| 13 Nov 2021 |
 @grahamc:nixos.org | baloo: do you have an RSA key? | 18:02:59 |
 baloo | https://github.com/baloo.keys | 18:03:20 |
| @grahamc:nixos.org | any preference? | 18:03:33 |
| baloo | the second one | 18:03:45 |
| @grahamc:nixos.org | save this as id_rsa-cert.pub next to that key's id_rsa file:
ssh-rsa-cert-v01@openssh.com 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
| 18:05:18 |
| baloo | hu, ha | 18:05:35 |
| baloo | no, that wont work :x | 18:05:42 |
| baloo | all those keys are yubikey piv backed | 18:05:55 |
| @grahamc:nixos.org | womp womp | 18:05:59 |
| baloo | I haven't figured out how to make ssh-certificates work with it, yet | 18:06:17 |
| @grahamc:nixos.org | make an id_rsa and send me the public half | 18:06:27 |
| baloo | ssh-rsa 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 baloo@vic
| 18:07:27 |
| @grahamc:nixos.org | ssh-rsa-cert-v01@openssh.com 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
| 18:08:05 |
| baloo | I need to work on yubikey-backed ssh certificates, my current best guess is that I need to reimplement an ssh-agent 😬 | 18:08:10 |
| baloo | because only privileged users can override the hashed-mirror settings! | 21:44:30 |
| baloo | https://github.com/NixOS/nixpkgs/pull/145800 thankfully this is not a critical dependency that gcc, and everyone's buildchain depends on. so that's cool | 22:00:09 |
| baloo | * https://github.com/NixOS/nixpkgs/pull/145800 thankfully this is not a critical dependency that gcc depends on, and everyone's buildchain depends on. so that's cool | 22:00:30 |
| 14 Nov 2021 |
| baloo | so back to green on monday's build? | 03:57:52 |
| baloo | libuv? | 18:23:07 |
| 15 Nov 2021 |
| baloo | 1531 out of 1531 (100.00%) paths in the minimal installation image are reproducible!
Generated at 2021-11-15 09:32:22.171593516 UTC | 17:09:55 |
 toonn | Pretty cool. Is the next step basing stdenvs on Mes? : ) | 17:11:10 |
| baloo | mes? | 17:11:21 |
 Linux Hackerman | guix's minimal bootstrap effort | 17:11:40 |
| baloo | ha, yeah that would be cool | 17:11:53 |
 moritz.hedtke | How reproducible is e.g. the KDE installation image? Is there any data on that? | 17:31:13 |
 @rick:matrix.ciphernetics.nl | Nope | 17:54:46 |
| @rick:matrix.ciphernetics.nl | (i think?) | 17:54:55 |
| @rick:matrix.ciphernetics.nl | There was a job for the gnome_iso, but it kept running out of space | 17:55:16 |
| 16 Nov 2021 |
 siraben | In reply to @toonn:matrix.org
Pretty cool. Is the next step basing stdenvs on Mes? : ) Yes please 🙏 | 02:45:51 |
| siraben | I'd love to look into that if anyone would like to collaborate, especially if they're familiar with how stdenv works | 02:46:30 |
