24 Sep 2024 |
Mic92 | * It looks like I shaved of 10 minutes or so from the ubuntu CI build. | 07:27:57 |
25 Sep 2024 |
| Autumn changed their display name from luna-null to Autumn. | 06:39:23 |
26 Sep 2024 |
| Fabián Heredia set a profile picture. | 01:16:03 |
Alyssa Ross | Are security fixes needed for any series other than 2.24? | 08:13:48 |
fricklerhandwerk | In reply to @qyliss:fairydust.space Are security fixes needed for any series other than 2.24? The releases for all intermediate minor versions aren't out yet (backports linked https://github.com/NixOS/nix/pull/11585#event-14406454310) | 09:17:56 |
fricklerhandwerk | In reply to @qyliss:fairydust.space Are security fixes needed for any series other than 2.24? * The releases for all intermediate minor versions aren't out yet (backports linked here: https://github.com/NixOS/nix/pull/11585#event-14406454310) | 09:18:00 |
Alyssa Ross | Okay, but they're coming? | 09:18:55 |
| @crystallizedgrizzly:private.coffee left the room. | 14:35:10 |
jade_ | n.b. i am not sure what the situation is for the cppnix equivalent of https://gerrit.lix.systems/c/lix/+/1963 but if one is not shipped, that is going to regress on macOS with sandbox in a similar fashion to the way that the fchmodat2 fixes regressed :/ | 20:52:13 |
puck | that, and installing nix on fedora | 20:52:49 |
puck | * that, and installing nix on fedora at some point fedora started putting the ca cert bundle in the same location too | 21:42:49 |
27 Sep 2024 |
puck | * that, and installing nix on fedora at some point fedora started putting the ca cert bundle in the same location too. openSUSE, however, does have a broken builtin:fetchurl when installing now.. | 01:21:20 |
Perchun Pak | Redacted or Malformed Event | 08:51:58 |
Mic92 | WHre does opensuse put them? | 09:00:05 |
Mic92 | * Where does opensuse put them? | 09:02:12 |
Mic92 | In reply to @qyliss:fairydust.space Okay, but they're coming? Merged those fixes yesterday + backport | 09:11:58 |
aloisw | In reply to @joerg:thalheim.io Where does opensuse put them? /var/lib/ca-certificates/ca-bundle.pem . | 09:40:48 |
Mic92 | In reply to @aloisw:kde.org
/var/lib/ca-certificates/ca-bundle.pem . Are you aware of any other linux distribution that uses yet another location? | 09:43:31 |
Mic92 | According to this source fedora also seems to use /etc/pki/ca-trust | 09:46:13 |
Mic92 | https://docs.fedoraproject.org/en-US/quick-docs/using-shared-system-certificates/ | 09:46:14 |
Mic92 | Is this no longer up-to-date? | 09:46:23 |
aloisw | In reply to @joerg:thalheim.io Are you aware of any other linux distribution that uses yet another location? No, Debian and Ubuntu use the familiar /etc/ssl/certs/ca-certificates.crt . | 09:50:28 |
aloisw | In reply to @joerg:thalheim.io According to this source fedora also seems to use /etc/pki/ca-trust On my Silverblue VM at least /etc/ssl/certs is a symlink to /etc/pki/ca-trust/extracted/pem/directory-hash , which in turn contains a symlink called ca-certificates.crt pointing to ../tls-ca-bundle.pem (so the familiar location works, albeit in a convoluted way). | 09:53:02 |
Mic92 | At least on my macOS machine I seem to have % ls -la /nix/var/nix/profiles/default/etc/ssl/certs/ca-bundle.crt
| 10:15:49 |
Mic92 | But I am not sure if this comes from the nix-installer or nix-darwin | 10:15:59 |
Mic92 | emily: Weijia do you know more? | 10:16:16 |
Mic92 | So it looks like the installer itself ensures, there is a certificate: https://github.com/NixOS/nix/blob/f8bd7e7e5c9686b2fed42c2ee9735fc61a28233c/scripts/install-multi-user.sh#L943 | 10:37:50 |
| loudgolem changed their display name from phanirithvij to loudgolem. | 14:38:09 |
| loudgolem changed their profile picture. | 14:38:32 |
| elikoga set a profile picture. | 16:27:18 |