#nixpkgs — Public Fediverse posts

Hey #nixos #nixpkgs community - what does #nix do when one of my remove builders is not available?

Like... I list 4 different in my remote builder configuration, but one is not available.

I would assume it does the right thing, but well, I think I better ask...

#nixpkgs #nixos

Nixpkgs hit 1 Million commits 🎉 🥳

https://github.com/NixOS/nixpkgs/commit/acd02321181a4cb0b6932eed75d806075ee460f8#commitcomment-185693586

#nixos #nixpkgs

Got the latest version of OpenProject 17.4 with Rails 4 and NodeJS 25 running on #NixOS. Hopefully landing soon in #nixpkgs https://github.com/NixOS/nixpkgs/pull/491672

I got my first contribution into #nixpkgs! https://github.com/NixOS/nixpkgs/pull/516929

Building/reviewing some #nixpkgs PRs before the work starts... doing the good things here.

Security Advisory: Local privilege escalation in Lix and Nix

https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in-lix-and-nix/77407

#security #nixpkgs #nixos

Did you know NixOS plans to cut a `26.05` release by the end of May? (schedule: https://github.com/NixOS/nixpkgs/issues/503391)

Today release process entered Zero Hydra Failures phase (https://github.com/NixOS/nixpkgs/issues/516381).

It's a great opportunity to contribute to `nixpkgs`. I tried squashing one `ZHF` failure today: https://trofi.github.io/posts/349-Zero-Hydra-Failures-towards-26.05-NixOS-release.html

#nixpkgs #nixos #zhf

(new account, so new introduction post (so i can pin it))

Hiii,

I’m quantenzitrone [ˈkvantn̩t͡siˈtʁoːnə] or short Zitrone, a mostly male #human. If your native language has a word for Zitrone (Lemon) with the same roots as Zitrone (de), e.g. Citron (fr), Cytryna (pl) or Sitruuna (fi), you may also use that one.

I like computers, especially those running #GNUlinux especially #NixOS. I’m still setting up my #homeserver with NixOS. I maintain a few packages and nixos modules in #nixpkgs. I'd call myself a nixpkgs maintainer. No commit bit, tho. Yet.

I like #programming, especially in #rustlang, sometimes when programming in other languages I notice that they are in fact not Rust. Sometimes I complain about it on here.

I like playing board or card games and i like cycling. What else? IDK, life. Just the joy of being, thinking and feeling.

I may meow at you especially if you’re cute OR meow-at-able

I study computer science at @uniheidelberg

You may meet me in the #RaumZeitLabor or at the #GPN, #ChaosCommunicationCongress, #MRMCD, #NixCon or #LixCon. (TODO: try out and go to more events)

My favourite logic gate is XOR.

(new account, so new introduction post (so i can pin it))

Hiii,

I’m quantenzitrone [ˈkvantn̩t͡siˈtʁoːnə] or short Zitrone, a mostly male #human. If your native language has a word for Zitrone (Lemon) with the same roots as Zitrone (de), e.g. Citron (fr), Cytryna (pl) or Sitruuna (fi), you may also use that one.

I like computers, especially those running #GNUlinux especially #NixOS. I’m still setting up my #homeserver with NixOS. I maintain a few packages and nixos modules in #nixpkgs. I'd call myself a nixpkgs maintainer. No commit bit, tho. Yet.

I like #programming, especially in #rustlang, sometimes when programming in other languages I notice that they are in fact not Rust. Sometimes I complain about it on here.

I like playing board or card games and i like cycling. What else? IDK, life. Just the joy of being, thinking and feeling.

I may meow at you especially if you’re cute OR meow-at-able

I study computer science at @uniheidelberg

You may meet me in the #RaumZeitLabor or at the #GPN, #ChaosCommunicationCongress, #MRMCD, #NixCon or #LixCon. (TODO: try out and go to more events)

My favourite logic gate is XOR.

(new account, so new introduction post (so i can pin it))

Hiii,

I’m quantenzitrone [ˈkvantn̩t͡siˈtʁoːnə] or short Zitrone, a mostly male #human. If your native language has a word for Zitrone (Lemon) with the same roots as Zitrone (de), e.g. Citron (fr), Cytryna (pl) or Sitruuna (fi), you may also use that one.

