<zarvox>
kentonv: are the app icon hashes stored anywhere that I can find given a package ID? I'd look inside manifest.metadata.icons, but then I'd be rehashing the icons on each request
<zarvox>
unless there's more data in mongo than the .capnp indicates?
<kentonv>
zarvox: when the metadata in inserted into Mongo the blobs get replaced with asset IDs, which you can use to form URLs. (Note that the URLs are NOT hash-based, they're just random IDs, with de-duping being an implementation detail.)
<kentonv>
zarvox: note that DevApps are different, though; there the manifest still contains the raw bytes, not asset IDs, because it would be difficult to actually trigger registering and unregistering assets on DevApp insert/remove. But in the case of dev apps it is fine to let the bytes flow through to the client, and then use data URLs.
heliostatic has joined #sandstorm
heliostatic has quit [Ping timeout: 260 seconds]
jadewang has quit [Remote host closed the connection]
heliostatic has joined #sandstorm
heliostatic has quit [Ping timeout: 240 seconds]
xcombelle has joined #sandstorm
gopar has quit [Remote host closed the connection]
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 246 seconds]
pwais has joined #sandstorm
<pwais>
dear room, been poking through the https://install.sandstorm.io/ script to try to see if I can set up sandcats on vagrant. looks complicated... can i just run the install script inside a vagrant-spk box or will that clobber my existing sandstorm install (and Grains) ?
<paulproteus>
pwais: What I recommend doing is create a new Vagrant box to run the install script in, then steal the config data.
<jadewang>
pondering the ROI for a Sandstorm presence (e.g., talk) there
<jadewang>
is anyone game to do it?
<jadewang>
it's in San Francisco
<jadewang>
in January
heliostatic_ has joined #sandstorm
heliostatic has quit [Ping timeout: 265 seconds]
ragesoss has quit [Read error: Connection reset by peer]
ragesoss has joined #sandstorm
heliostatic_ has quit [Ping timeout: 244 seconds]
heliostatic_ has joined #sandstorm
xcombelle has quit [Remote host closed the connection]
<paulproteus>
jadewang: "Obviously" Andy Lutomirski should talk about some novel attack that Sandstorm accidentally defends against.
<paulproteus>
Or actually perhaps a paper about "seccomp-bpf: 13 CVEs defanged, 0 false positives", or something.
<paulproteus>
It seems that it's an academic conference and it's hard-ish to "just propose a talk" but a paper on successful defenses might possibly fly.
<paulproteus>
But hilariously I think the only want to hear about things that are broken, not things that aren't broken.
<paulproteus>
s/the only/they only/
<zarvox>
It sounds like that in the front matter, but they also mention "electronic crime, security, and privacy ideas that matter"
<zarvox>
and we probably fall into the latter two categories
<paulproteus>
"Our program committee will select presentations that highlight technical content with practical application to current and emerging threats, research, and defenses. We are looking for the great explainers: those that can describe complex topics and convey their excitement while maintaining the integrity of science. "
<paulproteus>
I, er -- that's me!!!
<paulproteus>
Due Sep 14
<paulproteus>
aka whatever I'll deal when I'm back from .de but make a calendar item
dcb has quit [Ping timeout: 252 seconds]
dcb has joined #sandstorm
<paulproteus>
Not honestly sure if worth it, ROI, wise, unless someone wants to become more famous. e.g. Jack Singleton, or Andy Lutomirski
treyhunner has quit [Quit: No Ping reply in 180 seconds.]
treyhunner has joined #sandstorm
dcb has quit [Ping timeout: 252 seconds]
dcb has joined #sandstorm
<zarvox>
It wouldn't be a bad thing to have Sandstorm, which kinda lives at the intersection of usable security research and practical application, be on the radar of more research-y folks. They might be interested in contributing or running experiments with the platform.
natea has quit [Quit: natea]
natea has joined #sandstorm
bb010g has joined #sandstorm
<YuviPanda>
paulproteus: because you are both everywhere and very productive I suppose
natea has quit [Quit: natea]
natea has joined #sandstorm
jadewang has quit [Remote host closed the connection]
heliostatic_ has quit [Quit: Be back later ...]
jeffmendoza has quit [Ping timeout: 265 seconds]
NOTevil has quit [Quit: Leaving]
jeffmendoza has joined #sandstorm
<paulproteus>
(-: YuviPanda
<paulproteus>
That's funny because I don't feel very productive!
jadewang has joined #sandstorm
jadewang has quit [Ping timeout: 265 seconds]
jadewang has joined #sandstorm
<jadewang>
hey, if anyone reading this conversation wants to submit a CFP to the Enigma conference, I'll help proofread it.
neynah has joined #sandstorm
<paulproteus>
neynah: BTW if you want, you can consider installing a "real IRC client" that's not locked in a web browser. A popular one for Windows is https://hexchat.github.io/
isd has quit [Quit: Leaving.]
