| 9 Jun 2023 |
raitobezarius | In NixOS 23.05 Released? I thought you did because the edit history showed you touched the date but maybe it was a Discourse thing? | 21:25:51 |
raitobezarius | (when you deleted the aarch64-iso thingie) | 21:25:59 |
hexa | I only skipped the post | 21:26:19 |
raitobezarius | I see :< | 21:26:50 |
raitobezarius | hexa: if you have anything you want me to say during the call that you took notice of, I can do that | 21:27:12 |
raitobezarius | https://discourse.nixos.org/t/nixos-23-05-retrospective/28950/4?u=raitobezarius I dumped my notes here | 21:27:35 |
hexa |
EOL policies regarding cache.nixos.org
| 21:28:33 |
hexa | not sure what that means | 21:28:36 |
hexa | oh, you mean because we now build openssl_1_1 | 21:28:43 |
raitobezarius | yes | 21:28:46 |
raitobezarius | we took the decision to allowlist openssl_1_1 and nodejs_16 | 21:28:57 |
raitobezarius | that was "exceptional" | 21:29:00 |
raitobezarius | I'm not shocked if we extend it to "everything insecure is built now" | 21:29:35 |
raitobezarius | but I feel like we ought to have the discussion with infra team and other people, esp. now that cache is a precious resource :))) | 21:29:50 |
hexa | openssl_1_1 was exceptional | 21:30:36 |
raitobezarius | I can also get behind the "let's not generalize it" | 21:31:06 |
hexa | with my security hat on, I'm gonna go nay | 21:32:26 |
hexa | I think nodejs-16 wasn't entirely warranted either | 21:32:51 |
raitobezarius | what do you do about the very true argument about people not upgrading because upgrades are discouraging | 21:32:53 |
hexa | to make my personal POV of where the cut-off should be clearer | 21:33:08 |
raitobezarius | so openssl_1_1 but not nodejs_16 right? | 21:33:19 |
hexa | security support on a non-paid distro is a take it or leave it construct | 21:33:30 |
hexa | only so much time anyone can invest | 21:33:40 |
| 12 Jun 2023 |
Robert Hensing (roberth) | do we publish cross compiled installer images? here's a critical bugfix for those https://github.com/NixOS/nixpkgs/pull/237329 | 11:35:54 |
hexa | not on the homepage, not sure if there are hydra jobs for those | 11:42:35 |
Robert Hensing (roberth) | seems like the fix will propagate to users by itself then; no extra action required | 11:46:32 |
Vladimír Čunát | I don't think I've heard about cross-compiled installers so far. | 11:54:16 |
| 13 Jun 2023 |
| @julienmalka:matrix.org changed their display name from Julien to JulienMalka (stop speaking german when). | 14:53:14 |
| @julienmalka:matrix.org changed their display name from JulienMalka (stop speaking german when) to Julien (stop speaking german when). | 14:53:50 |
| @federicodschonborn:matrix.org changed their profile picture. | 20:55:53 |