<samueldr>
so, assuming there's no way to not build on a platform, so before sending a build, be even more mindful since macOS builders aren't sandboxed, right?
<samueldr>
(though, I do understand that nothing shady should be sent to builds, even sandboxed)
<gchristensen>
just treat it like you would normally
<gchristensen>
don't build weird stuff
<LnL>
indeed, even tho my builder doesn't have anything sensitive except for the ofborg config itself
<samueldr>
sure!
<{^_^}>
[ofborg] @grahamc pushed to released « Update known / trusted / etc. users »: https://git.io/fNmFI
<gchristensen>
this is a super yak shave
<gchristensen>
LnL: automatic deploys are a post-surgery task, then I'm +1,000
<gchristensen>
also I'd like to split ircbot from ofborg, it shouldn't be there
<{^_^}>
[ofborg] @grahamc pushed to released « Update carnix for ofborg for 0.1.6 »: https://git.io/fNmFH
<gchristensen>
LnL: I even have buildkite setup for it
<gchristensen>
and about 50% of the code to do it
<gchristensen>
but don't want to have a disaster strike and then need to clean it all up
<gchristensen>
ideally we'd also have two rabbitmq nodes running, so major upgrades can happen without kicking everybody off
<gchristensen>
that was tricky to do b/c apparently it is hard to have a load-balanced set of servers get hooked up through letsencrypt?
<samueldr>
doing the validation through dns out of control from the servers may be easier for load balancing?
<samueldr>
(once you get the cert from dns validation, you send the same to both servers?)
<gchristensen>
I think the DNS validation token changes regularly?
<gchristensen>
anyway, all those changes are deployed now