text:
[23.11] nanomq: add patches for CVE-2024-31040 & CVE-2024-31041

Description of changes
https://nvd.nist.gov/vuln/detail/CVE-2024-31040
https://nvd.nist.gov/vuln/detail/CVE-2024-31041
Unstable should be addressed by 0.21.9 which might happen in #284345
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 310892 run on x86_64-linux 1

1 package built:

nanomq

The tests were already failing for me.

Hum yeah indeed, I tried to rebuild the tests on top of release-23.11 and got a failure this time :shrug: , let's merge

authors: LeSuisse pluiedev risicle


text:
html2text: 1.3.2a -> 2.2.3

(This is my first PR to nixpkgs, it's relatively simple but I'll try to conform to the contributing as best I can)
As noted in old homepage https://www.mbayer.de/html2text/

html2text is now maintained by Fabian Groffen.

Which points to github https://github.com/grobian/html2text  where it says

the official home of html2text is at https://gitlab.com/grobian/html2text.

This uses the simple autoreconfHook to do all the work with no more preConfigures seeming to be necesary
This is a modification of the previously closed pr #112094, closed because of iconv issues on darwin. Since then on v2.2.2 it has fixe "Fix building on platforms requiring libiconv". But I'm unable to run on darwin as I don't have a mac
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[x] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[x] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage

Sorry my nixos machine is tiny so running the nix tests crashes it. I'll work on getting a bigger computer with nix

[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@ofborg build html2text

Ok yeah, looks like it's still failing on darwin

./iconvstream.h:21:10: fatal error: 'iconv.h' file not found

I can try to see how to add it as a build dependency but don't want you to have to keep testing my attempts. I don't have access to a nix-enabled mac, maybe I can hack together with github runners just to try, and then borg will do the final test and hopefully recapitulate. I can't find documentation of other people because borg is so nice

Can you try again  with ofborg please.
I added the simple
buildInputs = lib.optional stdenv.isDarwin libiconv ;

which I hoped would work. When I use the github nixos runner on macos it builds great (on their M1 and non-M1 versions). Annoyingly, when I tried to recapitulate the old error, it gives a different iconv-related error. But I still think this could work

Please reword commit message to html2text: 1.3.2a -> 2.2.3. See https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#commit-conventions

Result of nixpkgs-review pr 312788 run on x86_64-darwin 1

7 packages built:

diffoscope
diffoscope.dist
diffoscope.man
diffoscopeMinimal
diffoscopeMinimal.dist
diffoscopeMinimal.man
html2text

Result of nixpkgs-review pr 312788 run on x86_64-darwin 1

7 packages built:

diffoscope
diffoscope.dist
diffoscope.man
diffoscopeMinimal
diffoscopeMinimal.dist
diffoscopeMinimal.man
html2text

Result of nixpkgs-review pr 312788 run on x86_64-linux 1

8 packages built:

bookworm
diffoscope
diffoscope.dist
diffoscope.man
diffoscopeMinimal
diffoscopeMinimal.dist
diffoscopeMinimal.man
html2text

Thanks sikmir, eikek, and Aleksanaa for working with me :-)
It's a small commit but it's fun to see it all the way into master

Thanks sikmir, eikek, and Aleksanaa for working with me :-)
It's a small commit but it's fun to see it all the way into master

you’re welcome :)

source: gharchive/pull-request

authors: Aleksanaa JZL sikmir

repo: NixOS/nixpkgs

license: MIT

license_type: permissive

license_source: github-api


text:
tijolo: 0.7.4 -> 0.8.1

Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[x] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[x] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@Aleksanaa could you review this PR please?


text:
python311Packages.rich-argparse: 1.4.0 -> 1.5.1

Description of changes
https://github.com/hamdanal/rich-argparse/releases/tag/v1.5.1
https://github.com/hamdanal/rich-argparse/releases/tag/v1.5.0
Current version has a failed test when building with nix build nixpkgs#python311Packages.rich-argparse.
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 317940 run on x86_64-linux 1

4 packages built:

python311Packages.rich-argparse
python311Packages.rich-argparse.dist
python312Packages.rich-argparse
python312Packages.rich-argparse.dist

Result of nixpkgs-review pr 317940 run on x86_64-linux 1

4 packages built:

python311Packages.rich-argparse
python311Packages.rich-argparse.dist
python312Packages.rich-argparse
python312Packages.rich-argparse.dist

authors: Xelden fabaff


text:
nixos/systemd-repart: respect NIX_BUILD_CORES for image compression

Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@GrahamcOfBorg test repart

@GrahamcOfBorg test appliance-repart-image repart-image

Not quite, NIX_BUILD_CORES is set to the value of cores from nix.conf, which by default would have the same behavior as passing --threads=0 to the compression tools. However failing to use NIX_BUILD_CORES when the nix settings specifies some other value means that the machine will dedicate all cores to perform the compression, even though the user requested otherwise.

authors: arianvp jmbaur


text:
python3Packages.open-webui: add rapidocr-onnxruntime deps

Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@ofborg build open-webui


text:
unarc: init at 0-unstable-2020-06-05

Description of changes
Introduces unarc with auto update and meta.mainProgram set up
Signed-off-by: lucasew lucas59356@gmail.com

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 322687 run on x86_64-linux 1

1 package built:

unarc

Result of nixpkgs-review pr 322687 run on x86_64-linux 1

1 package built:

unarc

nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review pr 322687

x86_64-linux

:white_check_mark: 5 packages built:

melange
terraform-providers.aiven
terraform-providers.migadu
terraform-providers.sentry
unarc


text:
python312Packages.pip-api: 0.0.33 -> 0.0.34

Diff: https://github.com/di/pip-api/compare/refs/tags/0.0.33...0.0.34
Changelog: https://github.com/di/pip-api/blob/0.0.34/CHANGELOG
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 326188 run on x86_64-linux 1

4 packages failed to build:

fontbakery (python312Packages.fontbakery)
fontbakery.dist (python312Packages.fontbakery.dist)
python311Packages.fontbakery
python311Packages.fontbakery.dist

6 packages built:

pip-audit
pip-audit.dist
python311Packages.pip-api
python311Packages.pip-api.dist
python312Packages.pip-api
python312Packages.pip-api.dist


text:
python3Packages.vulkan: init at 1.3.275.1

Description of changes
Upscaler seems to have some inexplicable crashes when selecting files, I need to look into that a bit more, but this module seems to work just fine
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@ofborg build python3Packages.vulkan


text:
python312Packages.pikepdf: 9.0.0 -> 9.1.0

Description of changes
Diff: https://github.com/pikepdf/pikepdf/compare/v9.0.0...v9.1.0
Changelog: https://github.com/pikepdf/pikepdf/blob/v9.1.0/docs/releasenotes/version9.rst

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

@ofborg eval


text:
x2t: init at 8.1.1

THIS IS A DRAFT. Many things still need cleaning up, this PR is just here to share the progress.
Description of changes
This builds x2t, a utility that is part of the OnlyOffice DocumentServer, from source instead of taking it from the binary release. This has a couple of advantages, notably avoiding assumptions made in the binary package that seem to have led to crashes, easier patching, building with debugging symbols, etc etc.
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Just for notice: I  tried my luck myself a few months ago, but gave up: https://github.com/marcelcoding/onlyoffice.nix Maybe there is something that will help you.

