jiebi/CodeConvo huggingface dataset:
Change:
''; }; <ins> periodicArchiveProcessingUrl = mkOption { type = types.str; default = "${user}.${fqdn}"; example = "matomo.yourdomain.org"; description = '' URL of the host, without https prefix. By default, this is ${user}.${fqdn}, but you may want to change it if you run Matomo on a different URL than matomo.yourdomain. ''; }; </ins> nginx = mkOption { type = types.nullOr (types.submodule ( recursiveUpdate

Discussion:
The mamoto service is a self-hosted and open source alternative to google analytics. I managed to make the almost work except for a constrained url in the nix module. Expected behavior When archiving requests. I would expect the matomo service to allow me to configure the url of the service, for instance intsead I am constrained to this and is grosso modo IIUC. Additional context I know that the default config using NGINX should make the choice of the url for me, but I want to use the caddy server, since it is already running on the machine. There is an option in the matomo module anyway and the url of the service is free so the functioning is misleading right now. Here is my config and the caddy config with The package of matomo is a bit outdated, but has recent updates. Suggestion Maybe we could add an option in the module that would set the url used when archiving.
This problem also affects me. Also, I don't even understand how it makes sense to prefix a "user" component on the hostname. If is "matomo" and is "" then the Matomo service computes a URL of which is just wrong. I'm not trying to use caddy. I just have a straightforward Matomo / nginx configuration - but it seems broken out of the box to me. I'm currently working around this using this line in my configuration:
Agreed. When using nginx, this should probably be: with maybe some logic for http/https. cc
Change:
, qtdeclarative , qtwayland , qt5compat <ins> , qttools </ins> , wrapQtAppsHook , nix-update-script , pkg-config

Discussion:
Package name: albert Latest released version: 0.23.0 Current version on the unstable channel: 0.22.17 Current version on the stable/release channel: 0.22.17 Notify maintainers Note for maintainers: Please tag this issue in your PR. I'm pretty new to Nix, so I hope this is the right way to request an update. The latest release can be found here:
Thank you for working on this. Unfortunately I still don't know how to get the new version. When will it be available in nixpkgs?
Depending on which channel you use: if you use unstable, as soon as unstable gets updated and includes the merged patch if you use stable, after the next stable release (24.05 afaik)
Thank you very much for explaning!
Change:
<ins> { lib, fetchFromGitHub, python3Packages, gobject-introspection, wrapGAppsHook3, gtk-layer-shell, gtk3, wl-clipboard, cliphist, nix-update-script, }: python3Packages.buildPythonPackage rec { pname = "nwg-clipman"; version = "0.2.3"; src = fetchFromGitHub { owner = "nwg-piotr"; repo = "nwg-clipman"; rev = "refs/tags/v${version}"; hash = "sha256-qpI/yg7yBSwcgpv6lOBysxxsX0pI+ixZghkm+U6XIrs="; }; build-system = [ python3Packages.setuptools ]; nativeBuildInputs = [ gobject-introspection wrapGAppsHook3 ]; dontWrapGApps = true; preFixup = '' makeWrapperArgs+=("''${gappsWrapperArgs[@]}") ''; buildInputs = [ gtk-layer-shell gtk3 ]; dependencies = with python3Packages; [ pygobject3 ]; nativeCheckInputs = [ wl-clipboard cliphist ]; postInstall = '' install -Dm644 nwg-clipman.desktop -t $out/share/applications/ install -Dm644 nwg-clipman.svg -t $out/share/pixmaps/ ''; strictDeps = true; passthru.updateScript = nix-update-script { }; meta = { description = "GTK3-based GUI for cliphist"; homepage = "https://github.com/nwg-piotr/nwg-clipman"; changelog = "https://github.com/nwg-piotr/nwg-clipman/releases/tag/v${version}"; license = lib.licenses.mit; maintainers = with lib.maintainers; [ averyanalex ]; platforms = lib.platforms.linux; mainProgram = "nwg-clipman"; }; } </ins>

Discussion:
Project description Clipboard manager for Wayland; part of the nwg-shell project Metadata homepage URL: source URL: license: mit platforms: linux Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
# batdiff , gitMinimal , withDelta ? delta != null, delta ? null <ins> # batman , util-linux </ins> }: let

