From e9686f84d9be4aa5adace6ff531ff00558239f75 Mon Sep 17 00:00:00 2001 From: Florian Klink Date: Thu, 30 Mar 2023 16:30:22 +0200 Subject: fix(views/kit): communicate :unsign in the tvl-kit URL directly Instead of prepending :unsign to all URLs in josh-proxy, and for all calls to filteredGitPush, explicitly use it only in the filter we use for the `export-kit` extraStep. This means, people cloning tvl-kit via > https://code.tvl.fyi/depot.git:workspace=views/kit.git now need to update the URL to point to > https://code.tvl.fyi/depot.git:unsign:workspace=views/kit.git instead. git@github.com:tvlfyi/kit.git will keep the same hashes, as it's updated to export the unsigned workspace view of it. This is less invasive than dooming every josh workspace to have to strip signatures. Change-Id: I6de05182fad4c3695081388c3bbf37306521d255 Reviewed-on: https://cl.tvl.fyi/c/depot/+/8369 Autosubmit: flokli Reviewed-by: tazjin Tested-by: BuildkiteCI --- ops/modules/josh.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ops/modules') diff --git a/ops/modules/josh.nix b/ops/modules/josh.nix index c7256259d4ea..4591ebf0f078 100644 --- a/ops/modules/josh.nix +++ b/ops/modules/josh.nix @@ -26,7 +26,7 @@ in DynamicUser = true; StateDirectory = "josh"; Restart = "always"; - ExecStart = "${depot.third_party.josh}/bin/josh-proxy --no-background --local /var/lib/josh --port ${toString cfg.port} --remote https://cl.tvl.fyi/ --require-auth --filter-prefix ':unsign'"; + ExecStart = "${depot.third_party.josh}/bin/josh-proxy --no-background --local /var/lib/josh --port ${toString cfg.port} --remote https://cl.tvl.fyi/ --require-auth"; }; }; }; -- cgit 1.4.1