An audit of 445 NixOS modules shows the cost of making configuration and secrets share one interface.
Tracking NixOS option values and dependencies | oddlama's blog
oddlama's personal web page and blog
Please Stop Using `nixos-rebuild switch`
Better practices for safely and reliably deploying and updating NixOS systems.
nix-community/nixos-apple-silicon
Resources to install NixOS bare metal on Apple Silicon Macs [maintainers=@tpwrules,@flokli,@yuyuyureka]
I've gone full Nix: Proxmox to NixOS + Incus | Bas Nijholt
After years of running a Proxmox cluster, I migrated my entire homelab to NixOS with Incus. I explain the philosophical friction of imperative 'appliance' OSs vs declarative hosts, share how I migrated my LXC/VM workloads, and why it is the perfect infrastructure to manage using AI agents.
What happened after 2,000 people tried to hack my AI assistant — Fernando Irarrázaval
I built hackmyclaw.com, where anyone could email Fiu, my OpenClaw assistant, and try to make it leak the contents of a secrets.env file.
A Cypherpunk's Manifesto
Privacy is necessary for an open society in the electronic age. Privacy is not secrecy. A private matter is something one doesn't want the whole world to know, but a secret matter is something one doesn't want anybody to know. Privacy is the power to selectively reveal oneself to the world.
the world hasn’t figured out yet that you can literally just fix everything with a Nix overlay
There are many things that are uncertain in our industry right now, but one thing I am certain about, and have been for almost 13 years, is that Nix is a terrible programming language. I remember when I first learned it, it felt like pushing shit uphill. The learning cliff
FOKS - Federated Open Key Service
FOKS provides a secure, end-to-end encrypted Git hosting service. Your data is encrypted on your machine before it hits the server, and the server never sees data or filenames in unencrypted form. FOKS uses PQ-secure public-key cryptography, securing all end-to-end encrypted data against future quantum attacks. Your secrets are safe, even in the event of server compromise.
Setting up a virtual machine with GPU passthrough
A guide for configuring NixOS with nvidia GPU passthrough to a virtual machine in virt-manager.
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite
The Secret History
The Secret History is the first novel by the American author Donna Tartt, published by Alfred A. Knopf in September 1992. A campus novel, it tells the story of a closely knit group of six Classics students at Hampden College, a small, elite liberal arts college in Vermont.
I can haz smoller NixOS ISOs? | natkr's ramblings
In which I painstakingly remove functionality from a Linux live image. Like a normal person.