I already landed in unstable.

:+1: rebased.
(I still plan to resume work on this, though it might take a while before I find the time)

authors: MarcelCoding raboof


text:
Carnix: 0.5.0 -> 0.6.0

Motivation for this change
This new version fixes bugs with the "log" crate, and compiles the include field of Cargo.toml as filterSource.
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option build-use-sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[x] Fits CONTRIBUTING.md.

Empty derivation:
$ tree (nix-build -A carnix)
/nix/store/wfm73abpi1r8pi74f6l4xnnybq3wvzaa-rust_carnix-0.6.0
└── lib
    └── link

1 directory, 1 file

authors: P-E-Meunier gnidorah


text:
badkeys: 0.0.11 -> 0.0.12

Diff: https://github.com/badkeys/badkeys/compare/refs/tags/v0.0.11...v0.0.12
Changelog: https://github.com/badkeys/badkeys/releases/tag/v0.0.12
Description of changes

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 342393 run on x86_64-linux 1

2 packages built:

badkeys
badkeys.dist


text:
[Backport release-24.05] traefik: 3.0.4 -> 3.1.2, fix CVE-2024-45410

Description of changes
This PR updates Traefik to the latest version that targeted Go 1.22, as Go 1.23 isn't availabe in 24.05 (yet?). Then https://github.com/Scrumplex/traefik/commit/21f0062a6d570f12ce51646cacdcb28178d8be6f is applied, which is the upstream fix for the vulnerability, but rebased on v3.1.2. As confirmed in https://github.com/traefik/traefik/pull/11077#issuecomment-2371307267 applying this patch should fix the issue.
This fixes CVE-2024-45410[0] (GHSA-62c8-mh53-4cqv[1]).
Indirect backport of https://github.com/NixOS/nixpkgs/pull/344149
Relevant Releases:
https://github.com/traefik/traefik/releases/tag/v3.1.3
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

https://github.com/ofborg test traefik

I have create a Flake that tests the vulnerability in Traefik for current nixos-unstable, current nixos-24.05 and this PR's branch. nixos-unstable and this PR succeed, while current nixos-24.05 fails.
Try it out yourself:
https://codeberg.org/Scrumplex/Traefik-CVE-2024-45410-Test
nix flake check --verbose --keep-going git+https://codeberg.org/Scrumplex/Traefik-CVE-2024-45410-Test

I was thinking about contributing this test to Nixpkgs, too, but I think upstream already has tests to ensure this doesn't regress.

For anyone unsure about the patch, here is the diff between upstream and scrumplex's fix https://0x0.st/XgPE.txt
here are the raw links to the patches

upstream: https://github.com/traefik/traefik/commit/584144100524277829f26219baaab29a53b8134f.patch
scrumplex (this pr): https://github.com/NixOS/nixpkgs/blob/3002cd2380d272a295efa174b3148cb5b7d632e2/pkgs/servers/traefik/fix-CVE-2024-45410.patch

Another way to compare my patch:
$ git clone https://github.com/traefik/traefik.git
$ cd traefik

 # Backport upstream v2 -> v3 merge that contains fix
 # See https://github.com/traefik/traefik/commit/093989fc14f40fb54c0fe1221b363427f6129be7
$ git switch -c traefik-3.1.2-backport-merge v3.1.2
 # --strategy-option=ours resolves a conflict in GH Actions manifests
$ git cherry-pick --strategy-option=ours -m1 093989fc14f40fb54c0fe1221b363427f6129be7

 # Apply my patch from this PR
$ git switch -c traefik-3.1.2-backport-Scrumplex v3.1.2
$ curl -L "https://github.com/Scrumplex/nixpkgs/raw/3002cd2380d272a295efa174b3148cb5b7d632e2/pkgs/servers/traefik/fix-CVE-2024-45410.patch" | git am

 # Diff my patch against branch we prepared before
$ git diff traefik-3.1.2-backport-merge -- \
    docs/content/reference/static-configuration/cli-ref.md \
    docs/content/reference/static-configuration/env-ref.md \
    docs/content/reference/static-configuration/file.toml \
    docs/content/reference/static-configuration/file.yaml \
    docs/content/routing/entrypoints.md \
    integration/fixtures/headers/connection_hop_by_hop_headers.toml \
    integration/headers_test.go \
    pkg/config/static/entrypoints.go \
    pkg/middlewares/auth/connectionheader.go \
    pkg/middlewares/auth/connectionheader_test.go \
    pkg/middlewares/auth/forward.go \
    pkg/middlewares/forwardedheaders/forwarded_header.go \
    pkg/middlewares/forwardedheaders/forwarded_header_test.go \
    pkg/middlewares/headers/headers.go \
    pkg/server/server_entrypoint_tcp.go

This should show you the diff of all files affected by my patch as well as upstream's v2 patch.
in my case I can only see some changes related to acme and a change that isn't present in the original patch in pkg/server/server_entrypoint_tcp.go

Comparing v3.1.2 to v3.1.3 also confirms that removals make perfect sense https://github.com/traefik/traefik/compare/v3.1.2...v3.1.3
The bump from v3.0 to v3.1 does require minor migrations with limited scope https://doc.traefik.io/traefik/v3.1/migration/v3/#v30-to-v31, but aside from this being fine to backport since its a security release, major version bumps have in the past also been made without reservation https://github.com/NixOS/nixpkgs/pull/307794.
I think this looks solid.

authors: Scrumplex cafkafk


text:
python312Packages.azure-mgmt-containerservice: 32.0.0 -> 32.1.0

Changelog: https://github.com/Azure/azure-sdk-for-python/blob/azure-mgmt-containerservice_32.1.0/sdk/containerservice/azure-mgmt-containerservice/CHANGELOG.md

Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review pr 350331

x86_64-linux

:x: 2 packages failed to build:

azure-cli
azure-cli.dist

:white_check_mark: 6 packages built:

prowler
prowler.dist
python311Packages.azure-mgmt-containerservice
python311Packages.azure-mgmt-containerservice.dist
python312Packages.azure-mgmt-containerservice
python312Packages.azure-mgmt-containerservice.dist

nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review pr 350331

x86_64-linux

:white_check_mark: 8 packages built:

azure-cli
azure-cli.dist
prowler
prowler.dist
python311Packages.azure-mgmt-containerservice
python311Packages.azure-mgmt-containerservice.dist
python312Packages.azure-mgmt-containerservice
python312Packages.azure-mgmt-containerservice.dist


text:
autosuspend: 7.0.2 -> 7.0.3

Automatic update generated by nixpkgs-update tools. This update was made based on information from passthru.updateScript.
meta.description for autosuspend is: Daemon to automatically suspend and wake up a system
meta.homepage for autosuspend is: https://autosuspend.readthedocs.io
meta.changelog for autosuspend is: https://github.com/languitar/autosuspend/releases/tag/v7.0.3
Updates performed

Ran passthru.UpdateScript

To inspect upstream changes
Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found 7.0.3 with grep in /nix/store/ry23fk9wci0fnvzbm304imqk4fv30n9c-autosuspend-7.0.3
found 7.0.3 in filename of file in /nix/store/ry23fk9wci0fnvzbm304imqk4fv30n9c-autosuspend-7.0.3

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

autosuspend

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/ry23fk9wci0fnvzbm304imqk4fv30n9c-autosuspend-7.0.3 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A autosuspend https://github.com/r-ryantm/nixpkgs/archive/c6f7529b1e747b9c10064c89b4f0930bda37ceb9.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/c6f7529b1e747b9c10064c89b4f0930bda37ceb9#autosuspend

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/ry23fk9wci0fnvzbm304imqk4fv30n9c-autosuspend-7.0.3
ls -la /nix/store/ry23fk9wci0fnvzbm304imqk4fv30n9c-autosuspend-7.0.3/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review

x86_64-linux

:white_check_mark: 2 packages built:

autosuspend
autosuspend.dist

Maintainer pings
cc @bzizou @anthonyroussel for testing.