I like computers, especially those running #GNUlinux especially #NixOS. I’m still setting up my #homeserver with NixOS. I maintain a few packages and nixos modules in #nixpkgs. I'd call myself a nixpkgs maintainer. No commit bit, tho. Yet.

I like #programming, especially in #rustlang, sometimes when programming in other languages I notice that they are in fact not Rust. Sometimes I complain about it on here.

I like playing board or card games and i like cycling. What else? IDK, life. Just the joy of being, thinking and feeling.

I may meow at you especially if you’re cute OR meow-at-able

I study computer science at @uniheidelberg

You may meet me in the #RaumZeitLabor or at the #GPN, #ChaosCommunicationCongress, #MRMCD, #NixCon or #LixCon. (TODO: try out and go to more events)

My favourite logic gate is XOR.

(new account, so new introduction post (so i can pin it))

Hiii,

I’m quantenzitrone [ˈkvantn̩t͡siˈtʁoːnə] or short Zitrone, a mostly male #human.

I like computers, especially those running #GNUlinux especially #NixOS. I’m still setting up my #homeserver with NixOS. I maintain a few packages and nixos modules in #nixpkgs. I'd call myself a nixpkgs maintainer. No commit bit, tho. Yet.

I like #programming, especially in #rustlang, sometimes when programming in other languages I notice that they are in fact not Rust. Sometimes I complain about it on here.

I like playing board or card games and i like cycling. What else? IDK, life. Just the joy of being, thinking and feeling.

I may meow at you especially if you’re cute OR meow-at-able

I study computer science at @uniheidelberg

You may meet me in the #RaumZeitLabor or at the #GPN, #ChaosCommunicationCongress, #MRMCD, #NixCon or #LixCon. (TODO: try out and go to more events)

My favourite logic gate is XOR.

(new account, so new introduction post (so i can pin it))

Hiii,

I’m quantenzitrone [ˈkvantn̩t͡siˈtʁoːnə] or short Zitrone, a mostly male #human.

I like computers, especially those running #GNUlinux especially #NixOS. I’m still setting up my #homeserver with NixOS. I maintain a few packages and nixos modules in #nixpkgs. I'd call myself a nixpkgs maintainer. No commit bit, tho. Yet.

I like #programming, especially in #rustlang, sometimes when programming in other languages I notice that they are in fact not Rust. Sometimes I complain about it on here.

I like playing board or card games and i like cycling. What else? IDK, life. Just the joy of being, thinking and feeling.

I may meow at you especially if you’re cute OR meow-at-able

I study computer science at @uniheidelberg

You may meet me in the #RaumZeitLabor or at the #GPN, #ChaosCommunicationCongress, #MRMCD, #NixCon or #LixCon. (TODO: try out and go to more events)

My favourite logic gate is XOR.

GitHub recently announced that starting with v2.91.0 GitHub CLI will start sending pseudonymized telemetry data back to GitHub.

https://github.blog/changelog/2026-04-22-github-cli-opt-out-usage-telemetry/

Since this is an opt-out feature, most users will have it activated without knowing it. This is unacceptable in my opinion. So I took the liberty of turning this into an opt-in, disabled by default for nixpkgs.

https://github.com/NixOS/nixpkgs/pull/515047

#GitHub #nixos #nixpkgs #privacy

I did a thing...

(Oh my god I am so nervous posting this!)

It will also be on #youtube tomorrow.

#rustlang #rust #development #softwaredevelopment #git #nixos #nixpkgs #streaming

https://makertube.net/w/5kG2924pLrS2LpnQ7Ud8zM

#incident_response: Exposed GitHub token with push access

https://github.com/NixOS/nixpkgs/security/advisories/GHSA-67f2-674w-6g63

#nixpkgs #security

#incident_response: Exposed GitHub token with push access

https://github.com/NixOS/nixpkgs/security/advisories/GHSA-67f2-674w-6g63

#nixpkgs #security

#incident_response: Exposed GitHub token with push access

https://github.com/NixOS/nixpkgs/security/advisories/GHSA-67f2-674w-6g63

#nixpkgs #security

#incident_response: Exposed GitHub token with push access

https://github.com/NixOS/nixpkgs/security/advisories/GHSA-67f2-674w-6g63

#nixpkgs #security

#incident_response: Exposed GitHub token with push access

https://github.com/NixOS/nixpkgs/security/advisories/GHSA-67f2-674w-6g63

#nixpkgs #security

WRT streaming I guess some #nixpkgs maintenance could also be streamed...

oh well..

