PoolloverNathan

@PoolloverNathan@programming.dev

This profile is from a federated server and may be incomplete. Browse more on the original instance.

PoolloverNathan,

Obligatory “I lustrated it in favor of nixos” post

PoolloverNathan,

Installed NixOS but don’t like NixOS? Try nix-env -iA estrogen.

PoolloverNathan,

LiNuX uSeR iNsTaLlInG A BrOwSeR haha

yeah uh…

  • sudo apt install firefox
  • sudo xbps-install firefox
  • sudo pacman -Syu firefox
  • nix-env -iA firefox
PoolloverNathan,

Is that TV just a CentOS box running VLC‽

PoolloverNathan,

Tip: Alt+SysRq+F to force an OOM kill. It’ll usually target the leaking process.

PoolloverNathan,

Print Screen

PoolloverNathan, (edited )

OS: NixOS 24.05 (gen 67, non-flake)
WM, DE: KDE Plasma
Mass massaging: Aliucord mobile, Vencord (installed from nixpkgs patch) desktop
P2P messaging: Netcat
Don’t really watch many videos / listen to music
Editor: Sandboxed VSCodium
Base flake for development environments: stddev
Programming language: Haskell + Rust + Go (one project)
Browser: Sandboxed Firefox
Phone launcher: Niagara

PoolloverNathan,

I use NixOS (plasma, setting up xmonad) btw

PoolloverNathan,

Actually I want to write an app browser for NixOS now.

Planet is headed for at least 2.5C of heating with disastrous results for humanity, poll of hundreds of scientists finds | Planet is headed for at least 2.5C of heating with disastrous results (www.theguardian.com)

I’ll note that 2.5°C of warming by 2100 is a significant improvement over the trajectory we were on a decade ago, even if still far from where we need to be

PoolloverNathan,

I’m glad Voyager puts baby icons on new accounts; it usually resembles how they look in real life.

PoolloverNathan, (edited )

!holocaustjokes

Edit: Not associated with lemmygrad or anything in those instances. That was just the instance that sounded most likely to have this community.

PoolloverNathan,

Use asterisks for in-word italics: infamous → infamous.

PoolloverNathan,

I calmly remove my USB labeled “oh shit” from my pocket, insert it, and reboot.

PoolloverNathan,

I just add this to my system config:


<span style="color:#323232;">networking.wireless = {
</span><span style="color:#323232;">  enable = true;
</span><span style="color:#323232;">  networks = import ./networks.nix;
</span><span style="color:#323232;">};
</span>

Then I define my networks in a gitignored file and I’m good to go.

PoolloverNathan,

Made a Nix library for this. For a simple setup you can just build this (untested) and run the result:


<span style="color:#323232;">import ./encase.nix {
</span><span style="color:#323232;">  name = "firefox";
</span><span style="color:#323232;">  rw.home.nathan = /home/nathan/home-for/firefox;
</span><span style="color:#323232;">  # other dependencies it might need...
</span><span style="color:#323232;">  tmp = /tmp; # fresh tmpfs for this sandbox
</span><span style="color:#323232;">  network = true;
</span><span style="color:#323232;">  command = pkgs.firefox;
</span><span style="color:#323232;">}
</span>

It doesn’t have user isolation yet, so if it escapes the browser and the chroot (which doesn’t have a /proc unless you set proc = /proc;, and runs in a PID namespace either way) your files are still at risk. However, this is still pretty secure, and you can run the script itself as a different user (it creates a new UID namespace so chrooting can be done without root).

PoolloverNathan,

It’s an option, default off. If you enable it it prompts you to install the CA for the block page.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • kavyap
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • osvaldo12
  • mdbf
  • Youngstown
  • cisconetworking
  • slotface
  • rosin
  • thenastyranch
  • ngwrru68w68
  • khanakhh
  • megavids
  • ethstaker
  • tacticalgear
  • modclub
  • cubers
  • Leos
  • everett
  • GTA5RPClips
  • Durango
  • anitta
  • normalnudes
  • provamag3
  • tester
  • lostlight
  • All magazines