| 14 Oct 2022 |
|  gkaply532 left the room. | 00:48:17 |
|  @alejandrosame:matrix.org joined the room. | 10:28:55 |
|  ivan set a profile picture. | 18:37:10 |
|  shanesveller joined the room. | 19:45:51 |
| 15 Oct 2022 |
|  @tinybronca:sibnsk.net changed their display name from underpantsgnome to underpantsgnome!. | 00:34:31 |
|  @adam:valkor.net joined the room. | 19:46:49 |
| 17 Oct 2022 |
|  search_sense joined the room. | 09:11:25 |
|  *Kim joined the room. | 16:34:38 |
|  Rick (Mindavi) changed their display name from Rick (Mindavi) to Mindavi. | 19:19:20 |
|  adisbladis joined the room. | 23:22:13 |
| adisbladis | I'm trying to understand under what circumstances hydra is uploading drv files to a binary cache. | 23:25:26 |
| adisbladis | I would expect the drv from https://hydra.nixos.org/build/195153317 to be available at curl https://cache.nixos.org/kyvnj31jw7hsipwb220mcyrjd7lvb4n7.narinfo but it isn't | 23:25:49 |
 ajs124 | the outpaths seem to be in the cache | 23:45:25 |
| 18 Oct 2022 |
| adisbladis | Yes, that's fine | 00:12:54 |
| adisbladis | I just don't understand why the drvs aren't too | 00:13:15 |
 terwiz | We added $DRV_PATH in addition to $OUT_PATHS to copy-closure command in our hydra post-build script to accomplish that. | 07:32:51 |
| ivan | if I run Hydra with store_uri = auto and it puts packages into my local /nix, how do I get my packages to be signed? (without running nix store sign --all -k /var/secrets/nix/secret_key myself later?) | 17:20:32 |
 @linus:schreibt.jetzt | ivan: set secret-key-files = /var/secrets/nix/secret_key in nix.conf to get all paths built by Nix on that machine signed, or in the store_uri setting (?secret-key-files=/var/secrets/nix/secret_key) for hydra if you only want hydra stuff signed | 17:22:01 |
| ivan | I tried the deprecated binary_cache_secret_key_file = /var/secrets/nix/secret_key in Hydra and I'm not sure it did anything because some things still weren't signed | 17:22:14 |
| @linus:schreibt.jetzt | I think hydra needs read access to the file in the latter case | 17:22:18 |
| ivan | ok, will try, thank you | 17:22:20 |
| ivan | the secret-key-files = /var/secrets/nix/secret_key on Nix I already had, but I also have Hydra build on two other machines with different keys | 17:29:27 |
| ivan | store_uri = auto?secret-key-files=/var/secrets/nix/secret_key on Hydra shows hydra-queue-runner[1656728]: warning: unknown setting 'secret-key-files' | 17:30:03 |
| ivan | maybe secret-key | 17:30:42 |
| ivan | hydra-queue-runner[2330954]: warning: unknown setting 'secret-key' | 17:32:23 |
| ivan | I guess it's not really supported until something like https://github.com/NixOS/hydra/pull/829 is merged | 17:34:43 |
| ivan | I'll try using nix-serve-ng instead of SSH substituters | 17:37:05 |
| ajs124 | In reply to @ivank:matrix.org
I'll try using nix-serve-ng instead of SSH substituters you can also try harmonia or eris | 17:43:33 |
| ivan | yep, thanks | 17:45:04 |
| ivan | the nix-serve module with package = pkgs.haskellPackages.nix-serve-ng; seems to be working well | 17:56:04 |
