depot - monorepo for the virus lounge

Age	Commit message (Collapse)	Author	Files	Lines
2019-08-03	feat(go): Support signed GCS URLs with static keys	Vincent Ambo	1	-20/+57
	Google Cloud Storage supports granting access to protected objects via time-restricted URLs that are cryptographically signed. This makes it possible to store private data in buckets and to distribute it to eligible clients without having to make those clients aware of GCS authentication methods. Nixery now uses this feature to sign URLs for GCS buckets when returning layer URLs to clients on image pulls. This means that a private Nixery instance can run a bucket with restricted access just fine. Under the hood Nixery uses a key provided via environment variables to sign the URL with a 5 minute expiration time. This can be set up by adding the following two environment variables: * GCS_SIGNING_KEY: Path to the PEM file containing the signing key. * GCS_SIGNING_ACCOUNT: Account ("e-mail" address) to use for signing. If the variables are not set, the previous behaviour is not modified.
2019-08-03	fix(go): Registry API acknowledgement URI has a trailing slash	Vincent Ambo	1	-6/+6
	Previously the acknowledgement calls from Docker were receiving a 404 (which apparently doesn't bother it?!). This corrects the URL, which meant that acknowledgement had to move inside of the registryHandler.
2019-08-03	chore(go): Remove 'builder' metapackage	Vincent Ambo	1	-5/+2
	This metapackage isn't actually particularly useful (stdenv is rarely what users want).
2019-08-02	feat(go): Return error responses in registry format	Vincent Ambo	1	-9/+35
	The registry specifies a format for how errors should be returned and this commit implements it: https://docs.docker.com/registry/spec/api/#errors
2019-08-02	feat(go): Return errors with correct status codes to clients	Vincent Ambo	1	-3/+17
	Uses the structured errors feature introduced in the Nix code to return more sensible errors to clients. For now this is quite limited, but already a lot better than before: * packages that could not be found result in 404s * all other errors result in 500s This way the registry clients will not attempt to interpret the returned garbage data/empty response as something useful.
2019-08-02	fix(go): Return response code 500 if Nix builds fail	Vincent Ambo	1	-0/+1

2019-07-31	feat(go): Add environment configuration for package set sources	Vincent Ambo	1	-11/+74
	Adds environment variables with which users can configure the package set source to use. Not setting a source lets Nix default to a recent NixOS channel (currently nixos-19.03).
2019-07-30	refactor(main): Introduce more flexible request routing	Vincent Ambo	1	-57/+62
	Instead of just dispatching on URL regexes, use handlers to split the routes into registry-related handlers and otherwise(tm). For now the otherwise(tm) consists of a file server serving the static directory, rather than just a plain match on the index route.
2019-07-23	chore: Add license scaffolding & contribution guidelines	Vincent Ambo	1	-0/+14

2019-07-23	style(main): Reflow comments to 80 characters maximum	Vincent Ambo	1	-42/+51

2019-07-23	feat(main): Add additional envvars to configure Nixery	Vincent Ambo	1	-32/+49
	Previously the code had hardcoded paths to runtime data (the Nix builder & web files), which have now been moved into configuration options. Additionally configuration for the application is now centralised in a single config struct, an instance of which is passed around the application. This makes it possible to implement a wrapper in Nix that will configure the runtime data locations automatically.
2019-07-23	chore: Import Nixery from experimental	Vincent Ambo	1	-0/+309
	Moves the existing Nixery code base to a git repository and switches to public equivalents of libraries used.