[!TIP]
As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

Add a :+1: reaction to pull requests you find important.

@NixOS/nixpkgs-merge-bot merge

authors: bzizou r-ryantm


text:
wayclip: 0.4.2 -> a62ac18e5e56085bd416fbe5fbe22b3560291e7b

Automatic update generated by nixpkgs-update tools. This update was made based on information from passthru.updateScript.
meta.description for wayclip is: Wayland clipboard utility
meta.homepage for wayclip is: https://sr.ht/~noocsharp/wayclip/
Updates performed

Ran passthru.UpdateScript

To inspect upstream changes
Impact
Checks done

built on NixOS
The tests defined in passthru.tests, if any, passed
found a62ac18e5e56085bd416fbe5fbe22b3560291e7b in filename of file in /nix/store/hc25qwkzbnr8514zfx6bv3n3wa5c3cmp-wayclip-a62ac18e5e56085bd416fbe5fbe22b3560291e7b

Rebuild report (if merged into master) (click to expand)

2 total rebuild path(s)

2 package rebuild(s)

First fifty rebuilds by attrpath

wayclip

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/hc25qwkzbnr8514zfx6bv3n3wa5c3cmp-wayclip-a62ac18e5e56085bd416fbe5fbe22b3560291e7b \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A wayclip https://github.com/r-ryantm/nixpkgs/archive/8d66e529c3bc13511d583e8d7fbdfbd24fcdb762.tar.gz

Or:
nix build github:r-ryantm/nixpkgs/8d66e529c3bc13511d583e8d7fbdfbd24fcdb762#wayclip

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/hc25qwkzbnr8514zfx6bv3n3wa5c3cmp-wayclip-a62ac18e5e56085bd416fbe5fbe22b3560291e7b
ls -la /nix/store/hc25qwkzbnr8514zfx6bv3n3wa5c3cmp-wayclip-a62ac18e5e56085bd416fbe5fbe22b3560291e7b/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
nixpkgs-review result
Generated using nixpkgs-review.
Command: nixpkgs-review

x86_64-linux

:white_check_mark: 2 packages built:

wayclip
wayclip.man

Maintainer pings
cc @getchoo for testing.

[!TIP]
As a maintainer, if your package is located under pkgs/by-name/*, you can comment @NixOS/nixpkgs-merge-bot merge to automatically merge this update using the nixpkgs-merge-bot.

Add a :+1: reaction to pull requests you find important.

Bad bump, needs filtering

authors: getchoo r-ryantm


text:
xpra: fix xpraWithNvenc build

fs/bin/build_cuda_kernels.py was missing shebang fixup.
Tested-by: Corbin Wunderlich corbin@wcopy.net
5 packages built:
run-scaled xpra xpra.dist xpraWithNvenc xpraWithNvenc.dist

🥳
closes #363390

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[x] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Backport, since it's broken in 24.11 I believe.

