!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

116 Members
Another day, another cert renewal50 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
3 Jun 2024
@stephank:stephank.nlStéphan Now that I think about it, maybe a simple -e or -d check won't work because the $newHash directory will always be created via BindPaths? 08:51:01
@stephank:stephank.nlStéphanLooks like it's always created: https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#BindPaths=08:51:59
@stephank:stephank.nlStéphanOh wait, the fixperms / migration service doesn't use BindPaths. So what I cooked up there may work.08:55:41
@arianvp:matrix.orgArianWe have quite an extensive NixOS test which we could change. But doing NixOS tests for "transitions" is always a bit tricky 09:22:26
@arianvp:matrix.orgArian Stéphan: dont this based on stateVersion wont work 09:24:03
@arianvp:matrix.orgArian * Stéphan: doing this based on stateVersion wont work I think 09:24:23
@arianvp:matrix.orgArianah no nvm forget what I said09:26:04
@arianvp:matrix.orgArianHmm how do we handle people who rollback boot into a 23.11 configuration ? :/ 09:29:01
@arianvp:matrix.orgArianmaybe we should symlink or copy the directory instead of moving? idk. Maybe it's not worth it supporting rollbacks. Just thinking out loud of another failure mode here09:29:39
@stephank:stephank.nlStéphanI like that idea, but no idea if a symlink works09:31:44

Show newer messages


Back to Room ListRoom Version: 6