| 25 Mar 2023 |
|  rbutani joined the room. | 23:56:08 |
| 29 Mar 2023 |
 @grahamc:nixos.org | @room We have a scheduled meeting in 4 minutes, see y'all soon:
Nix installer workgroup meeting
Wednesday, March 29 · 10:00 – 11:00am
Google Meet joining info
Video call link: https://meet.google.com/dwy-yvjd-zpc
Or dial: (US) +1 470-273-8306 PIN: 426 585 808#
More phone numbers: https://tel.meet/dwy-yvjd-zpc?pin=1450247081293 | 13:57:27 |
| @grahamc:nixos.org | https://md.darmstadt.ccc.de/WUJ_c_o_STGCmoBsq2UYZQ | 14:04:36 |
| 5 Apr 2023 |
|  Redstone joined the room. | 05:51:47 |
| 12 Apr 2023 |
| @grahamc:nixos.org | @room anything on the agenda for the week? If not, I propose we cancel today's? | 13:38:44 |
| @grahamc:nixos.org | (without any replies I'm going to assume we're canceled, but I'm happy to meet if folks have agenda items!) | 13:53:48 |
 Matthew Kenigsberg | Fine by me | 13:55:52 |
 abathur | fine by me as well; might be worth having a way to accrue an agenda beforehand, all I can think of on the spot is that someone's asking for the official installer to follow detsys in not installing channels :) | 13:58:56 |
| @grahamc:nixos.org | good point 😬 | 13:59:16 |
| abathur | but I imagine we're in a bit of a lull until/unless we know if Nix is going to adopt an ~officially-experimental | 13:59:50 |
| Matthew Kenigsberg | The meeting notes for the Nix maintenance team say Nix is going to make it officially experimental | 14:11:33 |
 @theophane:hufschmitt.net | In reply to @matthewkenigsberg:matrix.org
The meeting notes for the Nix maintenance team say Nix is going to make it officially experimental Yes, sorry I didn't come back to you after that. We're willing to try this out, provided someone is willing to do the work of moving/forking it to the NixOS org, making it available from the website, etc (because we don't have the bandwidth to do it ourselves) | 14:41:21 |
| @theophane:hufschmitt.net | Si I think we'll have to discuss a plan together and decide who would do that (or ask for volunteers to help doing it) | 14:42:25 |
| 17 Apr 2023 |
|  GenericNerdyUsername joined the room. | 22:58:31 |
| GenericNerdyUsername | I found an installer related bug a while back, but just remembered that I didnt report it anywhere, it may or may not still exist | 23:01:40 |
| GenericNerdyUsername |
When using nix without internet, it disables substituters, which normally makes sense | 23:01:48 |
| GenericNerdyUsername | But during installs, you have a substituter (the install media) which can be accessed without the internet, which gets disabled anyway | 23:02:01 |
| GenericNerdyUsername | im not really sure where to go from here | 23:02:13 |
| GenericNerdyUsername | i dont even know if the bug is still around | 23:02:19 |
| 20 Apr 2023 |
|  @federicodschonborn:matrix.org changed their display name from Federico Damián Schonborn to Federico Schonborn. | 01:02:32 |
| 26 Apr 2023 |
| @grahamc:nixos.org | oops, sorry I'm late @room -- I'm opening up a room now | 14:02:00 |
| @grahamc:nixos.org | * oops, sorry I'm late @room -- I'm opening up the room now | 14:02:12 |
|  graham joined the room. | 14:04:46 |
| graham | https://md.darmstadt.ccc.de/KhuRgW6qRSWSZAbNlKWZBQ | 14:05:14 |
| abathur | https://github.com/NixOS/nix/issues/8250 and https://github.com/DeterminateSystems/nix-installer/issues/370 | 14:11:22 |
| graham | ❯ curl -Ikvvv https://untrusted-root.badssl.com/
* Trying 104.154.89.105:443...
* Connected to untrusted-root.badssl.com (104.154.89.105) port 443 (#0)
* ALPN: offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
* ALPN: server accepted http/1.1
* Server certificate:
* subject: C=US; ST=California; L=San Francisco; O=BadSSL; CN=*.badssl.com
* start date: Apr 24 00:01:45 2023 GMT
* expire date: Apr 23 00:01:45 2025 GMT
* issuer: C=US; ST=California; L=San Francisco; O=BadSSL; CN=BadSSL Untrusted Root Certificate Authority
* SSL certificate verify result: self-signed certificate in certificate chain (19), continuing anyway.
* using HTTP/1.1
> HEAD / HTTP/1.1
> Host: untrusted-root.badssl.com
> User-Agent: curl/8.0.1
> Accept: */*
>
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Server: nginx/1.10.3 (Ubuntu)
Server: nginx/1.10.3 (Ubuntu)
< Date: Wed, 26 Apr 2023 14:18:04 GMT
Date: Wed, 26 Apr 2023 14:18:04 GMT
< Content-Type: text/html
Content-Type: text/html
< Content-Length: 600
Content-Length: 600
< Last-Modified: Mon, 24 Apr 2023 00:02:00 GMT
Last-Modified: Mon, 24 Apr 2023 00:02:00 GMT
< Connection: keep-alive
Connection: keep-alive
< ETag: "6445c6f8-258"
ETag: "6445c6f8-258"
< Cache-Control: no-store
Cache-Control: no-store
< Accept-Ranges: bytes
Accept-Ranges: bytes
<
* Connection #0 to host untrusted-root.badssl.com left intact
| 14:18:16 |
| graham | not so useful:
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN: server accepted h2
* Server certificate:
* subject: CN=*.google.com
* start date: Apr 3 08:17:58 2023 GMT
* expire date: Jun 26 08:17:57 2023 GMT
* issuer: C=US; O=Google Trust Services LLC; CN=GTS CA 1C3
* SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
* using HTTP/2
* h2h3 [:method: HEAD]
| 14:19:13 |
| graham | openssl s_client -showcerts -servername untrusted-root.badssl.com -connect untrusted-root.badssl.com:443
| 14:21:36 |
| graham | * echo | openssl s_client -showcerts -servername untrusted-root.badssl.com -connect untrusted-root.badssl.com:443
| 14:23:07 |
| graham | * echo | openssl s_client -showcerts -servername nixos.org -connect nixos.org8:443
| 14:23:16 |
