gchristensen changed the topic of #nixos-borg to: https://www.patreon.com/ofborg https://monitoring.nix.ci/dashboard/db/ofborg?refresh=10s&orgId=1&from=now-1h&to=now "I get to skip reviewing the PHP code and just wait until it is rewritten in something sane, like POSIX shell. || https://logs.nix.samueldr.com/nixos-borg
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 258 seconds]
orivej has joined #nixos-borg
cole-h has quit [Quit: Goodbye]
orivej has quit [Ping timeout: 258 seconds]
orivej has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej_ has joined #nixos-borg
orivej has quit [Ping timeout: 264 seconds]
orivej_ has quit [Ping timeout: 246 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 260 seconds]
orivej_ has joined #nixos-borg
nix-build has quit [Remote host closed the connection]
{^_^} has joined #nixos-borg
orivej_ has quit [Ping timeout: 258 seconds]
orivej has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 260 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 265 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 256 seconds]
orivej_ has joined #nixos-borg
orivej_ has quit [Ping timeout: 260 seconds]
orivej has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 258 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 265 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 246 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 246 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 246 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 264 seconds]
orivej_ has joined #nixos-borg
adisbladis has quit [Quit: ZNC 1.7.5 - https://znc.in]
adisbladis has joined #nixos-borg
orivej_ has quit [Ping timeout: 258 seconds]
orivej has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 264 seconds]
orivej_ has joined #nixos-borg
orivej_ has quit [Ping timeout: 260 seconds]
cole-h has joined #nixos-borg
orivej has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
evanjs has quit [Quit: ZNC 1.8.0 - https://znc.in]
evanjs has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej_ has joined #nixos-borg
orivej has quit [Ping timeout: 246 seconds]
orivej has joined #nixos-borg
orivej_ has quit [Ping timeout: 264 seconds]
orivej has quit [Ping timeout: 260 seconds]
orivej has joined #nixos-borg
adisbladi has joined #nixos-borg
adisbladis has quit [*.net *.split]
<cole-h> LnL++ Nice password and virtualhost lol. Cheers, thanks. I had started with trying the stuff from infra but it was too needy :P
<{^_^}> LnL's karma got increased to 0o110
<LnL> yeah, what I generally try to do for infra stuff is decouple the modules from nixops
<LnL> so that you can also test parts in isolation with build-vm
<cole-h> I think we've talked about this before, but what would be necessary to get a manual build as part of borg? See: https://github.com/NixOS/nixpkgs/pull/90689
<{^_^}> nixpkgs#90689 (by cole-h, 15 minutes ago, merged): agda: fix manual build -- blocks nixpkgs-unstable
<cole-h> Rather, is there any reason we don't already have one set up?
<LnL> basically the same as https://github.com/NixOS/ofborg/pull/511
<{^_^}> #511 (by LnL7, 2 weeks ago, open): move lib-tests to a build
<cole-h> Yeah, I thought we had something similar already lined up...
<LnL> only thing is that it won't be checked strictly like the evaluation
<cole-h> How's that? Is that part of what the `EvalChecker::new` does -- set it to strict?
<LnL> not actually sure where that happens
<LnL> but making it strict would break staging prs
<infinisil> LnL: Just linked to #472 in your PR
<{^_^}> https://github.com/NixOS/ofborg/pull/472 (by Infinisil, 7 weeks ago, open): Pass build nixpkgs to mass-rebuilder binary
<LnL> yeah, I really don't like the random nixpkgs reference tho
<LnL> I've used this kind of thing before for dynamic inputs https://gist.github.com/LnL7/74a29376b93026876f40db99a457a691
<cole-h> LnL: Is your /run/keys/rabbitmq_exporter just some `dd if=/dev/random of=key bs=32 count=1` thing, or is there more to it?
<LnL> that's the password of a user with monitoring permissions
<cole-h> Oh, a prometheus user? Got it.
<LnL> rabbitmq
<cole-h> Oh
<cole-h> yeah
<cole-h> LnL: And I'm assuming I need to let builder-1 access the virtual host?
<LnL> yeah, not sure what else I configured manually
<cole-h> Hehe
<LnL> you could put it under a vhost but I just used /
<cole-h> btw, trying to do it from rabbitmqctl, but I got "Authentication failed (rejected by the remote node), please check the Erlang cookie"
<cole-h> s/trying/tried/
<LnL> ah yeah, needs to run as the same user unless you setup the same cookie for root or whatever
<LnL> cat /var/lib/rabbitmq/.erlang.cookie
<cole-h> Ah, got it. So if I had `doas -u rabbitmq` (the owner of the cookie), it would have probably worked
<cole-h> Yep, that worked.
<cole-h> How did you get the key to /run/keys? Manually, or do you use a nixops secret or something?
<LnL> have a hacky thing that pulls secrets out of vault
<LnL> should really setup the agent
<cole-h> lol. Next problem is: /run/keys is 750, and your prom-rabbit-exporter uses dynamicuser, so I can't add them to the keys group... x)
<LnL> I reused the node-exporter user before, maybe didn't check after anymore
<cole-h> Well, I'm not planning on exposing this anytime soon, so hardcoding the password shouldn't hurt.
<LnL> yeah, it's not running
<cole-h> LnL++ Thanks for the help! Got the builder up and running :D Did you by any chance setup grafana for it as well? ;^)
<{^_^}> LnL's karma got increased to 73
<cole-h> Also, why do we not want to put the builder config into the store? ("Please avoid putting the builder config in to the Nix store.")
<cole-h> Would be nicer if I could `${./config.json}` or `ln -s ${./config.json} ...`
<cole-h> Hey, setting up grafana and loki weren't that hard...
<cole-h> gchristensen: btw, since you stopped the ofborg patreon, I think .github/FUNDING.yml should be removed (I think it inherits from the org configuration if removed, which is open collective)
orivej has quit [Ping timeout: 258 seconds]