| 14 Oct 2022 |
| shanesveller joined the room. | 19:45:51 |
| 15 Oct 2022 |
| @tinybronca:sibnsk.net changed their display name from underpantsgnome to underpantsgnome!. | 00:34:31 |
| @adam:valkor.net joined the room. | 19:46:49 |
| 17 Oct 2022 |
| search_sense joined the room. | 09:11:25 |
| *Kim joined the room. | 16:34:38 |
| Rick (Mindavi) changed their display name from Rick (Mindavi) to Mindavi. | 19:19:20 |
| adisbladis joined the room. | 23:22:13 |
adisbladis | I'm trying to understand under what circumstances hydra is uploading drv files to a binary cache. | 23:25:26 |
adisbladis | I would expect the drv from https://hydra.nixos.org/build/195153317 to be available at curl https://cache.nixos.org/kyvnj31jw7hsipwb220mcyrjd7lvb4n7.narinfo but it isn't | 23:25:49 |
ajs124 | the outpaths seem to be in the cache | 23:45:25 |
| 18 Oct 2022 |
adisbladis | Yes, that's fine | 00:12:54 |
adisbladis | I just don't understand why the drvs aren't too | 00:13:15 |
terwiz | We added $DRV_PATH in addition to $OUT_PATHS to copy-closure command in our hydra post-build script to accomplish that. | 07:32:51 |
ivan | if I run Hydra with store_uri = auto and it puts packages into my local /nix, how do I get my packages to be signed? (without running nix store sign --all -k /var/secrets/nix/secret_key myself later?) | 17:20:32 |
@linus:schreibt.jetzt | ivan: set secret-key-files = /var/secrets/nix/secret_key in nix.conf to get all paths built by Nix on that machine signed, or in the store_uri setting (?secret-key-files=/var/secrets/nix/secret_key) for hydra if you only want hydra stuff signed | 17:22:01 |
ivan | I tried the deprecated binary_cache_secret_key_file = /var/secrets/nix/secret_key in Hydra and I'm not sure it did anything because some things still weren't signed | 17:22:14 |
@linus:schreibt.jetzt | I think hydra needs read access to the file in the latter case | 17:22:18 |
ivan | ok, will try, thank you | 17:22:20 |
ivan | the secret-key-files = /var/secrets/nix/secret_key on Nix I already had, but I also have Hydra build on two other machines with different keys | 17:29:27 |
ivan | store_uri = auto?secret-key-files=/var/secrets/nix/secret_key on Hydra shows hydra-queue-runner[1656728]: warning: unknown setting 'secret-key-files' | 17:30:03 |
ivan | maybe secret-key | 17:30:42 |
ivan | hydra-queue-runner[2330954]: warning: unknown setting 'secret-key' | 17:32:23 |
ivan | I guess it's not really supported until something like https://github.com/NixOS/hydra/pull/829 is merged | 17:34:43 |
ivan | I'll try using nix-serve-ng instead of SSH substituters | 17:37:05 |
ajs124 | In reply to @ivank:matrix.org I'll try using nix-serve-ng instead of SSH substituters you can also try harmonia or eris | 17:43:33 |
ivan | yep, thanks | 17:45:04 |
ivan | the nix-serve module with package = pkgs.haskellPackages.nix-serve-ng; seems to be working well | 17:56:04 |
ivan | or not, I guess nix-serve-ng sometimes crashes when requesting something that doesn't exist. https://gist.github.com/ivan/25faf249a5d2efa61332dd1df26eed34 | 18:25:55 |
ivan | Redacted or Malformed Event | 18:26:08 |
ivan | * or not, I guess nix-serve-ng sometimes crashes when requesting something that doesn't exist. https://gist.github.com/ivan/25faf249a5d2efa61332dd1df26eed34
(actually possibly my problem because nix-serve also has issues connecting to daemon) | 18:41:36 |