| 9 Jun 2023 |
hexa | I'm at GPN the whole saturday | 21:12:40 |
hexa | was planned for friday, but plans changed 🤷 | 21:12:49 |
raitobezarius | Alrighty | 21:15:31 |
raitobezarius | Apologies for my own mixups & confusions on that | 21:16:02 |
hexa | also I didn't see the announcement in that post until you linked it today 😄 | 21:24:54 |
raitobezarius | In NixOS 23.05 Released? I thought you did because the edit history showed you touched the date but maybe it was a Discourse thing? | 21:25:51 |
raitobezarius | (when you deleted the aarch64-iso thingie) | 21:25:59 |
hexa | I only skipped the post | 21:26:19 |
raitobezarius | I see :< | 21:26:50 |
raitobezarius | hexa: if you have anything you want me to say during the call that you took notice of, I can do that | 21:27:12 |
raitobezarius | https://discourse.nixos.org/t/nixos-23-05-retrospective/28950/4?u=raitobezarius I dumped my notes here | 21:27:35 |
hexa |
EOL policies regarding cache.nixos.org
| 21:28:33 |
hexa | not sure what that means | 21:28:36 |
hexa | oh, you mean because we now build openssl_1_1 | 21:28:43 |
raitobezarius | yes | 21:28:46 |
raitobezarius | we took the decision to allowlist openssl_1_1 and nodejs_16 | 21:28:57 |
raitobezarius | that was "exceptional" | 21:29:00 |
raitobezarius | I'm not shocked if we extend it to "everything insecure is built now" | 21:29:35 |
raitobezarius | but I feel like we ought to have the discussion with infra team and other people, esp. now that cache is a precious resource :))) | 21:29:50 |
hexa | openssl_1_1 was exceptional | 21:30:36 |
raitobezarius | I can also get behind the "let's not generalize it" | 21:31:06 |
hexa | with my security hat on, I'm gonna go nay | 21:32:26 |
hexa | I think nodejs-16 wasn't entirely warranted either | 21:32:51 |
raitobezarius | what do you do about the very true argument about people not upgrading because upgrades are discouraging | 21:32:53 |
hexa | to make my personal POV of where the cut-off should be clearer | 21:33:08 |
raitobezarius | so openssl_1_1 but not nodejs_16 right? | 21:33:19 |
hexa | security support on a non-paid distro is a take it or leave it construct | 21:33:30 |
hexa | only so much time anyone can invest | 21:33:40 |
| 12 Jun 2023 |
Robert Hensing (roberth) | do we publish cross compiled installer images? here's a critical bugfix for those https://github.com/NixOS/nixpkgs/pull/237329 | 11:35:54 |
hexa | not on the homepage, not sure if there are hydra jobs for those | 11:42:35 |