Skip to content

Conversation

NikitaCOEUR
Copy link
Contributor

dimonomid/nerdlog: Nerdlog: fast, remote-first, multi-host TUI log viewer with timeline histogram and no central server

$ aqua g -i dimonomid/nerdlog

Check List

How to confirm if this package works well

Reviewers aren't necessarily familiar with this package, so please describe how to confirm if this package works well.
Please confirm if this package works well yourself as much as possible.

Command and output

Execute nerdlog and configure it through TUI :
{2C7BDC3E-2929-4938-AECD-2F81EBCF89FD}

$ nerdlog --help
Usage of nerdlog:
      --loglevel string                This is NOT about the logs that nerdlog fetches from the remote servers, it's rather about nerdlog's own log. Valid values are: error, warning, info, verbose1, verbose2 or verbose3 (default "error")
  -h, --lstreams string                Logstreams to connect to, as comma-separated glob patterns, e.g. 'foo-*,bar-*'
      --no-journalctl-access-warning   Suppress the warning when journalctl is being used by the user who can't read all system logs
  -p, --pattern string                 Initial awk pattern to use
  -s, --selquery string                SELECT-like query to specify which fields to show, like 'time STICKY, message, lstream, level_name AS level, *'
      --ssh-config string              ssh config file to use; set to an empty string to disable reading ssh config (default "/home/nikitac/.ssh/config")
      --ssh-key strings                ssh keys to use; only the first existing file will be used (default [/home/nikitac/.ssh/id_ed25519,/home/nikitac/.ssh/id_ecdsa,/home/nikitac/.ssh/id_rsa])
  -t, --time string                    Time range in the same format as accepted by the UI. Examples: '1h', 'Mar27 12:00'
  -v, --version                        Print version info and exit
pflag: help requested

To work properly, this package may require certain system dependencies. These dependencies could be listed when the program is run, for example using the --version flag :

$ nerdlog --version
Nerdlog 1.8.1
Commit: 9ea01409b142bc2dceb31364ec79749b597a0357
Build time: 2025-05-20T15:09:09Z
Built by: goreleaser
GOOS: linux
CGO: enabled
Clipboard support: no (clipboard unavailable: Failed to initialize the X11 display, and the clipboard package
will not work properly. Install the following dependency may help:

        apt install -y libx11-dev

If the clipboard package is in an environment without a frame buffer,
such as a cloud server, it may also be necessary to install xvfb:

        apt install -y xvfb

and initialize a virtual frame buffer:

        Xvfb :99 -screen 0 1024x768x24 > /dev/null 2>&1 &
        export DISPLAY=:99.0

Then this package should be ready to use.
)

Written by Dmitry Frank (https://dmitryfrank.com)

🆘 Help needed to enable cosign

This package provides releases signed with Cosign via a GitHub Action during the release process :
{B39FE08A-23D1-41F9-8285-D45A10BCC5DE}

Each OS and architecture has its own signed binary along with an associated signature and certificate. However, the issue is that only the binary itself is signed — not the archive that contains it.

Is it possible to configure Cosign (via the registry or otherwise) to validate the binary after it has been extracted from the archive?

Extract of there .goreleaser.yaml :

binary_signs:
  - cmd: cosign
    args:
      - sign-blob
      - --output-signature=${signature}
      - --output-certificate=${certificate}
      - ${artifact}
      - --yes
    certificate: '${artifact}_{{- tolower .Version }}_{{- tolower .Os }}_{{- if eq .Arch "386" }}i386{{- else }}{{ .Arch }}{{ end }}{{- if .Arm }}v{{ .Arm }}{{ end }}.pem'
    signature: '${artifact}_{{- tolower .Version }}_{{- tolower .Os }}_{{- if eq .Arch "386" }}i386{{- else }}{{ .Arch }}{{ end }}{{- if .Arm }}v{{ .Arm }}{{ end }}.sig'
    output: true

Cosign step during release where the artefact is signed : https://github.com/dimonomid/nerdlog/actions/runs/15141194358/job/42565490613#step:6:319

Do you think Aqua could/would support this? Or should we consider creating a pull request to update the .goreleaser.yaml and add:

binary_signs:
  - cmd: cosign
    artifacts:  '${artifact}_{{- tolower .Version }}_{{- tolower .Os }}_{{- if eq .Arch "386" }}i386{{- else }}{{ .Arch }}{{ end }}{{- if .Arm }}v{{ .Arm }}{{ end }}.{{ .Format }}'
...

@suzuki-shunsuke
Copy link
Member

Thank you for your contribution!

Is it possible to configure Cosign (via the registry or otherwise) to validate the binary after it has been extracted from the archive?

No. There is a feature request, but aqua doesn't support it at the moment.