Discussion:
I am new to Nix, but I am pretty sure there is a dependency missing. Run Docker container: Install bat- Execute bat- Install util-linux: <img width="832" alt="Screenshot 2022-04-24 at 11 01 19" src="https://user-"The Shell script itself uses the col command.
Change:
owner = "evanw"; repo = "esbuild"; rev = "v${version}"; <del> hash = "sha256-h/Vqwax4B4nehRP9TaYbdixAZdb1hx373dNxNHvDrtY="; </del> <ins> hash = "sha256-FpvXWIlt67G8w3pBKZo/mcp57LunxDmRUaCU/Ne89B8="; </ins> }; vendorHash = "sha256-+BfxCyg0KkDQpHt/wycy/8CTG6YBA/VJvJFhhzUnSiQ="; });

Discussion:
Steps to reproduce the behavior: Attempt to build surrealist version 2.0.6 on NixOS 24.11. The build fails during the build phase. I reported a similar issue here: Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
another failure
Change:
sha256 = "sha256-jdC/JPECPG9hjDsxc4PSkbSklPQNc7mDrCL/6pnkupk="; }; <ins> outputs = [ "out" "tex" ]; </ins> dontUseImakeConfigure = true; nativeBuildInputs = [ pkg-config ];

Discussion:
The R package in nixpkgs produces the directory which has files like . These files (to my knowledge) serve only to allow LaTeX to use the files which Sweave produces - but texlive can't exactly find them. I would solve this myself but I don't yet know Nix well enough. If anyone could point to any packages that solve a similar problem, that would help. Install and (other texlive packages may work similarly). Save the below as : Then run: R CMD Sweave example.Rnw latex latex will halt with: ! LaTeX Error: File `' not found. This has a somewhat kludgey workaround in the form of instead running something like: TEXINPUTS=".:/nix/store/i8cbhc7q0l1lkq3ynzxx0q5dh4s3dmd1-R-3.2.3/lib/R/share/texmf/tex/latex:" latex System: 16.09.1324. (Flounder) Nix version: nix-env (Nix) 1.11.4 Nixpkgs version: "16.09.1324."
Did you try to create a texlive variant which includes R? Updated example
Did you try this? This might be a novice error, but from that I am only able to get: error: attribute ‘pkgs’ missing, at /nix/store/2jr0yrapv1j4igmgai0nhddg9naqggg7-nixos-
The code I posted was not correct. The following commit make it at least compile: However I did not check the actually functionality: If works for you, feel free to submit a pull request.
That won't work by itself, as expects contents directly in the root of the package.
mhm. Adding a symlink in the package or a split package might help here.
(sorry hit the wrong button)
Yes, it might work to have a simple symlink package with the additional attributes from your commit (i.e. without changing R altogether).
By that, do you mean symlinking to in R's root?
No, creating a simple wrapper "package" that only contains that symlink and those attributes.
Does texlive run through a wrapper?

Would it be any simpler to optionally modify that wrapper to include R's LaTeX dependencies in one of the environment variables that texlive uses?
is a huge wrapper-builder that aggregates all the packages passed to it (and adds lots of magic to make it all work together, mostly). I do not think that changing it directly would be easier.
Thank you for your contributions. This has been automatically marked as stale because it has had no activity for 180 days. If this is still important to you, we ask that you leave a comment below. Your comment can be as simple as "still important to me". This lets people see that at least one person still cares about this. Someone will have to do this at most twice a year if there is no other activity. Here are suggestions that might help resolve this more quickly: for maintainers and people that previously touched the related code and @ mention them in a comment. on the . on the on .
Start R with administrator privileges. library("tinytex") r_texmf(action = "add")
Change:
]; }; }; <del> environment.systemPackages = [ pkgs.mtr ]; </del> <ins> programs.mtr.enable = true; </ins> }; };

Discussion:
When using the provided tayga service, it's not really possible to setup explicit mappings. This seems like an oversight. N/A Some sort of should exist. N/A It is possible to workaround the issue by sticking them into but... uh yeah anyway. :sweat_smile: <!-- Please @ people who are in the list of the offending package or module. If in doubt, check for whoever last touched something. -- (?) Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
# https://github.com/intel/mkl-dnn/commit/8134d346cdb7fe1695a2aa55771071d455fae0bc NIX_CFLAGS_COMPILE = lib.optionals (numpy.blasImplementation == "mkl") [ "-Wno-error=array-bounds" ]; <del> buildInputs = [ </del> <ins> nativeBuildInputs = [ </ins> cmake <del> numpy.blas </del> utillinux which <ins> ]; buildInputs = [ numpy.blas </ins> ] ++ lib.optionals cudaSupport [ cudatoolkit_joined cudnn ] ++ lib.optionals stdenv.isLinux [ numactl ];

