jiebi/CodeConvo huggingface dataset:
Change:
buildInputs = [ libelf freeglut libGLU libGL ] ++ lib.optional stdenv.isDarwin GLUT; <del> # Hack to avoid TMPDIR in RPATHs. preFixup = ''rm -rf "$(pwd)" && mkdir "$(pwd)" ''; </del> <ins> # remove forbidden references to $TMPDIR preFixup = lib.optionalString stdenv.isLinux '' patchelf --shrink-rpath --allowed-rpath-prefixes "$NIX_STORE" "$out"/bin/* ''; </ins> doCheck = true; checkTarget = "-C tests run_tests";

Discussion:
Steps to reproduce the behavior: on nixos-unstable I believe this is related to <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result.
It'll need a similar fix like the ones in Wasn't caught in staging because it's marked insecure
Change:
sha256 = "sha256-LbgtHnEZ3z5xt2QCGbbf6EeJvAU3mDw7esT3GJrs/qo="; }; <ins> patches = [ # fix tests under --with-jemalloc-prefix=, see https://github.com/jemalloc/jemalloc/pull/2340 (fetchpatch { url = "https://github.com/jemalloc/jemalloc/commit/d00ecee6a8dfa90afcb1bbc0858985c17bef6559.patch"; hash = "sha256-N5i4IxGJ4SSAgFiq5oGRnrNeegdk2flw9Sh2mP0yl4c="; }) ]; </ins> # see the comment on stripPrefix configureFlags = [] ++ lib.optional stripPrefix "--with-jemalloc-prefix="

Discussion:
does not build aarch64-darwin as of . Steps to reproduce the behavior: out . on aarch64-darwin The build to succeed or the package to be marked as broken. n/a Full build log: <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result.
Can you try with ?
Ah didn't realize this was a jemalloc failure at first. Sure, here's the result on Overriding with gives me a more substantial failure: Full build log:
From : LLVM 10.x is not compatible with aarch64-darwin and we can't use LLVM 11.x or later because of this upstream bug. So this issue is blocked until the upstream fixes
ISTM there is another issue present as aarch64-darwin as well, wrong detection of - see - adding to seems to help to build jemalloc with newer LLVM, but I am still getting test failures on aarch64-darwin.
Change:
version = "27.1"; sha256 = "0h9f2wpmp6rb5rfwvqwv1ia1nw86h74p7hnz3vb3gjazj67i4k2a"; patches = [ <del> ./clean-env.patch </del> ./tramp-detect-wrapped-gvfsd.patch ]; })

Discussion:
Describe the bug In NixOS 20.09, Emacs now has the output of gtk+ in its closure, which in turn causes it to pull in stuff like mesa-drivers (424 MiB): This caused the closure size of Emacs to increase from 339 MiB in NixOS 20.03 to 1324 MiB in 20.09. Metadata NixOS 20.09..
cc
This was reverted in
This issue has been mentioned on NixOS Discourse. There might be relevant details there:
Change:
inherit (bootPkgs) ghc; in stdenv.mkDerivation rec { <del> version = "8.1.20161108"; </del> <ins> version = "8.1.20161109"; </ins> name = "ghc-${version}"; rev = "2e8463b232054b788b73e6551947a9434aa76009"; src = fetchgit { url = "git://git.haskell.org/ghc.git"; inherit rev; <del> sha256 = "1x1vnb2zr2qrak72bdqh65d00q351yhn8xvv5i4i359cf2xjmgfd"; </del> <ins> sha256 = "12nxai5qqnw42syhd0vzl2f9f8z28rc0fsa7g771dyzpqglak90l"; </ins> }; patches = [ <del> ./ghc-8.x-dont-pass-linker-flags-via-response-files.patch   # https://github.com/NixOS/nixpkgs/issues/10752 </del> <ins> ./ghc-HEAD-dont-pass-linker-flags-via-response-files.patch   # https://github.com/NixOS/nixpkgs/issues/10752 </ins> ]; postUnpack = ''

