<cole-h>
gchristensen: should trusted users become a thing of the past and just let everybody start darwin jobs? (cuz I've seen you say that before, and it isn't strictly true, unless I missed something)
<gchristensen>
I think probably so
<gchristensen>
but in a way we could easily undo if we needed to
<cole-h>
`git revert` is pretty easy :P
<gchristensen>
:)
<gchristensen>
I'm thinking more of a setting we flip instead of removing the platform/user ACL code
<cole-h>
just wondering if the sandbox issue has been resolved (IIRC the original reason why only trusted users were allowed)
<gchristensen>
no
<gchristensen>
but the mac erases itself on a highly regular basis
<cole-h>
but I guess it doesn't matter since we erase it so frequently...
<cole-h>
yeah :P
<gchristensen>
(every ~40GB... :))
<cole-h>
OK, I'll make a ticket and see if I can't get to it tomorrow.
<cole-h>
for the setting to flip, would a `"enable_trusted_users": true/false,` in `config.public.json` be satisfactory, or did you have another idea?
<gchristensen>
+1
<cole-h>
I guess if it's running on all PRs, then it'll restart a lot more frequently
<cole-h>
gchristensen: edited, thanks :P somehow missed the most important reason why it's "OK" to ignore the sandbox issue
<gchristensen>
:D
<cole-h>
(also, if not done already, probably want to make sure it can't hop the network back towards you, and only that you can hop the network towards it)
<gchristensen>
I also go get all the ingredients to make spaghetti and forget the noodle
<cole-h>
hahaha
orivej has joined #nixos-borg
cole-h has quit [Ping timeout: 260 seconds]
LnL has joined #nixos-borg
LnL has quit [Client Quit]
supersandro2000 has quit [Killed (orwell.freenode.net (Nickname regained by services))]