<cole-h>
Is the sandboxing situation on darwin satisfactory to the point where we can make that change?
<cole-h>
cc LnL since it's your machine/VM/whatever that could potentially be compromised...
<LnL>
networking is what I'm most concerned about for my builder
<cole-h>
gchristensen: Maybe you were thinking the fact that everybody is now allowed to command ofborg, period (the "known-users" stuff)
<LnL>
which sandboxing doesn't help with, which I do have enabled there
<cole-h>
A fair concern. Then, let's keep it as-is for now, and require the manual intervention we've had up to this point :P
<gchristensen>
ah that is it
<LnL>
I should really look into the firewall
<LnL>
bet y'all could make a pr that turns my speakers on and whatnot
<cole-h>
I plan to never merge any "trusted users" PRs, since I'm not nearly involved with all the facets of our community to feel comfortable making the decision whether or not a user is trustworthy (as stipulated in the readme)
<cole-h>
(Except for that one time I merged my own when I was initally added to the ofborg team :P)
<cole-h>
LnL: Haha. You start hearing some Queen or something all of a sudden :P
orivej_ has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 256 seconds]
orivej has joined #nixos-borg
orivej has quit [Quit: No Ping reply in 180 seconds.]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 264 seconds]
orivej has joined #nixos-borg
orivej has quit [Ping timeout: 256 seconds]
orivej has joined #nixos-borg
<{^_^}>
[ofborg] @jtojnar opened pull request #526 → config.public.json: Rename the GNOME label → https://git.io/JJ46n
orivej has quit [Ping timeout: 256 seconds]
orivej has joined #nixos-borg
<jtojnar>
cole-h how long do the ofborg deploys take? should we rename the label immediately after the PR is merged?
<cole-h>
jtojnar: Recently, it depends on how cooperative packet is being... Some take ~10 minutes, some ~20.
* gchristensen
crosses fingers, toes
<cole-h>
lol. OK, gonna merge that and see if I can't get it deployed before I have to go...