Discussion:
The package is currently pinned at a commit from 2015-08-28. I attempted to update it to a commit dated 2015-10-30 using the below patch to nixpkgs commit : But with this and other more recent versions of GHC HEAD, I'm getting: This happens when using the command Versions:
Have you reported this issue to the developers?
I haven't yet, since I don't know whether this is a GHC bug. It would be useful to a bisect to a specific commit. What's the best way to do that ( throws away build artifacts at each invocation)?
If you have a local checkout of the repository, then you can enter a build environment () and compile in there manually. Those builds would be incremental. From the looks of it, it appears to me that GHC tries to link without , which fails. But I haven't investigated it much either.
I get Do I need to write a special ? If so, what should I write? (still a beginner with nix...)
Ah! I think I got it...
So the issue I have is that and are local shell functions, not commands, so I can't include them in a script to be run by . Is there any way I can wrap those?
Seems to me like this is the offending GHC commit: I'll investigate a bit more and try to file a GHC ticket.
I created a GHC ticket:
ghc 7.10.3 has the same issue:
Change:
latestKernel.hardened = handleTest ./hardened.nix { latestKernel = true; }; latestKernel.login = handleTest ./login.nix { latestKernel = true; }; leaps = handleTest ./leaps.nix {}; <ins> libreddit = handleTest ./libreddit.nix {}; </ins> lidarr = handleTest ./lidarr.nix {}; lightdm = handleTest ./lightdm.nix {}; limesurvey = handleTest ./limesurvey.nix {};

Discussion:
Project description 10 second pitch: Libreddit is a portmanteau of "libre" (meaning freedom) and "Reddit". It is a private front-end like Invidious but for Reddit. Browse the coldest takes of r/unpopularopinion without being tracked. Demo: Metadata homepage URL: source URL: license: agpl3 platforms: unix, linux, darwin, ...
could you please give a try? Thanks
That's just the package, but not a service (like ) right?
Yes, it's only the package for the moment.
There seems to be a bug present in the latest release. I opened a feature request () which could improve the service. Sorry, it will take some time till we can finish this.
Change:
arches = { x86 = "i686"; x86_64 = "x86_64"; <del> # TODO arm </del> <ins> arm = "aarch64"; </ins> }; # Mapping from GCS component operating systems to Nix operating systems

Discussion:
Project description Tool used by GKE to do go-client kubernetes auth. If is installed via nixpkgs, so ought gke-cloud-auth-plugin Metadata homepage URL: source URL: license: ? platforms: unix, linux, darwin, ...
See also
Both the reference source URL and the linked flake repo would not work on darwin machines. Ideally, the would support specifying which components to install declaratively.
Maybe this doesn't apply to Darwin, but on NixOS I am able to do and it shows as having been installed.
It looks like support for was on , and it didn't get merged to yet.
I believe it already is at :
thank you for pointing me to . That should save me time from checking my local clone.
For reasons that are unclear to me, when using home-manager I had to do
Change:
platforms = []; source = { remotes = ["https://rubygems.org"]; <del> sha256 = "1xvkz9xrd1cqnlm0qac1iwwxzndx3cc17zrjncpa4lzjfwbxhsnm"; </del> <ins> sha256 = "0df9bknc2dllk8v9fhgidzbvbryaxa8fgifrk40cdz9csjsphbky"; </ins> type = "gem"; }; <del> version = "4.3.11"; </del> <ins> version = "4.3.12"; </ins> }; pundit = { dependencies = ["activesupport"];

Discussion:
, CVSSv3=7.5 (nixos-unstable) CVSSv3=7.5 (nixos-unstable) A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Service (DoS) during password verification. A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages. Scanned versions: nixos-unstable: . Cc Cc Cc
Change:
"mullvad" "mutesync" "my" <ins> "myq" </ins> "mysensors" "mystrom" "mythicbeastsdns"

Discussion:
The home-assistant component currently declares that it's missing the input However the package actually exists, it's just called . This appears to be the old name of the package, it looks as though it got renamed at some point, although the nixpkgs packge for it wasn't updated for the name change.
Note that merely setting restores the component's functionality.
Change:
<del> diff --git a/giscanner/scannermain.py b/giscanner/scannermain.py index 89ec193..54f1d2e 100755 </del> --- a/giscanner/scannermain.py +++ b/giscanner/scannermain.py <del> @@ -94,6 +94,39 @@ def get_windows_option_group(parser): </del> <ins> @@ -100,6 +100,39 @@ </ins> return group