On staging-next, the build for xpra fails:
Sourcing python-remove-tests-dir-hook
Sourcing python-catch-conflicts-hook.sh
Sourcing python-remove-bin-bytecode-hook.sh
Sourcing setuptools-build-hook
Using setuptoolsBuildPhase
Sourcing pypa-install-hook
Using pypaInstallPhase
Sourcing python-imports-check-hook.sh
Using pythonImportsCheckPhase
Sourcing python-namespaces-hook
Sourcing python-catch-conflicts-hook.sh
Running phase: unpackPhase
@nix { "action": "setPhase", "phase": "unpackPhase" }
unpacking source archive /nix/store/jyjbxv1va55fals3c45aq3xgv5wq6amv-source
source root is source
setting SOURCE_DATE_EPOCH to timestamp 315619200 of file "source/xpra/x11/xsettings_prop.py"
Running phase: patchPhase
@nix { "action": "setPhase", "phase": "patchPhase" }
applying patch /nix/store/j4ffy36swjfyh516b7g7ws4sp76y3wd0-fix-41106.patch
patching file xpra/server/util.py
applying patch /nix/store/a7hy8iznvzjah2g6xzcjm3bbw6sf2snp-fix-122159.patch
patching file xpra/scripts/main.py
Hunk #1 succeeded at 445 (offset 1 line).
patching script interpreter paths in fs/bin/build_cuda_kernels.py
fs/bin/build_cuda_kernels.py: interpreter directive changed from "#!/usr/bin/env python3" to "/nix/store/i3ld89k1vrg2j0wy14bvmkxvas8aay3n-python3-3.12.8/bin/python3"
Running phase: updateAutotoolsGnuConfigScriptsPhase
@nix { "action": "setPhase", "phase": "updateAutotoolsGnuConfigScriptsPhase" }
Running phase: configurePhase
@nix { "action": "setPhase", "phase": "configurePhase" }
no configure script, doing nothing
Running phase: buildPhase
@nix { "action": "setPhase", "phase": "buildPhase" }
Executing setuptoolsBuildPhase
nix_run_setup build_ext --with-Xdummy --without-Xdummy_wrapper --without-strict --with-gtk3 --with-pam --with-vsock --with-nvenc --parallel 32 bdist_wheel
Xpra version 6.2.1
Python version 3.12.8
found pkg-config version: 0.29.2
ARCH=x86_64
using INCLUDE_DIRS=['/nix/store/q9nz6ph5bv1m365y16v3vcybjqd4axcz-linux-pam-1.6.1/include']
CC=gcc
CPP=cpp
build switches:
* Os                   : No
* PIC                  : Yes
* Xdummy               : Yes
* Xdummy_wrapper       : No
* annotate             : No
* argb                 : Yes
* argb_encoder         : Yes
* audio                : Yes
* avif                 : No
* avif_decoder         : No
* avif_encoder         : No
* brotli               : No
* bundle_tests         : No
* cityhash             : No
* client               : Yes
* clipboard            : Yes
* codecs               : Yes
* csc_cython           : Yes
* csc_libyuv           : No
* cuda_kernels         : Yes
* cuda_rebuild         : Auto
* cython               : Yes
* cython_tracing       : No
* cythonize_more       : No
* data                 : Yes
* dbus                 : Yes
* debug                : No
* decoders             : Yes
* docs                 : /nix/store/siysam0ac58lxcwbv6h2lc4ij6l7j5xy-pandoc-cli-3.1.11.1/bin/pandoc
* drm                  : Yes
* enc_proxy            : Yes
* enc_x264             : Yes
* encoders             : Yes
* evdi                 : No
* example              : Yes
* gstreamer            : Yes
* gstreamer_audio      : Yes
* gstreamer_video      : Yes
* gtk3                 : Yes
* gtk_x11              : Yes
* http                 : Yes
* ism_ext              : Yes
* jpeg_decoder         : Yes
* jpeg_encoder         : Yes
* keyboard             : Yes
* lz4                  : Yes
* mdns                 : Yes
* modules              : Yes
* netdev               : Yes
* notifications        : Yes
* nvdec                : No
* nvenc                : Yes
* nvfbc                : No
* nvidia               : Yes
* nvjpeg_decoder       : No
* nvjpeg_encoder       : No
* opengl               : Yes
* openh264             : No
* openh264_decoder     : No
* openh264_encoder     : No
* pam                  : Yes
* pandoc_lua           : Yes
* pillow               : Yes
* pillow_decoder       : Yes
* pillow_encoder       : Yes
* printing             : Yes
* proc                 : No
* proxy                : Yes
* qrencode             : No
* qt6_client           : No
* quic                 : Yes
* rebuild              : Yes
* rencodeplus          : Yes
* rfb                  : Yes
* scripts              : Yes
* sd_listen            : No
* server               : Yes
* service              : Yes
* shadow               : Yes
* spng_decoder         : No
* spng_encoder         : No
* ssh                  : Yes
* strict               : No
* tests                : No
* uinput               : Yes
* v4l2                 : Yes
* verbose              : No
* vpx                  : Yes
* vpx_decoder          : Yes
* vpx_encoder          : Yes
* vsock                : Yes
* warn                 : Yes
* webcam               : Yes
* webp                 : Yes
* webp_decoder         : Yes
* webp_encoder         : Yes
* websockets           : Yes
* win32_tools          : No
* x11                  : Yes
* xdg_open             : Yes
* xinput               : Yes
found Cython version 3.0.11
Warning: could not get branch information
'git describe --long --always --tags' failed with return code 127
updated './xpra/src_info.py' with:
* BRANCH               = unknown
* COMMIT               = unknown
* LOCAL_MODIFICATIONS  = 0
* REVISION             = unknown
error running (['pip3', 'freeze'],),{'stdout': -1, 'stderr': -2}: [Errno 2] No such file or directory: 'pip3'
updated './xpra/build_info.py' with:
* BUILD_BIT            = 64bit
* BUILD_CPU            = AMD Ryzen 9 5950X 16-Core Processor
* BUILD_DATE           = 1980-01-02
* BUILD_MACHINE        = x86_64
* BUILD_OS             = linux
* BUILD_TIME           = 00:00
* BUILD_TYPE           =
* COMPILER_VERSION     = gcc (GCC) 14.2.1 20241116
* CYTHON_VERSION       = 3.0.11
* LINKER_VERSION       = GNU ld (GNU Binutils) 2.43.1
* NVCC_VERSION         =
* PYTHON_VERSION       = 3.12.8
* lib_gobjectintrospection10 = 1.82.0
* lib_gtk30            = 3.24.43
* lib_gtkx1130         = 3.24.43
* lib_nvenc            = 10
* lib_py3cairo         = 1.27.0
* lib_pygobject30      = 3.50.0
* lib_python3          = 3.12
* lib_vpx              = 1.15.0
* lib_x11              = 1.8.10
* lib_x264             = 0.164.x
* lib_xcomposite       = 0.4.6
* lib_xdamage          = 1.1.6
* lib_xext             = 1.3.6
* lib_xfixes           = 6.0.1
* lib_xkbfile          = 1.1.3
* lib_xrandr           = 1.5.4
* lib_xtst             = 1.2.5
* rebuilding XRGB_to_NV12: no file
* rebuilding XRGB_to_YUV444: no file
* rebuilding BGRX_to_NV12: no file
* rebuilding BGRX_to_YUV444: no file
* rebuilding BGRX_to_RGB: no file
* rebuilding RGBX_to_RGB: no file
* rebuilding RGBA_to_RGBAP: no file
* rebuilding BGRA_to_RGBAP: no file
found CUDA compiler '/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc' :  version 12.4.99
clang++ not found, compilation may fail
compiling CUDA kernels with:
 '/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc' '-fatbin' '-std=c++11' '-arch=all' '-Wno-deprecated-gpu-targets' '-Xnvlink' '-ignore-host-info' '--allow-unsupported-compiler'
* XRGB_to_NV12
* XRGB_to_YUV444
* BGRX_to_NV12
* BGRX_to_YUV444
* BGRX_to_RGB
* RGBX_to_RGB
* RGBA_to_RGBAP
* BGRA_to_RGBAP
Error: failed to compile CUDA kernel BGRA_to_RGBAP
 using command: ['/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc', '-fatbin', '-std=c++11', '-arch=all', '-Wno-deprecated-gpu-targets', '-Xnvlink', '-ignore-host-info', '--allow-unsupported-compiler', '-c', 'fs/share/xpra/cuda/BGRX_to_NV12.cu', '-o', 'fs/share/xpra/cuda/BGRX_to_NV12.fatbin']

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/x86_64-unknown-linux-gnu/bits/c++config.h(827): error: user-defined literal operator not found
    typedef __decltype(0.0bf16) __bfloat16_t;
                       ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: type name is not allowed
      : public __bool_constant<__is_array(_Tp)>
                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: identifier "__is_array" is undefined
      : public __bool_constant<__is_array(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: type name is not allowed
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: identifier "__is_member_object_pointer" is undefined
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: type name is not allowed
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                                                            ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: identifier "__is_member_function_pointer" is undefined
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: type name is not allowed
      : public __bool_constant<__is_reference(_Tp)>
                                              ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: identifier "__is_reference" is undefined
      : public __bool_constant<__is_reference(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: type name is not allowed
      : public __bool_constant<__is_object(_Tp)>
                                           ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: identifier "__is_object" is undefined
      : public __bool_constant<__is_object(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: type name is not allowed
      : public __bool_constant<__is_member_pointer(_Tp)>
                                                   ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: identifier "__is_member_pointer" is undefined
      : public __bool_constant<__is_member_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "__is_nothrow_new_constructible" is not a function or static data member
      constexpr bool __is_nothrow_new_constructible
                     ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "constexpr" is not valid here
      constexpr bool __is_nothrow_new_constructible
      ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/bits/utility.h(237): error: __type_pack_element is not a template
      { using type = __type_pack_element<_Np, _Types...>; };
                     ^

16 errors detected in the compilation of "fs/share/xpra/cuda/BGRX_to_NV12.cu".

Error: failed to compile CUDA kernel BGRA_to_RGBAP
 using command: ['/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc', '-fatbin', '-std=c++11', '-arch=all', '-Wno-deprecated-gpu-targets', '-Xnvlink', '-ignore-host-info', '--allow-unsupported-compiler', '-c', 'fs/share/xpra/cuda/XRGB_to_NV12.cu', '-o', 'fs/share/xpra/cuda/XRGB_to_NV12.fatbin']

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/x86_64-unknown-linux-gnu/bits/c++config.h(827): error: user-defined literal operator not found
    typedef __decltype(0.0bf16) __bfloat16_t;
                       ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: type name is not allowed
      : public __bool_constant<__is_array(_Tp)>
                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: identifier "__is_array" is undefined
      : public __bool_constant<__is_array(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: type name is not allowed
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: identifier "__is_member_object_pointer" is undefined
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: type name is not allowed
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                                                            ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: identifier "__is_member_function_pointer" is undefined
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: type name is not allowed
      : public __bool_constant<__is_reference(_Tp)>
                                              ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: identifier "__is_reference" is undefined
      : public __bool_constant<__is_reference(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: type name is not allowed
      : public __bool_constant<__is_object(_Tp)>
                                           ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: identifier "__is_object" is undefined
      : public __bool_constant<__is_object(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: type name is not allowed
      : public __bool_constant<__is_member_pointer(_Tp)>
                                                   ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: identifier "__is_member_pointer" is undefined
      : public __bool_constant<__is_member_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "__is_nothrow_new_constructible" is not a function or static data member
      constexpr bool __is_nothrow_new_constructible
                     ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "constexpr" is not valid here
      constexpr bool __is_nothrow_new_constructible
      ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/bits/utility.h(237): error: __type_pack_element is not a template
      { using type = __type_pack_element<_Np, _Types...>; };
                     ^

16 errors detected in the compilation of "fs/share/xpra/cuda/XRGB_to_NV12.cu".

