Graham Christensen

Project Keys Can't Manage Spot Instances

2

This is a general problem with Metal's API and how it handles authentication. However, it shows up in terraform too. Using a project token, I can't request `https://api.equinix.com/metal/v1/spot-market-requests/*`: ``` 2021-01-07T09:14:02.052-0500...

For example, provide additional metadata not baked in to the image.

### Description It'd be slick to implement the concepts from https://determinate.systems/posts/hydra-deployment-source-of-truth in Terraform. Specifically: * Get the build information for a job's latest successful build, and latest successful build from...

``` Skipping "/boot/EFI/systemd/systemd-bootx64.efi", since same boot loader version in place already. Skipping "/boot/EFI/BOOT/BOOTX64.EFI", since same boot loader version in place already. Error: Os { code: 21, kind: IsADirectory, message: "Is...

Support booting through a signed shim

1

As an initial step towards full compatibility with Microsoft keys.

Here is a small sample: ``` + /nix/store/y8cginvrvarrm1x1axvivynv3rnajvqp-bootspec-unreleased/bin/generator /nix/var/nix/profiles/system-10-link /nix/var/nix/profiles/system-11-link /nix/var/nix/profiles/system-12-link /nix/var/nix/profiles/system-13-link /nix/var/nix/profiles/system-14-link /nix/var/nix/profiles/system-15-link /nix/var/nix/profiles/system-16-link /nix/var/nix/profiles/system-17-link /nix/var/nix/profiles/system-18-link /nix/var/nix/profiles/system-19-link /nix/var/nix/profiles/system-1-link /nix/var/nix/profiles/system-20-link /nix/var/nix/profiles/system-21-link /nix/var/nix/profiles/system-22-link /nix/var/nix/profiles/system-23-link /nix/var/nix/profiles/system-24-link /nix/var/nix/profiles/system-25-link /nix/var/nix/profiles/system-26-link /nix/var/nix/profiles/system-27-link /nix/var/nix/profiles/system-28-link /nix/var/nix/profiles/system-29-link /nix/var/nix/profiles/system-2-link...

Uploading keys is erroring and I don't know why

2

``` $ colmena upload-keys --on kif --impure -v warning: Git tree '/home/grahamc/Documents/network' is dirty [INFO ] Using flake: git+file:///home/grahamc/Documents/network [INFO ] Enumerating nodes... [INFO ] Selected 1 out of 4...

Stricter Network Sandbox on macOS

7

**Is your feature request related to a problem? Please describe.** Today, one of hydra.nixos.org's Macs on Hetzner got an abuse report threatening to shut down the server. What happened is...

Maybe setting the permissions of the temporary file is a misfeature?

1

Today, tempfile sets the permissions to 0600. When the file is persisted, this mode is then propagated. Unfortunately 0600 isn't a universally applicable mode, especially in cases where the temporary...

Why does `unban` have `apply`, and why is it default-false?

1

I find I almost always unban first without apply. Then, when I realize my mistake I have to re-ban them then unban them again with `apply` for it to actually...