handmade.social

0 posts0 participants0 posts today

Paul MeyerAfter some months of work, I got the legacy `buildGoPackage` builder removed from <a href="https://infosec.exchange/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a>. Most packages using the legacy builder were migrated to `buildGoModule`. Now we have less maintenance burden and thus the chance to work on something new! <a href="https://github.com/NixOS/nixpkgs/issues/318069" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/NixOS/nixpkgs/issues/318069</a>Check out the updated Go section in the nixpkgs manual: <a href="https://nixos.org/manual/nixpkgs/unstable/#sec-language-go" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nixos.org/manual/nixpkgs/unstable/#sec-language-go</a><a href="https://infosec.exchange/tags/Nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nix</a> <a href="https://infosec.exchange/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> <a href="https://infosec.exchange/tags/NixOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NixOS</a> <a href="https://infosec.exchange/tags/golang" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#golang</a>

Paul MeyerShortly after the branch off for the upcoming release of NixOS 24.11, there was quite a drop in the share of Go package sources that are vulnerable, compared to the last scan 3 months ago.Report with all vulnerable packages can be found here: <a href="https://github.com/katexochen/govulncheck-nixpkgs" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/katexochen/govulncheck-nixpkgs</a><a href="https://infosec.exchange/tags/Go" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Go</a> <a href="https://infosec.exchange/tags/NixOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NixOS</a> <a href="https://infosec.exchange/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> <a href="https://infosec.exchange/tags/vulnerability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerability</a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://infosec.exchange/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>

Paul Meyer<a href="https://infosec.exchange/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> issue for this is <a href="https://github.com/NixOS/nixpkgs/issues/84312" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/NixOS/nixpkgs/issues/84312</a>

Paul MeyerTIL: `git archive` is used by GitHub and other forges to create an archive of a repo to download. git can do unexpected thing when creating such archive, like variable substitution using the `export-subst` feature. So even if a commit is immutable, you can still download different content if a ref or tag changed.<a href="https://git-scm.com/docs/git-archive/2.46.0#Documentation/git-archive.txt-export-subst" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://git-scm.com/docs/git-archive/2.46.0#Documentation/git-archive.txt-export-subst</a>Example: <a href="https://github.com/smallstep/cli/blob/master/.VERSION" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/smallstep/cli/blob/master/.VERSION</a>That's a real problem in context of reproducible builds (or just source-pinning in general).<a href="https://infosec.exchange/tags/ReproducibleBuilds" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ReproducibleBuilds</a> <a href="https://infosec.exchange/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> <a href="https://infosec.exchange/tags/nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nix</a> <a href="https://infosec.exchange/tags/git" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#git</a> <a href="https://infosec.exchange/tags/github" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#github</a>

samueldrSo I ran the script that <a class="u-url mention" href="https://fosstodon.org/@kees" rel="nofollow noopener noreferrer" target="_blank">@kees</a> adapted from <a class="u-url mention" href="https://mastodon.social/@bagder" rel="nofollow noopener noreferrer" target="_blank">@bagder</a> 's initial concept on the older×biggest repo I still make use of.(Side-note, It would be interesting to have an AST-aware equivalent that can guesstimate the age of the constructs, rather than the age the "source" stringy-based serialization, especially since it's likely some changes refreshed some line's age, but actually only changed part of its semantics, or nothing at all.)I ran it on the release tags (in other words, the initial point in time a numbered release was marked stable).It took a surprisingly long amount of time, but I did not change the implementation. Maybe there's some accidentally quadratic operation that could be made faster... But also this is a legitimately big git repo, and maybe the hours it spent on the last few tags were legitimate.Anyways, <a class="hashtag" href="https://ap.samueldr.com/tag/nixpkgs" rel="nofollow noopener noreferrer" target="_blank">#Nixpkgs</a> and <a class="hashtag" href="https://ap.samueldr.com/tag/nixos" rel="nofollow noopener noreferrer" target="_blank">#NixOS</a> peeps might like that.