@pi_crew @stalwartlabs I'm thrilled for it to land in #nixpkgs
But take your time (I have enough to do, migrating nginx from Docker to Nix :))

Blog post by @luj that escaped my attention until now asking just how reproducible nix and NixOS is at scale? Turns out, he's been studying this exact question since 2017 and did a part of his PhD study on it.

https://luj.fr/blog/is-nixos-truly-reproducible.html

The answer? In 2017, about 60% of builds from nixpkgs were bitwise reproducible.

Now, it's over 90%.

This is great news! Especially since we don't have any tools that actively monitor this, so there isn't any active process that enforces reproducibility outside of nix itself (and the reproducibility team, let's not forget)

Great work, and great writeup. I look forward to reading more in the paper he teases in the post.

#Nix #NixOS #nixpkgs

A simple analogy for anyone to understand how #nix is different from tools like #ansible etc

Ansible(convergent) is like carving a wood, where u have some existing state like plain wood which u tinker continuously until u achieve the expected state

Nix(congruent) is like 3d printing, where the exact expected state is created from the start🔥
#nix #nixos #nixpkgs #nix
#DevOps

Edit:
img attribution: https://mathstodon.xyz/@Pol/116402344325876001
Found the source🤝

It's almost time for NixOS release 26.05, which means I've been really busy trying to get the NixOS Drupal service ready for the big day! I've been hard at work fixing bugs and adding new features that will make it easier to package and run custom Drupal packages on NixOS.

I realized recently that I've been working on this project for nearly a year now, so it might be a good time to blog about the things I've done since last year, and talk about what's next for Drupal on NixOS.

https://abmurrow.com/blog/drupal-service-year-open-source

#Drupal #Nix #NixOS #OpenSource #nixpkgs #blog

Är inte 100% alltid emot LLM, men... på den heligaste av platser... 😢

#llm #claude #nix #nixpkgs #nixos

Nix security advisory: Privilege escalation via symlink following during FOD output registration

https://discourse.nixos.org/t/nix-security-advisory-privilege-escalation-via-symlink-following-during-fod-output-registration/76900

#security #nixpkgs #nixos

I am starting to understand more and more why #nix critters don't bother merging their stuff into #nixpkgs ​:akko_scream2:​

Like there is a non-0 chance of me just being stupid but wtf is this
https://github.com/NixOS/nixpkgs/pull/499520#pullrequestreview-4063026079

- posted by Valerie

420 commits (the weed number) into Nixpkgs with this absolute pedantry https://github.com/NixOS/nixpkgs/pull/506286#issuecomment-4191348211

It puts the “stone” in milestones amirite?

#nix #nixpkgs

I was just accused of maybe not being a real human in a PR comment in #nixpkgs

https://github.com/NixOS/nixpkgs/pull/504616#issuecomment-4180196409

What the actual fuck?

Good morning everyone,
I have seen, that my nixpkgs commit is unverified, because my GPG-Key is valid for another email address. But I can't use it, because I use the Github alias for commits.

Can I use one GPG-Key for multiple email adresses and how can I achieve that? :)

#git #gpg #nixpkgs #nixos

🚨 New Blog Post Alert: Kotlin-lsp Packaging Pt 2

First time dealing with prebuilt binaries in Nix. What looked like a simple version bump ended up involving a native library, some patchelf debugging, and pulling in libgcc for libgcc_s.so.1.

autoPatchelfHook from nixpkgs made it fairly straightforward in the end.