Discussion:
When trying to build pytorch the following error occurs. This seems to be related to , seems like is now ignored when building python modules. Try to build pytorch, e.g. nix-build -A python3Packages.pytorch system: host os: multi-user?: sandbox: version: channels(root): channels(user) nixpkgs:
pinging the package maintainers and
Change:
# GPIO power management POWER_RESET_GPIO                 = option yes; POWER_RESET_GPIO_RESTART         = option yes; <ins> # Enable Pulse-Width-Modulation support, commonly used for fan and backlight. PWM                              = yes; </ins> } // optionalAttrs (stdenv.hostPlatform.isx86) { INTEL_IDLE                       = yes; INTEL_RAPL                       = whenAtLeast "5.3" module;

Discussion:
The kernel modules are missing which results in the lack of backlight control on devices such as the , GPD Win 1 and other Tables. Steps to reproduce the behavior: an affected device (GPD Pocket 1) i915 message: to control backlight, it doesn't work Backlight control works. Add any other context about the problem here. Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Was watching - can confirm pulling my kernel from unstable-nixos-small now includes pwm, pwm-crc, pwm-lpss etc in More importantly - now the backlight brightness adjustment finally works on my T100HA!
Glad I wasn't the only one profiting from this change. ;)
Change:
ceph-multi-node = handleTestOn [ "aarch64-linux" "x86_64-linux" ] ./ceph-multi-node.nix {}; ceph-single-node = handleTestOn [ "aarch64-linux" "x86_64-linux" ] ./ceph-single-node.nix {}; ceph-single-node-bluestore = handleTestOn [ "aarch64-linux" "x86_64-linux" ] ./ceph-single-node-bluestore.nix {}; <ins> ceph-single-node-bluestore-dmcrypt = handleTestOn [ "aarch64-linux" "x86_64-linux" ] ./ceph-single-node-bluestore-dmcrypt.nix {}; </ins> certmgr = handleTest ./certmgr.nix {}; cfssl = handleTestOn ["aarch64-linux" "x86_64-linux"] ./cfssl.nix {}; cgit = handleTest ./cgit.nix {};

Discussion:
The fix rolled out in lacks the third patch () described in . Without that patch it is still not possible to use ceph-volume with a dmcrypt'd volume. Steps to reproduce the behavior: on a bluestore OSD using LUKS Volume is activated. As there is still a stack trace that can be fixed by applying the above (and in the other issue thread) mentioned patch. Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Is there any chance you could add a NixOS VM test that exercises cryptsetup/dmcrypt? Then your setup would be guarded by that for any future NixOS changes.
That's on my todo list for when I have enough spoons, but it is there and I will probably get to it within the next few weeks.
Change:
lbdb = callPackage ../tools/misc/lbdb { abook = null; gnupg = null; goobook = null; khard = null; mu = null; }; <ins> lbry = callPackage ../applications/video/lbry { }; </ins> lbzip2 = callPackage ../tools/compression/lbzip2 { }; lci = callPackage ../applications/science/logic/lci {};

Discussion:
Project description Desktop client for the LBRY protocol. A YouTube alternative that uses the blockchain. Metadata homepage URL: source URL: license: MIT platforms: Linux
Hello, I'm a bot and I thank you in the name of the community for opening this issue. To help our human contributors focus on the most-relevant reports, I check up on old issues to see if they're still relevant. This issue has had no activity for 180 days, and so I marked it as stale, but you can rest assured it will never be closed by a non-human. The community would appreciate your effort in checking if the issue is still valid. If it isn't, please close it. If the issue persists, and you'd like to remove the stale label, you simply need to leave a comment. Your comment can be as simple as "still important to me". If you'd like it to get more attention, you can ask for help by searching for maintainers and people that previously touched related code and @ mention them in a comment. You can use or on the relevant files to find them. Lastly, you can always ask for help at or at .
Still not packaged.
Work has been started in .
I marked this as stale due to inactivity. &rarr;
still actual
PR
PR closed, anyone else willing, reopen under a new PR and try your luck at the merge roulette
Small update, I'm currently working on packaging LBRY from source (it actually seems possible).
Ok, while not from source (that didn't work out) LBRY has been packaged.
Change:
{ lib, stdenv , fetchurl, unzip , hdf5 <ins> , bzip2 , libzip , zstd , szipSupport ? false , szip </ins> , libxml2 , m4 , curl # for DAP

