| 29 Apr 2026 |
hexa | https://www.openwall.com/lists/oss-security/2026/04/29/1 | 00:19:34 |
hexa | starman http request smuggling | 00:19:39 |
stigo | yep | 00:53:05 |
stigo | * yep, https://github.com/NixOS/nixpkgs/pull/514601 | 00:54:29 |
hexa | merged | 07:42:08 |
John Ericson | BMG: had a look yet? alos still curious about whether any buildsteps are missing a drv path | 18:08:35 |
John Ericson | if every build step has one, I figure we can send in that migration asap to formally mark the field non-null, even before the new queue runner lands | 18:31:37 |
BMG | Been tied up with other things. But isn't this just a quick db query against hydra's db? | 18:48:09 |
BMG | @Ericson2314:matrix.org | 18:48:22 |
John Ericson | BMG: yup! but I don't have the DB :) | 18:48:43 |
hexa | bmg has access to the old db host | 18:49:24 |
hexa | so does simon | 18:49:27 |
John Ericson | oh cool | 18:49:39 |
BMG | Ah, @hexa:lossy.network was my goto remote hydra query runner and purveyor of dumps when I was looking into things | 18:49:40 |
John Ericson | I thought I would have to download many GiB :) | 18:49:47 |
hexa | root@haumea.nixos.org | 18:49:49 |
BMG | Oh, I had actually forgotten about that | 18:49:55 |
BMG | Ah ok lol, I'll poke it first thing in the morning | 18:50:23 |
John Ericson | if I could get ready only access that would be amazing | 18:50:24 |
John Ericson | and then I can stop bugging BMG so much :) | 18:50:34 |
BMG | before I get distracted with other things | 18:50:39 |
John Ericson | (well actually I would be curious to test out migration time too, but I don't want to fuck up the archival copy) | 18:50:53 |
John Ericson | BMG: you may also be interested to know I just landed some empty-db migration testing with all the historical schemas | 18:53:05 |
John Ericson | empty db migration testing doesn't answer all migration questions by any means, but it is a nice smoke test we can do in CI | 18:53:31 |
BMG | If we start tracking references in build step outputs this is needed | 18:54:05 |
John Ericson | yeah | 18:54:16 |
BMG | I will find time for it, just, well life and work and stuff. What is, is. | 18:54:53 |
John Ericson | having no queue runner state allows us to run multiple queue runners in addition to multiple builders which is....interesting | 18:54:59 |
John Ericson | (because the graph state is in DB) | 18:55:15 |
| 30 Apr 2026 |
BMG | my key doesn't seem to be working | 07:27:17 |