Error: failed to compile CUDA kernel BGRA_to_RGBAP
Error: failed to compile CUDA kernel BGRA_to_RGBAP
 using command: ['/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc', '-fatbin', '-std=c++11', '-arch=all', '-Wno-deprecated-gpu-targets', '-Xnvlink', '-ignore-host-info', '--allow-unsupported-compiler', '-c', 'fs/share/xpra/cuda/BGRX_to_YUV444.cu', '-o', 'fs/share/xpra/cuda/BGRX_to_YUV444.fatbin']
 using command: ['/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc', '-fatbin', '-std=c++11', '-arch=all', '-Wno-deprecated-gpu-targets', '-Xnvlink', '-ignore-host-info', '--allow-unsupported-compiler', '-c', 'fs/share/xpra/cuda/RGBA_to_RGBAP.cu', '-o', 'fs/share/xpra/cuda/RGBA_to_RGBAP.fatbin']

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/x86_64-unknown-linux-gnu/bits/c++config.h(827): error: user-defined literal operator not found
    typedef __decltype(0.0bf16) __bfloat16_t;
                       ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: type name is not allowed
      : public __bool_constant<__is_array(_Tp)>
                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: identifier "__is_array" is undefined
      : public __bool_constant<__is_array(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: type name is not allowed
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: identifier "__is_member_object_pointer" is undefined
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: type name is not allowed
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                                                            ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: identifier "__is_member_function_pointer" is undefined
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: type name is not allowed
      : public __bool_constant<__is_reference(_Tp)>
                                              ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: identifier "__is_reference" is undefined
      : public __bool_constant<__is_reference(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: type name is not allowed
      : public __bool_constant<__is_object(_Tp)>
                                           ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: identifier "__is_object" is undefined
      : public __bool_constant<__is_object(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: type name is not allowed
      : public __bool_constant<__is_member_pointer(_Tp)>
                                                   ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: identifier "__is_member_pointer" is undefined
      : public __bool_constant<__is_member_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "__is_nothrow_new_constructible" is not a function or static data member
      constexpr bool __is_nothrow_new_constructible
                     ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "constexpr" is not valid here
      constexpr bool __is_nothrow_new_constructible
      ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/bits/utility.h(237): error: __type_pack_element is not a template
      { using type = __type_pack_element<_Np, _Types...>; };
                     ^

16 errors detected in the compilation of "fs/share/xpra/cuda/BGRX_to_YUV444.cu".
Error: failed to compile CUDA kernel BGRA_to_RGBAP

 using command: ['/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc', '-fatbin', '-std=c++11', '-arch=all', '-Wno-deprecated-gpu-targets', '-Xnvlink', '-ignore-host-info', '--allow-unsupported-compiler', '-c', 'fs/share/xpra/cuda/XRGB_to_YUV444.cu', '-o', 'fs/share/xpra/cuda/XRGB_to_YUV444.fatbin']
/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/x86_64-unknown-linux-gnu/bits/c++config.h(827): error: user-defined literal operator not found
    typedef __decltype(0.0bf16) __bfloat16_t;
                       ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: type name is not allowed
      : public __bool_constant<__is_array(_Tp)>
                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: identifier "__is_array" is undefined
      : public __bool_constant<__is_array(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: type name is not allowed
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: identifier "__is_member_object_pointer" is undefined
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: type name is not allowed
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                                                            ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: identifier "__is_member_function_pointer" is undefined
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: type name is not allowed
      : public __bool_constant<__is_reference(_Tp)>
                                              ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: identifier "__is_reference" is undefined
      : public __bool_constant<__is_reference(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: type name is not allowed
      : public __bool_constant<__is_object(_Tp)>
                                           ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: identifier "__is_object" is undefined
      : public __bool_constant<__is_object(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: type name is not allowed
      : public __bool_constant<__is_member_pointer(_Tp)>
                                                   ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: identifier "__is_member_pointer" is undefined
      : public __bool_constant<__is_member_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "__is_nothrow_new_constructible" is not a function or static data member
      constexpr bool __is_nothrow_new_constructible
                     ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "constexpr" is not valid here
      constexpr bool __is_nothrow_new_constructible
      ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/bits/utility.h(237): error: __type_pack_element is not a template
      { using type = __type_pack_element<_Np, _Types...>; };
                     ^

16 errors detected in the compilation of "fs/share/xpra/cuda/RGBA_to_RGBAP.cu".

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/x86_64-unknown-linux-gnu/bits/c++config.h(827): error: user-defined literal operator not found
    typedef __decltype(0.0bf16) __bfloat16_t;
                       ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: type name is not allowed
      : public __bool_constant<__is_array(_Tp)>
                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: identifier "__is_array" is undefined
      : public __bool_constant<__is_array(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: type name is not allowed
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: identifier "__is_member_object_pointer" is undefined
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: type name is not allowed
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                                                            ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: identifier "__is_member_function_pointer" is undefined
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: type name is not allowed
      : public __bool_constant<__is_reference(_Tp)>
                                              ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: identifier "__is_reference" is undefined
      : public __bool_constant<__is_reference(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: type name is not allowed
      : public __bool_constant<__is_object(_Tp)>
                                           ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: identifier "__is_object" is undefined
      : public __bool_constant<__is_object(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: type name is not allowed
      : public __bool_constant<__is_member_pointer(_Tp)>
                                                   ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: identifier "__is_member_pointer" is undefined
      : public __bool_constant<__is_member_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "__is_nothrow_new_constructible" is not a function or static data member
      constexpr bool __is_nothrow_new_constructible
                     ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "constexpr" is not valid here
      constexpr bool __is_nothrow_new_constructible
      ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/bits/utility.h(237): error: __type_pack_element is not a template
      { using type = __type_pack_element<_Np, _Types...>; };
                     ^

16 errors detected in the compilation of "fs/share/xpra/cuda/XRGB_to_YUV444.cu".

