arianvp

#!/bin/sh

#If already set (e.g. in github actions); use that instead
if [ -z "$GITHUB_TOKEN" ]; then
  nix run nixpkgs#gh auth status || nix run nixpkgs#gh auth login
  GITHUB_TOKEN="$(nix run nixpkgs#gh auth token)"
  export GITHUB_TOKEN
fi

NIX_CONFIG="access-tokens = github.com=$GITHUB_TOKEN"

arianvp

use flake .#dira

arianvp

[root@nixos:~]# poweroff

[root@nixos:~]#          Stopping Session 1 of User root...

         Stopping Session 2 of User root...
[  OK  ] Removed slice Slice /system/modprobe.
[  OK  ] Stopped target Multi-User System.
[  OK  ] Stopped target Login Prompts.
[  OK  ] Stopped target Containers.
[  OK  ] Stopped target Network is Online.

arianvp

An error occurred (AccessDenied) when calling the StartInstanceRefresh operation: You are not authorized to use launch template:

You came here because you Googled the above error and got zero hits. You will now get a hit!

Problem

You have an error like:

An error occurred (AccessDenied) when calling the StartInstanceRefresh operation: You are not authorized to use launch template:

arianvp

{ pkgs ? import <nixpkgs> {} }:

let 
  fontsConf  = pkgs.makeFontsConf {
    fontDirectories = [ ./fonts ];
  };
  texlive = pkgs.texlive.combine {
    inherit (pkgs.texlive) 
    appendix
    tikzmark

arianvp

package main

import (
	"context"
	"fmt"
	"log"
	"net/http"
	"time"

	ct "github.com/google/certificate-transparency-go"

arianvp

interface SimpleCredential {
  id: string;
  publicKey: ArrayBuffer;
}

async function create(name: string) : Promise<SimpleCredential> {
  // NOTE: We don't care about the challenge because we don't check attestation
  const challenge = crypto.getRandomValues(new Uint8Array(16));
  let credential = await navigator.credentials.create({
    publicKey: {

arianvp

package main

import (
	"crypto/ecdsa"
	"crypto/elliptic"
	"crypto/rand"
	"crypto/subtle"
	"crypto/x509"
	"log"
	"math/big"

arianvp

Using webauthn for sender constrained access tokens

arianvp

Nix.dev @zupo

All the commands in the nix.dev documentation are now checked by CI.

The problem is that we have nested shells; which default tooling for this doesn't work. It works on my machine. What left is polishing and adding it to CI

Nix code samples are extracted into a file such that e.g. following nix-build calls can access those files. So that we can check that the default.nix in the document actually works.