►
From YouTube: 2019-08-30 NixOS Office Hours #4
Description
Today we were supposed to hear from Eelco Dolstra about Flakes, but instead discussed several PRs:
- https://github.com/NixOS/nixpkgs/pull/67709
- https://github.com/NixOS/nixpkgs/pull/61684 / https://logs.nix.samueldr.com/nixos-security/search?q=hpn
- https://github.com/NixOS/nixos-homepage/pull/209
- https://github.com/NixOS/nixpkgs/pull/61684
A
B
A
A
F
F
A
One
of
the
big
problems
with
using
mix
right
now
is
that
if
you
want
to
use
a
library,
that's
in
one
repository
you
either
have
to
duplicate
the
library
by
copying
the
code.
Is
your
auditory
or
use?
What's
called
a
port
interrogation
where
you
use
Nick's
to
fetch
the
source,
and
then
you
build?
You
essentially
build
the
source.
You
import
that
source
into
your
your
system
or
your
next
expression,
and
then
you
use
the
library
like
that.
G
G
A
D
C
D
E
D
D
A
Okay,
it
looks
like
a
pretty
common
sense
for
requests.
Do
you
have
any
file
system?
Oh
well,
it's
only
instance.
Yesterday,
maybe
I
should
ping
boss
and
see
if
he
was
going
to
merge
it
better.
Be
good
thanks,
sounds
good
I
I'll
send
that
one
I
get
the
impression
that
there's
another
four
requests
from
Etta
hope
there.
C
A
C
H
A
C
C
E
B
C
C
D
A
A
G
B
F
A
For
everybody
else,
the
pull
request
is
number
two
hundred
and
nine
on
the
ex-wife's
home
page,
and
it
really
implements
the
package
Explorer
and
all
the
search
interface
using
a
belief.
It's
based
on
reacts
or
pre-act,
which
I
think
is
a
smaller
version
of
react
and
I
believe
makes
it
a
lot
more
extensible
that
should
make
it
a
bit
more
easy
to
maintain.
Probably
only
a
few
people
have
actually
seen
the
java
scripts
that
power
at
that
pinch,
but
it
was
truly
a
sight
to
behold
and
not
in
a
good
way.
It.
I
J
Are
the
main
key
changes?
That's
going
to
improve
for
a
user.
I
Will
be
able
to
see
the
software
desperation
unstable
and
in
stable
one
one
of
the
main
thing
one
point
of
confusion
is
when
they
see
Oh
such
and
such
software
is
at
version
10,
but
in
stable.
It's
still
in
the
version
line.
With
this
request
applied,
we
have
a
channel
selection,
so
they
can
see
open
on,
say
well
this
we
know
data.
B
I
I
B
F
B
F
Have
like
key
based
morality,
we
had
there's
a
software
called
key
base
and
they
were
asking
me
for
VAP.
You
could
index
which
packages
we
had
and
I
had
to
share
them
a
link
to
the
expression
which
has
to
be
updated
for
each
of
these,
which
is
quite
inconvenient
so
for
people
who
want
to
advertise
that
we
have
these
packages.
It's.
B
A
Rubygems
and
upstream
issue
version
bumps
I
think
this
has
to
do
with
shipping.
The
default
version
of
ruby
gems
with
Ruby
I,
actually
don't
know
a
lot
about
Ruby,
as
anybody.
A
F
A
A
A
A
Fair
enough,
one
of
the
big
features
that
I
contributed
and
really
liked,
along
with
Geo
fun,
who
was
a
co-worker
of
mine,
involves
a
post
build
hook
and
the
post
built
up
lets.
You
write
some
pretty
nice
actions
like
directly.
After
a
hook,
he
couldn't
upload
sign
it
upload
it
to
a
binary
cash
built-in,
which
I
think
could
create
some
pretty
interesting
integrations
that
are
possible.
A
This
previously
was
actually
pretty
difficult
to
accomplish,
especially
if
you
use
an
import
from
derogation,
something
that
hopefully
flakes
old
pics
as
well,
because
the
builds
don't
actually
become
GC
rooted
at
the
end
of
the
end
of
the
build
so
I'm
looking
forward
to
that
for
sure,
Kyla's
has
sent
me
some
for
description
about
61
684
of
the
Ruby
issue,
saying
as
far
as
they
can
tell,
there's
no
way
to
tell
next
to
always
put
bundler
in
the
path
before
Ruby.
It's
always
sort
of
alphabetically.
A
A
A
B
J
I
A
A
A
A
It
does
stemming
so
you
can
see
it's
mashing
where
it's
like
cross
compilation
and
crustash
compiling
cross
system,
these
sorts
of
things.
