| 16 Nov 2025 |
 altf4 | Hey, I was just wondering... I see that nixos.org is registered at Gandi and hosted at Gandi. Any reason why there is no DNSSEC on the domain? | 04:37:31 |
 vcunat | There's a recent ticket about it:
https://github.com/NixOS/infra/issues/878 | 06:44:32 |
| vcunat | I'm not aware of anything blocking it. Though it's not 100% clear whether to stay with Gandi. | 06:45:12 |
| 17 Nov 2025 |
|  @lorenzleutgeb:matrix.org left the room. | 21:12:20 |
| 18 Nov 2025 |
|  jopejoe1 (4094@39c3) changed their display name from jopejoe1 to jopejoe1 (4049@39c3). | 20:16:46 |
| jopejoe1 (4094@39c3) changed their display name from jopejoe1 (4049@39c3) to jopejoe1 (4094@39c3). | 20:18:15 |
| 19 Nov 2025 |
|  dave :3 joined the room. | 00:21:23 |
 djacu | Hey Infra Team
A few people have messaged me that their session expired while filling out the survey which required them to restart the entire survey. I have found a couple thread saying that increasing the session.gc_maxlifetime in the php.ini file fixes this.
https://forums.limesurvey.org/forum/installation-a-update-issues/123929-survey-time-limit-settings
https://forums.limesurvey.org/forum/can-i-do-this-with-limesurvey/156590-session-expiry
Is this something the infra team can update or was this managed by the people in the #survey:nixos.org channel? I don't have access to modify this afaik.
| 05:06:58 |
| vcunat | It's on the caliban machine, managed by the infra team:
https://github.com/NixOS/infra/tree/main/non-critical-infra/hosts/caliban | 06:56:58 |
| vcunat | I don't really know limesurvey or php, but this kind of change would probably go to
https://github.com/NixOS/infra/blob/9f2511eb33deddcc36d40ca5151163d123264f8a/non-critical-infra/modules/limesurvey.nix | 06:59:08 |
|  7karni joined the room. | 10:56:57 |
 adamcstephens | Hi, trying to troubleshoot why the lxc-ci is failing to download our images from hydra. The downloader sets a user agent of distrobuilder (inside the distrobuilder tool) and it's returning immediately which indicates to me that something on hydra is rejecting this request. Can someone help me investigate on the hydra side and/or can we whitelist this user agent? | 15:40:50 |
 emily | https://jenkins.linuxcontainers.org/job/image-nixos/buildTimeTrend for reference | 15:48:21 |
| adamcstephens | Thanks. I was about to do that but was in a call :) | 15:51:00 |
| adamcstephens | I reproduced the failure locally which is what allowed me to see the quick return. | 15:51:33 |
| emily |
Error while downloading source: Failed unpacking rootfs: Unsupported compression
does not sound like an hydra error to me though. it does manage to download it just fine
https://jenkins.linuxcontainers.org/job/image-nixos/architecture=arm64,release=unstable,variant=default/lastFailedBuild/console
| 15:52:04 |
| adamcstephens | there are two downloads. one for the VM, which is a curl and can be seen in the job, and another for the container image which is handled by distrobuilder. I'd need to instrument distrobuilder more to troubleshoot further what's being returned, but it returns within a second which is clearly not downloading the 274MB container image. | 15:52:57 |
| adamcstephens | whatever hydra is returning is not the image. specifically in these lines
time="2025-11-19T01:39:31Z" level=info msg="Downloading source"
Error: Error while downloading source: Failed unpacking rootfs: Unsupported compression
time="2025-11-19T01:39:31Z" level=error msg="Failed running distrobuilder" err="Error while downloading source: Failed unpacking rootfs: Unsupported compression"
| 15:54:43 |
| adamcstephens | https://github.com/lxc/distrobuilder/blob/main/sources/nixos-http.go | 15:55:06 |
| adamcstephens | A wget/curl on the same image URL downloads correctly. | 15:57:28 |
| vcunat | Do you know what kind of user agent it's sending? | 15:59:12 |
| vcunat | 🤔 or a precise recent timestamp. | 15:59:35 |
| adamcstephens | DEBUG [2025-11-18T23:00:38-05:00] Downloading hydra output: https://hydra.nixos.org/job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image
Error: Error while downloading source: Failed unpacking rootfs: Unsupported compression
ERROR [2025-11-18T23:00:39-05:00] Failed running distrobuilder err="Error while downloading source: Failed unpacking rootfs: Unsupported compression
| 16:00:17 |
| adamcstephens | (i instrumented distrobuilder enough to print the URL so I could verify) | 16:00:31 |
