Florian Klink

Spun out of https://github.com/google/nixery/pull/132#issuecomment-905520242 Right now we add `cacert` and `iana-etc` from nixpkgs into every image (see `builder/builder.go`). We sometimes add a `/usr/bin/env` symlink (if `coreutils` is part of the...

Support signed URLs with Google Cloud Application Default Credentials (ADC)

1

When running nixery on a GCP instance with the default service account / in a cloud run function / GKE, nixery should still be able to emit signed URLs to...

URL scheme: allow building `withPackages`-style derivations

4

Nixpkgs provides some `*.withPackages` functions to build an environment assembled so that it's able to find all modules specified afterwards: examples: - `python*.withPackages (p: [ p.requests ])` - `lua*.withPackages (...

Currently, scappy seems to be unable to send unicast IPv6 packets: Verify to have a valid IPv6 default route ```python >>> from scapy.all import * >>> send(IPv6(dst="2a00::1")) WARNING: Mac address...

sdjournal: pkg-config isn't queried for include paths

1

Moved over from https://github.com/coreos/go-systemd/pull/141#issuecomment-761609471 https://github.com/coreos/go-systemd/pull/141 moved libsystemd from being linked at build time to being `dlopen`-ed at runtime. However, that PR entirely removed the `pkg-config` directive. As `pkg-config` isn't only...

k3s on equinix metal docs don't describe $EIP

2

https://kube-vip.io/hybrid/daemonset/#k3s-overview-on-equinix-metal mentions a `export EIP=x.x.x.x`, but it's very unclear what this should point to. Is that meant to be the (elastic) address of kube-apiserver? As far as I understand the...

Do not re-establish ssh connection while copying each and every secret

4

It might make sense to have morph use the go ssh client implementation instead of shelling out to the `ssh` binary. This should be a way to address morph failing...

support sending logs in Loki format

14

## Feature Request Right now, Talos supports sending logs as json lines via UDP and TCP: https://www.talos.dev/docs/v0.14/guides/logging/#sending-logs Is it possible to also add native support to push to a Loki...

talosctl: make `--nodes` optional for `bootstrap` and `kubeconfig` commands

6

I put both port tcp/50000 and tcp/6443 behind a load balancer balancing among all controlplane nodes, gave the load balancer a DNS record and added that hostname to `machine.certSANs`. `talosconfig`'...

We currently seem to rely on `NIX_PATH` from the environment, which is impure. We should support passing in an arbitrary `NIX_PATH`, which is passed down to the `nix-instantiate` command.