<paulproteus>
If you want something that screams "I'm trapped in the 1990s and LOVING EVERY SECOND" then http://www.hydrairc.com/ might also be for you.
<paulproteus>
That's not an objection, merely a remark.
<paulproteus>
If you want something that screams "I am trapped in the 1990s and YOU ARE ALL NOT COOL ENOUGH" then http://www.icechat.net/site/ seems like it also might be for you.
<paulproteus>
I typically recommend Hex-Chat anyway.
<paulproteus>
The nice thing about them is they can auto-join multiple channels whenever you connect, and desktop notifications actually work.
natea has quit [Quit: natea]
<ocdtrekkie>
I kinda <3 having Quassel set up. I just wish it could live in a Sandstorm thingy.
<ocdtrekkie>
:P
<ocdtrekkie>
Since I'm currently mooching off another chatroom member for hosting mine.
natea has joined #sandstorm
<paulproteus>
I mega mega want a Sandstormed Quassel also.
<maurer>
I've heard good things about weechat's relay capabilities
<paulproteus>
+1 also
<maurer>
but haven't used either weechat nor quassel myself, I just have a long-lived irssi
* maurer
spends a lot of time living in the future of the past
<jparyani>
well the powerbox stuff is mostly all committed, so someone just has to make an IRC driver...
<paulproteus>
Someone has to write some _docs_ so someone can write an IRC driver!
<jparyani>
:'(
<paulproteus>
At least document that the powerbox exists, etc, here's some code to steal
<paulproteus>
I think that would go a long way.
<paulproteus>
I do kind of miss :crying_cat_face: from Slack.
<jparyani>
I've never used slack, but I want it
<zarvox>
I wonder if mattermost is sanely packagable yet.
<maurer>
I think the only positive thing I have to say about slack is that their phone client is nice
<jparyani>
<zarvox>
Maybe I'll poke at that on blur day.
<maurer>
Other than that, I am mad about all 3 slack domains I have to be on
<ocdtrekkie>
Sandstorm port needs a full set of custom Sandcat emoticons.
<ocdtrekkie>
(neynah!)
<ocdtrekkie>
Kidding. Mostly.
natea has quit [Client Quit]
<neynah>
ocdtrekkie: that could be arranged...
<paulproteus>
dwrensha: : D re: your Let's Chat bug
natea has joined #sandstorm
<neynah>
Now I'm thinking of all the Sandcat emoticons I want to make.
<paulproteus>
still hoping for sadcats
<pwais>
derp, trying to run sandstorm locally and i enabled github auth. the setup went ok but now that i've logged out i see this in the sandstorm.log when i try to log in via github: https://gist.github.com/pwais/710b392e4df5e6bc823a
<paulproteus>
pwais: Ouch
<pwais>
do i need to wait for github for a bit or is this a legit error?
<paulproteus>
jparyani: ^ ?
<paulproteus>
This looks like the UserDoc from GitHub is not of the type we expect?
<pwais>
ps thanks @paulproteus for sandcats!! worked like a charm ^_^
<paulproteus>
Great!
<paulproteus>
but now where you are, pwais, is sadcats
<paulproteus>
FWIW I would say any exception that gets logged is a bug. pwais arguably you should "just" file a real bug with that text.
natea has quit [Quit: natea]
<dwrensha>
paulproteus: beat me to the :sadcats: pun
<paulproteus>
Interesting pwais, will look into it soonish
heliostatic_ has joined #sandstorm
heliostatic_ has quit [Ping timeout: 240 seconds]
heliostatic_ has joined #sandstorm
simonv3 has quit [Quit: Connection closed for inactivity]
bb010g has quit [Quit: Connection closed for inactivity]
<pwais>
@paulproteus I tried poking for a bit but I've never really debugged this stuff before. can't tell if github changed their response or what. i also tried w/ and w/out dev accounts enabled, dunno if it makes a difference
<zarvox>
pwais: are you able to log in with a dev account instead?
<pwais>
yea
<pwais>
if i enable dev accounts
<zarvox>
okay, good; just wanted to make sure you weren't blocked on that
<zarvox>
when developing with vagrant-spk I use dev accounts almost exclusively, since they'll work out-of-the-box and everything else requires some additional setup
<pwais>
yea the box I'm using isn't firewalled off from the internet so I was just trying to find a way to secure sandstorm
<zarvox>
ahhhh
<pwais>
so that i could leave my Grain up for a while
<paulproteus>
Dev accounts + externally reachable == somewhat hilarious, yes
<paulproteus>
s/somewhat //
<paulproteus>
Let me try to repro pwais
<zarvox>
Well, in the default Vagrantfile, the grain is not reachable from other devices on the network.
<zarvox>
s/grain/VM/
<pwais>
oh huh really? i verified that sandstorm is reachable at least
<zarvox>
Oh really? That's interesting. I was under the impression the port forwards only operated on the loopback address...
