#nixops on 2020-04-25

2019-08-31 02:51 samueldr changed the topic of #nixops to: NixOps related talk | logs: https://logs.nix.samueldr.com/nixops/

02:00 teto has quit [Quit: WeeChat 2.8]

06:42 cole-h has quit [Ping timeout: 264 seconds]

15:06 meatcar has quit [*.net *.split]

15:06 meatcar has joined #nixops

15:06 meatcar has quit [Changing host]

15:06 meatcar has joined #nixops

15:23 andi- has quit [Ping timeout: 246 seconds]

15:30 andi- has joined #nixops

15:30 andi- has quit [Changing host]

15:39 teto has joined #nixops

15:59 <DigitalKiwi> Why is scp bad

16:03 <adisbladis> DigitalKiwi: I don't want to switch because scp is "bad"

16:03 <adisbladis> I want to switch because it's much easier to pass arbitrary ssh options and remote privilege escalation

16:04 <DigitalKiwi> Oh I meant the CVE and the openssh people saying not to use it

16:06 <DigitalKiwi> I almost always use rsync too so

16:10 cole-h has joined #nixops

16:10 <adisbladis> To achieve the privilege escalation via sudo + scp I had to do this: https://github.com/NixOS/nixops/pull/1270/commits/64ed68060264adfca89fe8265e87d560985d7f23#diff-73cf2e5b1c5ea89d93f9ff8adf9a0ac4

16:11 <adisbladis> (pass `scp -S ssh_wrapper.py`) which then mangles ssh/remote arguments

16:11 <adisbladis> Feels error prone and ugly

16:12 <adisbladis> With rsync it's just `rsync -e "ssh -p 2022" --rsync-path="sudo rsync" ...`

16:19 pbb_ has quit [Quit: http://quassel-irc.org - Chat comfortably. Anywhere.]

16:23 pbb has joined #nixops

18:01 julm has quit [Quit: reload]

22:09 teto has quit [Quit: WeeChat 2.8]