| 14 May 2025 |
hexa | https://github.com/NixOS/infra/pull/683 | 16:46:36 |
infinisil | Very nice! | 16:57:37 |
Alyssa Ross | The infra team is doing a great thing for improving Nixpkgs developers' endpoint security | 17:04:52 |
| 15 May 2025 |
leona | Hi, could someone create the release-25.05 jobsets in hydra in the next 1.5 days please :) docs: https://nixos.github.io/release-wiki/Branch-Off.html#jobset-creation | 06:48:33 |
Vladimír Čunát | I will be able to. They'll create a huge amount of (cached) jobs, so I'd rather do it after the upcoming staging-next merge settles. | 06:51:28 |
Vladimír Čunát | * I will be able to. They'll create a huge amount of (cached) jobs, so I'd rather do it after the upcoming staging-next merge settles. (except for nixos-25.05-small perhaps) | 06:51:45 |
leona | that seems like a good idea | 06:52:24 |
leona | thank you | 06:52:26 |
uep | aside: is the pinned message about anubis and hydra still true / needed? I know it was rolled back, is it intended to be reinstated whenever the issue is resolved? | 07:37:39 |
Vladimír Čunát | I believe it is the intention to bring it back. See https://github.com/NixOS/infra/pull/665 | 07:39:16 |
Vladimír Čunát | But at this point the pinned message seemed confusing to me. | 07:40:37 |
tgerbet | It should be doable to restore the Anubis protection by extending Anubis default policy to allow queries with the header x-nf-request-id (Netlify sets it) and/or by always allowing the subset of URLs nix.dev needs | 08:32:43 |
| man-u joined the room. | 08:55:34 |
hexa | infra call in 18 minutes | 15:42:15 |
hexa | https://jitsi.lassul.us/nixos-infra | 15:57:15 |
hexa | Mic92, Arian, Jeremy Fleischman (jfly)? | 16:06:19 |
Mic92 | hexa (signing key rotation when): you are muted on purpose? | 16:08:56 |
hexa | no? | 16:09:47 |
Jeremy Fleischman (jfly) | In reply to @hexa:lossy.network Mic92, Arian, Jeremy Fleischman (jfly)? Urg, sorry. I forgot to set an alarm and just woke up | 16:44:15 |