Age | Commit message (Collapse) | Author | Files | Lines |
|
Change-Id: I6b7e086d2f10751f2f8b8c90eded01edcbfabadb
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4317
Tested-by: BuildkiteCI
Reviewed-by: tazjin <mail@tazj.in>
Autosubmit: grfn <grfn@gws.fyi>
|
|
We can use the reverse swap trick to get a forward fold.
Change-Id: I88185e2ff0b41ec1454f414db2d24b1c8173ac2d
|
|
By default besadii will set the `Verified` label in Gerrit. This adds
a config option to set a different label instead if desired.
Co-authored-by: Vincent Ambo <mail@tazj.in>
Change-Id: I254159e46994e01182987ed5e5e26e27c57f46ce
|
|
Get flash working via a functioning cookie-store session middleware, and
display flash messages if present at the top of every page.
Change-Id: If5f267dee3f41ef7954ea82667822c596e1b0474
|
|
Change-Id: I000f115298dc8d3c18b5c0a6581e5423aa6892e7
|
|
Change-Id: Ic158a2c77e92410f078b67907b2a9537e2cb1392
|
|
This will eventually become a signup sheet + no-show tracker for my
local board game meetup group
Change-Id: Id8d1d80d95d1e2fda5041275cff2fecfd6fa43f1
|
|
Change-Id: Iadf53a3cfa8ed6e7c55b3681d813239cd95bd29e
|
|
Change-Id: Iaf04d71352740552c1101d1e8cbb80a770b40a7b
|
|
Change-Id: I39410171402cedc3ee8d9ac972557656ed12de53
|
|
Change-Id: I9cfa8a28854cbee7e8e1b457faf9c572353e803f
|
|
Change-Id: Ibcea43d2e51f14d8b1b021050310f88d44d970d3
|
|
Change-Id: Id6eeee0f97b9a7195664e5c2434e9d545929a042
|
|
git-subtree-dir: users/wpcarro
git-subtree-mainline: 464bbcb15c09813172c79820bcf526bb10cf4208
git-subtree-split: 24f5a642af3aa1627bbff977f0a101907a02c69f
Change-Id: I6105b3762b79126b3488359c95978cadb3efa789
|
|
Change-Id: I90e7a47d5418abeff1ae7cc5757b6a8b3b0d1086
|
|
Change-Id: I8c8b535defb42f15eafc816ebe953e51b11ea702
|
|
Change-Id: Id14281f7b18ddaf6875e5dd8398249a10a9474af
|
|
Change-Id: Ie035134a4b3d478ce836aa00016122e0f49a5a28
|
|
Change-Id: Ifbd50274f0b09305991a49e7453ac1f13089e57e
|
|
... this was overdue!
Change-Id: I435768007db4a0f3663e1aa9376e8cae4d1d0381
|
|
New hash received via an authenticated channel, of course.
Change-Id: Idca688d8a8bb2e943aef3937f54d292b48f79fad
|
|
alacritty is used by grfn atm.
Change-Id: I10dacd301044f9c37790e22e955cb068fcbd2cfc
|
|
This version interpolated in by Nix in the lines above instead of
being loaded from Elisp, as that would require starting telega inside
of that build (which is a bit messy because of async elisp).
Change-Id: I775844acb6928db76516f06188b19c713f765ab8
|
|
This keeps biting me at runtime whenever these are out of sync.
Change-Id: If523974e6ad2754ea19123eda0e5fda0a865f408
|
|
The stable versions are too old to be compatible with nixpkgs-unstable
Change-Id: I8edb125024460f605ff640cd486779877fa0d256
|
|
Change-Id: Ia32f0a1c158255a098e7d4017bb585b5c4e3c657
|
|
Change-Id: I759182ccb49d7a72ca8a031c829608c9eee70277
|
|
Change-Id: Icae43b17a95c638429351273bb16111097c3e594
|
|
* foot (me)
* kitty (lukegb)
Change-Id: I65303e39c4adb05e362792a544134fc2884175bf
|
|
I keep using these in nix-shell but really they should just be
installed.
Change-Id: Ic2c36bae8b582fef88029b288accdfd3c8bc0f1b
|
|
Currently in NixOS configuration using agenix secrets there is no
build time validation of secret paths - things fail at runtime (system
activation).
To prevent that, this CL makes the secrets part of the tree based on
the same configuration file used by agenix itself.
