01:37 <H-Net> Hello

01:40 <H-Net> I have installed Sandstorm on a personal server. I have gone through the set up process and end up in a loop when I try to log in as an admin using my google account. help?

02:02 <ill_logic> Hi, I am looking at sandstorm-files.list. I'm wondering if sandstorm-http-bridge, sandstorm-http-bridge-config, and sandstorm-manifest are supposed to be in there?

02:14 <ill_logic> Also, I'm curious why /proc keeps showing up in there. I have "proc" in hidePaths.

02:14 <ill_logic> /proc/cpuinfo specifically

02:22 <isd> ill_logic: /proc/cpuinfo is special-cased, since a lot of runtimes use it. It actually gets bind-mounted by sandstorm, so it's not just copying the contents into the package.

02:23 <isd> The bridge/manifest stuff should be in there, unless you're not using sandstorm-http-bridge.

02:26 <ill_logic> isn't cpuinfo exactly the sort of thing that shouldn't be there?

02:26 <ill_logic> it should be different system to system

02:27 <isd> ill_logic: it shouldn't get copied into the package; it gets bind-mounted by sandstorm.

02:29 <ill_logic> I see. thanks.

06:40 <ill_logic> Does Sandstorm application submission actually require Keybase.io?

06:40 <ill_logic> I'm not very keen on that service.

07:00 <ill_logic> Seems pretty cut and dry. Oh well. It's worth it. I do hope you'd consider not tying your service so closely with theirs.

07:01 <ill_logic> In particular what bothers me is that they encourage people to upload their password protected private keys to their server.

07:01 <ill_logic> (as I understand)

07:01 <ill_logic> It's really cool that you guys have a simple spk command to publish.

07:53 <davidar_> isd: hm yeah, it looks like the host-meta stuff never made it past the draft stage, but it looks like mastodon supports it: https://github.com/tootsuite/goldfinger/blob/master/lib/goldfinger/client.rb#L41-L54

07:54 <davidar_> unfortunately ostatus seems to be more defined by whatever implementations do rather than adhering strictly to specs :/

08:10 <davidar_> in any case, I suspect salmon would probably be the most problematic part, since it seems to require your instance to be able to receive POST requests from other instances on a regular basis

16:02 <isd> davidar_: am I missing something or does that library actually not even support compliant implementations?

16:02 <isd> It looks like it *requires* host-meta

16:09 <isd> The hard part with salmon seems like it would be communicating the salmon endpoint. While we can generate a capability URL and receive posts on it pretty easily, the grain typically doesn't get to inspect the site key. so having to embed it in a <link> element seems hard.

16:13 <isd> Hm, I wonder if you could just turn the whole rss feed into a giant offer template

16:13 <isd> No, you need js for that, nevermind

16:18 <isd> Sandstorm apps are generally harder to consume programmatically than is ideal. The api mechanism kinda works, but it's a lot less seamless than is possible with more standard web apps

16:19 <isd> And stuff doing federation with typical web architecture in mind is going to typically assume (well-known or discoverable) global identifiers everywhere (uris), which is somwhat at odds with the capability approach.

16:20 <isd> I *think* you could bootstrap everything from webfinger, but there are lots of smaller problems to be solved.

16:21 <isd> It might be a really good contribution to push support for webfist into the common webfinger client libraries; would make setup a lot easier.

16:22 <isd> No more setting up a redirect, just email a json blob that's got an offer url in it somewhere.

19:58 <ocdtrekkie> ill_logic: Keybase is not required to publish. However, the "author" of the app is the key, and it uses Keybase to identify said author by name. If you publish with a key not in Keybase, it will not display an author name, just the key.

19:59 <ocdtrekkie> I have no use of said key outside Sandstorm app publishing, so there's not a huge risk to me there in uploading it to Keybase. Arguably, I don't think there's a reason you can't use a completely separate key from any private keys you use elsewhere.

20:00 <TimMc> ill_logic: There's no requirement to upload private keys to keybase.

20:01 <TimMc> They only offer that so that people can sign/decrypt in their web UI. (I don't think they should offer that, though...)

21:34 <ocdtrekkie> Kinda exciting, there's a new release of draw.io on Sandstorm! :D

21:55 <TimMc> Oooh, does it work now?