Eelco Dolstra

`/root/.ssh/id_charon_vpn` is a different key by the way. It's the private _client_ key allowing the machine to create tunnels to other machines.

AFAIK, there is no way to remove/change user data after instance creation. If there were, we wouldn't have to generate a new host key, we could just wipe the user...

Maybe https://github.com/NixOS/nixos-org-configurations/commit/5e0fb0146b6ba4f053d452c1c3e0e28ac06ee443 had some unintended performance consequences? That was on June 23rd. Edit: that may well be the reason because previously initial downloads were done from a location close to...

My understanding is that it only increases traffic in the case where two users start downloading a file at the same time, which is probably not extremely common.

The current plan is to reduce the S3 bill for releases.nixos.org by expunging old releases (see #397). Self-hosting sounds very risky to me. Releases are not in fact easy to...

Reconstruction cannot depend on cache.nixos.org, since we're going to GC that too. In particular ISOs etc. will be deleted. Also, our disaster recovery cannot involve running some script that doesn't...

Yeah, this is not primarily about cost savings directly, but about getting rid of GC roots for the cache.nixos.org cleanup.

@flokli No, GCing is definitely necessary. It's what we promised to Amazon. (The increase in data traffic to the S3 bucket is the most pressing, but we also need to...

> I assume we didn't promise AWS to GC, but to reduce the amount of data we store there, no? Well, that's the same thing (unless we migrate away from...

> we could migrate away from S3 partially That's what I meant with "We can of course mirror closures elsewhere before GCing".