@sandro@c3d2.social avatar

sandro

@sandro@c3d2.social

Some lefti :AFD:, NixOS :nixos:, Linux :tux:, Chaos :fairydust:

Don't be afraid of colorful flags :progress_pride: ๐Ÿณ๏ธโ€๐ŸŒˆ๐Ÿณ๏ธโ€โšง๏ธ๐Ÿšฉ๐Ÿด

This profile is from a federated server and may be incomplete. Browse more on the original instance.

sandro, to NixOS
@sandro@c3d2.social avatar

Maybe I didn't delete old system profiles for a bit...

note: currently hard linking saves 273250.45 MiB
119288 store paths deleted, 148805.54 MiB freed

flora, to macos
@flora@shonk.social avatar

anyone here that can help me with nix on macos with limited sudo access and self-signed certs being forced into my connection to nixos.org by corporate?

sandro,
@sandro@c3d2.social avatar

@flora Create an Excel sheet and collect how much time you are wasting on a daily basis to patch certificates into various programs. Besides that MITM TLS makes security worse and breaks whole bunch of stuff.

sandro,
@sandro@c3d2.social avatar

@flora You can collect that on sheet 2 ๐Ÿ˜‚

sandro, to NixOS German
@sandro@c3d2.social avatar

Replaced an unbound today with knot resolver daemon or kresd. Was super easy to port with and also create two PRs along the way: updating it to 5.7.2 and adding the missing psl Lua package to nixpkgs and kresd.
Next step is to replace the second and last bind with knot.

sandro,
@sandro@c3d2.social avatar

@Lafiel I didn't do reliable benchmarking but the final config is about half as long and it feels like kresd has more modern features and the design behind it is newer.

justelex, to NixOS German
@justelex@social.justelex.de avatar

Es ist faszinierend wie sehr in meinem Umfeld doch um sich gegriffen hat. Speziell in den @westwoodlabs . Wir haben mittlerweile schon unsere eigene, nicht ganz kleine Usergroup.

sandro,
@sandro@c3d2.social avatar

@justelex @westwoodlabs Kann man nix dagegen machen

joshuaCrewe, to NixOS
@joshuaCrewe@fosstodon.org avatar

Any suggestions on how to structure my config is very welcome. I have been trying to follow along with some of the things I have been seeing but not seen a consensus.

sandro,
@sandro@c3d2.social avatar

@joshuaCrewe I have a module for global settings and several smaller ones for specific tasks like servers or desktops and then the host specific config.

pi_crew, to NixOS
@pi_crew@social.project-insanity.org avatar

Impressive increase in commit count for the nixpkgs repository last month ๐Ÿ˜ณ

sandro,
@sandro@c3d2.social avatar

@pi_crew More doesn't mean better.

clot27, to NixOS
@clot27@mastodon.social avatar

Gotta learn about nixos home manager, worth it?

sandro,
@sandro@c3d2.social avatar

@clot27 If you are solely on NixOS IMO not at all. It has to many workarounds and quirks for other OS's.

amanzer, to NixOS
@amanzer@techhub.social avatar

How do people handle in configurations?

I see sops-nix a lot, but it's generally used with SSH keys. But where do I get that SSH key from, and what if I lose it? Or what if I want to put my SSH key in Home Manager? Or what if I do a rebuild on another system that doesn't have that ssh key?

Can I just put a password in during a nixos-rebuild that'll decrypt my secret file(s)?

(I tried using sops with a gpg key on my Yubikey, but stumbled into an "Invalid Time" error that apparently me and 3 other people on Reddit have seen. But even if the key was safe on my Yubikey, it still doesn't solve the "rebuilding on another machine", because my Yubikey is on my desktop, not the VM, right?)

sandro,
@sandro@c3d2.social avatar

@amanzer https://github.com/Mic92/sops-nix

sandro,
@sandro@c3d2.social avatar

@silmaril You can combine the flag --extra-experimental-features "nix-command flakes" or use nix.settings.extra-experimental-features = [ "nix-command" "flakes" ];

ch, to linux
@ch@emacs.ch avatar

Getting your configuration.nix squared away is the 2024-equivalent of optimising your CFLAGS in Gentoo.

sandro,
@sandro@c3d2.social avatar

@ch Except that it isn't that statefull ๐Ÿ˜…

jakehamilton, to NixOS
@jakehamilton@hachyderm.io avatar

The latest edition of is out! Lots of things happened last week, take a look!

https://nixpkgs.news/

sandro,
@sandro@c3d2.social avatar

@jakehamilton small note: the xz revert is not causing a few hundred rebuilds but more a couple of thousand on a end user system and 200k for nixpkgs.

b0rk, (edited ) to random
@b0rk@jvns.ca avatar

what's your favourite way to simplify your life with git? mostly interested in slightly unusual tricks to reduce the number of git features you're using, like:

  • never using the stash, just creating temporary branches instead
  • deleting your main branch so that you can never accidentally commit to it
sandro,
@sandro@c3d2.social avatar

