!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

104 Members
Another day, another cert renewal44 Servers

Load older messages


SenderMessageTime
22 Feb 2025
@arianvp:matrix.orgArianThanks so much for working on this btw21:08:23
@m1cr0man:m1cr0man.comm1cr0manWell thank you all for being patient with me 😅 it's been a long time coming, and I've had a lot of stuff going on IRL. It's pained me every time I have heard that the builds have been failing.21:23:32
@m1cr0man:m1cr0man.comm1cr0manThis is fully ready now I believe https://github.com/NixOS/nixpkgs/pull/355087 And the test suite PR should be fully ready once the ofborg tests pass (I want to validate it can still be run on demand).21:36:45
@arianvp:matrix.orgArianThis is the life of open source. Everything you write comes with NO WARRANTY WHATSOEVER. Happy we have a way forward. But no pressure21:59:27
@m1cr0man:m1cr0man.comm1cr0manOh.. I just realised that there were some unloaded comments left on the test rewrite PR. Solving them now22:29:52
@thinkchaos:matrix.orgThinkChaosYeah I was about to say there's a potential race we might want to look at at the same time22:31:16
@thinkchaos:matrix.orgThinkChaosFor https://github.com/NixOS/nixpkgs/pull/355087 it's looks ready to me too22:31:34
@thinkchaos:matrix.orgThinkChaos* For https://github.com/NixOS/nixpkgs/pull/355087 it looks ready to me too22:31:41
@thinkchaos:matrix.orgThinkChaosI'm looking into the ACME account registration as part of the setup, and did the ACME change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires the internet, and being offline will block the self signed services from starting I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet22:35:31
@thinkchaos:matrix.orgThinkChaos* I'm looking into the ACME account registration as part of the setup, and did the ACME change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires an internet connection, and being offline will block the self signed services from starting since they depend on the setup. I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet22:36:14
@thinkchaos:matrix.orgThinkChaos* I'm looking into the ACME account registration as part of the setup, and did the ACME change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires an internet connection, and being offline will block the self signed services from starting since they depend on the setup. I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet, need to see if it's still an improvement over the locking.22:37:03
@thinkchaos:matrix.orgThinkChaos* I'm looking into the ACME account registration as part of the setup, and did the ACME change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires an internet connection, and being offline will block the self signed services from starting since they depend on the setup. I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet, need to see if it's still an improvement over the leader/follower certs.22:37:48
@thinkchaos:matrix.orgThinkChaos* I'm looking into the ACME account registration as part of the setup, and did the lego change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires an internet connection, and being offline will block the self signed services from starting since they depend on the setup. I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet, need to see if it's still an improvement over the leader/follower certs.22:41:49
@m1cr0man:m1cr0man.comm1cr0manAh yeah that's frustrating. It would indeed mean more services, and additionally slower initial renewals (since you would have to get an account then renew, whereas the current situation would create account + renew in one lego call).23:08:46
@m1cr0man:m1cr0man.comm1cr0manDid I mess something up trying to test the test suite rewrite PR, or is there actually no x86_64-linux builders available on ofborg right now?23:15:59
23 Feb 2025
@emilazy:matrix.orgemily there are no x86_64-linux builders available on ofborg right now 02:12:26
25 Feb 2025
@k900:0upti.meK900 ⚡️So how are we doing on the test rewrite?10:48:00
@k900:0upti.meK900 ⚡️I just had to bonk it a third time10:48:06
@emilazy:matrix.orgemilyI thought there was a PR up13:32:57
@emilazy:matrix.orgemilyhttps://github.com/NixOS/nixpkgs/pull/37870513:33:10
@thinkchaos:matrix.orgThinkChaosThat PR depends on this one: https://github.com/NixOS/nixpkgs/pull/355087 Both are ready to merge as far as I'm concerned16:22:19
26 Feb 2025
@k900:0upti.meK900 ⚡️Merged those07:29:25
@k900:0upti.meK900 ⚡️OK I'm tilted07:46:15
@k900:0upti.meK900 ⚡️0/507:46:20
@k900:0upti.meK900 ⚡️On the old tests07:46:25
@k900:0upti.meK900 ⚡️I'll just start a new eval with the tests fixed07:46:38
@k900:0upti.meK900 ⚡️Aaand eval failed07:48:17
@k900:0upti.meK900 ⚡️Ugh07:48:19
@k900:0upti.meK900 ⚡️Fixing...07:48:26
@k900:0upti.meK900 ⚡️FIxened07:53:15

Show newer messages


Back to Room ListRoom Version: 6