| 26 Apr 2023 |
 graham | https://md.darmstadt.ccc.de/KhuRgW6qRSWSZAbNlKWZBQ | 14:05:14 |
 abathur | https://github.com/NixOS/nix/issues/8250 and https://github.com/DeterminateSystems/nix-installer/issues/370 | 14:11:22 |
| graham | ❯ curl -Ikvvv https://untrusted-root.badssl.com/
* Trying 104.154.89.105:443...
* Connected to untrusted-root.badssl.com (104.154.89.105) port 443 (#0)
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN: server accepted http/1.1
* Server certificate:
* subject: C=US; ST=California; L=San Francisco; O=BadSSL; CN=*.badssl.com
* start date: Apr 24 00:01:45 2023 GMT
* expire date: Apr 23 00:01:45 2025 GMT
* issuer: C=US; ST=California; L=San Francisco; O=BadSSL; CN=BadSSL Untrusted Root Certificate Authority
* SSL certificate verify result: self-signed certificate in certificate chain (19), continuing anyway.
* using HTTP/1.1
> HEAD / HTTP/1.1
> Host: untrusted-root.badssl.com
> User-Agent: curl/8.0.1
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Server: nginx/1.10.3 (Ubuntu)
Server: nginx/1.10.3 (Ubuntu)
< Date: Wed, 26 Apr 2023 14:18:04 GMT
Date: Wed, 26 Apr 2023 14:18:04 GMT
< Content-Type: text/html
Content-Type: text/html
< Content-Length: 600
Content-Length: 600
< Last-Modified: Mon, 24 Apr 2023 00:02:00 GMT
Last-Modified: Mon, 24 Apr 2023 00:02:00 GMT
< Connection: keep-alive
Connection: keep-alive
< ETag: "6445c6f8-258"
ETag: "6445c6f8-258"
< Cache-Control: no-store
Cache-Control: no-store
< Accept-Ranges: bytes
Accept-Ranges: bytes
<
* Connection #0 to host untrusted-root.badssl.com left intact
| 14:18:16 |
| graham | not so useful:
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
* subject: CN=*.google.com
* start date: Apr 3 08:17:58 2023 GMT
* expire date: Jun 26 08:17:57 2023 GMT
* issuer: C=US; O=Google Trust Services LLC; CN=GTS CA 1C3
* SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
* using HTTP/2
* h2h3 [:method: HEAD]
| 14:19:13 |
| graham | openssl s_client -showcerts -servername untrusted-root.badssl.com -connect untrusted-root.badssl.com:443
| 14:21:36 |
| graham | * echo | openssl s_client -showcerts -servername untrusted-root.badssl.com -connect untrusted-root.badssl.com:443
| 14:23:07 |
| graham | * echo | openssl s_client -showcerts -servername nixos.org -connect nixos.org8:443
| 14:23:16 |
| graham | * echo | openssl s_client -showcerts -servername nixos.org -connect nixos.org:443
| 14:23:19 |
| graham | https://github.com/DeterminateSystems/nix-installer/pull/428 | 14:27:59 |
| abathur | https://github.com/NixOS/nix/commit/2384d360839e27edb3c928da858ec911415c8b4d | 14:34:03 |
 Eelco | The default profile used by nix profile is $HOME/.nix-profile,
which, if it does not exist, is created as a symlink to
/nix/var/nix/profiles/default if Nix is invoked by the
root user, or ${XDG_STATE_HOME-$HOME/.local/state}/nix/profiles/profile otherwise. | 14:34:21 |
| 27 Apr 2023 |
| abathur | user claiming to have a post-install connectivity problem responded https://github.com/NixOS/nix/issues/8250#issuecomment-1525872514 | 16:17:15 |
|  @sandro:supersandro.de left the room. | 16:26:23 |
| 28 Apr 2023 |
| abathur | grahamAna They updated again with output after installing Nix https://github.com/NixOS/nix/issues/8250#issuecomment-1526911700 | 13:07:53 |
| 1 May 2023 |
|  raitobezarius joined the room. | 19:26:34 |
|  teto joined the room. | 19:26:58 |
|  hexa joined the room. | 19:29:24 |
| raitobezarius | Hello there, I stumbled recently on https://github.com/DeterminateSystems/nix-installer/pull/304 which seems to indicate that the DetSys's Nix installer does not support channels anymore, if I am not wrong, this installer is supposed to become the default for the official Nix installer. Is there a plan to remove channels support by default at installation time in the future?
| 19:30:30 |
| raitobezarius | * Hello there, I stumbled recently on https://github.com/DeterminateSystems/nix-installer/pull/304 which seems to indicate that the DetSys's Nix installer does not support channels anymore, if I am not wrong, this installer is supposed to become the default for the official Nix installer. Is there a plan to remove channels support by default at installation time in the future in the official installer? | 19:31:00 |
| raitobezarius | In reply to @graham:grahamc.com
https://md.darmstadt.ccc.de/KhuRgW6qRSWSZAbNlKWZBQ I just read this and it mentions the channel thing | 19:34:33 |
| graham | The Nix Team said they’d be interested in the project using the determinate nix installer as a base to start with upstream. If that happens, probably would require implementing some code to change the determinate nix installer to match what they want | 19:35:58 |
| graham | I’d be surprised if the determinate nix installer was adopted exactly as is, and I don’t this this wg has the authority to choose that stuff | 19:36:50 |
| raitobezarius | Got it, thank you for the clarification! | 19:44:37 |
| graham | Yep! | 19:45:48 |
|  Julien joined the room. | 20:00:29 |
| 2 May 2023 |
 Matthew Kenigsberg | In reply to @graham:grahamc.com
https://md.darmstadt.ccc.de/KhuRgW6qRSWSZAbNlKWZBQ Sorry I missed last week - reviewed the notes and it mentions abathur might create the fork? I'm happy to pitch in some with maintenance as well | 22:16:16 |
| abathur | It was more of an open question about the scope of work we're talking about to "pull" the detsys installer towards nix | 22:53:11 |
| abathur | I was the only non-detsys person in attendance, so I framed the work in terms of whether it was something I could do in 15 minutes or whether we'd need substantive fresh work | 22:54:15 |
| abathur | Iirc the answer is roughly that, if we were willing to take all of the "opinions" as-is it might not be much work, but that we'll need fresh work to do things like support channels, which the detsys installer doesn't set up | 22:56:24 |
| abathur | I have a mostly full plate atm, but am hoping that it'll be easier to drum up interest in filling these gaps if we have a framework and firm decisions from the nix team on what features stay/go | 22:59:26 |
