| 31 Oct 2023 |
 atemu12 | Don't think that's easily accessible but the data is there | 13:35:09 |
 raitobezarius | Repology gives direct access to their PostgreSQL | 13:39:25 |
| raitobezarius | They're excellent at data availability | 13:39:34 |
| raitobezarius | * They're excellent at data accessibility | 13:39:39 |
 toonn | I wish their RSS feeds would work though : s | 13:42:53 |
 Rick (Mindavi) | I'd contribute hashes to a database if there was one and it was easy enough to setup. I build quite some stuff regularly | 14:47:12 |
|  @cifre:matrix.org left the room. | 17:18:46 |
|  @jgarte:matrix.org joined the room. | 18:12:20 |
 Foxboron | fwiw, I think hosting a transparency log for this wouldn't be a lot of work | 20:42:29 |
| Foxboron | The serverless logs (used by LVFS as an example) is not a own project; https://github.com/transparency-dev/serverless-log | 20:42:58 |
| 1 Nov 2023 |
 adisbladis | In reply to @raitobezarius:matrix.org
I think it is unreasonable to pursue Trustix without (a) funding (b) dedicated human resources on it Trustix still has NLNet funding, and there is o | 05:16:37 |
| adisbladis | In reply to @raitobezarius:matrix.org
I think it is unreasonable to pursue Trustix without (a) funding (b) dedicated human resources on it * Trustix still has NLNet funding, and there is earmarked funds to work on an official deployment to gather hashes and such | 05:17:08 |
| adisbladis | Regarding human resources, I haven't been able to work on it for some time for reasons I don't really want to discuss in a 100% public channel. I'm getting back into it. | 05:18:16 |
| adisbladis | I'm going to need help with this, and community backing | 05:21:53 |
| raitobezarius | That's great news | 10:28:14 |
| raitobezarius | In reply to @adis:blad.is
I'm going to need help with this, and community backing Could you share with us what are your broad plans for the next months and where the community could help you? | 10:28:37 |
|  @cafkafk:gitter.im left the room. | 10:41:37 |
 Pol | In reply to @drupol:matrix.org
=> PR is up at https://github.com/NixOS/nixpkgs/pull/263993 , please review raboof: I merged it, let me know if there's something else to change/add. Hope the event meetup is going fine! | 11:30:45 |
| Pol | I wish I could be there... | 11:31:09 |
|  @zacchiro:matrix.org joined the room. | 17:32:08 |
| @zacchiro:matrix.org left the room. | 17:33:13 |
|  Ramses 🇵🇸 changed their display name from Ramses to Ramses 🇵🇸. | 19:58:25 |
| 2 Nov 2023 |
|  @watermark:flip.earth joined the room. | 09:24:51 |
|  NixOS Moderation Bot banned @watermark:flip.earth (<no reason supplied>). | 09:24:53 |
|  eva changed their profile picture. | 20:09:30 |
| 3 Nov 2023 |
|  mib 🥐 changed their profile picture. | 12:35:19 |
| 5 Nov 2023 |
|  @atka:matrix.org joined the room. | 01:10:42 |
|  @andreas:schildbach.de joined the room. | 12:41:33 |
| 6 Nov 2023 |
| adisbladis | In reply to @raitobezarius:matrix.org
Could you share with us what are your broad plans for the next months and where the community could help you? In the immediate term I've been working on (and will be for the next few weeks):
- Bringing dependencies up to date
- Fixing bugs
- Docs
- General polish & getting started improvements
Barring bugs & visual improvements (of both there are a lot to fix) I consider these things complete https://github.com/nix-community/trustix/tree/f168381d96626288e3e90da11356cdc778b622f0/packages :
- Build logs
- All the merkle tree bits
- Post build machinery
- Reproducibility tracker (both backend & webui)
- Binary cache proxy doing distributed verification
Once things are in a bit better shape (and here is where the need for help really comes in):
https://github.com/nix-community/trustix/issues?q=is%3Aopen+is%3Aissue+milestone%3A%222024+Q1%22
I'm tagging issues so people can figure out where to start looking to help:
https://github.com/nix-community/trustix/issues?q=is%3Aissue+is%3Aopen+label%3A%22help+wanted%22
https://github.com/nix-community/trustix/issues?q=is%3Aissue+is%3Aopen+label%3A%22good+first+issue%22
I will shout out a little bit later when I feel like things are in a better spot. In the mean time these are things to noodle on:
-
New website & overall designs for that and reproducibility tracker
This is something that has funding & I absolutely suck at. If you want to work on this there is funding. Please reach out.
-
Real world testing on nix-community & cache.nixos.org
What's a good roadmap? Which stakeholders needs to be involved?
| 08:59:44 |
| adisbladis | I can't stress enough: If either you or someone you know is a good web developer that's sorely needed. | 09:04:52 |
