it would be interesting to build a new nixpkgs based on a totally different base system. like, genode (sel4+) that can take the interesting security properties of nix and apply them to a non-posix secure-by-construction type of OS

thinking about moving some of my services to dependable third parties.. I love to host my own stuff, but I need to have at least some backups. esp for stuff that mostly serves as an alias.
hmm seems like movim is a little too fancy to run on a shared hosting with no daemons..
I wonder if bento has slightly missed the key to being a total genius approach to host management. ok hear me out. each node periodically pulls configuration from a coordination node that hosts a binary cache. the admin may make changes and pre-build them maybe kick off an update task manually if they want, but the point is there’s an automated checkin. for my case, the device I have available for coordination isn’t really capable of hosting a binary cache for any of my other machines. the nix store for my dev machine is larger than the entire disk of the coordinator! and due to the yearly heat my best machine can’t be reliably powered on all the time. so i started thinking to myself, “self, what if instead of having a central coordinator we fetched configuration from a reliable git mirror (maybe git+torrent some day) and consume it as a flake. the source could even be swapped out using a flake registry (so you don’t even have to commit to self-hosting anything other than a json file). then managed hosts only have to be setup to consume the registry and the shared flake (which registers the update agent) and DONE?”
if you want your computer to be able to sleep, you’ll need a measuring tape and a scientific calculator. first, measure each byte that you have in RAM and take the square root. add that to your total length. we’ll need that number later on.
twts are immutable in the sense that a twt is its own identifier. you might think that a twt can be modified, but what’s really happening is a delete and redraft operation. an edit would require you to append a special twt that says that old twt was actually meant to say this other thing, here’s the twthash please hide my shame in the UI.
rm -fr, remove french-style: merciless colonizer. thief and destroyer of worlds.
maybe i’m overly restrained when it comes to making changes in a codebase, but i do a lot of the work in my head before committing to code.
running grey until after dark, it’ll be around 40C until tuesday in the daytime so I can’t really run the main server while I’m sat in my office. i’ll have some pine quartz blades or my quattro arrays up some day to handle the lower power stuff so running grey doesn’t mean the whole system is offline.
i know i can’t keep living in this dead or dying dream..
no but linux containers aren’t secure. yeah, they’re administrative boundaries. a sandbox would be nice, but this isn’t Sun. we have fallen from grace. tape the box closed with AppArmor if you need to and flip the exact 11 switches that apply for your impending scenario. i’m sure nobody will steal your data.

#freePalestine #freeSudan #freeCongo #freeTurtleIsland EMPIRE MUST FALL
when I say ‘functional programming’ you think ‘haskell’ and I think ‘BQN’
my workflow for posting images is awful XD
The plan is coming together. I am making friends and I’m doing the LA gay shit. I’m going outside, I’m getting laid. I’m like a real person. I have an old friend back in my life even.
at some point i will unfuck my mkfiles so i don’t have to do a full rebuild to properly regerate the indexes
this is a test
my whole life, i’ve been leaving things behind. venturing far away from everything that i know. these days, i’m trying to find connections that i can still rekindle, mend, and remember. this is much much harder than what i was used to
early preview of my new web-based twtxt client https://sunshinegardens.org/static/howl/
moving to a new town is lonely, i think i’m lonely. maybe that’s why things have been so hard..
the new post-quantum encryption algos have dope names CRYSTALS-Kyber, CRYSTALS-Dilithium, SPHINCS+, FALCON https://www.nist.gov/news-events/news/2023/08/nist-standardize-encryption-algorithms-can-resist-attack-quantum-computers
i’m over here thinking about how to get free internet to millions of people and keeping the system requirements as low as possible.
but everyone is talking about making a computer using scraps that can barely render a few lines of ACII and maybe some non-latin characters as images.
imo the only useful application would be so that I never have to get a new computer again unless mine breaks. i like being able to talk to people from around the world, so its going to have to include internet and video (y’all saw the impact tiktok had on the gaza situation, can’t deny that video is important)
what’s that point of permacomputing?
trying to be alive, part 2: in the city of angels
some day, you’ll be able to download nix-on-android from f-droid and nix run git+https://git.cyb.red/pkgs/free-internet.flake and join the no se vende mesh collective.. something like that
i’m excited about how the new system is coming together. i’ve chosen bento as the system admin runtime. the centralized model simplifies some things and encourages people to setup their own (if small) binary caches. the whole thing is federated in the end and i think we can find some ways to make an HA bento. co-ordinator nodes i think are important for making a stable network. a spare laptop can easily buffer some power, run a secondary radio, and have an ethernet hookup. even a phone can make a nice one.
tried out a demo vm setup of nixos, but i really want to level up my server game and provision the whole thing using terranix.
NDN is looking pretty neat https://docs.named-data.net/NLSR/current/INSTALL.html https://github.com/named-data/ndn-svs#installation
this is what i like to see https://gerbil.scheme.org/guide/nix.html
re: reticulum i might just make my own internet replacement protocol if i keep finding out that the extant ones have yellow snake flag people attached to them
honestly kinda hype about this one https://reticulum.network/manual/gettingstartedfast.html#sideband I think some concepts from named-data networking (andana and statevector sync in particular) and secure scuttlebutt (plumbtree) could help make it more robust, but I like the overall direction and architecture a lot. the multi-hop transmission design in particular 💋
biiiiig oof when it comes to compiling big things on my laptop. i’m gonna have to get a binary cache up and running pretty soon
i have successfully put a docker container inside of a nixos container, a turturken so to speak. next up, we get arion-compose working in there and then see about mem_limit and cpus!
I’m bringing back the tilde system again pretty soon, I just have to do one more full rebuild of the service infra to make sure its reproducible and we’ll be back in biz
i have a cryptographically verified and deterministic operating system with reproducible builds, but the sound still doesn’t work right.
i decided that the only good browser is mullvad-browser, though tor-browser is a close second.
i have finished porting my laptop config to nixos in record time. i did the entire rebuild in one day, only a handful of hours total. love it.
writing a new honk-based bridge between tw.txt and the fediverse
my memex db is 2.7GiB… which is a bit much
today i will start trying to extract my dots from my memex database and manage the dependency tree entirely using nix flakes
minibase bootstrap iso first look is up on the gits https://git.ix.cyb.red/IX/minibase/src/branch/main/dev/bootstrap #nix #lix
installing lix fixed my busted nix install. i installed the rpm from their website and it didn’t work so i typed curl -sSf -L https://install.lix.systems/lix and was happy happy happy
nix lix aux is for sure a winner
my first nix flake https://git.ix.cyb.red/pkgs/msmart-ng.flake its kind of ok i guess. i’m still learning ^^
–help