| 8 Apr 2025 |
kalessin | * It's one representation, e.g. in clan vars generation is done on the developer machine, ahead of deploying to a nixos host. | 18:28:43 |
kalessin | Like the vars definitions get evaluated, the result is exported, something does the prompting, and interacts with some secrets backend, then that something uploads some result/generated vars to the nixos host, or a key to decrypt them (if the result/generated vars are uploaded through the nix store), to the nixos host, and finally when you get to nixos-rebuild switch on your nixos host, your secrets get "activated" by something else that matches how something laid out the result/generated vars. | 18:34:43 |
kalessin | hope that helps 🥵 | 18:35:25 |
kalessin | My effort here, is to figure out how the vars interfaces could be used in different systems: clan, nixops4, …, in order to help the vars PR progress, and figure out where things intersect and overlap, to see if some of the work can be shared across different systems. | 18:42:38 |
| @bradlugo:matrix.org left the room. | 23:03:07 |
| 9 Apr 2025 |
| @earthwalker31:tchncs.de left the room. | 12:59:37 |