<paulproteus>
I er yeah hmm
<pwais>
i was able to curl the sandstorm homepage from a remote box. idk i have boot2docker running maybe there's some conflict
<zarvox>
That's the case for the libvirt backend, at least. I could check the VBox one.
<paulproteus>
boot2vagrant2docker2sandstorm
<pwais>
mmm i had added some virtualbox forwarding rules in the past... not sure if they're relevant, they weren't for port 6080 at least ...
<zarvox>
I'd believe that port forwards under virtualbox forward from any interface, by default.
<pwais>
i should prolly just configure my firewall correctly or get a router ^_^
heliostatic_ has quit [Quit: Be back later ...]
<paulproteus>
pwais: I can't reproduce this bug so far, hmm.
<paulproteus>
I believe you though.
<pwais>
orly, how did you try? i totes could have screwed something up
<pwais>
did you just start a fresh vagrant-spk instance and set up github?
<paulproteus>
No : P
<paulproteus>
Maybe I'll try that.
<pwais>
i tried curl w/ the url that sandstorm uses and i got a redirect from github, tho im not sure if the response was correct
natea has joined #sandstorm
<paulproteus>
Super interesting.
<paulproteus>
You have sandcats in a vagrant-spk VM?
<paulproteus>
I guess I need to enable some port forwarding somewhere to make this work.
<paulproteus>
I'm behind NAT at the moment, but your machine is not, I guess?
jeffmendoza has quit [Ping timeout: 265 seconds]
<paulproteus>
I guess it doesn't need to be exposed since everything goes via one's own browser.
<pwais>
right i have a static public ip
<pwais>
ya i dont really know how oauth works :) i just recognized i may have forgotten to install the sandcats certs stuff after editing my sandstorm.conf. ill try placing the certs and re-trying
<paulproteus>
Can't repro yet (did it the way you described) but maybe I need to be you.
<paulproteus>
Like the GitHub response that you get is maybe different from the one I get.
<pwais>
do you know how i can pull the response? can't i just curl the url sandstorm uses when i click the login button?
<paulproteus>
If I give you a patched Sandstorm package, can I get you to 'sandstorm update' to it?
<pwais>
sure, i also sent you a short email
<paulproteus>
works for me : D
<paulproteus>
So it's something special about you.
<paulproteus>
Which honestly is pretty cool.
<pwais>
oh dear!
<pwais>
haha
<pwais>
ok i will erm see why github dislikes me
<pwais>
thanks @paulproteus ill close the ticket
<paulproteus>
wait noooo
<pwais>
oh do we want to know why my account is special?
<paulproteus>
I wanted GitWeb pages plus offer templates but kentonv's desired UX fixes.
<dwrensha>
I think that Pages should be an app add-on for GitWeb
<paulproteus>
Then I wanted to create a git repo that contained my blog's static publishing scripts, and then I could somehow use that to publish asheesh.org.
<paulproteus>
But app add-ons are vaporware and I want this for asheesh.org!
<paulproteus>
Sorry if sound whiny.
<dwrensha>
this seems like one of the more compelling cases for app add-ons
<dwrensha>
we just want to drop some code in a particular directory
<paulproteus>
I wanted to change indextext.html for one thing, and I needed to render the output of a command into the gitweb output, and that isn't something that gitweb supports natively.
<paulproteus>
There might be an elegant way to achieve that but I didn't figure it out on Sunday at least.
<paulproteus>
I could live with not showing that there except that I have no way to get it until I do a push.
<paulproteus>
If there were a git command I could run that would cause the right output to go to my terminal, I'd be fine with that.
<paulproteus>
Like git push --execute-some-hook-even-though-nothing-has-changed-then-dont-actually-push-anything
<paulproteus>
Then the web page could say
<paulproteus>
"Run the command git push --execute-some-hook-even-though-nothing-has-changed-then-dont-actually-push-anything to see DNS configuration information."
<paulproteus>
And I would be OK with that.
<paulproteus>
Anyway in this case the thing we're trying to do is blend pwais's OpenGrok package and a GitWeb package so he can git push to OpenGrok.
<dwrensha>
hm. yeah, seems less clear how that would fit as an addon
<dwrensha>
and I see how vagrant-spk could make that easier
<paulproteus>
Arguably there could be a "Add a GitWeb that saves data to /var/git" where GitWeb is the addon.
<paulproteus>
Or something; I haven't fully thought that through.
<dwrensha>
but you don't even care about the "-Web" part
<dwrensha>
you just want git-http-backend
<paulproteus>
Although [3~aAt the point where you're doing that, you are creating composable web app packages that can layer on top of each other nicely and you hope it works via just putting files in the filesystem.
simonv3 has joined #sandstorm
<paulproteus>
Mm, interesting, dwrensha, I think that's true.