go-neb is unmaintained, look for an alternative

[jfly]

We use go-neb to forward prometheus alerts to matrix:

infra/build/pluto/prometheus/alertmanager.nix

Line 35 in 02eeb97

receiver = "go-neb";

The go-neb github repo was archived on Jun 28, 2023. The README says "matrix-hookshot is the spiritual successor to Go-NEB".

Have we investigated replacing go-neb with matrix-hookshot?

[Erethon]

There's NixOS/nixpkgs#342663 that "tracks" this in nixpkgs. As mentioned here there's https://github.com/jaywink/matrix-alertmanager that's meant to be used specifically for having alertmanager alerts in Matrix. Since we're only using go-neb for alerts currently, I think matrix-alertmanager is better suited to this instead of Hookshot.

I'm personally using matrix-alertmanager in my infra and recently started maintaining the package in nixpkgs. I plan to write a NixOS module for it once I find some free time.

[Erethon]

I'm personally using matrix-alertmanager in my infra and recently started maintaining the package in nixpkgs. I plan to write a NixOS module for it once I find some free time.

Opened NixOS/nixpkgs#378966 as a draft, will iterate on it in the coming days.

[jfly]

@Erethon, congrats on landing NixOS/nixpkgs#378966! Do you want to take the next step and switch our infra to use it?

[Erethon]

@Erethon, congrats on landing NixOS/nixpkgs#378966!

Thanks for the thorough review and for helping push it trough the finish line! ❤️

Do you want to take the next step and switch our infra to use it?

Sure! I wont be able to start working on this until after the 12th of March, but I'll have a PR ready towards the end of the week.

[jfly]

Thanks! No rush at all.

[jfly]

@Erethon, no pressure at all: is this still on your list of things to do?

[Erethon]

@Erethon, no pressure at all: is this still on your list of things to do?

Yes, I still want to get this done, unfortunately life got in the way. Hopefully I'll have a bit more time this week and will get to it.

[Mic92]

I am happy user of @pinpox's matrixhook: https://github.com/Mic92/dotfiles/blob/6a639e9594fada3fd709ce588bb01eccba7950fd/machines/eva/modules/prometheus/matrix-alertmanager.nix#L4
It's limited to prometheus only, but this seems to be what we need.

[mweinelt]

Flagging as security relevant due to jaywink/matrix-alertmanager#48.

[Erethon]

Flagging as security relevant due to jaywink/matrix-alertmanager#48.

I would say it's security relevant because go-neb is unmaintained and not getting updates since 2022 (officiall deprecation notice came in 2023). Matrix-alertmanager is one option we have to migrate to so that we can drop go-neb.