappedCC) lib; nativeBuildInputs = [ makeWrapper ];

Related discussion:
text: Describe the bug hides clang arguments in a "response file" by default if is true, but ccache does not support this and responds with "no input files" instead. Additional context The following workaround can be used to disable response files in a result , fixing the issue: Notify maintainers Maintainer information:
I've run into this issue as well. Edit: my bad, that doesn't work; we need the env var to be set before the outer layer of stdenv wrapper machinery runs. By the time we're in the ccache wrapper it's too late. It's also not clear to me if this is a bug in or intended behavior (I was not able to find an issue for it upstream) but it's definitely reproducible:
Code change:
src = if stdenv.system == "x86_64-linux" then fetchurl { <del> url = "https://updates.signal.org/desktop/apt/pool/main/s/signal-desktop/signal-desktop-beta_${version}_amd64.deb"; </del> <ins> url = "https://updates.signal.org/desktop/apt/pool/main/s/signal-desktop-beta/signal-desktop-beta_${version}_amd64.deb"; </ins> sha256 = "1kllym2iazp9i5afrh0vmsqqlh5b8i6f929p5yhl8bl4zd17zwpx"; } else

Related discussion:
text: The beta derivation depends on a pre-built deb package that no longer exists.
CC: (I don't have the ability to assign this)
Hey I just needed the fix for myself and therefore figured I could as well push it. Hope you don't mind.
I don't mind at all! Thank you for doing that.
Code change:
<del> diff --git a/tests/test_kdtree.py b/tests/test_kdtree.py index 0110083..049fa07 100644 --- a/tests/test_kdtree.py +++ b/tests/test_kdtree.py @@ -23,7 +23,7 @@ def run_kdtree(): tree = cKDTree(data_points) -    distances2, indices2 = tree.query(query_points, k=k, n_jobs=-1) +    distances2, indices2 = tree.query(query_points, k=k) t2 = time.perf_counter() </del>

Related discussion:
text: Steps to reproduce the behavior: python311Packages.pymatting Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Code change:
}: let <del> # vulkan-validation-layers requires a custom glslang & robin-hood-hashing # version, while glslang requires custom versions for spirv-tools and spirv-headers. # # The git hashes required for all of these deps is documented upstream here: # https://github.com/KhronosGroup/Vulkan-ValidationLayers/blob/master/scripts/known_good.json # and https://github.com/KhronosGroup/glslang/blob/master/known_good.json localSpirvHeaders = spirv-headers.overrideAttrs (_: { src = fetchFromGitHub { owner = "KhronosGroup"; repo = "SPIRV-Headers"; rev = "449bc986ba6f4c5e10e32828783f9daef2a77644"; # pin sha256 = "1249pvk4iz09caxm3kwckzwcx2hbw97cr2h8h770l6c061kb14z5"; }; }); localGlslang = (glslang.override { argSpirv-tools = spirv-tools.overrideAttrs (_: { src = fetchFromGitHub { owner = "KhronosGroup"; repo = "SPIRV-Tools"; rev = "1fbed83c8aab8517d821fcb4164c08567951938f"; # pin sha256 = "0faz468bnxpvbg1np13gnbwf35s0hl9ad7r2p9wi9si5k336qjmj"; }; }); argSpirv-headers = localSpirvHeaders; }).overrideAttrs (_: { src = fetchFromGitHub { owner = "KhronosGroup"; repo = "glslang"; rev = "2fb89a0072ae7316af1c856f22663fde4928128a"; # pin sha256 = "04kkmphv0a5mb5javhmkc4kab8r0n107kb7djakj5h238ni2j7q9"; }; }); </del> robin-hood-hashing = fetchFromGitHub { owner = "martinus"; repo = "robin-hood-hashing";

Related discussion:
text: name: All packages in current version: 1.2.189.1 desired version: 1.2.200 maintainers: Please tag this issue in your PR.
Code change:
bmake = callPackage ../development/tools/build-managers/bmake { }; <ins> boca = callPackage ../development/libraries/boca { }; </ins> bochs = callPackage ../applications/virtualization/bochs { }; bubblewrap = callPackage ../tools/admin/bubblewrap { };

