Commit graph

3051 commits

Author SHA1 Message Date
Tom Foster
baa47f9c6d
Correct name for restored build artifact 2024-04-23 09:27:20 +01:00
Tom Foster
4827be7007
.direnvrc is not used 2024-04-23 09:04:52 +01:00
Tom Foster
b649ed3727
Tar entire build environment 2024-04-22 23:06:31 +01:00
Tom Foster
f90136c9a3
Move artifact files to root 2024-04-22 22:07:36 +01:00
Tom Foster
a969163f79
Compress nix store to artifact filenames with special characters 2024-04-22 21:10:33 +01:00
Tom Foster
268d668107
Move secrets usage to env definition 2024-04-22 20:15:39 +01:00
Tom Foster
893566378c
Use artifact for build environment 2024-04-22 19:56:17 +01:00
Tom Foster
0a5af7c571
Fix login for container registries 2024-04-22 19:42:03 +01:00
Tom Foster
83d8b8bf29 direnv fix 2024-04-22 18:05:19 +01:00
Tom Foster
ccbf2e3870 Test less parallel CI 2024-04-22 18:00:57 +01:00
Tom Foster
5a8921558e Separate CI job for publishing docker manifest 2024-04-22 11:49:35 -04:00
strawberry
af6ed05b6a dont allow admin room to be made world readable
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 02:54:06 -04:00
Charles Hall
f59e47065c update flake.lock
Flake lock file updates:

• Updated input 'attic':
    'github:zhaofengli/attic/6eabc3f02fae3683bffab483e614bebfcd476b21?narHash=sha256-wSZjK%2BrOXn%2BUQiP1NbdNn5/UW6UcBxjvlqr2wh%2B%2BMbM%3D' (2024-02-14)
  → 'github:zhaofengli/attic/4dbdbee45728d8ce5788db6461aaaa89d98081f0?narHash=sha256-0O4v6e4a1toxXZ2gf5INhg4WPE5C5T%2BSVvsBt%2B45Mcc%3D' (2024-03-29)
• Updated input 'attic/nixpkgs':
    'github:NixOS/nixpkgs/aa9d4729cbc99dabacb50e3994dcefb3ea0f7447?narHash=sha256-KnIRG5NMdLIpEkZTnN5zovNYc0hhXjAgv6pfd5Z4c7U%3D' (2023-12-14)
  → 'github:NixOS/nixpkgs/07262b18b97000d16a4bdb003418bd2fb067a932?narHash=sha256-QoQqXoj8ClGo0sqD/qWKFWezgEwUL0SUh37/vY2jNhc%3D' (2024-03-25)
• Updated input 'attic/nixpkgs-stable':
    'github:NixOS/nixpkgs/1e2e384c5b7c50dbf8e9c441a9e58d85f408b01f?narHash=sha256-blbrBBXjjZt6OKTcYX1jpe9SRof2P9ZYWPzq22tzXAA%3D' (2023-12-17)
  → 'github:NixOS/nixpkgs/44733514b72e732bd49f5511bd0203dea9b9a434?narHash=sha256-akSgjDZL6pVHEfSE6sz1DNSXuYX6hq%2BP/1Z5IoYWs7E%3D' (2024-03-26)
• Updated input 'crane':
    'github:ipetkov/crane/55f4939ac59ff8f89c6a4029730a2d49ea09105f?narHash=sha256-Vz1KRVTzU3ClBfyhOj8gOehZk21q58T1YsXC30V23PU%3D' (2024-04-21)
  → 'github:ipetkov/crane/f6c6a2fb1b8bd9b65d65ca9342dd0eb180a63f11?narHash=sha256-qd/MuLm7OfKQKyd4FAMqV4H6zYyOfef5lLzRrmXwKJM%3D' (2024-04-21)
• Updated input 'fenix':
    'github:nix-community/fenix/aa45c3e901ea42d6633af083c0c555efaf948b17?narHash=sha256-nTaO7ZDL4D02dVC5ktqnXNiNuODBUHyE4qEcFjAUCQY%3D' (2024-03-28)
  → 'github:nix-community/fenix/19aaa94a73cc670a4d87e84f0909966cd8f8cd79?narHash=sha256-3pbv7UgAgetwz9YdjzIT/lZ6Rgj6wj6MR4mphBLyDjU%3D' (2024-04-21)
• Updated input 'fenix/rust-analyzer-src':
    'github:rust-lang/rust-analyzer/ad51a17c627b4ca57f83f0dc1f3bb5f3f17e6d0b?narHash=sha256-s/YOyBM0vumhkqCFi8CnV5imFlC5JJrGia8CmEXyQkM%3D' (2024-03-27)
  → 'github:rust-lang/rust-analyzer/55d9a533b309119c8acd13061581b43ae8840823?narHash=sha256-iN5QUlUq527lswmBC%2BRopfXdu6Xx7mmTaBSH2l59FtM%3D' (2024-04-20)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/2726f127c15a4cc9810843b96cad73c7eb39e443?narHash=sha256-UKcYiHWHQynzj6CN/vTcix4yd1eCu1uFdsuarupdCQQ%3D' (2024-03-27)
  → 'github:NixOS/nixpkgs/5c24cf2f0a12ad855f444c30b2421d044120c66f?narHash=sha256-XtTSSIB2DA6tOv%2Bl0FhvfDMiyCmhoRbNB%2B0SeInZkbk%3D' (2024-04-19)
2024-04-22 02:49:36 -04:00
Charles Hall
60756b16d5 add cargo-audit to the devshell
Apparently github actions VMs ship with it and that's how it was working
before? Cursed. We should control our own supply chain and also ensure
that local development uses the same version as CI.
2024-04-22 02:49:36 -04:00
Charles Hall
8a7e8271ad use lib.makeScope and files to organize packages
Some of the improvements here include:

* rocksdb can actually use jemalloc now instead of just pulling in a
  second rocksdb for no reason
* "complement-runtime" factored back out into shell file
* complement image no longer uses `mkDerivation` for `copyToRoot`
  because that's what `buildEnv` is for
* complement image no longer sets `SERVER_NAME`, complement already does
  that
* all packages were factored out into `callPackage`-able files for use
  with a custom `lib.makeScope pkgs.newScope`
* new version of `mkPackage` has options that are easier to use and
  override such as `features`
2024-04-22 02:49:36 -04:00
Charles Hall
e678af7601 always go through inputs 2024-04-22 02:49:36 -04:00
Charles Hall
d77aa94c66 remove dead code 2024-04-22 02:49:36 -04:00
Charles Hall
55dbca2aa9 get complement via flake inputs
Flake lock file updates:

• Added input 'complement':
    'github:matrix-org/complement/d73c81a091604b0fc5b6b0617dcac58c25763f57?narHash=sha256-hom/Lt0gZzLWqFhUJG0X2i88CAMIILInO5w0tPj6G3s%3D' (2024-04-18)
2024-04-22 02:49:36 -04:00
Charles Hall
61cd28f66a get rocksdb via flake inputs
Flake lock file updates:

• Added input 'rocksdb':
    'github:facebook/rocksdb/bcf88d48ce8aa8b536aee4dd305533b3b83cf435?narHash=sha256-vRPyrXkXVVhP56n5FVYef8zbIsnnanQSpElmQLZ7mh8%3D' (2024-04-16)
2024-04-22 02:49:36 -04:00
Charles Hall
0bd80a53f8 flatten and sort all flake inputs 2024-04-22 02:49:36 -04:00
strawberry
8fde1e6239 use global valid_cidr_range everywhere else
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 01:52:48 -04:00
Jason Volk
12dc99d283 various logging improvements.
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-22 01:48:11 -04:00
Jason Volk
17f493ec4d precompute cidr range denylist; move validator.
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-22 01:48:07 -04:00
strawberry
923b7a5264 forgor is_err check too
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 01:44:22 -04:00
strawberry
9107a8854a some more room alias helper logging
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 01:25:28 -04:00
strawberry
fd8bbe6c93 remove unnecessary continue
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 00:47:04 -04:00
strawberry
5a08e52282 try finding more servers for federation hierarchy instead of room ID server name
just the room ID server name is terrible

Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 00:44:35 -04:00
strawberry
f870656451 flip this
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-22 00:04:24 -04:00
strawberry
3c718639c4 break out the via field for hierarchy requests
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 23:55:09 -04:00
strawberry
16ac971679 on room alias joins, attempt to find the room ID through *more* servers if available
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 23:36:20 -04:00
strawberry
4727f5268c dont eat the ?server_name= param for join room by ID or alias
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 22:34:15 -04:00
strawberry
48f463322a bump all deps
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 20:05:19 -04:00
Jason Volk
9733c1c072 integrate reqwest read_timeout options.
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-21 19:59:33 -04:00
Jason Volk
caea5d8752 show info log in release mode
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-21 19:59:12 -04:00
Jason Volk
08fe67337b refactor sending send/resolver/well-known error propagation
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-21 19:59:01 -04:00
Jason Volk
7efd1c6ba6 cleanup/split/dedup sending/send callstack
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-21 19:58:58 -04:00
Jason Volk
101e7c7ae5 add debug log level macros.
Signed-off-by: Jason Volk <jason@zemos.net>
2024-04-21 19:58:33 -04:00
strawberry
4863078631 add users query command, initial fsck admin command
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 19:37:52 -04:00
strawberry
74d301dbb9 allow user admin commands to take the username only
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 18:38:43 -04:00
strawberry
dd1616e2ee add get_latest_edu_count admin query cmd
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 18:32:07 -04:00
strawberry
f55618a05f add federation allowed checks on get remote pdu list
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 18:26:32 -04:00
strawberry
d1403f9cd7 always print the details in panic catcher
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 18:23:37 -04:00
strawberry
8e5bde1684 return matrix JSON response for panic catcher with details if debug build or trace used
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 18:02:48 -04:00
strawberry
f6ed5278c1 add get-remote-pdu-list debug admin command
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 18:02:48 -04:00
Charles Hall
68702875a3 unpin crane because the bug was fixed
Flake lock file updates:

• Updated input 'crane':
    'github:ipetkov/crane/2c653e4478476a52c6aa3ac0495e4dea7449ea0e?narHash=sha256-XoXRS%2B5whotelr1rHiZle5t5hDg9kpguS5yk8c8qzOc%3D' (2024-02-11)
  → 'github:ipetkov/crane/55f4939ac59ff8f89c6a4029730a2d49ea09105f?narHash=sha256-Vz1KRVTzU3ClBfyhOj8gOehZk21q58T1YsXC30V23PU%3D' (2024-04-21)
2024-04-21 16:50:41 -04:00
strawberry
cbe0efe3f4 move sign_json and verify_json admin commands to debug
these are purely debug-related commands

Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 15:12:22 -04:00
strawberry
53e7df820c add sending.rs to admin db query command
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 15:00:54 -04:00
strawberry
a1eb7d79aa simplify room v11 top level redacts key
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 13:02:56 -04:00
Tom Foster
e816d3ffc0 ci: extract OCI images before loading and before login
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-21 12:45:47 -04:00
strawberry
5d16f5392b fix config check running too late, add tower panic catcher(?)
Signed-off-by: strawberry <strawberry@puppygock.gay>
2024-04-20 23:01:41 -04:00