@jakehamilton @b0rk The default to create a merge commit is usually worse.

dis, to NixOS

I'm officially done with . The last straw was being unable to run "standard" distribution binaries (Appimage, etc) so there is no fallback to missing/broken apps.
I'm just over it. It has tried to trash my laptop battery more times than I can count (drain below critical instead of sleeping or hibernating, per configs) and it just brings nothing but stress. "Nix-shell" is neat but not worth the rest of this.
Yet another grand idea loaded down with terrible docs and old-school "If you were cool you'd already know this" attitudes. Those people can go circle-jerk themselves without me.
As a bonus, this was very very hard to type. Not because I am sad or anything, no, instead it is because "disable trackpad while typing" is broken on plasma, or at least on my installs.

sandro,
@sandro@c3d2.social avatar

@dis You can easily run AppImages with appimage-run and that works quite well.
I have charging configured in Plasma and that works very well, too, especially with power-profiles-daemon.
The docs are not terrible. They are not on pair with Arch Wiki but the other docs from other Distros are far worse and many internet resources recommend actual wrong things that break your system on upgrades.
The libinput palm touch detection being flaky is a general problem.

otini, to NixOS
@otini@functional.cafe avatar

I hate it so much when I update my system and it starts compiling something and itโ€™s hard to even know what and even harder to know why the hell is it building from source

sandro,
@sandro@c3d2.social avatar

@otini They are sorted by store path

sandro,
@sandro@c3d2.social avatar

@otini I am not sure on that one. People working on paid software are getting paid and that is usually also pretty shitty.

sandro,
@sandro@c3d2.social avatar

@otini Do you have overlays?

pmakholm, to random
@pmakholm@fosstodon.org avatar

I have never been much of a distro hopper.

Since I installed Debian 2.0 (Hamm) I have only moved slightly between Debian and Ubuntu and since the discontinuation of Upstartd this is hardly hopping.

But now I'm ready to try something new...

More and more often I found myself doing things like developing my code in one terminal and running it in another with "docker -run ti -v .:/workspace xxx".

It works, it keeps my main environment clean, it is inconvenient.

sandro,
@sandro@c3d2.social avatar

@pmakholm You mean something like https://github.com/nix-community/lorri ?

Ede, to NixOS German
@Ede@chaos.social avatar

Hallo Fedi,

kann mir sagen wie ich cap-add unter konfigurieren muss, damit ich in Containern /dev/tun/tap verwenden kann? Mir wรผrde ein snippet oder howto reichen.

sandro,
@sandro@c3d2.social avatar

@Ede Kann man das per default mit den configs setzen? Dann kรถnnte man vllt virtualisation.podman.defaultNetwork.settings
oder so nutzen

kitchen, to random
@kitchen@simian.rodeo avatar

learning an entirely new programming language to manage my dotfiles because bash is that bad

sandro,
@sandro@c3d2.social avatar

@kitchen You don't really need to. For most basic and middle level things you need to know very little about the nix language.

revol_xut, to NixOS German
@revol_xut@c3d2.social avatar

After my unfaithful months I am back in the church of . Reinstalling my old config on my daily driver.

sandro,
@sandro@c3d2.social avatar

@revol_xut :nixos:

PS: the last two migrations are from me ๐Ÿ˜‚

sandro,
@sandro@c3d2.social avatar

@revol_xut ๐Ÿ™‚ at least avahi works now faster and doesn't time out because it tries to resolve none existing IPv6 records by default. The other one is just cosmetical.

rumi, to random
@rumi@corneill.es avatar

dreams are shattered.
@sandro uses chrome
https://github.com/NixOS/nixos-search/pull/730#issuecomment-1978414756

sandro,
@sandro@c3d2.social avatar

@rumi I use Chrome on some devices. Firefox and Chromium on others.

LGUG2Z, to NixOS
@LGUG2Z@hachyderm.io avatar

As promised, here is the step-by-step walkthrough showing you how to get full passthrough support for your ๐Ÿ—

Yes, I do mean FULL passthrough, including support for ! ๐Ÿ”

Yes, you can copy and paste instructions and code for every step! ๐Ÿ‘ฉโ€๐Ÿ’ป

The walkthrough targets but you can replicate the same steps on any other distro too ๐ŸŽ‰

https://lgug2z.com/articles/yubikey-passthrough-on-wsl2-with-full-fido2-support

sandro,
@sandro@c3d2.social avatar

@LGUG2Z Can you update the post now that the module got merged? Also I think you forgot to mention that you need to run usbipd bind to make the usb device available.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • โ€ข
  • JUstTest
  • kavyap
  • thenastyranch
  • ethstaker
  • osvaldo12
  • mdbf
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • Youngstown
  • ngwrru68w68
  • slotface
  • GTA5RPClips
  • rosin
  • megavids
  • cubers
  • everett
  • cisconetworking
  • tacticalgear
  • anitta
  • khanakhh
  • normalnudes
  • Durango
  • modclub
  • tester
  • provamag3
  • Leos
  • lostlight
  • All magazines
    •