My linux config and rc files https://git.sommerfeld.dev/dotfiles/atom/dot_config/nvim/lua/plugins?h=master 2026-07-02T10:35:35Z 2026-07-02T10:35:35Z sommerfeld sommerfeld@sommerfeld.dev 2026-07-02T10:35:35Z urn:sha1:f0c626059451e1f8621600e610240739d5633560 2026-06-19T16:57:23Z sommerfeld sommerfeld@sommerfeld.dev 2026-06-19T16:57:23Z urn:sha1:cf5a2f46f0167c8495d28de5b1364c8bc460b6d0 Move VM dotfile deployment out of Home Manager and into chezmoi with a machineRole guard. Add VM recipes for applying chezmoi state and restarting the Nix GnuPG agent. Make host-only hooks no-op on the VM and render container storage per role. 2026-06-19T15:35:57Z sommerfeld sommerfeld@sommerfeld.dev 2026-06-19T15:35:57Z urn:sha1:f484c7be7e72b18b337c57e6427bc4eaed5b3d13 2026-06-18T11:06:20Z sommerfeld sommerfeld@sommerfeld.dev 2026-06-18T11:06:20Z urn:sha1:511793cba498f52b0f92904965ea5c9afa8b6ea4 2026-05-20T12:56:10Z sommerfeld sommerfeld@sommerfeld.dev 2026-05-20T12:56:10Z urn:sha1:3bc07df183cba19a9824ccf074041347a8bd1490 nodePackages was removed wholesale from nixpkgs; everything that lived under it must be referenced via its top-level name or dropped. - prettier: moved nodePackages.prettier -> prettier (top-level alias). - jsonlint: not available at top level. Dropped from nix/common.nix AND from the nvim-lint and conform-nvim configs in dot_config/nvim/lua/plugins/lsp.lua. jsonls already provides schema-aware diagnostics; jq still handles formatting. The jsonlint redundancy is acceptable to lose. - github-copilot-cli (1.0.40 in nixpkgs): buildNpmPackage derivation doesn't redirect HOME during npm postinstall, so it fails with EACCES on /var/empty/.cache on Determinate nix. Removed; install manually from https://github.com/github/copilot-cli into /usr/local/bin/ as before (current host already has it there). 2026-05-20T12:56:10Z sommerfeld sommerfeld@sommerfeld.dev 2026-05-20T12:56:10Z urn:sha1:40d8fd056bef4526acbe38a9b6ff98fc0c3fd8c9 - gh-actions-language-server is an npm package (lttb/gh-actions-language-server) not packaged in nixpkgs. Removed from nix/common.nix and from the vim.lsp.enable list in dot_config/nvim/lua/plugins/lsp.lua. Restore later via a per-project flake.nix if working on a workflows-heavy repo. - just runs recipes with a sanitized env where $USER may be unset; home-manager's activation script dereferences it unconditionally and fails with 'USER: unbound variable'. Export USER (and HOME for symmetry) at the top of the nix-switch recipe. 2026-05-20T12:56:09Z sommerfeld sommerfeld@sommerfeld.dev 2026-05-20T12:56:09Z urn:sha1:2d9ed00606be2f8c63aba719d00adf70fe6d4393 LSPs, formatters, linters, and the lldb-dap debugger now come from ~/.nix-profile/bin (see nix/common.nix). lspconfig keeps the default configs; we just opt-in via vim.lsp.enable() with an explicit list. Changes: - dot_config/nvim/lua/plugins/lsp.lua: drop mason*, replace mason-lspconfig handler with explicit vim.lsp.enable({...}); drop groovy/jenkins formatters and lint entries; drop systemd lint (nginx + groovy + systemdlint tools dropped per plan). - dot_config/nvim/lua/plugins/debug.lua: drop mason-nvim-dap; drop codelldb adapter; switch dap.configurations.cpp to type='lldb' (lldb-dap is the upstream successor, ships with pkgs.lldb). - dot_config/nvim/init.lua: remove mason.nvim, mason-lspconfig.nvim, mason-tool-installer.nvim, mason-nvim-dap.nvim from vim.pack.add. - dot_config/nvim/lua/config/update.lua: remove MasonToolsUpdateSync. - dot_config/zsh/dot_zshrc: flip plugin source order — prefer ~/.nix-profile/share, fall back to /usr/share/zsh (was the other way around). - nix/bootstrap.sh: drop the uv-python3.11 step (no longer needed once Mason no longer source-builds Python LSPs on Ubuntu 20.04). Phase 6 of the nix-on-host migration plan. 2026-05-14T11:29:15Z sommerfeld sommerfeld@sommerfeld.dev 2026-05-14T11:29:15Z urn:sha1:8e5f5efc70680128545d26864263e5628fc74276 Mason's pypi distribution of basedpyright pulls nodejs-wheel-binaries which only ships manylinux_2_28 Linux wheels. uv's python-build- standalone interpreter is tagged manylinux2014 (glibc 2.17 for max portability) and rejects those wheels; pip then falls back to building Node 24 from source, which fails on Ubuntu 20.04's gcc 9.4 (needs gcc >=10 for -std=gnu++20). Provide basedpyright via the system package manager instead: - pacman on Arch (added to meta/base.txt) - pkgs.basedpyright on the VM (added to remote-dev/home.nix) Drop it from mason-tool-installer's ensure_installed; lspconfig picks it up from PATH. Document the exception in remote-dev/README.md. 2026-05-14T10:43:18Z sommerfeld sommerfeld@sommerfeld.dev 2026-05-14T10:43:18Z urn:sha1:e564f01583cbc9e9182bfe3ceca734e8680d8d2f User policy: Mason should install everything it lists regardless of host-provided versions. Revert the PATH-filtering wrapper around ensure_installed (b2f129e) — back to a plain table literal. For shellharden specifically, Mason's only install source is `cargo install`. The Arch host has cargo via base-devel/rustup; the VM previously didn't, so Mason errored "ENOENT cargo". Add `cargo` and `rustc` to the remote-dev nix profile so Mason can build it on the VM too. Drop the shellharden package from home.nix — Mason owns it now, no more provider competition with the nix-profile binary. 2026-05-14T10:43:18Z sommerfeld sommerfeld@sommerfeld.dev 2026-05-14T10:43:18Z urn:sha1:719d4c5518bda64bd0f8ab8b20d9cb2fe84b5666 Mason's installer tries one source per package. For tools that we already provide via the system package manager (Arch pkgs on the host) or nix-profile (on the remote-dev VM), Mason will keep trying to (re-)install via cargo/pip/etc. and report failures — but conform.nvim/nvim-lint resolve their binary from PATH anyway, so the Mason install is redundant. Filter ensure_installed at startup against vim.fn.executable(). Keeps behaviour identical on a fresh host (Mason still pulls everything), but silences spurious failures for tools that the user has chosen to provide system-wide (shellharden via nix-profile being the immediate case).