This guards against:
* agenix secrets.nix definition for a non-existent file
* age.secrets value in a NixOS config for a non-existent secret
Change-Id: I5b191dcbd5b2522566ff7c38f8a988bbf7679364
|
|
Change-Id: I14043c2bd9da43a6b7de65baf0ebb75eaf3c4e22
|
|
Change-Id: Idf13f7737dd51e74e87093e07cdf22ad24407944
|
|
The l= is part of the command, not of the shape of commands, and the
previous command concatenation logic was wrong because of that.
Fix is done in the most obvious way: Make the l= part of the command.
Change-Id: Ia3c08c3da60fe5fc38f29a2d94adcd123e4f3052
|
|
... okay, this is like the 5th error related to something with this
and file paths. Need to write some validation logic.
Change-Id: I4314818aa1bc25b8cf7bd3593850d3836ccb867c
|
|
Git only allows binary names prefixed with `git-credential-` if the
path to the helper is not absolute.
Why? Who knows.
Change-Id: I216b2a621f62a73f05e21def7ec8016b29ede892
|
|
Relates to b/161
Change-Id: I508e5a0eacab668f4bd39a2c888d894b96bed093
|
|
I *think* this is the final step for b/161
Change-Id: Ie7a2198a045f2f1866a245884ab0f5414e205327
|
|
... really would like some assertion helpers for this sort of stuff.
Change-Id: I32d1de18ebfbbdfa5128a8fbdad2efcc511f8514
|
|
Currently this functionality is provided by a shell script stored in
/etc/secrets (which has the password value hardcoded).
This needs to happen in a separate commit from the one that changes
the pipeline to avoid breaking it (it needs to be deployed first).
Change-Id: I680754c828ccefbacfcf0d5c813a4bc19493ba4c
|
|
... and also the public key, just to keep the distribution mechanism
the same.
Change-Id: Ief14daf9344c0fb99eeb5789c1ec9bfb1f12bee0
|
|
We already checked this in, but this commit adds the configuration for
making use of it.
There are two copies of besadii's JSON configuration with different
permissions.
Note that the buildkite-graphql-token path needs to be updated in
static-pipeline.yml, but this needs to happen in a separate commit
after deploy because the pipeline will break otherwise.
Change-Id: I6fab4bf1a2e679df7cf76521e2b53bd9dadbac62
|
|
Change-Id: Id141758135c796881e91d20b950dae74c40d9ab3
|
|
This makes this function a true rubberstamp again, leading to
rubberstamped CLs automatically being merged after CI passes.
This is similar to the initial functionality we had last year, where
this directly submitted changes, but with the addition of the CI
checks.
Change-Id: I946b074b968eb18a64c4edb0043f7a4af28759b4
|
|
This almost makes for a sort of fire&forget button, except we don't
have a way to automatically pick reviewers yet :)
Change-Id: I6f446270f8aaf0409ccb6321bdbb5c349079cd19
|
|
... this option really is a pitfall! The list of programs is now the
same as in the upstream module, plus curl and jq.
Change-Id: I29edae4b2400a2724f62df9efa1dc184a8b0af5f
|
|
Same approach as in cl/4270.
Change-Id: I3a5a3533ab97513a4b9d8cacc26d013b58441f93
|
|
Change-Id: Id2012e3ec6db21ff724245095a99d36ff9d7ad71
|
|
The DynamicUser + Group configuration does not work as planned, thus
the systemd LoadCredentials feature is used instead which makes the
file (which itself is only readable by root) available in a
memory-backed location only readable by the service.
The secret is only available to `ExecStart` commands, so units using
this feature can not be used with pre/post units and the like if those
commands need secrets.
To accommodate this, the merge of configuration files has been moved
into the service launch script, which is now the ExecStart= process.
For details take a look at https://www.freedesktop.org/software/systemd/man/systemd.exec.html#LoadCredential=ID:PATH
Change-Id: I693fe5677cc0d63c7aa485c2c7472457c5262166
|
|
It turns out the lib.mkAfter call doesn't behave as expected -
only *some* of the packages that are defaulted end up in the $PATH.
I suspect this is actually something else, e.g. these packages are
always added for some reason or another, and the option is completely
overridden every time.
Change-Id: I854c7198520d82b00e6338ed0fe653836226dc6d
|