Sam Lehman :nixos:

@Larvitz How is Step CA? Are you coming from another CA solution?

Been thinking about running #stepca in my #kubernetes cluster, but have been apprehensive because of how many features seem to be gated behind smallstep's proprietary version. Would love to have this integrated with #certmanager and using the #tpm on my nodes. Was going to do a rearchitecting of my entire #auth and #cryptography stack when I switch from the deprecated #Ingress API to the #GatewayAPI

It would be really nice to have my personal configs for #Helix, #Neovim, or #Codium in my #homemanager config, but also let a #devshell provide extra config specific to that repo.

Any ideas on how something like this could be achieved?

Enabling an auth method shouldn't prevent you from using others, but if you enable fingerprint auth via #fprintd, privilege escalation commands like #sudo don't let you use a password anymore to authorize actions; you must use a fingerprint (until the fingerprint request times out)

#PolicyKit dialogs show a useless "Authenticate" button that never actually gets clicked, but not a password entry textbox (until after fingerprint auth fails)

The UI is already there, just show it!

Moreover, the UI for #fprintd in #GDM is also really clunky. Uglier than the sudo prompt, but with even less feedback on whether your finger was scanned properly.

Sad since the #GDM design mockups for this look so gorgeous.

The current status of #fingerprint scanning via #fprintd in #GNOME & #GDM is so bad.

Fingerprint login doesn't unlock the keyring, so immediately after login, you get dialogs asking you to manually type your password to unlock them.

Might as well just not allow fingerprint login in GDM and only allow fingerprints to dismiss the lockscreen post-login.

@alextecplayz @cassidy
- In my usage #DejaVuBackup & #PikaBackups both work very well. #Celeste too for syncing files with #Nextcloud

- Everything #AppManager does is possible w/ #Flatseal, #GnomeSoftware, & opening #flatpak manifests or specific to #Android activities, which are loosely analogous to #DBus services, which #DSpy works well for.

- Never used #Gemini, but #Alpaca works super well with communicating w/ #LLMs via #Ollama. Would make for an awesome #GNOME #SearchProvider

@mauriciobc @CleoMenezesJr Does #Calibre or Calibre-Web support serving your library via #OPDS?

If so, you could point [Foliate](https://flathub.org/apps/com.github.johnfactotum.Foliate) at it. It's a really nice app! Would be nice if it had functionality to sync your catalog and reading progress across devices.

@roberth @arianvp Hell yeah! Thanks for the info! (and implementation 😎️)
Good to know I can just do `nix run unstable#nix -- .#nixosConfigurations.config.myhost.system.build.toplevel` as a temporary workaround.

Curious how this is done. Will peep the implementation.

@arianvp Would be nice if stack traces could be constricted to include/exclude specific paths.

- Paths within my git repo ... *very much* care about *all* of them
- Paths within nixpkgs ... *maybe* care about 4-8 frames

to find the error, you gotta sift through 500 lines of garbage. Makes iterating on NixOS a nightmare

`nixos-rebuild` should collapse irrelevant internal frames by default. If you need the whole trace use `nix build .#nixosConfigurations.host.config.system.build.toplevel`.

@brainblasted

Should be possible with [mobile-nixos](https://github.com/NixOS/mobile-nixos) and `nix build .#nixosConfigurations.<host>.config.system.build.iso-image`

The project is kinda rough tho. Development/maintenance is slow, probably due to doing a bunch of nonstandard things on top of NixOS and not supporting Nix flakes.

I have a OnePlus 6T, so hopefully I can step up to help maintain the project once I'm a little more knowledgeable with Nix and boot related stuff.