| 13 Dec 2024 |
 Christian Theune | s3 upload credentials then aren't really /that/ sensitive compared to that we have to trust the content that the builders generate anyway. | 08:06:49 |
 vcunat | Signing itself is cheap, if you provide the hash to sign. The signer doesn't even need the whole NAR. | 08:07:09 |
| vcunat | * Signing itself is cheap, if you provide the hash to sign. The signer doesn't even need the whole NAR. (in principle) | 08:07:15 |
| Christian Theune | ah, interesting. | 08:07:28 |
| Christian Theune | that would mean we wouldn't even have to transfer the files to the master for that reason. | 08:07:43 |
| Christian Theune | and the builder already has the closure and could upload | 08:07:53 |
| Christian Theune | i'll keep that in mind when we take a look at moving the compression around | 08:08:04 |
| vcunat | Yes, that does sound like good architecture. | 08:08:17 |
| Christian Theune | not sure whether it's good. it seems better than what it is now. 😉 | 08:08:37 |
| Christian Theune | but yeah | 08:08:39 |
| vcunat | Though hydra.nixos.org is now blocked by loading jobs from DB. Probably the steps that check what's in S3 already. (it's overseas unfortunately so higher latency) | 08:08:54 |
| Christian Theune | yeah i've read that. that part of the code/architecture i haven't looked at before and it's two steps further down the road on our map. | 08:10:14 |
| Christian Theune | (our s3 is local and we have a much lower number of jobs anyway) | 08:10:40 |
| Christian Theune | but yeah, happy to help in general, but need to be careful with my commitments ... | 08:11:01 |
| vcunat | Sure. I appreciate any kind of progress 🙂 | 08:11:52 |