Error: failed to compile CUDA kernel BGRA_to_RGBAP
 using command: ['/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc', '-fatbin', '-std=c++11', '-arch=all', '-Wno-deprecated-gpu-targets', '-Xnvlink', '-ignore-host-info', '--allow-unsupported-compiler', '-c', 'fs/share/xpra/cuda/BGRX_to_RGB.cu', '-o', 'fs/share/xpra/cuda/BGRX_to_RGB.fatbin']

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/x86_64-unknown-linux-gnu/bits/c++config.h(827): error: user-defined literal operator not found
    typedef __decltype(0.0bf16) __bfloat16_t;
                       ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: type name is not allowed
      : public __bool_constant<__is_array(_Tp)>
                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: identifier "__is_array" is undefined
      : public __bool_constant<__is_array(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: type name is not allowed
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: identifier "__is_member_object_pointer" is undefined
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: type name is not allowed
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                                                            ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: identifier "__is_member_function_pointer" is undefined
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: type name is not allowed
      : public __bool_constant<__is_reference(_Tp)>
                                              ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: identifier "__is_reference" is undefined
      : public __bool_constant<__is_reference(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: type name is not allowed
      : public __bool_constant<__is_object(_Tp)>
                                           ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: identifier "__is_object" is undefined
      : public __bool_constant<__is_object(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: type name is not allowed
      : public __bool_constant<__is_member_pointer(_Tp)>
                                                   ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: identifier "__is_member_pointer" is undefined
      : public __bool_constant<__is_member_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "__is_nothrow_new_constructible" is not a function or static data member
      constexpr bool __is_nothrow_new_constructible
                     ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "constexpr" is not valid here
      constexpr bool __is_nothrow_new_constructible
      ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/bits/utility.h(237): error: __type_pack_element is not a template
      { using type = __type_pack_element<_Np, _Types...>; };
                     ^

16 errors detected in the compilation of "fs/share/xpra/cuda/BGRX_to_RGB.cu".

Error: failed to compile CUDA kernel BGRA_to_RGBAP
 using command: ['/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc', '-fatbin', '-std=c++11', '-arch=all', '-Wno-deprecated-gpu-targets', '-Xnvlink', '-ignore-host-info', '--allow-unsupported-compiler', '-c', 'fs/share/xpra/cuda/RGBX_to_RGB.cu', '-o', 'fs/share/xpra/cuda/RGBX_to_RGB.fatbin']

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/x86_64-unknown-linux-gnu/bits/c++config.h(827): error: user-defined literal operator not found
    typedef __decltype(0.0bf16) __bfloat16_t;
                       ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: type name is not allowed
      : public __bool_constant<__is_array(_Tp)>
                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: identifier "__is_array" is undefined
      : public __bool_constant<__is_array(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: type name is not allowed
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: identifier "__is_member_object_pointer" is undefined
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: type name is not allowed
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                                                            ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: identifier "__is_member_function_pointer" is undefined
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: type name is not allowed
      : public __bool_constant<__is_reference(_Tp)>
                                              ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: identifier "__is_reference" is undefined
      : public __bool_constant<__is_reference(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: type name is not allowed
      : public __bool_constant<__is_object(_Tp)>
                                           ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: identifier "__is_object" is undefined
      : public __bool_constant<__is_object(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: type name is not allowed
      : public __bool_constant<__is_member_pointer(_Tp)>
                                                   ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: identifier "__is_member_pointer" is undefined
      : public __bool_constant<__is_member_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "__is_nothrow_new_constructible" is not a function or static data member
      constexpr bool __is_nothrow_new_constructible
                     ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "constexpr" is not valid here
      constexpr bool __is_nothrow_new_constructible
      ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/bits/utility.h(237): error: __type_pack_element is not a template
      { using type = __type_pack_element<_Np, _Types...>; };
                     ^

16 errors detected in the compilation of "fs/share/xpra/cuda/RGBX_to_RGB.cu".

Error: failed to compile CUDA kernel BGRA_to_RGBAP
 using command: ['/nix/store/j3vxf5qwvsx8h0jb5ygkhv3g4km54v1x-cuda-merged-12.4/bin/nvcc', '-fatbin', '-std=c++11', '-arch=all', '-Wno-deprecated-gpu-targets', '-Xnvlink', '-ignore-host-info', '--allow-unsupported-compiler', '-c', 'fs/share/xpra/cuda/BGRA_to_RGBAP.cu', '-o', 'fs/share/xpra/cuda/BGRA_to_RGBAP.fatbin']

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/x86_64-unknown-linux-gnu/bits/c++config.h(827): error: user-defined literal operator not found
    typedef __decltype(0.0bf16) __bfloat16_t;
                       ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: type name is not allowed
      : public __bool_constant<__is_array(_Tp)>
                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(529): error: identifier "__is_array" is undefined
      : public __bool_constant<__is_array(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: type name is not allowed
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                                                          ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(581): error: identifier "__is_member_object_pointer" is undefined
      : public __bool_constant<__is_member_object_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: type name is not allowed
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                                                            ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(603): error: identifier "__is_member_function_pointer" is undefined
      : public __bool_constant<__is_member_function_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: type name is not allowed
      : public __bool_constant<__is_reference(_Tp)>
                                              ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(695): error: identifier "__is_reference" is undefined
      : public __bool_constant<__is_reference(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: type name is not allowed
      : public __bool_constant<__is_object(_Tp)>
                                           ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(731): error: identifier "__is_object" is undefined
      : public __bool_constant<__is_object(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: type name is not allowed
      : public __bool_constant<__is_member_pointer(_Tp)>
                                                   ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(760): error: identifier "__is_member_pointer" is undefined
      : public __bool_constant<__is_member_pointer(_Tp)>
                               ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "__is_nothrow_new_constructible" is not a function or static data member
      constexpr bool __is_nothrow_new_constructible
                     ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/type_traits(1610): error: "constexpr" is not valid here
      constexpr bool __is_nothrow_new_constructible
      ^

/nix/store/5iypf3qjpn0vc09j964i18p95v34py3c-gcc-14-20241116/include/c++/14-20241116/bits/utility.h(237): error: __type_pack_element is not a template
      { using type = __type_pack_element<_Np, _Types...>; };
                     ^

16 errors detected in the compilation of "fs/share/xpra/cuda/BGRA_to_RGBAP.cu".

failed to rebuild the cuda kernels ['XRGB_to_NV12', 'XRGB_to_YUV444', 'BGRX_to_NV12', 'BGRX_to_YUV444', 'BGRX_to_RGB', 'RGBX_to_RGB', 'RGBA_to_RGBAP', 'BGRA_to_RGBAP']

It says the error. Maybe try adding clang to the build inputs? @FliegendeWurst

Indeed that works.
diff --git a/pkgs/tools/X11/xpra/default.nix b/pkgs/tools/X11/xpra/default.nix
index 34b4d0f97737..1de161cc0629 100644
--- a/pkgs/tools/X11/xpra/default.nix
+++ b/pkgs/tools/X11/xpra/default.nix
@@ -39,6 +39,7 @@
   xorg,
   xorgserver,
   xxHash,
+  clang,
 }:

 let
@@ -99,6 +100,7 @@ buildPythonApplication rec {
   INCLUDE_DIRS = "${pam}/include";

   nativeBuildInputs = [
+    clang
     gobject-introspection
     pkg-config
     wrapGAppsHook3

I bisected some, so far I got it down to a staging merge commit 3f0a5daaf182ef5a78e53cee9de0d7112399a19c, I'll try and find out a bit about why the staging changes made this necessary and in any case update the PR in the next day or so. (Unless you prefer to merge as-is and open another.)

Bisect on staging runs until the heat death of the universe on my machine. I simply applied your suggestion and rebuilt.
@CorbinWunderlich can you verify that it works as intended on your hardware again?

Bisect on staging runs until the heat death of the universe on my machine. I simply applied your suggestion and rebuilt.
@CorbinWunderlich can you verify that it works as intended on your hardware again?