Discussion:
For some packages, a wrong path to the library is generated. For example, produces an extra directory: Now, the typelib path is supposed to be addressed by It only works when typelibdir is an absolute path but apparently that is not the problem here (it is ). Possibly a bug in the ? This is how the gir file is built (add to expression): Nixpkgs
Indeed, the patch is the problem. The supplied regex matched too eagerly: Simple change should fix it.
Hmm, right it cannot be as simple as adding two slashes it would just match
Hmm, so lets see if I understand this correctly. We want to distinguish between two cases: link is to the and we want the absolute path link is not to the nix store and we only want the soname The original pattern in will produce only sonames, correctly extracting the left hand side of the ldd output (the upstream comment for is rather confusing as it seems to use the wrong library name which doesn't produce any match at all, so I'm assuming they mean `libpangoft2-1). Would it make sense to patch instead, so we don't have to implement control flow in a regular expression? So something like this: where is specifically made to extract the absolute path. Not sure if this is relevant as you've already created a fix which should work okay as I'm assuming nix mostly runs on GNU systems? But I'm thinking it might make things easier.
Yep. Yes, unless you use OpenBSD or something. They meant . Library name would also match , I guess they assume there will be no such library. A problem might occur with gspell, which has as the library name which would also match but only if you linked against both. Yes this would be the cleanest, it will even allow to fix the upstream the two aforementioned bugs without us having to update the thing. I was too focused on regex composition to consider using two functions.
Change:
/* Cleanup before 21.03 */ riot-desktop = throw "riot-desktop is now element-desktop!"; riot-web = throw "riot-web is now element-web"; <ins> ant-dracula-theme = throw "ant-dracula-theme is now dracula-theme, and theme name is Dracula instead of Ant-Dracula."; </ins> })

Discussion:
[Ant-Dracula] has moved to [Dracula]. [Dracula]: [Ant-Dracula]: Homepage: Repository:
Change:
owner = "libfprint"; repo = pname; rev = "v${version}"; <del> sha256 = "0dpwzmwl9jjpaz44znvy3v8s9sln0c71b756rs1knk0zx8sa1qbc"; </del> <ins> sha256 = "sha256-xFmby1x2TRZqXrV9Einqu3002qMAN5tQga2mIAHfC9c="; </ins> }; nativeBuildInputs = [

Discussion:
Package fprintd doesn't build with the latest unstable (currently on commit ). With the following configuration, using ThinkPad X1 Carbon 7th gen: After a to the latest unstable, the compilation gives an error (): Please run and paste the result.
Change:
<ins> { config, lib, pkgs, ... }: let cfg = config.services.podgrab; in { options.services.podgrab = with lib; { enable = mkEnableOption "Podgrab, a self-hosted podcast manager"; passwordFile = mkOption { type = with types; nullOr str; default = null; example = "/run/secrets/password.env"; description = '' The path to a file containing the PASSWORD environment variable definition for Podgrab's authentification. ''; }; port = mkOption { type = types.port; default = 8080; example = 4242; description = "The port on which Podgrab will listen for incoming HTTP traffic."; }; }; config = lib.mkIf cfg.enable { systemd.services.podgrab = { description = "Podgrab podcast manager"; wantedBy = [ "multi-user.target" ]; environment = { CONFIG = "/var/lib/podgrab/config"; DATA = "/var/lib/podgrab/data"; GIN_MODE = "release"; PORT = toString cfg.port; }; serviceConfig = { DynamicUser = true; EnvironmentFile = lib.optional (cfg.passwordFile != null) [ cfg.passwordFile ]; ExecStart = "${pkgs.podgrab}/bin/podgrab"; WorkingDirectory = "${pkgs.podgrab}/share"; StateDirectory = [ "podgrab/config" "podgrab/data" ]; }; }; }; meta.maintainers = with lib.maintainers; [ ambroisie ]; } </ins>

