| 19 Nov 2025 |
 vcunat | grep -F download-by-type/file/squashfs-image /var/log/nginx/access.log | grep -F distrobuilder | grep -F /build/
This command shows empty. Without the last grep I see them. i.e. distrobuild agents only look at the /job/nixos/... URLs and not the followup /build/... URLs.
| 16:33:11 |
 @adam:robins.wtf | 👍 thanks | 16:34:02 |
| @adam:robins.wtf | It's anubis | 16:54:26 |
| @adam:robins.wtf | which also explains why it's not following redirects. it gets the anubis page returned and doesn't even know about them | 16:55:39 |
| @adam:robins.wtf | <p>This website is running Anubis version <code>v1.23.1</code>.</p>
| 16:57:43 |
| vcunat | OK, so you need an exception to bypass Anubis for this use case. | 17:06:33 |
| vcunat | adamcstephens: can you retry now? | 17:10:24 |
| vcunat | (just trying a quick prototype) | 17:10:43 |
| @adam:robins.wtf | still got the anubis page | 17:11:14 |
| vcunat | I suppose someone more capable than me in this would have a look 😅 | 17:17:20 |
| @adam:robins.wtf | In theory a bot policy as below should work, but it isn't scoped at all if that is desired. I don't see managed policies already in nixos/infra though, and not sure how the defaults are handled by adding one...
- name: distrobuilder
user_agent_regex: distrobuilder
action: ALLOW
| 17:21:57 |
| vcunat | I thought we have these here
https://github.com/NixOS/infra/blob/main/build/hydra-proxy.nix#L96 | 17:23:15 |
| vcunat | But maybe I'm wrong. | 17:23:24 |