Seems good on nvidia 550.90.7-grid (vgpu guest driver)

Technically it should be patchShebangs --build, to get the right Python when cross-compiling.

Unless the script is used at runtime. Not really obvious to me.

Technically it should be patchShebangs --build, to get the right Python when cross-compiling.

Thanks!

the linked issue states it is used at build time

I also verified that it is not included in the final output at all for some fallback path.

I think you also need a python in the nativeBuildInputs. Unless one of the other inputs there propagates python.

only strictly required if strictDeps = true

nix eval -f . xpraWithNvenc.strictDeps says true so I suppose some other input does do this.
Should it be added anyway somewhere for clarity? So far, python3 is only in propagatedBuildInputs and I'm not 100% certain where buildPythonApplication puts those.

Oh, I somehow missed this package is a python application already. In that case it is available automatically.

authors: CorbinWunderlich FliegendeWurst hxtmdev numinit


text:
libmpd: Fix GCC 14 build

https://hydra.nixos.org/build/281958201/nixlog/3
Note that this is also needed by latest clang.
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
25.05 Release Notes (or backporting 24.11 and 25.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

@ofborg build libmpd


text:
idrisPackages: Progress reporting

Motivation for this change
Before this change, Idris would silently build all files of a package without indicating any progress until everything is done, because it doesn't seem to flush on newlines when the output isn't a tty. This is especially frustrating because Idris can take a very long time to compile things.
Ping @brainrape @mpickering @shlevy
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[x] Fits CONTRIBUTING.md.

I'll close this because this PR fixes it: https://github.com/idris-lang/Idris-dev/pull/4498


text:
libinotify-kqueue: init at 20180201

Motivation for this change
https://github.com/libinotify-kqueue/libinotify-kqueue
Inotify shim for systems with Kqueue.
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[ ] NixOS
[x] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[x] Fits CONTRIBUTING.md.

Did you try to run the tests provided by upstream?

I've enabled tests and it passes on macOS.

No attempt on x86_64-linux (full log)
The following builds were skipped because they don't evaluate on x86_64-linux: libinotify-kqueue
Partial log (click to expand)

a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

No attempt on aarch64-linux (full log)
The following builds were skipped because they don't evaluate on aarch64-linux: libinotify-kqueue
Partial log (click to expand)

a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

Success on x86_64-darwin (full log)
Attempted: libinotify-kqueue
Partial log (click to expand)
(cd /nix/store/0w1my2bz5mnv1iql71zdfkvmnkg28yaf-libinotify-kqueue-20180201/share/man/man3 && rm -f inotify_set_param.3 && ln -s libinotify.3 inotify_set_param.3)
(cd /nix/store/0w1my2bz5mnv1iql71zdfkvmnkg28yaf-libinotify-kqueue-20180201/share/man/man3 && rm -f inotify_event.3 && ln -s libinotify.3 inotify_event.3)
make[2]: Leaving directory '/private/tmp/nix-build-libinotify-kqueue-20180201.drv-0/source'
make[1]: Leaving directory '/private/tmp/nix-build-libinotify-kqueue-20180201.drv-0/source'
post-installation fixup
gzipping man pages under /nix/store/0w1my2bz5mnv1iql71zdfkvmnkg28yaf-libinotify-kqueue-20180201/share/man/
strip is /nix/store/251fvx4mx9q4zarbca5cciasmn66p668-cctools-binutils-darwin/bin/strip
stripping (with command strip and flags -S) in /nix/store/0w1my2bz5mnv1iql71zdfkvmnkg28yaf-libinotify-kqueue-20180201/lib
patching script interpreter paths in /nix/store/0w1my2bz5mnv1iql71zdfkvmnkg28yaf-libinotify-kqueue-20180201
/nix/store/0w1my2bz5mnv1iql71zdfkvmnkg28yaf-libinotify-kqueue-20180201

authors: GrahamcOfBorg xeji yegortimoshenko


text:
howl: init at 0.5.3

Motivation for this change
This PR adds a new package for the Howl text editors and registers myself as a maintainer.
The package builds on my NixOS machine and the programs runs fine.
Since the introduction of this new package should not break anything, could this be back-ported to release-18.03 and release-18.09?
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nox --run "nox-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[x] Fits CONTRIBUTING.md.

@timokau Thanks for your feedback.
I've replied to the issues you have pointed out and made some changes.

@GrahamcOfBorg build howl

Failure on x86_64-darwin (full log)
Attempted: howl
Partial log (click to expand)
/nix/store/f2lp21azk4w88f17zgf4mji64agb18ga-bash-4.4-p23/bin/bash: gcc: command not found
/nix/store/f2lp21azk4w88f17zgf4mji64agb18ga-bash-4.4-p23/bin/bash: gcc: command not found
/nix/store/f2lp21azk4w88f17zgf4mji64agb18ga-bash-4.4-p23/bin/bash: gcc: command not found
Makefile:268: *** Unsupported target architecture.  Stop.
make[2]: Leaving directory '/private/tmp/nix-build-howl-0.5.3.drv-0/howl-0.5.3/src/deps/LuaJIT-2.1.0-beta3/src'
make[1]: *** [Makefile:113: default] Error 2
make[1]: Leaving directory '/private/tmp/nix-build-howl-0.5.3.drv-0/howl-0.5.3/src/deps/LuaJIT-2.1.0-beta3'
make: *** [Makefile:58: deps/LuaJIT-2.1.0-beta3/src/libluajit.a] Error 2
builder for '/nix/store/h3fjvcvcwdfm5y09l0xrarmbnzczi5in-howl-0.5.3.drv' failed with exit code 2
error: build of '/nix/store/h3fjvcvcwdfm5y09l0xrarmbnzczi5in-howl-0.5.3.drv' failed

Success on x86_64-linux (full log)
Attempted: howl
Partial log (click to expand)
glibPreFixupPhase
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3
shrinking /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3/bin/.howl-wrapped
strip is /nix/store/dxf1m7dhc4qb655bdljc1fsd74v1nag3-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3/bin
patching script interpreter paths in /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3
/nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3/share/howl/bundles/lua/misc/tools/down_manual.sh: interpreter directive changed from " /bin/sh" to "/nix/store/nii7pk6pv4x4as7vsxbvwyzjn67vax6r-bash-4.4-p23/bin/sh"
/nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3/bin/howl-spec: interpreter directive changed from " /bin/sh" to "/nix/store/nii7pk6pv4x4as7vsxbvwyzjn67vax6r-bash-4.4-p23/bin/sh"
checking for references to /build in /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3...

It seems like darwin isn't supported.
How can it be excluded from the build platforms?

If the aarch64 build succeeds (apparently its still running), you can replace platforms.all by platforms.linux.

Failure on aarch64-linux (full log)
Attempted: howl
Partial log (click to expand)
        /build/howl-0.5.3/lib/ext/moonscript/moonscript/base.lua:90: in function 'loadstring'
        /build/howl-0.5.3/lib/ext/moonscript/moonscript/base.lua:79: in function </build/howl-0.5.3/lib/ext/moonscript/moonscript/base.lua:66>
        [C]: in function 'require'
        /build/howl-0.5.3/lib/howl/init.lua:171: in function </build/howl-0.5.3/lib/howl/init.lua:167>
        [C]: in function 'pcall'
        /build/howl-0.5.3/lib/howl/init.lua:215: in main chunk

make: *** [Makefile:74: bytecode] Error 123
builder for '/nix/store/8jw6dgql92sg8y07x09xcsh59nv7ckf7-howl-0.5.3.drv' failed with exit code 2
error: build of '/nix/store/8jw6dgql92sg8y07x09xcsh59nv7ckf7-howl-0.5.3.drv' failed

Since it fails on aarch64 too, you set platforms = [ "i686-linux" "x86_64-linux" ].