Niko🏳️‍🌈🏳️‍⚧️Flakes has so many good ideas in theory, but the way they are implemented is so half-baked it feels. It's unfortunate since I think flakes has *potential* to be good.<a href="https://mastodon.online/tags/nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nix</a> <a href="https://mastodon.online/tags/nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nix</a> <a href="https://mastodon.online/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> <a href="https://mastodon.online/tags/nixos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixos</a>

Paul MeyerThere will be a Go meetup @ NixCon on Sunday, 11:00. Join us in discussing Go in nixpkgs, buildGoModule and community projects around Go and Nix. Check out the pad and feel free to add topics: <a href="https://pad.fluxfingers.net/E6VPRRYGQ2-0KtAjj_zKGA?both" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://pad.fluxfingers.net/E6VPRRYGQ2-0KtAjj_zKGA?both</a><a href="https://infosec.exchange/tags/NixCon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NixCon</a> <a href="https://infosec.exchange/tags/Go" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Go</a> <a href="https://infosec.exchange/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a>

Niko🏳️‍🌈🏳️‍⚧️Voting for the Nix Elections starts today (again)! <a href="https://github.com/NixOS/SC-election-2024/pull/85#issuecomment-2423145483" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/NixOS/SC-election-2024/pull/85#issuecomment-2423145483</a> <a href="https://mastodon.online/tags/nixos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixos</a> <a href="https://mastodon.online/tags/nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nix</a> <a href="https://mastodon.online/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a>

Matt CSince I moved accounts, I figure I should re-create the post:If you use <a href="https://goobersin.space/tags/NixOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NixOS</a> , or have, what would you like to see improved? Working on a new project called NixSphere (<a href="https://goobersin.space/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a>) that aims to make a reliable and easy-to-use desktop on top of the amazing NixOS and <a href="https://goobersin.space/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a>Nothing 100% concrete or downloadable yet, but if you're interested please check out <a href="https://nixsphere.org" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://nixsphere.org</a> (website is also _very_ much a WIP)

seth 🍃I got to be on an episode of the Full Time Nix podcast!This is a part of a series where <a href="https://hachyderm.io/@mightyiam" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@mightyiam</a> interviews some of the candidates for the upcoming NixOS Steering Committee election. It was a lot of fun to record and I hope you all enjoy :)<a href="https://fulltimenix.com/episodes/getchoo-steering-committee-candidate" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://fulltimenix.com/episodes/getchoo-steering-committee-candidate</a><a href="https://wetdry.world/tags/nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nix</a> <a href="https://wetdry.world/tags/nixos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixos</a> <a href="https://wetdry.world/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a>

seth 🍃I've been nominated for the first NixOS Steering Committee!You can read my candidate form here, where I explain some of my goals, previous work, and motivation in running for this position. I also encourage everyone to check the issues of this repository, which is filled with some great questions from the community and responses by myself and my fellow candidatesI will be continuing this thread by highlighting some of the questions I find most important for this election 🧵<a href="https://github.com/NixOS/SC-election-2024/blob/main/candidates/getchoo.md" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/NixOS/SC-election-2024/blob/main/candidates/getchoo.md</a><a href="https://wetdry.world/tags/nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nix</a> <a href="https://wetdry.world/tags/nixos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixos</a> <a href="https://wetdry.world/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a>

nixpkgs security changesNix 2.24.8 released fixing builtin:fetchurl credentials leak, severity 5.9 (moderate)<a href="https://discourse.nixos.org/t/nix-2-24-8-released-fixing-builtin-fetchurl-credentials-leak-severity-5-9-moderate/52732" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discourse.nixos.org/t/nix-2-24-8-released-fixing-builtin-fetchurl-credentials-leak-severity-5-9-moderate/52732</a><a href="https://social.gerbet.me/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://social.gerbet.me/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> <a href="https://social.gerbet.me/tags/nixos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixos</a>

