Commit graph

95 commits

Author SHA1 Message Date
6b19891c5e tumblrandom: fix some final issues 2024-09-14 13:28:45 +00:00
93efb988cb tumblrandom: do some redirect-based stuff to avoid timeouts while fetching 2024-09-09 00:28:21 +00:00
93d5a104da add hackyplayer/hacky-vouchproxy/emfminiserv bits 2024-06-21 22:34:53 +01:00
d666e85223 experiment with buildGo2, a potential replacement for buildGo 2024-02-11 04:23:47 +00:00
2c3bb4797c bnixbuild: reenable whitby 2024-01-06 22:54:47 +00:00
b3008a51c7 tumblrandom: use better random 2024-01-01 14:16:20 +00:00
678b7c66ed go/nix: some more features for nixbuild 2023-08-27 22:45:46 +00:00
3ab9b43f72 go/nix: implement more of nixbuild 2023-08-23 23:00:44 +00:00
6addc90a6e go/nix: unfinished 'copy' implementation 2023-08-19 21:14:04 +00:00
0563c19125 go/nix: teach bnix how to talk to a remote store over SSH 2023-08-17 23:48:07 +00:00
b11cc9d3c8 go/nix: start working on making it possible to build derivations 2023-08-17 02:51:18 +00:00
07350a1d42 secretsmgr: fix up host header 2023-08-06 18:23:33 +01:00
ca8f808647 tokend: make sure Host is set to something sensible 2023-07-19 16:28:02 +01:00
86f193d44a secretsmgr: add bare hostnames everywhere 2023-05-26 17:39:01 +01:00
429b4ce984 secretsmgr: sign also for bare hostname 2023-05-26 02:53:52 +01:00
a6974aebcc tumblrandom: init 2023-04-18 19:39:11 +00:00
de8756c4e6 bcacheup: use a limited channel rather than a sync.Cond 2023-04-16 00:36:34 +00:00
642ad1c6b7 bcacheup: limit upload concurrency to avoid OOMing 2023-04-15 15:10:06 +00:00
8fcb964bcd tokend: fix debugging line... 2023-03-12 15:30:04 +00:00
fa17ca41c9 tokend: add some logging about token issuance 2023-03-12 15:21:38 +00:00
60ae56053f go: add vault/vaultgcsblob to create vaultgs:// scheme which uses vault 2023-02-25 23:46:40 +00:00
35a9ec6bf5 nhsenglandtests: delete 2023-01-15 16:26:50 +00:00
cf74005139 nixstore: no . Derivers 2023-01-15 02:06:51 +00:00
aae1c8bea0 bcacheup: port to jamespfennell/xz, which is a wrapper around the C LZMA library rather than a Go reimplementation 2023-01-14 22:07:14 +00:00
78d3689dfe bcacheup: add --deep_check_galactic flag for ensuring that all references are properly uploaded 2022-11-08 15:25:48 +00:00
c157d8f91e remotestore: only the deriver's filename, not the full path 2022-11-08 12:33:17 +00:00
20617e22f1 nixstore/remotestore: add a mutex around the connection 2022-10-10 01:28:26 +01:00
75b39cfbf7 bcacheup: use nixstore.Open 2022-10-10 00:49:44 +01:00
d6118944fa nixstore: add remotestore 2022-10-09 23:48:18 +01:00
ad393eb647 go/nix: split Nix encoding stuff into nixwire package 2022-10-09 21:27:14 +01:00
4fc89a6c5d bcacheup: oops, flag.Interval should be flag.Duration 2022-10-09 18:15:14 +01:00
955b899bca bcacheup: slow down rate of output 2022-10-09 18:10:46 +01:00
9d16934db3 nix/gitlab-ci: attempt to hack around us wanting to read the nix store DB 2022-10-09 17:35:43 +01:00
98f53c5cd6 go/nix/bcacheup: init utility for uploading things to a binary cache 2022-10-09 16:46:55 +01:00
d03cc487f5 go/nix/bcachegc: init 2021-07-27 22:10:47 +01:00
e44e0f128e go/nix/nar: move narinfo to go/nix/nar/narinfo 2021-07-27 22:06:59 +01:00
50520f0230 go/nix/nar: init 2021-07-25 13:57:19 +01:00
e9a2ac4980 go/secretsmgr: set group after deleting files 2022-06-25 17:35:23 +00:00
a4c6ad17dc go/access: detect WSL differently 2022-05-17 01:36:33 +01:00
f5d66318a3 go/access: set principal name, set presence required by host 2022-03-25 01:47:18 +00:00
3a32590571 go/access: init 2022-03-25 01:24:21 +00:00
7592e76a31 tokend: init
tokend is responsible for issuing service-scoped tokens based on the token held
and generated by the Vault Agent.

It can also generate "server-user" scoped tokens, which exist for convenience's
sake: they are not a strong attestation of the user on the machine, and have
limited privileges compared to a Vault token issued using e.g. `vault login
-method=oidc`.
2022-03-20 17:47:52 +00:00
b719181dfe nixos: migrate to secretsmgr for sshd and ACME 2022-03-17 23:31:55 +00:00
037c6f0fd8 go/secretsmgr: add support for ACME certificate issuance 2022-03-17 01:26:18 +00:00
165fc4559c go/secretsmgr: init
Currently this only handles signing SSH certificates, but let's see where we go from here.
2022-03-15 03:07:34 +00:00
Luke Hanley (LukeHandle)
516ee3e20a go/minotarproxy: clean up Prometheus metrics 2022-01-22 15:28:31 +00:00
086f5fe597 journal2clickhouse: coerce things that look like strings back to strings
There's binary data sometimes, but on the whole I don't care about preserving
it properly (sorry), so let's just coerce it to a string if it is supposed to
go into a "proper" field.
2022-01-01 16:30:38 +00:00
7e848a2622 go/journal2clickhouse: fix the Classic Bug 2022-01-01 15:31:47 +00:00
c91a42948d journal2clickhouse: init 2022-01-01 15:08:52 +00:00
060f2cf96b nhsenglandtests: init 2021-12-31 07:00:32 +00:00