| 27 Sep 2024 |
 Mic92 | So it looks like the installer itself ensures, there is a certificate: https://github.com/NixOS/nix/blob/f8bd7e7e5c9686b2fed42c2ee9735fc61a28233c/scripts/install-multi-user.sh#L943 | 10:37:50 |
|  loudgolem changed their display name from phanirithvij to loudgolem. | 14:38:09 |
| loudgolem changed their profile picture. | 14:38:32 |
|  elikoga set a profile picture. | 16:27:18 |
 puck | Mic92 https://github.com/NixOS/nix/pull/11603 is not quite the right solution to the problem i described
nix successfully finds a CA bundle (the cacert one); but trying to use it inside builtin:fetchurl fails because the sandbox doesn't allow access to the CA certificate file | 16:31:26 |
| puck | you can replicate this on nixos by e.g. doing NIX_SSL_CERT_FILE=$(nix-build '<nixpkgs>' -A cacert)/etc/ssl/certs/ca-bundle.crt nix-build --store $(mktemp -d) -E 'import <nix/fetchurl.nix> { url = https://google.com; }' | 16:33:33 |
| puck | i was just using openSUSE as an example of it being broken out of the box on some systems now | 16:36:26 |
|  @artemis:arty.chat left the room. | 17:53:52 |
| 28 Sep 2024 |
| Mic92 | Redacted or Malformed Event | 07:36:35 |