Discussion:
While rebuilding on this system that requires the package a failure while building has been occurring since NixOS 22.11. One of the tests fails.
I am not the maintainer of this package. Maybe can help? also have a look at:
Silly me for not checking and just the current release, disabling tests is a hell of a workaround but definitely works!
I'm also not a maintainer of the package, but I'm happy to fix it nonetheless :) There's an issue in that we don't have a good way of setting HDF5PLUGINPATH appropriately. Maybe I'll come back and fix this at some point, but for now this will do...
Change:
md2gemini = callPackage ../development/python-modules/md2gemini { }; <ins> md2pdf = callPackage ../development/python-modules/md2pdf { }; </ins> mdformat = callPackage ../development/python-modules/mdformat { }; mdformat-admon = callPackage ../development/python-modules/mdformat-admon { }; mdformat-beautysh = callPackage ../development/python-modules/mdformat-beautysh { };

Discussion:
Project description <!-- Describe the project a little: --Convert Markdown files to PDF with styles. Metadata homepage URL: source URL: license: mit platforms: linux. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
, poetry-core , pytestCheckHook , pythonOlder <ins> , pythonRelaxDepsHook </ins> , scipy , setuptools , spacy

Discussion:
, it will fail when it can't find check hydra: works, but also generates deprecation warnings. 0.9.3 (as used by Hydra) isn't an official release at Github. 0.9.4 fixes the deprecation warnings (save for flagging a future dependency and one other future.) Bump to version 0.9.4 coming momentarily. Please run and paste the result. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
installPhase = '' mkdir -p $out <del> cp -r node_modules $out/ </del> <ins> cp -r * $out/ </ins> ''; };

Discussion:
Package name: sunshine Latest released version: 0.22.0 <!-- Search your package here: --- Current version on the unstable channel: 0.21.0 Current version on the stable/release channel: 0.21.0 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. -- Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
{ lib , stdenv <del> , fetchFromGitHub </del> , cmake <ins> , fetchFromGitHub </ins> , pkg-config , qtbase , qtscript

Discussion:
Package name: vym Latest released version: <!-- Search your package here: --- Current version on the unstable channel: 2.8.42 Current version on the stable/release channel: 2.8.42 <!-- Type the name of your package and try to find an open pull request for the package If you find an open pull request, you can review it! There's a high chance that you'll have the new version right away while helping the community! --- Notify maintainers <!-- If the result shows no maintainers, tag the person that last updated the package. --Note for maintainers: Please tag this issue in your PR. Add a :+1: [reaction] to [issues you find important]. [reaction]: [issues you find important]:
Change:
libICE, libSM, fontconfig, <ins> xdg-utils, </ins> }: buildDotnetModule rec {

Discussion:
BeatSaberModManager does not launch without having xdg-utils installed. Add BeatSaberModManager to package list, but not xdg-utils, try to run it. It exits with error code 255. A log file is created containing: run in , and it runs with no issue. I would make a PR, but when I tried to build the package, I got and do not have time right now to debug. ping maintainer: Thanks.
Thanks for the report, I'll take a look!
I am not able to reproduce this issue on . I have moved my and can run without issue.
Aha, you need to enable OneClick support and then restart the app for this error to manifest itself.
Change:
deps = stdenv.mkDerivation { name = "${pname}-deps"; inherit src version postPatch; <ins> patches = [ log4j-update-cve-2021-44228 ]; </ins> nativeBuildInputs = [ gradle_6 perl ]; buildPhase = '' export GRADLE_USER_HOME=$(mktemp -d)

Discussion:
I used to find instances of log4j v2 (possibly affected by CVE-2021-). Packages listed below contain a log4j jar. Note that shipping the log4j jar does not imply vulnerability nor exploitability. This list is not exhaustive for many reasons (using 21.11 as index; packages not cached thus not indexed). Not vulnerable means I believe 21.05/21.11/unstable is not affected. Status ------ Fixed - 21.05? Upstream fix , not packaged Upstream fix , not packaged Fixed Fixed Fixed Upstream fix - Fixed Fixed , not packaged Not vulnerable (missing 21.05 backport) Upstream: Jitsi-videobridge instances older than 2.1-504 (May 2021) with callstats enabled should be updated to 2.1-504 or newer () Fixed Fixed Fixed Fixed Fixed Fixed 8.11.1 (2.16.0), not packaged - mitigated by adding  to your configuration Upstream (2.17.0), but unreleased Upstream (2.17.0) but Fixed (2.15.0) (no 2.17.0 released planned ) Not vulnerable Mitigated
Will patch pkgs.signald tonight.
Would it be possible to hook a scanner like into some postInstall-Hook for all packages depending on JDK? Or maybe directly into Hydra?
As soon as a new release of Jmeter is released, I'm going to update it.
I a note on how to mitigate the attack for .
Note that the Log4J maintainers have made additional releases (2.16.0 and 2.12.2) which are now as the fix for CVE-2021- (instead of 2.15). It fixes a (less severe) denial of service (CVE-2021-) and disables JNDI by default. Most downstream consumers will probably make yet another release...
I'm working on updating ELK 7 and should have a PR ready soon.
PR for Jmeter already submitted (). It will probably fix too, since log4j is running version.