So
the
hope
here
is
that
it's
actually
better
than
ctrl
F
in
your
browser,
because
it
does
the
stemming
and
it's
all
multiple
pages
and
it's
completely
offline.
So
the
index
is
local.
It's
just
a
simple
JavaScript
file
and.
A
So
one
of
the
big
problems
with
a
big
manual
for
before
is
actually
this.
Would
the
page
is
so
big
that
Google
would
not
index
it
so
having
these
smaller
pages
and
having
these
cross
linking
between
individual
pages
should
help
Google
and
other
search
engines,
do
the
indexing
the
manual
and
get
us
higher
in
the
search
results
so
funny,
if
you
could
click
into
any
one
of
those
at
this
plant.
A
On
the
left,
you
can
see
that
there's
a
sidebar
and
it
expands
as
you
like
drill
down
into
a
topic,
and
so
this
is,
this
is
all
actually
directly
out
of
the
mix
build.
So
if
you've
ever
built
the
mango
locally,
you
get
an
old
style
like
clearly
1990s
documentation,
Tech
and
now,
when
you
do
this,
this
is
literally
what
you
will
get
out.
The
other
side.
I
would
I
have
also
applied
this
to
the
Nick
Celeste
manual,
but
it
needs
some
work.
It's
it's
not
not
ready
to
demo
yet
Samuel.
A
A
Oh
sorry,
Florian
there's
actually
not
a
pull
request
yet
so
you
know
working
on
integrating
it
with
the
with
an
X
OS
built
before
we
send
the
whole
request.
So
we
want
it
to
be
essentially
all-in-one
PR.
So
it's
it's
easy
easier
to
review
and
make
sure
that
that
the
code
we've
written
works
cleanly
for
both
instead
of
saying
one
and
then
having
to
pack
up
a
bunch
of
stuff
to
make
it
work
for
the
other.
B
How
would
I
talk
about
what.
A
I've
been
working
with
genesis,
nar
from
updating
the
gnome
defaults
and.
B
E
B
B
A
J
Since
it's
pretty.
B
B
J
C
J
From
the
this
is
regular
one
that
everyone
is
currently
using
I.
B
B
B
J
B
A
A
A
A
Better
than
let's
get
rid
of
it
penultimate
is
a
little
private
joke,
but
the
ultimate
patch
set
became
on
main
change
for
several
years,
and
so
I
collected
the
original
patches
or
the
original
configuration
together
with
some
fixes
of
our
own
and
some
fixes
that
had
come
from
above
Joe
and
I
just
put
them
on
github
somewhere,
so
that
they
wouldn't
fall
off
line
again.
I
haven't
tried
to
run
it
without
that
configuration
years,
I
haven't
touched,
it
I,
don't.
D
B
A
J
B
B
B
Call
I
talked
about
having
the
the
installer,
but
it's
been
a
bit
pause,
so
I
thought
I
could
improve
this
to
make
it
really.
You
know
presentable
default
experience
that
people
could
have
them
to
have
them
touched
in
a
very
long
time
and
we're
just
about
finished
with
it,
and
it
will
be
in
their
release.
I
That
I
I
did
it
because
it
broke
Carrie
emoji
support.
If
I
can
my
awesome
configuration
uses
emojis
for
a
workspace
numbers,
so
I
have
color
emojis
working
with
awesome
and
with
it
works
on
the
Firefox
and
Chrome,
so
I
guess
it
was
because
it
broke
that
I.
Do
they
build
it,
but
I'm
not
even
sure
why
I
did
about
it.
I
B
B
Do
not
think
so,
I
think
the
fonts
enabled
default
fonts
option
is
only
enabled
if
you
enable
X,
Server
and
I'm
pretty
sure
on
minimal
systems.
Shouldn't
have
X
server
running
on
them
whatsoever.
A
A
Great,
so
we
are
have
miraculously
managed
to
fill
up
45
minutes
of
almost
45
minutes
of
time,
despite
the
main
events,
so
to
speak,
not
having
panned
out
in
the
what,
for
the
last
seven
minutes
or
so,
is
there
any
other
pull
requests
I?
Should
we
should
touch
on
before
we
close?
If
you
want
to
talk
about
the
maintenance
things,
you
know,
yeah
sure
actually
and
I
have
a
so
okay,
yes,
okay!
A
So
some
time
ago
we
I
submitted
an
RFC
about
creating
a
maintainer
team
on
github,
where
every
single
person
who
maintains
a
package
would
be
able
to
view
part
of
this
orc.
