Differences

This shows you the differences between two versions of the page.

--- onny:notizen [2026/06/30 09:33] – [postgresql] 10.250.0.1
+++ onny:notizen [2026/07/14 09:42] (current) – [packaging] 10.250.0.1
@@ Line 1224: / Line 1224: @@
 <code bash>
 nix-shell -p 'python3.withPackages (p: [p.pygobject3])' -p libnotify -p gobjectIntrospection
-</code>
-fetchpatch array
-<code>
-patches = map fetchpatch [
-  /* This patch is currently necessary for the unit test suite to run correctly.
-   * See https://www.mail-archive.com/klee-dev@imperial.ac.uk/msg03136.html
-   * and https://github.com/klee/klee/pull/1458 for more information.
-   */
-  #{
-  #  name = "fix-gtest";
-  #  sha256 = "F+/6videwJZz4sDF9lnV4B8lMx6W11KFJ0Q8t1qUDf4=";
-  #  url = "https://github.com/klee/klee/pull/1458.patch";
-  #}
-  # This patch fixes test compile issues with glibc 2.33+.
-  #{
-  #  name = "fix-glibc-2.33";
-  #  sha256 = "PzxqtFyLy9KF1eA9AAKg1tu+ggRdvu7leuvXifayIcc=";
-  #  url = "https://github.com/klee/klee/pull/1385.patch";
-  #}
 </code>
@@ Line 1280: / Line 1258: @@
     };
   };
+</code>
+update package
+<code>
+nix-update gelly
+nix-update stamp --version=branch=main
 </code>
 ==== packaging ====
@@ Line 1295: / Line 1280: @@
 </code>
+fetchpatch array
+<code>
+patches = map fetchpatch [
+  /* This patch is currently necessary for the unit test suite to run correctly.
+   * See https://www.mail-archive.com/klee-dev@imperial.ac.uk/msg03136.html
+   * and https://github.com/klee/klee/pull/1458 for more information.
+   */
+  #{
+  #  name = "fix-gtest";
+  #  sha256 = "F+/6videwJZz4sDF9lnV4B8lMx6W11KFJ0Q8t1qUDf4=";
+  #  url = "https://github.com/klee/klee/pull/1458.patch";
+  #}
+  # This patch fixes test compile issues with glibc 2.33+.
+  #{
+  #  name = "fix-glibc-2.33";
+  #  sha256 = "PzxqtFyLy9KF1eA9AAKg1tu+ggRdvu7leuvXifayIcc=";
+  #  url = "https://github.com/klee/klee/pull/1385.patch";
+  #}
+</code>
+systemd hardening
+<code>
+{
+  ...
+}:
+let
+  defaultServiceConfig = {
+    User = "openproject";
+    Group = "openproject";
+    WorkingDirectory = "${pkgs.openproject}";
+    StateDirectory = cfg.stateDir;
+    # Service hardening
+    ReadWritePaths = [ cfg.stateDir ];
+    CacheDirectory = "openproject";
+    AmbientCapabilities = "";
+    CapabilityBoundingSet = "";
+    # ProtectClock adds DeviceAllow=char-rtc r
+    DeviceAllow = "";
+    DevicePolicy = "closed";
+    LockPersonality = true;
+    # Loosening setting, required by Ruby daemon
+    MemoryDenyWriteExecute = false;
+    NoNewPrivileges = true;
+    RemoveIPC = true;
+    PrivateDevices = true;
+    PrivateMounts = true;
+    PrivateTmp = true;
+    PrivateUsers = true;
+    ProtectClock = true;
+    ProtectHome = true;
+    ProtectHostname = true;
+    ProtectSystem = "strict";
+    ProtectControlGroups = true;
+    ProtectKernelLogs = true;
+    ProtectKernelModules = true;
+    ProtectKernelTunables = true;
+    ProtectProc = "invisible";
+    ProcSubset = "pid";
+    RestrictAddressFamilies = [
+      "AF_UNIX"
+      "AF_INET"
+      "AF_INET6"
+    ];
+    RestrictNamespaces = true;
+    RestrictRealtime = true;
+    RestrictSUIDSGID = true;
+    SystemCallArchitectures = "native";
+    SystemCallFilter = [
+      "@system-service"
+      # Loosening setting, required by Ruby daemon
+      #"~@privileged @setuid @keyring"
+    ];
+    UMask = "0077";
+  };
+in
+{
+  [...]
+    systemd.services."openproject-seeder" = {
+      serviceConfig = defaultServiceConfig // {
+</code>
+python modules hooks
+<code>
+nativeCheckInputs = [
+  pytestCheckHook
+  writableTmpDirAsHomeHook
+]
+</code>
+update script git updater
+<code>
+passthru.updateScript = gitUpdater {
+  ignoredVersions = "_rc";
+};
+</code>
+debuggig, run commands inside derivation
+<code>
+nix develop -f . stamp -c bash -c 'pkg-config --cflags --print-errors gio-unix-2.0'
+nix develop -f . stamp -c bash -c 'pkg-config --variable=includedir gio-unix-2.0'
+nix develop -f . stamp -c bash -c 'pkg-config --modversion gio-unix-2.0; pkg-config --path gio-unix-2.0 2>/dev/null || pkg-config --debug gio-unix-2.0 2>&1 | grep -i "gio-unix-2.0.pc"'
+.88.1
+</code>
 ===== tools =====
@@ Line 1631: / Line 1729: @@
 nixpkgs.overlays = [
   (self: super: {
     python3 = super.python3.override {
       packageOverrides = python-final: python-prev: {
@@ Line 1639: / Line 1738: @@
         });
       };
     };
+    bcachefs-tools = super.bcachefs-tools.overrideAttrs (final: oldAttrs: {
+      version = "1.38.7-unstable-2026-07-02";
+      src = super.fetchFromGitHub {
+        owner = "koverstreet";
+        repo = "bcachefs-tools";
+        rev = "7f0cce3cf4d5241569674bbc92af8a75e78ade75";
+        hash = "sha256-RXerSh8gRyODncfLZsSz+5Foi6JShUI3dO1zZT/NMZU=";
+      };
+      cargoHash = null;
+      cargoDeps = pkgs.rustPlatform.fetchCargoVendor {
+        src = final.src;
+        hash = "sha256-DV0YPv+WtqtbTjwDdqj1r1jySVM8mgkscj+8NqVum2M=";
+      };
+    });
   })
 ];
@@ Line 1815: / Line 1930: @@
 ===== postmarketOS =====
+====== personal setup ======
+  * enable beacondb in geoclue conf
+====== notes ======
 update checksum
 <code bash>
@@ Line 1949: / Line 2068: @@
 import dump
 <code bash>
-mysql -u root nextcloud < mydump.sql
+mariadb -u root nextcloud < mydump.sql
 </code>
@@ Line 2017: / Line 2136: @@
 multi-cursor selection mode
 <code>
 Normal mode -> V (visual mode) -> Shift+C (multiple times) -> i (insert mode) -> Enter something
 ESC -> ,
+</code>
+sort
+<code>
+- select multiple lines
+- press Alt-S
+- type ":sort"
 </code>