fasterthanlime,
@fasterthanlime@hachyderm.io avatar

it's been 4 years.. 🥱 https://github.com/rust-lang/cargo/issues/6843

I like how the concerns re stabilizing existing solutions are "small registries will do insecure things if we stabilize this", meanwhile, small registries have you pass authentication IN THE USER-AGENT HEADER

YOU KNOW, THE ONE EVERYONE HARVESTS FOR ANALYTICS

fasterthanlime,
@fasterthanlime@hachyderm.io avatar

And you know what /I/ just did? I added a caddy rule to add a request header with the proper gitea personal access token so I can build my damn crates.

My crates are private for dont-bother-me reasons anyway, not for "actually confidential" reasons.

onelson,
@onelson@mastodon.social avatar

@fasterthanlime my alt registry issues everyone an auth token of 0000 and I never check it against anything when they send it back to me.

onelson,
@onelson@mastodon.social avatar

@fasterthanlime information wants to be free,

ivan,
@ivan@hachyderm.io avatar

@fasterthanlime is caddy acting like an access proxy for you to fetch crate sources (from shipyard?)? I’m not sure what your infra looks like atm 😅

fasterthanlime,
@fasterthanlime@hachyderm.io avatar

@ivan I just set up caddy to do TLS termination for my self-hosted stuff - I'm moving from shipyard to gitea so there's one less third-party service to rely on!

ivan,
@ivan@hachyderm.io avatar

@fasterthanlime oh neat! Are you using git dependencies then or is gitea able to host a crate registry now?

fasterthanlime,
@fasterthanlime@hachyderm.io avatar

@ivan the latter! https://docs.gitea.com/next/usage/packages/cargo

ivan,
@ivan@hachyderm.io avatar

@fasterthanlime damn that’s awesome, thanks!

fasterthanlime,
@fasterthanlime@hachyderm.io avatar

deleted_by_author

    •
    markhaehnel,

    @fasterthanlime @ivan Just to let you know. This one is not private!

    fasterthanlime,
    @fasterthanlime@hachyderm.io avatar

    @markhaehnel @ivan ah, I must've misclicked lol. phanpy does show diagonal yellow+black stripes for private mentions, idk how I missed that they weren't there. oh well, enjoy tree-sitter-collection :P

    fasterthanlime,
    @fasterthanlime@hachyderm.io avatar

    anyway I haven't been a big meanie to the cargo team this year yet, so here I go redeeming my one (1) token

    https://github.com/rust-lang/cargo/issues/10474

    onelson,
    @onelson@mastodon.social avatar

    @fasterthanlime thanks for the shoutout

    soc,
    @soc@chaos.social avatar

    @fasterthanlime I have given up getting on getting anything through ... they live in their own world.

    Just remember the "we can't have namespacing because that would require us running a JIRA instance".

    haliphax,
    @haliphax@hachyderm.io avatar

    @fasterthanlime Is your one (1) token symmetric, then?

    decathorpe,
    @decathorpe@mastodon.social avatar

    @fasterthanlime Huh, I thought things were moving in the "tokens" space because cargo recently added a dependency on the pasetors 0 crate?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • rosin
  • thenastyranch
  • ethstaker
  • osvaldo12
  • mdbf
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • Youngstown
  • ngwrru68w68
  • slotface
  • GTA5RPClips
  • kavyap
  • cubers
  • JUstTest
  • everett
  • cisconetworking
  • tacticalgear
  • anitta
  • khanakhh
  • normalnudes
  • Durango
  • modclub
  • tester
  • provamag3
  • Leos
  • megavids
  • lostlight
  • All magazines
    •