| 10 Feb 2026 |
 Bot_wxt1221 | oh really stupid | 15:03:45 |
 hexa (signing key rotation when) | #NixOS Wiki fwiw | 15:06:37 |
| 11 Feb 2026 |
| hexa (signing key rotation when) | we can allocate a dedicated machine for the security tracker, but you won't be able to manage it | 00:20:06 |
| hexa (signing key rotation when) | access to robot cannot be delegated | 00:20:17 |
| hexa (signing key rotation when) | if you want a reset or remote kvm access you need to go through the infra-build team | 00:20:49 |
 Tom | you can setup per machine admin robot credentials for dedicated machines. That at least gets you the following tabs: | 00:51:32 |
| Tom | 
Download image.png | 00:51:49 |
| Tom | but yeah, no kvm console ordering or contatct to support | 00:51:56 |
| hexa (signing key rotation when) | yeah, fairly pointless | 00:52:34 |
| hexa (signing key rotation when) | not worth the hassle to setup more credentials | 00:53:12 |
| Tom | reset and rescue can be helpful. You can reset a machine and then take a look via rescue, but yeah, it's not much | 00:54:33 |
| Tom | via rescue mode and then kexec you can even get a nixos running :D | 00:59:46 |
 lennart | you may add additional mail addresses to send the KVM login details to, when opening the ticket.
at work we get all KVM mails (even without additional notes in the ticket) to multiple addresses, would have to take a look where that setting was.
but yea not a perfect solution … | 06:06:53 |
|  zowoq joined the room. | 07:44:55 |
| Tom | You can AFAIK add multiple Main adress (EN) / Kontakt-E-Mail (DE) to the account. That hoewer means ALL E-Mails (exept for Invoices, that's a seperat setting) are sent to those adresses. Not something which would be helpful or desired here IMHO. | 08:22:52 |
 yorik.sar | With NixOS you can easily boot into older generation via rescue or even rebuild the whole system from scratch. I wouldn’t say that’s not much. I found this more than enough for managing internal shared machines. | 09:34:03 |
| hexa (signing key rotation when) | yes, but you'd need a remote kvm to control the bootloader | 09:34:44 |
| hexa (signing key rotation when) | which you can't order with a limited account | 09:35:17 |
