Great read about laziness in the Nix programming language: https://nixcademy.com/posts/what-you-need-to-know-about-laziness/ Took some time to wrap my head around the wrap function but I have a better understanding of laziness in Nix now!
After some experimentation I think I have a working unprivileged #nixos container running a multi-user environment with services. In my case replacing an LXC instance.
nixos-containers.nix needs some --bind patching with :idmap
Added extraFlags to container with private-users/chown, allowedDevices with rwm /dev/net/tun
Logrotate breaks but can be fixed with a couple of lines.
root-login to the container to set a password will leave /etc/.pwd.lock as nobody. Delete it.
Work in progress.
Looking into writting nix binaryWrappers for thoose applications that really need to pollute my environment with crap...
@Rhababerbarbar in #NixOS it is pretty simple to build a custom kernel
https://nixos.org/manual/nixos/stable/#sec-kernel-config
https://nixos.org/manual/nixpkgs/stable/#sec-linux-kernel
https://wiki.nixos.org/wiki/Linux_kernel
e.g. i created a kernel with #bcachefs
Oof - I clearly missed the fact that you can install #NixOS baremetal on Apple Silicon now!!
https://github.com/tpwrules/nixos-apple-silicon/
Does anyone use this? What's the experience like? Any rough edges to be aware of?
Gonna predict that Linux Is Best will leave #NixOS faster than misskey.de
RE: https://mk.absturztau.be/notes/a6p7b66k0dhy01wl
DevSecOps & Declarative Linux: Nix User Group Paderborn
Du interessierst dich für robuste, deklarative Systeme? Dann bist du beim Nix-Treffen Paderborn genau richtig!
Wir gründen den Nix-Treff Paderborn und laden dich herzlich zum ersten Treffen ein. Das Ziel: Gleichgesinnte treffen, Wissen austauschen und gemeinsam in die Welt von Nix eintauchen.
Mehr Infos unter: https://nix-paderborn.github.io/
1/2
Not really surprising though I guess, its the corporate way of doing things.
You do something shady, get called out, apologize in an hand wavy, noncommittal kind of way, promise to do better, and then instead of doing anything wait until it blows over and quietly bring the thing back.
It's really kind of a classic.
I guess its totally cool that #devenv 1.5 was pushed into #nixpkgs, bringing back both telemetry and source code upload for AI training, and neither @domenkozar's blog post nor the release announcement mentions anything about that, right?
hmm...transmission...403 forbidden
127.0.0.1:9091
services.transmission = {
enable = true;
package = pkgs.transmission_4;
openFirewall = true;
openPeerPorts = true;
openRPCPort = true;
settings = {
rpc-bind-address = "0.0.0.0";
};
};
hmmm....
Dear Lazy web...
With the old #NixOS aarch64 build host dead and my request for access to the new one unsuccessful, I'm pondering the best path to having an aarch64 build machine again. I see three paths, in no particular order:
* Pay for an #aarch64 VPS and set it up as a build machine
* Re-build one of my Pi3's as a build machine
* Use cross compilation
None of them are ideal and there may be better ways.
Interested in your thoughts or other ideas.
Any #NixOS users building a custom #kernel?
The #Linux kernel is crazy huge, I would like to start tweaking my system by using a custom kernel
- longterm 6.12 as base (less hassle, more stable)
- intel only (no amd, nvidia, wifi card drivers etc)
- modern-ish hardware only (no obscure old keyboard drivers etc)
- O3 optimizations (I think they generally make sense on an i7-11th gen)
Do you got good resources to start with this?
I am specifically asking about the NixOS part.