| adamcstephens | the user agent should be exactly distrobuilder as set by this call https://github.com/lxc/distrobuilder/blob/39f431652247798dfd6935b79a658935ca0672cf/sources/common.go#L148 | 16:01:44 |
| adamcstephens | https://github.com/lxc/incus/blob/09e0f36dd5f02aeda5c97a4b27060cef338e1d76/shared/util/net.go#L21 | 16:02:21 |
| vcunat | [16/Nov/2025:01:01:53 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1384 "-" "distrobuilder"
[16/Nov/2025:01:07:36 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1385 "-" "distrobuilder"
[16/Nov/2025:01:23:13 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1531 "-" "distrobuilder"
[16/Nov/2025:01:39:20 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1386 "-" "distrobuilder"
[17/Nov/2025:01:02:14 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1537 "-" "distrobuilder"
[17/Nov/2025:01:07:56 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1384 "-" "distrobuilder"
[17/Nov/2025:01:23:30 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1384 "-" "distrobuilder"
[17/Nov/2025:01:39:09 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1388 "-" "distrobuilder"
[17/Nov/2025:02:15:59 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1538 "-" "distrobuilder"
[17/Nov/2025:02:22:49 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1384 "-" "distrobuilder"
[17/Nov/2025:02:58:58 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1377 "-" "distrobuilder"
[18/Nov/2025:01:00:34 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1386 "-" "distrobuilder"
[18/Nov/2025:01:08:00 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1537 "-" "distrobuilder"
[18/Nov/2025:01:23:45 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1386 "-" "distrobuilder"
[18/Nov/2025:01:39:22 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1383 "-" "distrobuilder"
[19/Nov/2025:01:00:34 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1384 "-" "distrobuilder"
[19/Nov/2025:01:08:09 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1385 "-" "distrobuilder"
[19/Nov/2025:01:23:44 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1385 "-" "distrobuilder"
[19/Nov/2025:01:39:25 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1384 "-" "distrobuilder"
[19/Nov/2025:03:29:30 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/1.1" 302 360 "-" "Wget/1.25.0"
[19/Nov/2025:04:00:39 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 200 1534 "-" "distrobuilder"
[19/Nov/2025:04:00:47 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/1.1" 302 360 "-" "Wget/1.25.0"
[19/Nov/2025:15:45:07 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 302 360 "-" "curl/8.16.0"
[19/Nov/2025:15:45:12 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 302 360 "-" "curl/8.16.0"
[19/Nov/2025:15:45:37 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 302 360 "-" "ditrobuilder (not actually, just a test)"
[19/Nov/2025:15:45:43 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 302 360 "-" "ditrobuilder (not actually, just a test)"
[19/Nov/2025:15:45:44 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 302 360 "-" "ditrobuilder (not actually, just a test)"
[19/Nov/2025:15:45:46 +0000] "GET /job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image HTTP/2.0" 302 360 "-" "ditrobuilder (not actually, just a test)"
| 16:03:55 |
| emily | does distrobuilder follow redirects? that could explain the < 1 sec download
# curl https://hydra.nixos.org/job/nixos/trunk-combined/nixos.incusContainerImage.x86_64-linux/latest/download-by-type/file/squashfs-image -i
HTTP/2 302
server: nginx
date: Wed, 19 Nov 2025 16:03:35 GMT
content-type: text/html; charset=utf-8
content-length: 360
location: https://hydra.nixos.org/build/314008482/download-by-type/file/squashfs-image
set-cookie: hydra_session=e7dae4552403e83c008193eb14e44bfb37180ae4; path=/; expires=Wed, 26-Nov-2025 16:03:35 GMT; HttpOnly; SameSite=Lax
vary: Accept
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Moved</title>
</head>
<body>
<p>This item has moved <a href="https://hydra.nixos.org/build/314008482/download-by-type/file/squashfs-image">here</a>.</p>
</body>
</html>
| 16:04:06 |
| adamcstephens | I'd have to verify, but I don't think these redirects are new are they? e.g. we didn't add them 6 days ago? | 16:04:40 |
| vcunat | That's what I wonder. | 16:04:55 |