Discussion:
Project description Podgrab is a is a self-hosted podcast manager which automatically downloads latest podcast episodes. It is a light-weight application built using GO. It works best if you already know which podcasts you want to monitor. However there is a podcast search system powered by iTunes built into Podgrab Metadata homepage URL: source URL: license: gpl3 (I think, see about a typo) platforms: unix, I think, it's a Go package
If I have some time this week-end, I might tackle this issue myself. The repo has and files so it should be pretty easy for a first contribution :-)
So I'm having issues with the package's tests, I have opened an upstream issue to discuss it.
Change:
}; }; <del> version = "8.17.6"; </del> <ins> version = "8.17.8"; </ins> gitlabDeb = fetchurl { url = "https://packages.gitlab.com/gitlab/gitlab-ce/packages/debian/jessie/gitlab-ce_${version}-ce.0_amd64.deb/download"; <del> sha256 = "1pr8nfnkzmicn5nxjkq48l4nfjsp6v5j3v8p7cp8r86lgfdc6as3"; </del> <ins> sha256 = "0r4f1illaalhrvc6zgq19g4jcs77jf665l8bgx6pyvw45yn6wv7h"; </ins> }; in

Discussion:
Following the NixOS manual () to setup Gitlab on a new NixOS server, I got the following error: Consulting the IRC channel #nixos on , I got the diagnosis of the problem that they put their own copy of ksu into the package, setuid'd and nix doesn't allow setuid files. a new NixOS install, update with a minimal Gitlab configuration or System: 17.03.1700. (Gorilla) Nix version: nix-env (Nix) 1.11.13 Nixpkgs version: "17.03.1700." Sandboxing enabled: build-use-sandbox = false
cc (maintainer)
Change:
patches = [ ./apr-1.patch ]; <ins> # SVN build seems broken on gcc5: # https://gcc.gnu.org/gcc-5/porting_to.html CPPFLAGS = "-P"; </ins> configureFlags = '' ${if bdbSupport then "--with-berkeley-db" else "--without-berkeley-db"} ${if httpServer then "--with-apxs=${apacheHttpd}/bin/apxs" else "--without-apxs"}

Discussion:
The platform is x86_64. I'm not sure why nix thought I needed to compile subversion client instead of downloading it from Hydra. System: 16.09pre83100. (Flounder) Nix version: nix-env (Nix) 1.11.2
Because it fails on Hydra with the same error.
I thought unstable doesn't update unless all the hydra builds succeed?
forgot to cc maintainers:
no, they merely have to complete, only some jobs are release critical. EDIT: otherwise there'd never be any channel updates ...
Hmm. It would be nice to know what's working and what's broken before upgrading.
It's not exactly user-friendly, but you can check hydra, e.g.,
this reappeared on the latest nixos-unstable though it seems fixed on hydra
Change:
cairo libjpeg libXft python3 ]; <ins> # NOTE: ntk provides its own waf script that is incompatible with new # python versions. If the script is not present, wafHook will install # a compatible version from nixpkgs. prePatch = '' rm waf ''; </ins> meta = { description = "Fork of FLTK 1.3.0 with additional functionality"; version = version;

Discussion:
Steps to reproduce the behavior: sorcer Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
export CARGO_PKG_VERSION_MAJOR=${builtins.elemAt version 0} export CARGO_PKG_VERSION_MINOR=${builtins.elemAt version 1} export CARGO_PKG_VERSION_PATCH=${builtins.elemAt version 2} <ins> export CARGO_PKG_VERSION_PRE="${versionPre}" export CARGO_PKG_HOMEPAGE="${crateHomepage}" </ins> export NUM_JOBS=1 export RUSTC="rustc" export RUSTDOC="rustdoc" <del> if [[ -n "${versionPre}" ]]; then export CARGO_PKG_VERSION_PRE="${versionPre}" fi </del> BUILD="" if [[ ! -z "${build}" ]] ; then

Discussion:
The rust crate "built" assumes that certain environment variables are always set -- to an empty string if necessary. This is what cargo does, so let's emulate that. See for more details. See I am preparing a patch to fix this, so I skip this.
Change:
}; preConfigure = '' <ins> substituteInPlace ./osdep/ManagedRoute.cpp  --replace '/usr/sbin/ip' '${iproute}/bin/ip' substituteInPlace ./osdep/ManagedRoute.cpp  --replace '/sbin/ip' '${iproute}/bin/ip' </ins> substituteInPlace ./osdep/LinuxEthernetTap.cpp  --replace 'execlp("ip",' 'execlp("${iproute}/bin/ip",'

