2025-06-12
Attendees: hexa, Mic92, tal
erethon:
- Can't attend today, but here's some updates
- Security tracker:
- Staging host is up on Hetzner, working on setting up the security tracker software on it
- Work on https://github.com/Nix-Security-WG/nix-security-tracker/pull/451 and https://github.com/Nix-Security-WG/nix-security-tracker/issues/223 because with 25.05 the host is running out of inodes on ext4.
- Working on some proper architectural docs for the project
hexa:
- Anubis deployed
- Access to build results is not protected, fixes the nix.dev manual access
- Further work by Mic92: https://github.com/NixOS/nix.dev/pull/1154
- Tarball Mirror fixes merged/deployed
- https://github.com/NixOS/nixpkgs/pull/414869
- https://github.com/NixOS/nixpkgs/pull/361700
Mic92
- GitHub Fastly Proxying
- Naming question
- Suggestion: artifacts.nixos.org
- Merging with releases.nixos.org complicated
- Ratelimits unclear, given that one Shield Pop will always ask for the ISO
- https://docs.fastly.com/products/network-services-resource-limits
- Look into segmented caching for fastly
- Retire releases.nixos.org
- By moving everything relevant to GitHub releases
- Build and hosts ISOs on GitHub and proxy via Fastly test formatting