hexa-

❄️ NixOS 🤩 (Security, Infra, Python and Release-Manager 22.11/23.05)

Day: Network & Infrastructure.
Night: FOSS, Home Automation

pronouns: he/him
location: Darmstadt, Germany
github: https://github.com/mweinelt

Last Notes

2026-10-26 14:22:05 GMT

The #NixOS SC Election 2026 is currently under way, and our local group has created a voting guide with a recommended ranking and some honest opinions. The ranking is not by preference but rather tactical and adapted to the voting method.
- Four seats with 2y term length
- Voting is open until Nov. 8th
- Your ballot arrives by mail
- Prevent vote transfer to a candidate by not ranking them
- Don't rank the bigot
https://md.darmstadt.ccc.de/s/nixos-sc-election-2026
#nixpkgs

2026-10-20 13:40:50 GMT

We are shipping an immediate #security update for our CA store shortly. We recommend updating once those evaluations complete and the channels have advanced.
The small channels (#NixOS only) are ongoing and will be finished within the hour. The big channels (#NixOS/#Nixpkgs) will unfortunately take a while longer.
https://hydra.nixos.org/eval/1830475 26.05-small
https://hydra.nixos.org/eval/1830473 unstable-small
#nixos #nixpkgs

2026-10-13 14:09:25 GMT

Another coordinated Nix/Lix #security update. Have a look!
Offical advisory: https://discourse.nixos.org/t/security-advisory-for-nix-and-lix-october-2026/80547
Lix blog post: https://lix.systems/blog/2026-10-13-lix-cves/
CVEs for these issues are pending.
#nixos #nixpkgs #nix #lix #security

2026-08-17 14:56:30 GMT

#GitHub down? Nixpkgs can and should in most cases be fetched from channels.nixos.org because that is redistributed world-wide via #fastly with much higher availability and IPv6 support.
E.g. in your #flake use
nixpkgs.url = "https://channels.nixos.org/nixos-26.05-small/nixexprs.tar.zst";
instead of the github-flavored expression. Works for all supported channels.
#nixos #nixpkgs

2026-06-30 17:41:44 GMT

Today is the last day of support for #NixOS 25.11. Upgrade to 26.05 if you haven't already!
And I probably just did my final backport to release-25.11, which was an update to Firefox Rapid (152.0.4).
https://endoflife.date/nixos

2026-06-21 22:08:05 GMT

- reply

Du meinst ATOM, oder? @npub1l0t…tcap

2026-05-10 15:06:54 GMT

- reply

Uhhh, okay. Entering without your permission would be illegal in DE. They can't even have a key for the lock and you may of course change the lock yourself.

2025-10-13 11:38:58 GMT

If you're looking for a recommendation on how to vote in the upcoming #NixOS SC (steering committee) election this guide looks pretty solid.
https://rentry.co/nixos-sc-election-guide-2025
#nix #nixpkgs

2025-09-30 14:45:42 GMT

The guy running the "Full Time Nix" podcast who goes by the names "mightyiam" or Shahar "Dawn" Or joined the SC election room last night to ask this.
This is bona fide bigotry, and he should be removed from this community.
But at the very least people representing the community should stop appearing on his platform.
I'll add another receipt to drive the point home. His profile on hachyderm was swiftly banned after this exchange.
#nixos
https://assets.chaos.social/media_attachments/files/115/293/733/718/620/004/original/64ed16e7c6415a28.png
https://assets.chaos.social/media_attachments/files/115/293/769/709/406/961/original/e3c1304314e11860.png

2025-06-30 08:09:41 GMT

For #NixOS Unstable users:
We're about to stop shipping VPN plugins by default with #networkmanager.
This means you'll need to explicitly configure the ones you need via `networking.networkmanager.plugins`.
In fact, if you are relying on a VPN via #NetworkManager go and do that now to prevent any interruptions.
See this post for further details:
https://discourse.nixos.org/t/breaking-changes-announcement-for-unstable/17574/85?u=hexa

2025-02-15 17:25:46 GMT

If you're using #devenv for your projects, please note that the new `generate` command in 1.4.0 uses your repository content.
It tars up all files it can find through `git ls-files -z`³ and exfiltrates them to the service.
It handles `DO_NOT_TRACK=`¹ by sending that intent along² as a query string, so now you need to trust the service to not keep data.
🧵 1/n
[1] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/cli.rs#L202-L204
[2] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/devenv.rs#L212-L214
[3] https://github.com/cachix/devenv/blob/6c987a8795eedea872afe4d1c1ac518d0c7f6db1/devenv/src/devenv.rs#L226-L257

2024-12-30 13:41:31 GMT

- reply

Gerade MNC 23 in Darmstadt. Ist die meiste Zeit okay.
Als ich in 2024-07 dort hin migriert bin, war Internet doch gelegentlich nicht verfügbar. Das scheint mittlerweile kein Problem zu sein..

2024-08-01 01:50:55 GMT

- reply

That sounds … not great tbh 😄

2024-08-01 01:35:35 GMT

- reply

A cat adopts you and you adopt a dog. They're not even on the same level in a pedigree.
Not sure about other pets.