I currently don't have time to go through all pull requests and update the table, but it's important to note that the second CVE has had its severity raised and various bypasses for the fixes in 2.15 have surfaced; version 2.15 still appears to be susceptible to RCE depending on the exact configuration/deployment. Packages should be upgraded to log4j2 2.16 (or 2.12.2) to be considered fixed. Also note for mitigation have been updated (deleting the JNDI class instead of disabling lookups through configuration). Additional reference:
Well, we will probably need to update all again soon:
Related MRs:
Another PR for Jmeter:
mediathekview might be affected. See PR
A new version of arduino with log4j fixes has been
A new version with fixes for log4j has been released for igv .
Can we close this issue or is there any open task?
From a quick look seems that Solr is the main one missing.
Let's close this. Packages should either be patched by now, otherwise they're likely to be orphaned and suffer from other issues as well. In case of Solr it looks like it has plenty of vulnerability tags slapped onto it.
Change:
-L*) export CMAKE_LIBRARY_PATH="$CMAKE_LIBRARY_PATH${CMAKE_LIBRARY_PATH:+:}${flag:2}" ;; <ins> -F*) export CMAKE_FRAMEWORK_PATH="$CMAKE_FRAMEWORK_PATH${CMAKE_FRAMEWORK_PATH:+:}${flag:2}" ;; </ins> -isystem) isystem_seen=1 ;;

Discussion:
I have a system without Command Line Tools or XCode and nix'es cmake can't find headers and tries to pick up system frameworks. Try to build this: On my system I get: System: Darwin Nix version: nix-env (Nix) 1.11.9 Nixpkgs version: 17.09pre-git () Sandboxing enabled: no
Related to
Change:
description = "A standard library for use with the Agda compiler"; license = stdenv.lib.licenses.mit; platforms = stdenv.lib.platforms.unix; <del> maintainers = with maintainers; [ jwiegley fuuzetsu ]; </del> <ins> maintainers = with maintainers; [ jwiegley fuuzetsu mudri ]; </ins> }; })

Discussion:
As of Agda 2.5.1 (which comes on the latest nixos-unstable release), both nixpkgs' agda-stdlib (from git nominally at version 2.4.2.3) and an updated version (v0.12, the most recent release) fail to build. Some modules are checked successfully, but it gets stuck at (the first builtin module it finds). For this module only, it tries to write to . Output: System: (Flounder) Nix version: nix-env (Nix) 1.11.2 Nixpkgs version: ""
has the same issue, meaning that there has probably been some change in Agda. The problem seems to be that writes a file for each file it checks, and some files it's checking are in the Nix store (specifically, in ). I think it's to do with . Maybe it would work if these were checked when building .
Current status: .
Fixed by .
Let's keep this open until the fix lands in master.
Change:
<del> { stdenv, fetchurl, pkgconfig, perl, texinfo, yasm </del> <ins> { stdenv, fetchurl, pkgconfig, addOpenGLRunpath, perl, texinfo, yasm </ins> , alsaLib, bzip2, fontconfig, freetype, gnutls, libiconv, lame, libass, libogg , libssh, libtheora, libva, libdrm, libvorbis, libvpx, lzma, libpulseaudio, soxr , x264, x265, xvidcore, zlib, libopus, speex, nv-codec-headers, dav1d

Discussion:
Describe the bug In mpv, CUDA-accelerated playback worked a few months ago after landed, but now no longer does. To Reproduce Steps to reproduce the behavior: NixOS master with an NVIDIA card and and observe: Metadata system: host os: multi-user?: sandbox: version: channels(root): channels(at): nixpkgs: Maintainer information:
I will see if doing helps