This
meant
this
team
be
part
of
the
github
organization,
and
then
the
of
board
bot
could
request
reviews
whenever
their
packages
were
updated,
as
of
so
so
that
was
several
months
ago,
but
that
RFC
was
accepted.
A
Actually
this
morning,
I
finished
inviting
the
last
of
that
group,
so
that
team
is
now
at
well
I,
don't
actually
have
it
up,
but
the
team
one
has
about
550
people
invited
with
another
about
400
people
with
pending
invitations.
Sorry
550
people
have
joined
and
are
part
of
the
team
and
then
about
400
450
people
have
have
an
invitation
that
that
they
can
accept
at
any
time
the
hope
there
and
I
don't
actually
have
any
metrics
on
this,
which
is
a
bummer.
But
the
hope
is
that
of
Borg
anytime.
Any
package
has
changed.
A
That's
right:
that's
right,
yeah!
So
it's
pretty
early!
That
was
just
just
finished,
inviting
people
today,
but
I've
already
seen
quite
a
number
of
for
requests
where
the
person
who
was
requested
to
be
review
was
not
a
committer
but
was
just
a
maintainer,
so
I
I
think
already
that's
a
pretty
big
success.
A
Well
so,
hopefully
it
changes
into
a
change
in
behavior.
You
know
of
the
Maine
taters,
that's
been
a
big
goal
of
mine
is
to
make
of
Borg
and
other
tools
help
shape
people's
behavior
to
do
a
better
job
and
and
do
that
by
with
honey
instead
of
with
with
force,
because
at
the
end
of
the
day,
we're
all
volunteers
so
I
can't
nobody
can
make
anybody
do
anything,
so
it
has
to
have
to
make
you
want
to
do
it
I
absolutely.
B
Agree,
I
think
that's
great,
because
I
think
I've
touched
on
frequently
the
responsibilities
of
the
maintainer
and
how
they
need
to
be
communicated
in
a
a
graceful
way,
instead
of
sort
of
like
a
almost
negative
way
currently,
and
we
have
a
lot
of
committers
who's
frequent
times
is
just
to
ping
people,
which
is
not
very
much
worth
their
time
to
helped
me
to
do
that
when
the
maintainer
could
just
look
at
it.
You
know
for
just
things
them
yeah.
B
I
feel
like
it
increases
the
sense
of
shared
ownership,
because
I
do
realize
that
people
on
it
recognizes
you,
as
a
member
of
the
organization,
correct
I
needed.
A
Yeah
so
that
has
actually
caused
a
bit
of
confusion
is
is
so
people
will
ask
for
somebody
to
merge,
they'll,
say
well:
I'm
a
maintainer
I
can't
actually
merge
stuff.
I
can
I
can
just
approve
stuff.
So
in
some
ways
that's
actually
reduced
visibility,
a
little
bit
I
wonder
if
if
we
can
easily
improve
that
part
of
course,
a
future
possible
idea
is
to
have
allow
maintainer
x'
to
merge
their
own
pull
requests.
A
C
A
A
So
I'm
closing
notes,
Nix
con
2019
in
Brno
is
October
25th
through
the
27th.
You
can
still
submit
your
papers
or
your
submit
your
your
presentations
or
any
talks
you'd
like
to
give
something
interesting
this
year
is
I,
believe
there's
going
to
be
a
beginner's
track,
so
submit
your
your
conference
proposals
book
a
ticket
and
and
I
hope
to
see
you
all
in
Brno,
like
in
October,
call
for
papers
ends
in
about
one
week
in
three
days,
which
is
September
10.
A
Second
thing
is
just
a
shout
out
and
a
thank
you
to
the
Knicks
community
project
on
github,
which
is
an
organization
what's
alleged
which
lets
people
take
Knicks
projects
that
they're
working
on
and
put
it
in
sort
of
a
community
ownership
setting
in
the
past
year.
Actually,
my
project
Linux
kit
nix,
was
taken
over
by
github
user,
Nick
Nowitzki,
so
big.
Thank
you
to
Nick
for
doing
that.
Big
THANK
YOU
to
Zim
Batum
and
a
display
us
for
setting
up
the
Knicks
community
and
all
of
those
good
things.
A
Maybe
we
could
have
you
on
here
sometime
and
the
final
bit
of
business
is
I
am
actually
on
vacation
two
weeks
from
today,
so
our
next
Nick's
office
Nick,
so
s
office
hours,
will
be
on
September
20th,
which
is
one
week
after
when
we
would
normally
have
it
next
and
that's
all
for
today.
Thank
you
all
for
coming
today,
Thanks.