The platforms variable has been set accordingly.

@GrahamcOfBorg build howl

No attempt on aarch64-linux (full log)
The following builds were skipped because they don't evaluate on aarch64-linux: howl
Partial log (click to expand)

a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

No attempt on x86_64-darwin (full log)
The following builds were skipped because they don't evaluate on x86_64-darwin: howl
Partial log (click to expand)

a) For `nixos-rebuild` you can set
  { nixpkgs.config.allowUnsupportedSystem = true; }
in configuration.nix to override this.

b) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
  { allowUnsupportedSystem = true; }
to ~/.config/nixpkgs/config.nix.

Success on x86_64-linux (full log)
Attempted: howl
Partial log (click to expand)
post-installation fixup
shrinking RPATHs of ELF executables and libraries in /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3
shrinking /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3/bin/.howl-wrapped
strip is /nix/store/dxf1m7dhc4qb655bdljc1fsd74v1nag3-binutils-2.30/bin/strip
stripping (with command strip and flags -S) in /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3/bin
patching script interpreter paths in /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3
/nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3/share/howl/bundles/lua/misc/tools/down_manual.sh: interpreter directive changed from " /bin/sh" to "/nix/store/nii7pk6pv4x4as7vsxbvwyzjn67vax6r-bash-4.4-p23/bin/sh"
/nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3/bin/howl-spec: interpreter directive changed from " /bin/sh" to "/nix/store/nii7pk6pv4x4as7vsxbvwyzjn67vax6r-bash-4.4-p23/bin/sh"
checking for references to /build in /nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3...
/nix/store/8jfi7v723gfpbzrhkpbqcp82h6p42c8g-howl-0.5.3

Great, thank you for your patience with the review :)

I agree, I don't think there even is a hard policy on that. There probably should be. @samueldr what do you think on backporting new packages?

The current backport policies are about keeping the existing software set bug-free and safe security wise. We don't have policies about new software in stable, but current unwritten agreements are that it's not really done.
While it wouldn't break anything, Nix, Nixpkgs and NixOS makes composition easy enough that "leaf derivations" like this one should be trivial to either add locally to an overlay, or use from unstable.

authors: GrahamcOfBorg pacien samueldr timokau


text:
updated dmtcp major versions

The default dmtcp should really be updated to a more recent version, as it is now a major version behind (and more). I'm a nix newbie, but I needed to use this soon so it seemed like a good chance to test out nix-build. So there are a few possible issues:

My new --replace commands may or may not be working correctly. Without these, a python expression trying to access $USER  (e.g. os.environ['USER']) fails; it seems like USER is not being set correctly in the build environment. I attempted to hardcode it to the first build user for now (I guess this would work if it is possible to disable parallel builds). However, I have not checked that this works correctly because specifying nix-build -A -K dmtcp does not seem to leave the directory around, even though it now fails much later in the check phase.

Five out of forty checks will still fail if doCheck = true. I haven't investigated these yet, but dmtcp seems to work well enough in general. I will try to investigate these more. Part of the problem could be I'm running in virtualbox for the moment.

I believe you tested that the package works. I pushed a squash of this with some fixes of mine (and tested it builds).

authors: bbarker vcunat


text:
doc/reviewing-contributions: nix-review instead of nox-review

It is faster, handles more edge cases and allows to test/review the built
packages interactively.

lgtm beyond these nits :)

There is one more doc file:
$ rg nox-review doc
doc/submitting-changes.xml
354:   <title>Tested compilation of all pkgs that depend on this change using <command>nox-review</command></title>
359:    can be done using the nox utility. The <command>nox-review</command>
367:<screen>nix-shell -p nox --run "nox-review wip"</screen>
372:<screen>nix-shell -p nox --run "nox-review pr 12345"</screen>

doc/reviewing-contributions.xml
197:$ nix-shell -p nox --run "nox-review -k pr PRNUMBER"

With the new release nix-review now also implements the wip subcommand and is as such a drop-in replacement for nox-review. Therefore I replaced nox-review now everywhere.

I would also backport the new nix-review in this case to stable to have a consistent review experience for all users.

authors: Mic92 danbst grahamc


text:
nixos/networkd: Add more valid values for RequiredForOnline

RequiredForOnline allows for a boolean value or operational state.
This adds the values for all valid the operational states.

Motivation for this change
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

Thanks! Backported as 131ff6dd9c8dc64dc7e0c4ece49782dbf54bff83.


text:
ghc: add 8.8.3 (copied from 8.8.2)

Motivation for this change
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[ ] NixOS
[x] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

@GrahamcOfBorg build haskell.compiler.ghc883

@GrahamcOfBorg build haskell.compiler.ghc883

Remains to be fixed:

[ ] squash
[ ] figure out CI failure

@GrahamcOfBorg build haskell.compiler.ghc883
@ggreif The CI failure is probably from some other problem in haskell-updates.  It is likely this PR didn't cause it, so you can probably ignore it.

authors: cdepillabout ggreif


text:
nixos/webhook: init

Add a module for a webhook service

Motivation for this change
I needed to setup a webhook service, so here it is.
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

Superseded by https://github.com/NixOS/nixpkgs/pull/205636


text:
perlPackages.MojoliciousPluginTextExceptions: init at 0.01

Motivation for this change
Adds the Mojolicious::Plugin::TextExceptions perl module.
Things done

[X] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[X] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[X] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[X] Fits CONTRIBUTING.md.

@GrahamcOfBorg build perlPackages.MojoliciousPluginTextExceptions perldevelPackages.MojoliciousPluginTextExceptions

authors: aanderse stigtsp


text:
realsense + examples + udev rules

realsense-viewer still complains about udev rules being outdated cause it seems to byte compare with the patched version. But it seems to work.

Note the merge conflicts. Also please check whether the examples by any chance retain references to stdenv.cc.cc.

No response to reviews and no compliance to https://github.com/NixOS/nixpkgs/blob/master/.github/CONTRIBUTING.md, closing.

authors: MarcWeber doronbehar


text:
softether: support SoftEther VPN 4.18

SoftEther VPN is already can be included in nixpkgs.

Haven't tested the nixos module but looks fine. Would be better to directly define the systemd service rather than jobs, though.


text:
🛑 GotHub gothub.lunar.icu is down

In 41fa1bc, GotHub gothub.lunar.icu (https://gothub.lunar.icu) was down:

HTTP code: 0
Response time: 0 ms

Resolved: GotHub gothub.lunar.icu is back up in 89b77dd after 9 minutes.

source: gharchive/issue

repo: NoPlagiarism/services-personal-upptime


text:
🛑 libreddit lr.vern.cc is down

In 750a514, libreddit lr.vern.cc (https://lr.vern.cc) was down:

HTTP code: 0
Response time: 0 ms

Resolved: libreddit lr.vern.cc is back up in 61d87fb after 18 minutes.