!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

104 Members
Another day, another cert renewal43 Servers

Load older messages


SenderMessageTime
22 Feb 2025
@arianvp:matrix.orgArianThis is the life of open source. Everything you write comes with NO WARRANTY WHATSOEVER. Happy we have a way forward. But no pressure21:59:27
@m1cr0man:m1cr0man.comm1cr0manOh.. I just realised that there were some unloaded comments left on the test rewrite PR. Solving them now22:29:52
@thinkchaos:matrix.orgThinkChaosYeah I was about to say there's a potential race we might want to look at at the same time22:31:16
@thinkchaos:matrix.orgThinkChaosFor https://github.com/NixOS/nixpkgs/pull/355087 it's looks ready to me too22:31:34
@thinkchaos:matrix.orgThinkChaos* For https://github.com/NixOS/nixpkgs/pull/355087 it looks ready to me too22:31:41
@thinkchaos:matrix.orgThinkChaosI'm looking into the ACME account registration as part of the setup, and did the ACME change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires the internet, and being offline will block the self signed services from starting I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet22:35:31
@thinkchaos:matrix.orgThinkChaos* I'm looking into the ACME account registration as part of the setup, and did the ACME change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires an internet connection, and being offline will block the self signed services from starting since they depend on the setup. I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet22:36:14
@thinkchaos:matrix.orgThinkChaos* I'm looking into the ACME account registration as part of the setup, and did the ACME change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires an internet connection, and being offline will block the self signed services from starting since they depend on the setup. I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet, need to see if it's still an improvement over the locking.22:37:03
@thinkchaos:matrix.orgThinkChaos* I'm looking into the ACME account registration as part of the setup, and did the ACME change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires an internet connection, and being offline will block the self signed services from starting since they depend on the setup. I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet, need to see if it's still an improvement over the leader/follower certs.22:37:48
@thinkchaos:matrix.orgThinkChaos* I'm looking into the ACME account registration as part of the setup, and did the lego change locally, the part I'm unsure about and need to investigate more is that creating the account as part of the setup service means the setup requires an internet connection, and being offline will block the self signed services from starting since they depend on the setup. I think we can have a service per account instead of relying on the single setup one, but it's bringing back more complexity, so not sure how I feel about it yet, need to see if it's still an improvement over the leader/follower certs.22:41:49
@m1cr0man:m1cr0man.comm1cr0manAh yeah that's frustrating. It would indeed mean more services, and additionally slower initial renewals (since you would have to get an account then renew, whereas the current situation would create account + renew in one lego call).23:08:46
@m1cr0man:m1cr0man.comm1cr0manDid I mess something up trying to test the test suite rewrite PR, or is there actually no x86_64-linux builders available on ofborg right now?23:15:59
23 Feb 2025
@emilazy:matrix.orgemily there are no x86_64-linux builders available on ofborg right now 02:12:26
25 Feb 2025
@k900:0upti.meK900So how are we doing on the test rewrite?10:48:00
@k900:0upti.meK900I just had to bonk it a third time10:48:06
@emilazy:matrix.orgemilyI thought there was a PR up13:32:57
@emilazy:matrix.orgemilyhttps://github.com/NixOS/nixpkgs/pull/37870513:33:10
@thinkchaos:matrix.orgThinkChaosThat PR depends on this one: https://github.com/NixOS/nixpkgs/pull/355087 Both are ready to merge as far as I'm concerned16:22:19
26 Feb 2025
@k900:0upti.meK900Merged those07:29:25
@k900:0upti.meK900OK I'm tilted07:46:15
@k900:0upti.meK9000/507:46:20
@k900:0upti.meK900On the old tests07:46:25
@k900:0upti.meK900I'll just start a new eval with the tests fixed07:46:38
@k900:0upti.meK900Aaand eval failed07:48:17
@k900:0upti.meK900Ugh07:48:19
@k900:0upti.meK900Fixing...07:48:26
@k900:0upti.meK900FIxened07:53:15
@k900:0upti.meK900https://hydra.nixos.org/build/29116330207:58:45
@k900:0upti.meK900First successful test07:58:50
@arianvp:matrix.orgArianExciting 08:30:14

Show newer messages


Back to Room ListRoom Version: 6