| 13 Oct 2022 |
 cransom | afaik, no. not individual files unless they were specced in the hydra-build-products file setup | 19:08:12 |
 @grahamc:nixos.org | yeah | 19:09:28 |
| @grahamc:nixos.org | dang | 19:09:29 |
| @grahamc:nixos.org | thanks :) | 19:09:31 |
| @grahamc:nixos.org | I found a way: https://github.com/DeterminateSystems/macos-ephemeral/blob/main/setup-without-nix.sh#L22-L31 | 20:17:16 |
| 14 Oct 2022 |
|  gkaply532 left the room. | 00:48:17 |
|  @alejandrosame:matrix.org joined the room. | 10:28:55 |
|  ivan set a profile picture. | 18:37:10 |
|  shanesveller joined the room. | 19:45:51 |
| 15 Oct 2022 |
|  @tinybronca:sibnsk.net changed their display name from underpantsgnome to underpantsgnome!. | 00:34:31 |
|  @adam:valkor.net joined the room. | 19:46:49 |
| 17 Oct 2022 |
|  search_sense joined the room. | 09:11:25 |
|  *Kim joined the room. | 16:34:38 |
|  Rick (Mindavi) changed their display name from Rick (Mindavi) to Mindavi. | 19:19:20 |
|  adisbladis joined the room. | 23:22:13 |
| adisbladis | I'm trying to understand under what circumstances hydra is uploading drv files to a binary cache. | 23:25:26 |
| adisbladis | I would expect the drv from https://hydra.nixos.org/build/195153317 to be available at curl https://cache.nixos.org/kyvnj31jw7hsipwb220mcyrjd7lvb4n7.narinfo but it isn't | 23:25:49 |
 ajs124 | the outpaths seem to be in the cache | 23:45:25 |
| 18 Oct 2022 |
| adisbladis | Yes, that's fine | 00:12:54 |
| adisbladis | I just don't understand why the drvs aren't too | 00:13:15 |
 terwiz | We added $DRV_PATH in addition to $OUT_PATHS to copy-closure command in our hydra post-build script to accomplish that. | 07:32:51 |
| ivan | if I run Hydra with store_uri = auto and it puts packages into my local /nix, how do I get my packages to be signed? (without running nix store sign --all -k /var/secrets/nix/secret_key myself later?) | 17:20:32 |
 @linus:schreibt.jetzt | ivan: set secret-key-files = /var/secrets/nix/secret_key in nix.conf to get all paths built by Nix on that machine signed, or in the store_uri setting (?secret-key-files=/var/secrets/nix/secret_key) for hydra if you only want hydra stuff signed | 17:22:01 |
| ivan | I tried the deprecated binary_cache_secret_key_file = /var/secrets/nix/secret_key in Hydra and I'm not sure it did anything because some things still weren't signed | 17:22:14 |
| @linus:schreibt.jetzt | I think hydra needs read access to the file in the latter case | 17:22:18 |
| ivan | ok, will try, thank you | 17:22:20 |
| ivan | the secret-key-files = /var/secrets/nix/secret_key on Nix I already had, but I also have Hydra build on two other machines with different keys | 17:29:27 |
| ivan | store_uri = auto?secret-key-files=/var/secrets/nix/secret_key on Hydra shows hydra-queue-runner[1656728]: warning: unknown setting 'secret-key-files' | 17:30:03 |
| ivan | maybe secret-key | 17:30:42 |
| ivan | hydra-queue-runner[2330954]: warning: unknown setting 'secret-key' | 17:32:23 |