Discussion:
When joining a network with a managed route I'd expect to see a route to my routing table. This doesn't seem to be happening Try and join a network with a managed route to another subnet I'm running using this module: Config:
Quite possibly it's this issue:
Perhaps it is because we need to also replace in in a similar way as we currently already do in :
Yeah maybe... you want me to give that a shot?
Sure, if you would. I've never used zerotier's managed routes feature so I imagine you would be a better tester.
There is another invocation that has an absolute path hard-coded. Fixed in the above PR^
Change:
<del> { stdenv, fetchurl, fetchpatch, fixDarwinDylibNames }: let icu = import ./default.nix { inherit stdenv fetchurl fetchpatch fixDarwinDylibNames; }; in stdenv.lib.overrideDerivation icu (attrs: { src = fetchurl { url = "http://download.icu-project.org/files/icu4c/54.1/icu4c-54_1-src.tgz"; sha256 = "1cwapgjmvrcv1n2wjspj3vahidg596gjfp4jn1gcb4baralcjayl"; }; }) </del>

Discussion:
The icu541 package fails to compile at the patching step. Some of the patches issue warnings, others fail completely. Install icu541: . The build process will fail. System: NixOS: 16.09 Nix version: 1.11.4 Nixpkgs version: 16.09.1202.
Change:
<ins> #!/usr/bin/env nix-shell #!nix-shell -i bash -p curl gnused nix-prefetch jq common-updater-scripts # shellcheck shell=bash set -e info=$(nix-prefetch-git --quiet --url "https://github.com/archlinux/svntogit-packages" --rev "refs/heads/packages/xorg-server") rev=$(jq -r '.rev' <<< "$info") sha256=$(nix hash to-sri --type sha256 "$(jq -r '.sha256' <<< "$info")") dir=$(jq -r '.path' <<< "$info") newXvfbsha=$(sha256sum "$dir/trunk/xvfb-run") oldXvfbsha=$(sha256sum "$(nix build --quiet ".#xvfb-run.src" --json --no-link | jq -r '.[].outputs.out')/trunk/xvfb-run") if [[ "$newXvfbsha" != "$oldXvfbsha" ]]; then ( cd "$(git rev-parse --show-toplevel)" update-source-version xvfb-run "1+g${rev:0:7}" "$sha256" --rev="$rev" ) fi </ins>

Discussion:
I noticed that our package has no version. It is fetched from some weird arch repo. The official source is now: debian packages it in the package xvfb, so it's version is used in other distros like Alpine and Gentoo. We should do that too! The package has no maintainer. Feel free to grab it!
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . 3. Ask on the on .
still needed
I marked this as stale due to inactivity. &rarr;
still needed
I marked this as stale due to inactivity. &rarr;
Change:
, makeWrapper , stdenv <ins> , pkgs </ins> , cmake , gcc12 , clblast

Discussion:
Ollama can't discover GPU libraries Steps to reproduce the behavior: this completely not overkill nixos config: Ollama discover GPU libraries and able to use GPU acceleration. Previously I was able to discover GPU libs by running downloaded ollama binary via - But anyway it crushes because it uses ROCM 6.0 while in nixpkgs unstable we still have 5.7.1 <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
This appears to be happening because the ollama service currently only ever builds the ollama package in cpu mode. If my understanding is correct, then should fix this, though gpu support won't be enabled automatically. Once is merged, rocm would be enabled like this, and should work without any other configuration:
Change:
] ++ lib.optional (!unrarSupport) ./dont_build_unrar_plugin.patch; prePatch = '' <del> sed -i "/pyqt_sip_dir/ s:=.*:= '${pythonPackages.pyqt5}/share/sip/PyQt5':"   </del> <ins> sed -i "/pyqt_sip_dir/ s:=.*:= '${python3Packages.pyqt5}/share/sip/PyQt5':"   </ins> setup/build_environment.py # Remove unneeded files and libs

Discussion:
<!-- Note that these are hard requirements --<!-- You can use the "Go to file" functionality on github to find the package Then you can go to the history for this package Find the latest "packagename: oldversion -newversion" commit The "newversion" is the the current version of the package --- <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- name: calibre <!-- The current version can be found easily with the same process than above for checking the master branch If an open PR is present for the package, take this version as the current one and link to the PR --current version: 4.23.0 desired version: 5.6 <!-- Search your package here: If no maintainer is listed for your package, tag the person that last updated the package --maintainers: Please tag this issue in your PR.