gchristensen changed the topic of #nixos-dev to: NixOS Development (#nixos for questions) | NixOS 19.09 is released! https://discourse.nixos.org/t/nixos-19-09-release/4306 | https://hydra.nixos.org/jobset/nixos/trunk-combined https://channels.nix.gsc.io/graph.html | https://r13y.com | 19.09 RMs: disasm, sphalerite; 20.03: worldofpeace, disasm | https://logs.nix.samueldr.com/nixos-dev
drakonis has quit [Ping timeout: 260 seconds]
drakonis has joined #nixos-dev
drakonis has quit [Ping timeout: 260 seconds]
drakonis has joined #nixos-dev
lovesegfault has joined #nixos-dev
orivej has quit [Ping timeout: 268 seconds]
lovesegfault has quit [Ping timeout: 248 seconds]
drakonis has quit [Quit: WeeChat 2.7]
justanotheruser has quit [Ping timeout: 260 seconds]
justanotheruser has joined #nixos-dev
colemickens_ has quit [Quit: Connection closed for inactivity]
drakonis has joined #nixos-dev
drakonis has quit [Quit: WeeChat 2.7]
ris has quit [Ping timeout: 258 seconds]
justanotheruser has quit [Ping timeout: 246 seconds]
justanotheruser has joined #nixos-dev
drakonis has joined #nixos-dev
drakonis has quit [Quit: WeeChat 2.7]
ixxie has joined #nixos-dev
orivej has joined #nixos-dev
orivej has quit [Ping timeout: 240 seconds]
orivej has joined #nixos-dev
orivej has quit [Ping timeout: 240 seconds]
justanotheruser has quit [Ping timeout: 248 seconds]
justanotheruser has joined #nixos-dev
ris has joined #nixos-dev
justanotheruser has quit [Ping timeout: 260 seconds]
orivej has joined #nixos-dev
cjpbirkbeck has quit [Quit: Quitting now.]
orivej has quit [Ping timeout: 258 seconds]
pie_ has joined #nixos-dev
<pie_> Can someone please please write a PR for this? https://github.com/NixOS/nixpkgs/issues/65375 At least a warning would be nice and I don't have the capacity to look into it right now.
<{^_^}> #65375 (by deliciouslytyped, 22 weeks ago, open): GRUB silently generates wrong config (cryptsetup default is now LUKS2)
<pie_> It can't be too hard (???)
<pie_> (said everyone ever)
<gchristensen> if it can't be too hard, I look forward to your PR :P
<pie_> ;'P
ixxie has quit [Ping timeout: 240 seconds]
<sphalerite> Mic92: worldofpeace: spacekookie: niksnut: shlevy: just to confirm, the meeting is at 12:30 UTC/13:30 CET tomorrow, right?
<Mic92> sphalerite: yes
ajs124 has quit [Ping timeout: 260 seconds]
ajs124 has joined #nixos-dev
__monty__ has joined #nixos-dev
drakonis has joined #nixos-dev
obadz- has joined #nixos-dev
obadz has quit [Ping timeout: 252 seconds]
obadz- is now known as obadz
zarel_ has quit [Ping timeout: 260 seconds]
zarel has joined #nixos-dev
<spacekookie> Indeed
pie_ has quit [Ping timeout: 258 seconds]
drakonis has quit [Quit: WeeChat 2.7]
pie_ has joined #nixos-dev
drakonis has joined #nixos-dev
justanotheruser has joined #nixos-dev
pie_ has quit [Quit: pie_]
pie_ has joined #nixos-dev
pie_ has quit [Client Quit]
__monty__ has quit [Quit: leaving]
lovesegfault has joined #nixos-dev
lovesegfault has quit [Client Quit]
<{^_^}> firing: BuildsStuckOverTwoDays: https://status.nixos.org/prometheus/alerts
<infinisil> Idea: If we disallow `ls` on /nix/store, we can store secrets in it without problems, since only those who know the hash of the outputs can access them
<infinisil> Is that logic sound?
<lassulus> hash is easy to find out sometimes, for example its referenced inside a systemd file which is referenced from /run/current-system
<{^_^}> resolved: BuildsStuckOverTwoDays: https://status.nixos.org/prometheus/alerts
<clever> infinisil: the problem is, you can read the thing that references the secret
<clever> infinisil: so, if i look in /run/current-system/, i can eventually find the path to the secret
<infinisil> lassulus: clever: Hm true..
<infinisil> Guess that doesn't work just like that
<infinisil> And I don't see a way to fix this easily
<MichaelRaskin> And it leaks in a lot of place, starting from GC printing deleted paths…
<clever> nix-store -qR
zarel has quit [Ping timeout: 260 seconds]
zarel has joined #nixos-dev
ixxie has joined #nixos-dev
lovesegfault has joined #nixos-dev
orivej has joined #nixos-dev
ixxie has quit [Ping timeout: 268 seconds]
orivej has quit [Ping timeout: 268 seconds]