Read more here:
https://britter.dev/blog/2026/03/20/kotlin-lsp-nixvim-pt2/

#nixos #nix #nixpkgs #kotlin #neovim #lsp

Move #Nextcloud-packages to the new directory structure `pkgs/by-name` in #NixOS #nixpkgs ♻️ https://github.com/NixOS/nixpkgs/pull/498519

Part of my work for @nextcloud and @synyx

#NixOS / #nixpkgs questions: I'm running against nixos-unstable. Home Manager has a "news" feature that tells me when things change in ways I might care about. Does anyone have a cunning way to get notified about changes to the Nixpkgs and NixOS release notes?

I can write my own monitoring script, but if there's a way of doing this that doesn't require reinventing this particular wheel, that'd be preferable!

Today's bug was a simple `vifm` bug: if you build it in the environment without `vim` or `perl` available you get non-working `:help` command.

`nixpkgs` was such an environment.

Proposed `nixpkgs` fix as https://github.com/NixOS/nixpkgs/pull/215272 and asked if `vifm` could fail the build instead of generating unusable help in https://github.com/vifm/vifm/issues/873

#bug #vifm #nixpkgs

Today's bug was a simple `vifm` bug: if you build it in the environment without `vim` or `perl` available you get non-working `:help` command.

`nixpkgs` was such an environment.

Proposed `nixpkgs` fix as https://github.com/NixOS/nixpkgs/pull/215272 and asked if `vifm` could fail the build instead of generating unusable help in https://github.com/vifm/vifm/issues/873

#bug #vifm #nixpkgs

Today's bug was a simple `vifm` bug: if you build it in the environment without `vim` or `perl` available you get non-working `:help` command.

`nixpkgs` was such an environment.

Proposed `nixpkgs` fix as https://github.com/NixOS/nixpkgs/pull/215272 and asked if `vifm` could fail the build instead of generating unusable help in https://github.com/vifm/vifm/issues/873

#bug #vifm #nixpkgs

Today's bug was a simple `vifm` bug: if you build it in the environment without `vim` or `perl` available you get non-working `:help` command.

`nixpkgs` was such an environment.

Proposed `nixpkgs` fix as https://github.com/NixOS/nixpkgs/pull/215272 and asked if `vifm` could fail the build instead of generating unusable help in https://github.com/vifm/vifm/issues/873

#bug #vifm #nixpkgs

@sophie

Did it ever get GitLab CI using Nix images created using `buildNixShellImage`?

It looks like that sets `cmd` on the image to Bash with some setup, but GitLab seems to want to run `/bin/sh` without any of the setup - which leaves all the packages in the Nix shell outside of the default `$PATH`.

Now we _can_ set the `entrypoint` in the GitLab CI image definition but those store paths are definitely going to change...

#Nixpkgs #Nix #GitLab #GitLabCI #Containers #OCI

@sophie

Did it ever get GitLab CI using Nix images created using `buildNixShellImage`?

It looks like that sets `cmd` on the image to Bash with some setup, but GitLab seems to want to run `/bin/sh` without any of the setup - which leaves all the packages in the Nix shell outside of the default `$PATH`.

Now we _can_ set the `entrypoint` in the GitLab CI image definition but those store paths are definitely going to change...

#Nixpkgs #Nix #GitLab #GitLabCI #Containers #OCI

@sophie

Did it ever get GitLab CI using Nix images created using `buildNixShellImage`?

It looks like that sets `cmd` on the image to Bash with some setup, but GitLab seems to want to run `/bin/sh` without any of the setup - which leaves all the packages in the Nix shell outside of the default `$PATH`.

Now we _can_ set the `entrypoint` in the GitLab CI image definition but those store paths are definitely going to change...

#Nixpkgs #Nix #GitLab #GitLabCI #Containers #OCI

@sophie

Did it ever get GitLab CI using Nix images created using `buildNixShellImage`?

It looks like that sets `cmd` on the image to Bash with some setup, but GitLab seems to want to run `/bin/sh` without any of the setup - which leaves all the packages in the Nix shell outside of the default `$PATH`.

Now we _can_ set the `entrypoint` in the GitLab CI image definition but those store paths are definitely going to change...

