| 14 Nov 2025 |
 hexa (signing key rotation when) | love how we're +1502 after staging-next merge, but have 1080 new failing jobs 🙂 | 01:46:45 |
| hexa (signing key rotation when) |
Hydra 0.1.20251106.241ab71 (using nix-2.32.2 and nix-eval-jobs-2.32.1).
| 01:51:07 |
| hexa (signing key rotation when) | 
Download image.png | 04:25:35 |
| hexa (signing key rotation when) | cc Mic92 John Ericson for nix http3 support | 04:25:58 |
| hexa (signing key rotation when) | hm, no ALPN for h3 yet | 04:31:29 |
| hexa (signing key rotation when) | ❯ curl --http3 -I https://cache.nixos.org
HTTP/3 200
content-length: 2131
last-modified: Wed, 15 Oct 2025 12:11:46 GMT
etag: "1360586d0eb7705e1952d7245a7b3fae"
x-amz-server-side-encryption: AES256
content-type: text/html
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 14 Nov 2025 04:32:33 GMT
age: 71192
x-served-by: cache-iad-kiad7000040-IAD, cache-fra-eddf8230087-FRA
x-cache: HIT, HIT
x-cache-hits: 78, 1
access-control-allow-origin: *
| 04:32:40 |
| hexa (signing key rotation when) | 
Download image.png | 05:02:30 |
 Mic92 | Okay nice. Seems to have worked out smoothly. | 05:17:39 |
| 16 Nov 2025 |
 altf4 | Hey, I was just wondering... I see that nixos.org is registered at Gandi and hosted at Gandi. Any reason why there is no DNSSEC on the domain? | 04:37:31 |
 vcunat | There's a recent ticket about it:
https://github.com/NixOS/infra/issues/878 | 06:44:32 |
| vcunat | I'm not aware of anything blocking it. Though it's not 100% clear whether to stay with Gandi. | 06:45:12 |
| 17 Nov 2025 |
|  @lorenzleutgeb:matrix.org left the room. | 21:12:20 |
| 18 Nov 2025 |
|  jopejoe1 (4094@39c3) changed their display name from jopejoe1 to jopejoe1 (4049@39c3). | 20:16:46 |
| jopejoe1 (4094@39c3) changed their display name from jopejoe1 (4049@39c3) to jopejoe1 (4094@39c3). | 20:18:15 |
| 19 Nov 2025 |
|  dave :3 joined the room. | 00:21:23 |
 djacu | Hey Infra Team
A few people have messaged me that their session expired while filling out the survey which required them to restart the entire survey. I have found a couple thread saying that increasing the session.gc_maxlifetime in the php.ini file fixes this.
https://forums.limesurvey.org/forum/installation-a-update-issues/123929-survey-time-limit-settings
https://forums.limesurvey.org/forum/can-i-do-this-with-limesurvey/156590-session-expiry
Is this something the infra team can update or was this managed by the people in the #survey:nixos.org channel? I don't have access to modify this afaik.
| 05:06:58 |
| vcunat | It's on the caliban machine, managed by the infra team:
https://github.com/NixOS/infra/tree/main/non-critical-infra/hosts/caliban | 06:56:58 |
| vcunat | I don't really know limesurvey or php, but this kind of change would probably go to
https://github.com/NixOS/infra/blob/9f2511eb33deddcc36d40ca5151163d123264f8a/non-critical-infra/modules/limesurvey.nix | 06:59:08 |
|  7karni joined the room. | 10:56:57 |
 adamcstephens | Hi, trying to troubleshoot why the lxc-ci is failing to download our images from hydra. The downloader sets a user agent of distrobuilder (inside the distrobuilder tool) and it's returning immediately which indicates to me that something on hydra is rejecting this request. Can someone help me investigate on the hydra side and/or can we whitelist this user agent? | 15:40:50 |
 emily | https://jenkins.linuxcontainers.org/job/image-nixos/buildTimeTrend for reference | 15:48:21 |
| adamcstephens | Thanks. I was about to do that but was in a call :) | 15:51:00 |
| adamcstephens | I reproduced the failure locally which is what allowed me to see the quick return. | 15:51:33 |
| emily |
Error while downloading source: Failed unpacking rootfs: Unsupported compression
does not sound like an hydra error to me though. it does manage to download it just fine
https://jenkins.linuxcontainers.org/job/image-nixos/architecture=arm64,release=unstable,variant=default/lastFailedBuild/console
| 15:52:04 |
| adamcstephens | there are two downloads. one for the VM, which is a curl and can be seen in the job, and another for the container image which is handled by distrobuilder. I'd need to instrument distrobuilder more to troubleshoot further what's being returned, but it returns within a second which is clearly not downloading the 274MB container image. | 15:52:57 |
| adamcstephens | whatever hydra is returning is not the image. specifically in these lines
time="2025-11-19T01:39:31Z" level=info msg="Downloading source"
Error: Error while downloading source: Failed unpacking rootfs: Unsupported compression
time="2025-11-19T01:39:31Z" level=error msg="Failed running distrobuilder" err="Error while downloading source: Failed unpacking rootfs: Unsupported compression"
| 15:54:43 |
| adamcstephens | https://github.com/lxc/distrobuilder/blob/main/sources/nixos-http.go | 15:55:06 |
| adamcstephens | A wget/curl on the same image URL downloads correctly. | 15:57:28 |
| vcunat | Do you know what kind of user agent it's sending? | 15:59:12 |
| vcunat | 🤔 or a precise recent timestamp. | 15:59:35 |
