| 1 | # 2025-06-12 |
| 2 | |
| 3 | Attendees: hexa, Mic92, tal |
| 4 | |
| 5 | - erethon: |
| 6 | - Can't attend today, but here's some updates |
| 7 | - Security tracker: |
| 8 | - Staging host is up on Hetzner, working on setting up the security tracker |
| 9 | software on it |
| 10 | - Work on https://github.com/Nix-Security-WG/nix-security-tracker/pull/451 |
| 11 | and https://github.com/Nix-Security-WG/nix-security-tracker/issues/223 |
| 12 | because with 25.05 the host is running out of inodes on ext4. |
| 13 | - Working on some proper architectural docs for the project |
| 14 | |
| 15 | - hexa: |
| 16 | - Anubis deployed |
| 17 | - Access to build results is not protected, fixes the nix.dev manual access |
| 18 | - Further work by Mic92: https://github.com/NixOS/nix.dev/pull/1154 |
| 19 | - Tarball Mirror fixes merged/deployed |
| 20 | - https://github.com/NixOS/nixpkgs/pull/414869 |
| 21 | - https://github.com/NixOS/nixpkgs/pull/361700 |
| 22 | |
| 23 | - Mic92 |
| 24 | - GitHub Fastly Proxying |
| 25 | - Naming question |
| 26 | - Suggestion: artifacts.nixos.org |
| 27 | - Merging with releases.nixos.org complicated |
| 28 | - Ratelimits unclear, given that one Shield Pop will always ask for the ISO |
| 29 | - https://docs.fastly.com/products/network-services-resource-limits |
| 30 | - Look into segmented caching for fastly |
| 31 | - Retire releases.nixos.org |
| 32 | - By moving everything relevant to GitHub releases |
| 33 | - Build and hosts ISOs on GitHub and proxy via Fastly test formatting |