Related discussion:
text: Project description fre:ac is a free audio converter and CD extractor for Microsoft Windows, Linux, macOS and FreeBSD, distributed under the GNU General Public License.[1] Besides extracting audio from compact discs (with various features including hidden track detection), fre:ac can also convert audio files from one format to another or to the same format but a lower bitrate. fre:ac is compatible with many audio formats such as Ogg Vorbis, FLAC, MP3, MP4/M4A, AAC, WAV, WMA and more.[2][3] fre:ac uses the CDex library to convert from CDs and uses freedb to retrieve artist/song information from the internet which is written to the files as various types of ID3 tags; this library supports cdparanoia which aims to improve audio quality.[4] The user interface is multilingual with 43 languages and is able to be a portable install on a USB drive. Metadata homepage URL: source URL: license: GNU General Public License v2.0 platforms: Windows, macOS, Linux, FreeBSD, HaikuOS
freac is already available on my nur repo If you want to avoid building it, it should be on my cachix https://scott- (for nixos-20.9, nixpkgs-unstable and nixos-unstable)
Code change:
stdenv.mkDerivation rec { pname = "ocenaudio"; <del> version = "3.10.6"; </del> <ins> version = "3.11.0"; </ins> src = fetchurl { url = "https://www.ocenaudio.com/downloads/index.php/ocenaudio_debian9_64.deb?version=${version}"; <del> sha256 = "0fgvm1xw2kgrqj3w6slpfxbb3pw9k8i0dz16q9d5d8gyyvr2mh8g"; </del> <ins> sha256 = "1yflpyl0d1mi0zxdyrlbg0px95s2c945ahy0agc8rha01ccf7jwy"; </ins> }; nativeBuildInputs = [

Related discussion:
text: When trying to install Ocenaudio, the installation fails due to a sha256 hash mismatch. Steps to reproduce the behavior: ocenaudio to my NixOS config I expected the program to be installed. <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result. Maintainer information:
looks like aur has the same problem this should be reported upstream.
Code change:
rustPlatform.buildRustPackage rec { pname = "lightningcss"; <del> version = "1.24.0"; </del> <ins> version = "1.24.1"; </ins> src = fetchFromGitHub { owner = "parcel-bundler"; repo = "lightningcss"; rev = "refs/tags/v${version}"; <del> hash = "sha256-Ai6zvLR5w2AarjZIWMPoDsU1Dr5kvREgL6oyg6TF+TU="; </del> <ins> hash = "sha256-HRuL7zwpN2e51+/Ltvif+eh+WBss/FtHCOlJfa/eVdE="; </ins> }; <del> cargoHash = "sha256-HHuj7uAqipPtbjkOsxxMq+JWXww2vUDTNGgnHd3UY3o="; </del> <ins> cargoHash = "sha256-HavdTNaLTGctePa890dy/jGlXZXXZu1QFeFJOpjOiME="; patches = [ # Backport fix for build error for lightningcss-napi # see https://github.com/parcel-bundler/lightningcss/pull/713 # FIXME: remove when merged upstream ./0001-napi-fix-build-error-in-cargo-auditable.patch ]; </ins> buildFeatures = [ "cli"

Related discussion:
text: Package name: lightningcss Latest released version: 1.24.1 <!-- Search your package here: --- Current version on the unstable channel: 1.22.0 Current version on the stable/release channel: 1.24.0 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers myself, <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Despite being a minor version bump, an entire dependency chain was for NAPI which I think has something to do with WASM which fails the test in Nix. See lightningcss’s open bug on their Microsoft GitHub proprietary issue tracker @ As a non-Rust developer, I have no idea what this error is supposed to mean with its Cargo package management. Hopefully their maintainer will eventually have a look. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]: [^1] or offering a non-proprietary, non-US-corporate-controlled mirror for this free software project. I wish to delete this Microsoft account in the future, but I need more projects like this to support alternative methods to send patches & contribute.
Build error when updating:
Personally I’ve stuck with version 1.23.0 since 1.24.0 had a regression for system colors. The upstream maintainer seems to be too busy with other stuff to look into issues.
should fix it for further releases. For this particular 1.24.1 release, I a patch to automatically patch the source, see
great work!
Code change:
ncpamixer = callPackage ../applications/audio/ncpamixer { }; <del> pan = callPackage ../applications/networking/newsreaders/pan { spellChecking = false; }; </del> <ins> pan = callPackage ../applications/networking/newsreaders/pan { }; </ins> panotools = callPackage ../applications/graphics/panotools { };