#Nixpkgs #Nix #GitLab #GitLabCI #Containers #OCI

@sophie

Did it ever get GitLab CI using Nix images created using `buildNixShellImage`?

It looks like that sets `cmd` on the image to Bash with some setup, but GitLab seems to want to run `/bin/sh` without any of the setup - which leaves all the packages in the Nix shell outside of the default `$PATH`.

Now we _can_ set the `entrypoint` in the GitLab CI image definition but those store paths are definitely going to change...

#Nixpkgs #Nix #GitLab #GitLabCI #Containers #OCI

Why didn't anyone tell me that #lix is in #nixpkgs now and that I can use it without even having to include it in my flake inputs!?!!

Interesting that GCC has a limit to the width of _BitInt of 65535 bits (1 bit short of 8KiB) whereas Clang has that limit set to 8388608 (exactly 1 MiB)

(Running on x86-64 #Linux; #GCC 14.3.0, #Clang 19.1.7, both from #nixpkgs c2ae88e)

#c #c23

- This situation is what we call "fucked"
- There is, however, one atypical Nix* business. While all others siphon life out of Nix project indirectly - that one recognizes the dynamic, and instead sells a fork of Nix project at a premium, with maintenance guarantees
- This is, perhaps, most sinister. Instead of merely exploiting the commons, like other companies do, this one monetizes the lowest common denominator - knowing full well of how ready to collapse this #xkcd2347 tower is
- This company also only partially depends on Nixpkgs, choosing instead to focus on flakes
- This gives them a unique opportunity: if a collapse does indeed happen, they have a perfect chance to take the whole ecosystem with all of the common good to their ownership, with everyone else essentially having no choice but to accept it, or lose all of their ecosystem investments
- This is an exceedingly profitable move, and quite expected from a company that has tried to fragment the community for years

🧵👇

#Nix #NixOS #Nixpkgs

- Essentially, companies make use of Nixpkgs' existing popularity and of its contents (either directly, as a private fork, or as a practical guide), and promote it back. But Nixpkgs' popularity has a cost. Each commit to it essentially siphons life out of Nix project - which has been looking increasingly pale for a very long time. And Nix is critical infra for Nixpkgs. Doing *anything* with it is extremely challenging - and there are barely any people with the know-how
- Essentially, Nix project is on death's door, one unfortunate accident (such as an irresponsibly revealed CVE) away from collapsing under the weight of Nixpkgs. Conversely, Nixpkgs is a classical #xkcd2347, where the critical piece has been quite literally maintained since 2003, and is now maintained by like 5 people
- #Lix is a big win in this regard, because it can serve as a replacement piece that is maintained by like 5 other people (and that runs into fewer problems overall), but it's not perfect

🧵👇

#Nix #NixOS #Nixpkgs

@kevin
Awesome😁. That's how u improve scripting and have no fear of changing the system state globally.
Idk if I have sent this to you earlier, but anyway sharing this here, this is a perfect start for beginners for leveling up nix shell skills(blog type creation in PPT form):

https://docs.google.com/presentation/d/1sFSG0As2L9cWjJ8qcRS6O4XDrMPe-WSlbu2oKryPIWM/

#nix #shells #scripting #shell #adhoc #nixpkgs #nixos #packages #tutorial #blog #ppt #global

Sigh, so apparently Tom Berek of Steering Committee is now working for Anduril. You know, that same Anduril that caused an open letter denouncing MIC sponsoring community events. I don't see how it's acceptable for SC members to work for Anduril, especially in the wake of the whole, you know...

The failure to provide an update to his conflict of interest (and two SC members stating their personal opinions that they don't see much of an issue) is a breach of trust. This means, once again, that the community has to organize by themselves, and demand accountability from people in power. To this end, please spread this information far and wide, and give @nyanbinary a hug. And go support your local #Lix and #Aux representatives.

Original post: https://discourse.nixos.org/t/sc-member-tomberek-works-for-anduril/68971
Archive: https://web.archive.org/web/20250906212959/https://discourse.nixos.org/t/sc-member-tomberek-works-for-anduril/68971

#NixOS #Nix #Nixpkgs