@suzuki-shunsuke suzuki-shunsuke added this to the v4.371.0 milestone May 22, 2025
@suzuki-shunsuke suzuki-shunsuke merged commit 50c00d7 into aquaproj:main May 22, 2025
19 checks passed
@github-project-automation github-project-automation bot moved this to Done in main May 22, 2025
@suzuki-shunsuke
Copy link
Member

tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request May 23, 2025
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [aquaproj/aqua-registry](https://github.com/aquaproj/aqua-registry) | minor | `v4.368.0` -> `v4.371.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>aquaproj/aqua-registry (aquaproj/aqua-registry)</summary>

### [`v4.371.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.371.0)

[Compare Source](aquaproj/aqua-registry@v4.370.0...v4.371.0)

[Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.371.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.371.0) | aquaproj/aqua-registry@v4.370.0...v4.371.0

#### 🎉 New Packages

[#&#8203;36801](aquaproj/aqua-registry#36801) [dimonomid/nerdlog](https://github.com/dimonomid/nerdlog): Nerdlog: fast, remote-first, multi-host TUI log viewer with timeline histogram and no central server [@&#8203;NikitaCOEUR](https://github.com/NikitaCOEUR)
[#&#8203;36771](aquaproj/aqua-registry#36771) [coreos/butane](https://github.com/coreos/butane) - Butane translates human-readable Butane Configs into machine-readable Ignition Configs [@&#8203;dronenb](https://github.com/dronenb)
[#&#8203;36767](aquaproj/aqua-registry#36767) [ubicloud/cli](https://github.com/ubicloud/cli) - Command line program for interacting with Ubicloud [@&#8203;shikharbhardwaj](https://github.com/shikharbhardwaj)
[#&#8203;36766](aquaproj/aqua-registry#36766) [VictoriaMetrics/VictoriaMetrics/victoria-metrics](https://github.com/VictoriaMetrics/VictoriaMetrics) [@&#8203;shikharbhardwaj](https://github.com/shikharbhardwaj)
[#&#8203;36754](aquaproj/aqua-registry#36754) [thanos-io/thanos](https://github.com/thanos-io/thanos) - Highly available Prometheus setup with long term storage capabilities. A CNCF Incubating project [@&#8203;dronenb](https://github.com/dronenb)

#### Security

[#&#8203;33992](aquaproj/aqua-registry#33992) cert-manager/cmctl: Configure Cosign

#### Fixes

[#&#8203;36770](aquaproj/aqua-registry#36770) weaviate/weaviate: Windows builds were removed

weaviate/weaviate#8123

### [`v4.370.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.370.0)

[Compare Source](aquaproj/aqua-registry@v4.369.0...v4.370.0)

[Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.370.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.370.0) | aquaproj/aqua-registry@v4.369.0...v4.370.0

#### 🎉 New Packages

[#&#8203;36706](aquaproj/aqua-registry#36706) [pkolaczk/fclones](https://github.com/pkolaczk/fclones) - Efficient Duplicate File Finder [@&#8203;hosaka](https://github.com/hosaka)
[#&#8203;36740](aquaproj/aqua-registry#36740) [terratags/terratags](https://github.com/terratags/terratags): Required tags validation on terraform resources
[#&#8203;36742](aquaproj/aqua-registry#36742) [awslabs/eks-auto-mode-ebs-migration-tool](https://github.com/awslabs/eks-auto-mode-ebs-migration-tool)

#### Fixes

[#&#8203;36744](aquaproj/aqua-registry#36744) Re-scaffold duckdb/duckdb
[#&#8203;36745](aquaproj/aqua-registry#36745) Fix Zxilly/go-size-analyzer

### [`v4.369.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.369.0)

[Compare Source](aquaproj/aqua-registry@v4.368.0...v4.369.0)

[Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.369.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.369.0) | aquaproj/aqua-registry@v4.368.0...v4.369.0

#### 🎉 New Packages

[#&#8203;36692](aquaproj/aqua-registry#36692) [microsoft/edit](https://github.com/microsoft/edit) - We all edit [@&#8203;garysassano](https://github.com/garysassano)
[#&#8203;36685](aquaproj/aqua-registry#36685) [IBM-Cloud/redli](https://github.com/IBM-Cloud/redli): Redli - A humane alternative to the Redis-cli and TLS [@&#8203;NikitaCOEUR](https://github.com/NikitaCOEUR)
[#&#8203;36634](aquaproj/aqua-registry#36634) [carapace-sh/carapace-bin](https://github.com/carapace-sh/carapace-bin): A multi-shell completion binary

#### Rename

[#&#8203;36617](aquaproj/aqua-registry#36617) common-fate/granted: Rename the package to fwdcloudsec/granted

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xOC4zIiwidXBkYXRlZEluVmVyIjoiNDAuMjMuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90Il19-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants