| 29 Sep 2025 |
adamcstephens | I'm troubleshooting one or more logic bugs in the fetch script, which will then exit successfully even if it fails, but since apply depends on fetch it makes me wonder why they're separate | 14:59:07 |
adamcstephens | https://github.com/NixOS/nixpkgs/pull/447266 | 18:42:09 |
| 30 Sep 2025 |
Arian | Because it's all technical debt from nixops days | 07:20:06 |
Arian | And I haven't had the time yet to clean it up | 07:20:22 |
Arian | This all probably should be rewritten to some extend | 07:20:35 |
Arian | @commiterate:matrix.org: on that front any news on ec2-ssh-utils? | 07:22:47 |
adamcstephens | Yeah it definitely seems like it needs to be completely redone. It would kind of be nice to use something besides bash too :) | 12:11:16 |
Arian | ec2-ssh-utils moves most of the stuff to golang. | 15:12:44 |
adamcstephens | Nice talk btw :) | 15:43:27 |
Arian | Are you at the conf? | 15:48:55 |
adamcstephens | No, I was watching online | 15:50:41 |
| 17lifers (at mikuplushfarm) joined the room. | 16:05:33 |
commiterate | Nothing from AWS. The util should work though (the infrastructure subfolder deploys a CloudFormation stack that tests it by building an AMI with EC2 Image Builder). | 16:45:15 |
commiterate | I wouldn't expect anything until H1 2026. It's re:Invent crunch time followed by the end-of-year holiday season.
I can try to bring it up again as a reminder for 2026 OP1 planning (I think that's going on right now). | 17:21:37 |
commiterate | * I wouldn't expect anything until H1 2026 at the earliest. It's re:Invent crunch time followed by the end-of-year holiday season.
I can try to bring it up again as a reminder for 2026 OP1 planning (I think that's going on right now). | 17:21:49 |
commiterate | Sent them the reminder. And now we wait... | 17:47:29 |
Arian | I promise I get a reinvent ticket if they announce this at reinvent | 20:49:50 |
| 1 Oct 2025 |
commiterate | 0% chance. It's impossible to get a security reviewer assigned at this point. | 03:02:18 |
commiterate | I already proposed it way earlier this year while there was still time for OP2 and getting a security reviewer. | 03:02:48 |
| 8 Oct 2025 |
| @haauler:matrix.org left the room. | 10:43:43 |
| 10 Oct 2025 |
Arian | AWS just dropped an AMI builder for NixOS: https://discourse.nixos.org/t/aws-announces-ec2-instance-attestation-day-one-support-for-nixos/70726 | 14:17:43 |
Arian | If any of the AWS folks I met at NixCon are in this room. WHY DIDN'T YOU TELL ME THIS WAS A THING YOU'RE WORKING ON THIS IS AMAZING | 14:18:12 |
adamcstephens | neat | 15:42:28 |
| 11 Oct 2025 |
commiterate | now if only there was Cfn support for ImportSnapshot-based AMIs | 05:08:23 |
Arian | they don't do importsnapshot here. they use EBS-Direct | 16:29:54 |
commiterate | the main annoyance with using EBS direct (via coldsnap) is lifecycle management. You get that for free with Terraform/OpenTofu or Cfn, with Cfn having the extra benefit of auto-rollback and not needing to burn compute time when updating stacks. | 19:30:08 |
commiterate | trying to escalate that feature request by pulling in the people who worked on the attestation examples. EC2 has provided a pretty concrete use case themselves | 19:59:16 |
| 13 Oct 2025 |
| vivekanandan_ks joined the room. | 18:54:25 |
| 19 Oct 2025 |
| jp1100001 joined the room. | 11:32:57 |
| 23 Oct 2025 |
| hacker1024 joined the room. | 00:42:48 |