Related discussion:
text: The pan-0.139 package builds without gpg2, and as a result it produces a segmentation fault: The steps to reproduce happen to be the example from the "Managing Build Environments" section of the Nix guide:
I can reproduce, investigating. Update is available (139 -144) so exploring that as well.
Hi, thanks!
Code change:
<ins> { lib , stdenv , fetchzip , fetchFromGitHub , cmake , curl , nasm , game-music-emu , libpng , SDL2 , SDL2_mixer , libvpx , libyuv , zlib , makeWrapper , makeDesktopItem , copyDesktopItems }: stdenv.mkDerivation (finalAttrs: { pname = "ringracers"; version = "2.3"; src = fetchFromGitHub { owner = "KartKrewDev"; repo = "RingRacers"; rev = "v${finalAttrs.version}"; hash = "sha256-X2rSwZOEHtnSJBpu+Xf2vkxGUAZSNSXi6GCuGlM6jhY="; }; assets = fetchzip { name = "${finalAttrs.pname}-${finalAttrs.version}-assets"; url = "https://github.com/KartKrewDev/RingRacers/releases/download/v${finalAttrs.version}/Dr.Robotnik.s-Ring-Racers-v${finalAttrs.version}-Assets.zip"; hash = "sha256-sHeI1E6uNF0gBNd1e1AU/JT9wyZdkCQgYLiMPZqXAVc="; stripRoot = false; }; nativeBuildInputs = [ cmake nasm makeWrapper copyDesktopItems ]; buildInputs = [ curl game-music-emu libpng SDL2 SDL2_mixer libvpx libyuv zlib ]; cmakeFlags = [ "-DSRB2_ASSET_DIRECTORY=${finalAttrs.assets}" "-DGME_INCLUDE_DIR=${game-music-emu}/include" "-DSDL2_MIXER_INCLUDE_DIR=${lib.getDev SDL2_mixer}/include/SDL2" "-DSDL2_INCLUDE_DIR=${lib.getDev SDL2}/include/SDL2" ]; desktopItems = [ (makeDesktopItem { name = "ringracers"; exec = "ringracers"; icon = "ringracers"; comment = "This is Racing at the Next Level"; desktopName = "Dr. Robotnik's Ring Racers"; startupWMClass = ".ringracers-wrapped"; categories = [ "Game" ]; }) ]; installPhase = '' runHook preInstall install -Dm644 ../srb2.png $out/share/icons/hicolor/256x256/apps/ringracers.png install -Dm755 bin/ringracers $out/bin/ringracers wrapProgram $out/bin/ringracers  --set RINGRACERSWADDIR "${finalAttrs.assets}" runHook postInstall ''; meta = with lib; { description = "Kart racing video game based on Sonic Robo Blast 2 (SRB2), itself based on a modified version of Doom Legacy"; homepage = "https://kartkrew.org"; platforms = platforms.linux; license = licenses.gpl2Plus; maintainers = with maintainers; [ donovanglover thehans255 ]; mainProgram = "ringracers"; }; }) </ins>

Related discussion:
text: Project description Dr. Robotnik's Ring Racers is a kart racing video game originally based on the 3D Sonic the Hedgehog fangame , itself based on a modified version of . Metadata homepage URL: source URL: or license: gpl2+ platforms: linux cc (this is kart v2) Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Done. Test it out and let me know if you encounter any issues :+1:
Code change:
in '' start_all() <del> virthost.wait_for_unit("sockets.target") </del> <ins> virthost.wait_for_unit("multi-user.target") </ins> with subtest("enable default network"): virthost.succeed("virsh net-start default")

Related discussion:
text: the following configuration: guests are started to confirm VM should have automatically started guests marked to start on boot start Guests marked to boot on startup should start doesn't seem to do what it says
Not stale
The problem is that libvirtd is socket-activated on NixOS which it isn't out of the box.
Code change:
homepage = "https://www.usebruno.com"; platforms = platforms.linux ++ platforms.darwin; license = licenses.mit; <del> maintainers = with maintainers; [ gepbird kashw2 lucasew mattpolzin water-sucks redyf ]; </del> <ins> maintainers = with maintainers; [ gepbird kashw2 lucasew mattpolzin water-sucks redyf ]; </ins> mainProgram = "bruno"; }; }

Related discussion:
text: Attempt to build on Sample This is on an M2 chip, and it seems the issue is with node-canvas not being able to install due to missing giflib. Building with: Fixes this. Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]: