1
0
Fork 0
mirror of https://github.com/zhaofengli/attic.git synced 2024-12-14 11:57:30 +00:00
Commit graph

360 commits

Author SHA1 Message Date
Zhaofeng Li
4775242756
Merge pull request #202 from zhaofengli/nixos-remove-same-dir
nixos: Remove --same-dir in systemd-run invocation
2024-11-10 13:29:24 -07:00
Zhaofeng Li
edbe66288e nixos: Remove --same-dir in systemd-run invocation
`--working-directory /` was added in #26 but we forgot to remove
`--same-dir`.

Fixes #201.
2024-11-10 12:10:24 -07:00
Zhaofeng Li
75d4dd962d
Merge pull request #198 from zhaofengli/renovate/notify-7.x
fix(deps): update rust crate notify to v7
2024-11-10 07:47:35 -07:00
Zhaofeng Li
566494780a
Merge pull request #196 from zhaofengli/renovate/determinatesystems-nix-installer-action-15.x
chore(deps): update determinatesystems/nix-installer-action action to v15
2024-11-10 07:47:11 -07:00
renovate[bot]
7ee3fcdd41
fix(deps): update rust crate notify to v7 2024-11-10 01:45:59 +00:00
renovate[bot]
82bf5d645a
chore(deps): update determinatesystems/nix-installer-action action to v15 2024-11-09 23:04:03 +00:00
Zhaofeng Li
a02bf38a75
Merge pull request #194 from zhaofengli/renovate/configure
chore: Configure Renovate
2024-11-09 15:59:32 -07:00
Zhaofeng Li
cc136a24e4 renovate.json: Group non-major updates together 2024-11-09 15:07:11 -07:00
Zhaofeng Li
7f02603740 renovate.json: Enable Nix & lock file maintenance 2024-11-09 15:07:11 -07:00
renovate[bot]
e8b7bc035e
Add renovate.json 2024-11-09 01:03:23 +00:00
Zhaofeng Li
d0b66cf897
Merge pull request #191 from zhaofengli/fix-static
flake/packages: Update patch for static builds
2024-11-06 08:20:42 -07:00
Zhaofeng Li
48c8b395bf
Merge pull request #186 from zhaofengli/nixos-hardening
nixos: Apply changes from nixpkgs module
2024-10-29 21:01:35 -06:00
Zhaofeng Li
2f9d76915a flake/packages: Update patch for static builds 2024-10-29 12:26:08 -06:00
Adam Stephens
ba5ba2d6bc nixos/atticd: wants network-online.target
fixes:

trace: evaluation warning: atticd.service is ordered after 'network-online.target' but doesn't depend on it
2024-10-29 12:25:04 -06:00
Zhaofeng Li
6a82638aa8 nixos: Adjust Nix store warning for environmentFile 2024-10-29 12:23:15 -06:00
Zhaofeng Li
94fa54632d nixos: Use lib.getExe
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
78a3119c6d nixos: Depend on network-online.target for Postgres
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
9acfdccfdf nixos: Add service hardening
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
ebd0618526 nixos: Rename credentialsFile option to environmentFile
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
7ffcf2d138 nixos: Match nixpkgs formatting
Co-authored-by: Adam Stephens <adam@valkor.net>
2024-10-29 12:23:15 -06:00
Zhaofeng Li
b3a76bc237 package: Add mainProgram 2024-10-29 12:23:15 -06:00
Zhaofeng Li
b322faab01
Merge pull request #192 from valan/patch-1
Add brief description of how to disable use of a cache
2024-10-29 12:20:51 -06:00
Zhaofeng Li
0fe1b1cd34
Merge pull request #190 from zhaofengli/gha-integration-tests
Move integration tests to GitHub Actions
2024-10-28 12:29:30 -06:00
valan
c1d6abeb28
Update README.md
Brief description of how to disable use of a cache
2024-10-26 15:51:38 -07:00
Zhaofeng Li
b109cc369d .github/build: Build packages in Nix matrix
Currently only integration tests.
2024-10-26 12:49:18 -06:00
Zhaofeng Li
0acbde64ef .github/build: Add job to build main packages 2024-10-26 12:49:18 -06:00
Zhaofeng Li
d20160548e flake/integration-tests: Expose GitHub Actions matrix
Currently only integration tests.
2024-10-26 12:49:18 -06:00
Zhaofeng Li
e305e7ef79 .github: Fix CI cache push condition
$ATTIC_TOKEN is not available after setup.
2024-10-26 12:49:18 -06:00
Zhaofeng Li
2b05b7d986
Merge pull request #187 from cole-h/stream-error-better
Display anyhow error chains better
2024-10-16 16:09:56 -06:00
Cole Helbling
566ef5ebc3 Display anyhow error chains better
The default Display / `{}` formatter only shows the outermost error. We
have to use `{:#}` to show all the errors in the chain. This will make
stream errors somewhat more informational.

Before:

    Stream error: Storage error: service error

After:

    Stream error e=Storage error: service error: NoSuchKey: The specified key does not exist.: NoSuchKey: The specified key does not exist.

(after I manually mucked with the DB to change the S3 url for an item to
a non-existent name)
2024-10-15 13:33:36 -07:00
Zhaofeng Li
e5c8d2d509
Merge pull request #185 from zhaofengli/nixos-use-hs256-placeholder-secret
nixos: Switch back to setting a placeholder HS256 secret
2024-10-10 10:22:51 -06:00
Zhaofeng Li
f36329a299 nixos: Switch back to setting a placeholder HS256 secret when checking config 2024-10-08 08:31:44 -06:00
Zhaofeng Li
1b29816235
Merge pull request #182 from zhaofengli/push-stdin-fixes
client/push: Misc fixes
2024-10-06 13:03:10 -06:00
Zhaofeng Li
880ca6d477
Merge pull request #181 from zhaofengli/hs256-allow-arbitrary-byte-string
token: Don't require valid UTF-8 for HS256 secrets
2024-10-06 12:29:24 -06:00
Zhaofeng Li
96383ccab4 integration-tests/basic: Add --stdin test 2024-10-06 12:29:03 -06:00
Zhaofeng Li
c54c26d82e client/push: Disallow paths on the command line with --stdin 2024-10-06 12:29:03 -06:00
Zhaofeng Li
014fb92a9e client/push: Suggest --stdin if stdin isn't a terminal 2024-10-06 12:29:03 -06:00
Zhaofeng Li
8f215042db client/push: Ignore empty lines 2024-10-06 12:29:03 -06:00
Zhaofeng Li
3d10425b6a server/config: Fail fast on token decoding errors 2024-10-06 11:19:03 -06:00
Zhaofeng Li
dcadbec66b token: Don't require valid UTF-8 for HS256 secrets 2024-10-06 11:19:03 -06:00
Zhaofeng Li
b4338a1670
Merge pull request #179 from zhaofengli/config-allow-omitting-jwt
server/config: Allow omitting jwt section entirely
2024-10-05 18:14:40 -06:00
Zhaofeng Li
77f76d55ed server/config: Allow omitting jwt section entirely 2024-10-05 17:42:16 -06:00
Zhaofeng Li
858120c450
Merge pull request #177 from zhaofengli/rs256-support
Support RS256 JWTs
2024-10-05 12:34:44 -06:00
Zhaofeng Li
d2363b5879 server/config: Provide instructions for the user to migrate their HS256 config 2024-10-05 11:50:48 -06:00
Zhaofeng Li
0d2b20025e token: Bring back HS256 test
This does make it decode the keys every iteration in the stability
test, which isn't too much of an issue and can be fixed later.
2024-10-05 11:50:48 -06:00
Zhaofeng Li
5d6560e409 Merge branch 'main' into HEAD 2024-10-05 11:50:16 -06:00
Zhaofeng Li
61ebdef2e2
Merge pull request #176 from jzbor/push-from-stdin
attic-client/push: Add flag to read paths from stdin
2024-10-04 13:36:12 -06:00
Zhaofeng Li
c5764fca3b client/push: Use PushSession for --stdin
Instead of eagerly consuming stdin, read line-by-line and feed into
PushSession. This allows for a `nix-build | attic push` workflow.
2024-10-04 13:18:15 -06:00
Zhaofeng Li
c4c7341a49
Merge pull request #78 from apeschar/atticadm-pipe
Use --pipe for systemd-run
2024-10-04 10:02:33 -06:00
Albert Peschar
46b83a04d9 Use --pipe for systemd-run
Without --pipe stderr and stdout are combined, breaking scripts that use
atticd-atticadm when it generates warnings.
2024-10-04 09:42:42 -06:00