!RROtHmAaQIkiJzJZZE:nixos.org

NixOS Infrastructure

376 Members
Next Infra call: 2024-07-11, 18:00 CEST (UTC+2) | Infra operational issues backlog: https://github.com/orgs/NixOS/projects/52 | See #infra-alerts:nixos.org for real time alerts from Prometheus.113 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
7 Oct 2025
@joerg:thalheim.ioMic92nixos already seems to be used as a name, we got nixos-marketing?08:13:24
@tgerbet:matrix.orgtgerbetI have the control of the nixos and nixpkgs orgs on npmjs.com due to some security incident handling in the past (someone had reserved yarn2nix name which could have lead to some dependency confusion...) I fine with adding members of a team to it and dropping my access afterwards09:46:56
@tgerbet:matrix.orgtgerbet* I have the control of the nixos and nixpkgs orgs on npmjs.com due to some security incident handling in the past (someone had reserved yarn2nix name which could have lead to some dependency confusion...) I'm fine with adding members of a team to it and dropping my access afterwards10:11:46
@hexa:lossy.networkhexa (signing key rotation when) djacu: What is the idea behind infra managing that account? 11:42:38
@hexa:lossy.networkhexa (signing key rotation when)not that I'd be opposed, just wondering11:42:48
@djacu:matrix.orgdjacu
In reply to @hexa:lossy.network
not that I'd be opposed, just wondering

Honestly I don't know what the process is for creating accounts. I thought this was an Infrastructure Team responsibility since you all provided the Vault Warden account.

Could the Marketing Team create the account, add it to the vault, and if other teams need access in the future then it gets shared?

15:38:41
@hexa:lossy.networkhexa (signing key rotation when)yep15:38:56
@djacu:matrix.orgdjacu
In reply to @tgerbet:matrix.org

I have the control of the nixos and nixpkgs orgs on npmjs.com due to some security incident handling in the past (someone had reserved yarn2nix name which could have lead to some dependency confusion...)

I'm fine with adding members of a team to it and dropping my access afterwards

That last part was more hypothetical for the future accounts. This sounds like the way to go. @tgerbet:matrix.org: I'll ask @avocadoom to reach out and work with you to do the hand off
15:42:10
@zimbatm:numtide.comJonas ChevalierThe most important thing after adding shared secrets to Vault is to document who owns what in https://github.com/nixos/org . If you don't find the right place, the structure needs to be expanded.16:03:42
@zimbatm:numtide.comJonas ChevalierThat way we can know who to talk to16:04:26
@blastboomstrice:4d2.org@blastboomstrice:4d2.org joined the room.18:54:48
@blastboomstrice:4d2.org@blastboomstrice:4d2.orgHi (I thought I was here, did I leave?😄)18:55:46
@blastboomstrice:4d2.org@blastboomstrice:4d2.orgOk I think I was given two links with info about the structure of hydra and they probably were sent here, but whatever, cant find them and already found one in my bookmarks, bye:)19:09:43
@blastboomstrice:4d2.org@blastboomstrice:4d2.org left the room.19:09:51

Show newer messages


Back to Room ListRoom Version: 6