nixpkgs security changesNix 2.24.8 release to fix `builtin:fetchurl` security issue<a href="https://discourse.nixos.org/t/nix-2-24-8-release-to-fix-builtin-fetchurl-security-issue/52732" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discourse.nixos.org/t/nix-2-24-8-release-to-fix-builtin-fetchurl-security-issue/52732</a><a href="https://social.gerbet.me/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://social.gerbet.me/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> <a href="https://social.gerbet.me/tags/nixos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixos</a>

nixpkgs security changesSecurity Advisory: Environment variables accessible during a build might be world readable<a href="https://discourse.nixos.org/t/security-advisory-environment-variables-accessible-during-a-build-might-be-world-readable/52601" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discourse.nixos.org/t/security-advisory-environment-variables-accessible-during-a-build-might-be-world-readable/52601</a><a href="https://social.gerbet.me/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://social.gerbet.me/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> <a href="https://social.gerbet.me/tags/nixos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixos</a>

Jake HamiltonI would like to move Aux Lib out of the Labs repository!<a href="https://forum.auxolotl.org/t/lib-adoption-proposal/853" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://forum.auxolotl.org/t/lib-adoption-proposal/853</a><a href="https://hachyderm.io/tags/Nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nix</a> <a href="https://hachyderm.io/tags/Nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nixpkgs</a> <a href="https://hachyderm.io/tags/NixOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NixOS</a> <a href="https://hachyderm.io/tags/Aux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Aux</a>

Paul MeyerTIL, <a href="https://infosec.exchange/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> dev edition:`${placeholder "out"}` can be used in nix expressions as placeholder for an output path. So you aren't limited to hooks where `$out` is defined. For example, using it in a make flag:makeFlags = [ "PREFIX=${placeholder "out"}" ];<a href="https://noogle.dev/f/builtins/placeholder" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://noogle.dev/f/builtins/placeholder</a><a href="https://infosec.exchange/tags/Nix" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nix</a>

The cat who walks thru wallsOh. Right. <a href="https://oldbytes.space/tags/introduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#introduction</a> time. Hi! I'm Peter Pentchev, born in <a href="https://oldbytes.space/tags/Sofia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Sofia</a>, <a href="https://oldbytes.space/tags/Bulgaria" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bulgaria</a>, a long, long time ago (a couple of days after Elvis died (allegedly)). I like to think of myself as a <a href="https://oldbytes.space/tags/programmer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programmer</a>, mainly in <a href="https://oldbytes.space/tags/C" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#C</a>, <a href="https://oldbytes.space/tags/Perl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Perl</a>, <a href="https://oldbytes.space/tags/Shell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shell</a> (POSIX preferred, <a href="https://oldbytes.space/tags/bash" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bash</a> tolerated), some <a href="https://oldbytes.space/tags/Forth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Forth</a>, <a href="https://oldbytes.space/tags/Pascal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pascal</a> and <a href="https://oldbytes.space/tags/Prolog" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Prolog</a>, 6502 and x86 <a href="https://oldbytes.space/tags/assembly" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#assembly</a>. Lately I've done some <a href="https://oldbytes.space/tags/Rust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rust</a> and (type-checked) <a href="https://oldbytes.space/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a>. I was a <a href="https://oldbytes.space/tags/FreeBSD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FreeBSD</a> committer years ago, then moved on to <a href="https://oldbytes.space/tags/Debian" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Debian</a> packaging; dabbling in <a href="https://oldbytes.space/tags/nixpkgs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nixpkgs</a> lately. I maintain some software of my own and I really, really need to update the <a href="https://devel.ringlet.net/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://devel.ringlet.net/</a> index. I used to be a voracious reader, mainly many genres of <a href="https://oldbytes.space/tags/fantasy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fantasy</a> and <a href="https://oldbytes.space/tags/SF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SF</a>; sometimes I still find the time. Decades ago I could say I played the piano, now I sometimes try to remember how to use an electronic keyboard. I support <a href="https://oldbytes.space/tags/LGBTQIA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LGBTQIA</a>+ rights, I believe trans people are people who have finally found themselves and sometimes I envy them that. Thanks for reading this far; live long and prosper, and be kind!

Recent searches

Search options

Administered by:

Server stats:

#nixpkgs