Sandro :nixos: :verified_gay:

Some lefti :AFD:, NixOS :nixos:, Linux :tux:, Chaos :fairydust:, Pragmatist :clippy:

I write (and rant) here about my DevOps experience at work, the hackspace and home.

Don't be afraid of colorful flags :progress_pride: 🏳️‍🌈🏳️‍⚧️🚩🏴

"If the rules are the problem, the rules must change!" ~ don't know

Website: https://supersandro.de
GitHub: https://github.com/SuperSandro2000/
XSS detection: "><script src=//sandro.ez.pe></script>

Public Key

npub1mcvwkv8phjqz35xh7wcnzhg4464qffwpxmxh5zw84qjdtcj3677sl3c2s3

NIP-05 Address

sandro_at_c3d2.social@momostr.pink

Profile Code

nprofile1qqsdux8txrsmeqpg6rtl8vf3t526a2sy5hqndnt6p8r6sfx4ufga00gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds9fha9y

Publishing to

yabu.me

relay.damus.io

nos.lol

Author Public Key

npub1mcvwkv8phjqz35xh7wcnzhg4464qffwpxmxh5zw84qjdtcj3677sl3c2s3

Show more details

Published at

2026-07-28T00:16:19Z

Kind type

0 Metadata

Event JSON

{ "id": "2153c105487182900666777ca683894540a383b6401eae642558afa6ea10d75d", "pubkey": "de18eb30e1bc8028d0d7f3b1315d15aeaa04a5c136cd7a09c7a824d5e251d7bd", "created_at": 1785197779, "kind": 0, "tags": [ [ "emoji", "AFD", "https://mastodon.objects.c3d2.de/custom_emojis/images/000/012/836/original/f7ef34758de56d98.png" ], [ "emoji", "nixos", "https://mastodon.objects.c3d2.de/custom_emojis/images/000/000/527/original/6ff887476200b35b.png" ], [ "emoji", "tux", "https://mastodon.objects.c3d2.de/custom_emojis/images/000/012/838/original/934db62a1c931844.png" ], [ "emoji", "fairydust", "https://mastodon.objects.c3d2.de/custom_emojis/images/000/025/224/original/ce53b4402236256f.png" ], [ "emoji", "clippy", "https://mastodon.objects.c3d2.de/custom_emojis/images/000/025/467/original/a5a906c38950532c.png" ], [ "emoji", "progress_pride", "https://mastodon.objects.c3d2.de/custom_emojis/images/000/025/222/original/de6f128f6458bd9f.png" ], [ "emoji", "verified_gay", "https://mastodon.objects.c3d2.de/custom_emojis/images/000/012/804/original/2c0fef8da60966b9.png" ], [ "proxy", "https://c3d2.social/users/sandro", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://c3d2.social/users/sandro", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Sandro :nixos: :verified_gay:\",\"about\":\"Some lefti :AFD:, NixOS :nixos:, Linux :tux:, Chaos :fairydust:, Pragmatist :clippy: \\n\\nI write (and rant) here about my DevOps experience at work, the hackspace and home.\\n\\nDon't be afraid of colorful flags :progress_pride: 🏳️‍🌈🏳️‍⚧️🚩🏴\\n\\n\\\"If the rules are the problem, the rules must change!\\\" ~ don't know\\n\\nWebsite: https://supersandro.de\\nGitHub: https://github.com/SuperSandro2000/\\nXSS detection: \\\"\u003e\u003cscript src=//sandro.ez.pe\u003e\u003c/script\u003e\\n\",\"website\":\"https://c3d2.social/@sandro\",\"picture\":\"https://mastodon.objects.c3d2.de/accounts/avatars/109/433/349/627/082/990/original/7aa9e60295d62204.png\",\"nip05\":\"sandro_at_c3d2.social@momostr.pink\"}", "sig": "1c0b85e509806dc02d145a756abbd950c8c537f9407a8753d56c934f51823c9123adb4182737fdf7c8d2d6808310429c24e2b251002daafcf0c94b3a9906911d" }

Last Notes

2026-07-26 13:26:15 UTC

- reply

The vaultwarden update is merged and already in unstable small, so it will be soon in the regular channels

2026-07-26 13:25:03 UTC

- reply

CVEs are made for corporate processes like in RedHat having a CVE makes an otherwise hard backporting process a lot easier. I don't find it a big problem if not every security issue has a CVE and if people spend more time on fixing the issues properly including writing some tests I am way happier than when that time is used in the process of getting even more numbers assigned.

2026-07-10 20:07:21 UTC

That OpenSSH does not happy eyeballs is a bit disappointing ...

2026-07-02 15:47:49 UTC

What are people doing to defend against scraper waves that totally over do it nowdays?
Anubis? AS blocking? fail2ban? Banning expensive endpoints behind logins? nginx rate limits? What else?
I would very much appreciate if people could share blogs, configs, ideas, repos, anything. :blobcathearthug:
#nixos #anubis #scraper #downtime

2026-06-23 15:12:28 UTC

Codeberg and GitHub doing a race for downtimes :blobcatnotlikethis:

2026-05-25 10:16:49 UTC

- reply

you would need one flake input for every machine, but let's take a step backward: why not one branch for all?

2026-05-18 12:40:31 UTC

Nixpkgs hit 1 Million commits 🎉 🥳
https://github.com/NixOS/nixpkgs/commit/acd02321181a4cb0b6932eed75d806075ee460f8#commitcomment-185693586
#nixos #nixpkgs

2025-11-21 17:06:11 UTC

- reply

you can always find the unstable isos here https://channels.nixos.org/nixos-unstable
Not sure why they are no longer linked on the website. Also installing with eg: nixos-anywhere is also pretty easy if you figured out disco.
Also you can install almost any version with any config from any other iso if you didn't already know.

2025-11-12 09:38:54 UTC

`systemctl restart -v` is the best!
#systemd #nixos

2025-10-15 22:30:41 UTC

- reply

That is a 7 year old phone...
For not even double the price you get a Pixel 8a which has amazing battery life and for the price also an amazing camera with great night pictures.

2025-10-15 20:24:13 UTC

- reply

but if we are honest to ourselves, what other options exist that have a realistic chance to be a daily driver and have a somewhat sized userbase?

2025-08-19 13:48:02 UTC

Ich finds zu lustig 😹 🤣
https://www.youtube.com/watch?v=qz3kU3d28Ag

2025-06-15 18:33:47 UTC

- reply

progressing slowly https://forgejo.org/2025-05-monthly-update/#federation

2025-05-21 11:17:53 UTC

Everything is broken all at once

2025-05-01 15:06:50 UTC

I am very surprised that sequoia-chameleon-gnupg seems to work very well as a drop-in replacement. You still need gpg-agent and gpgconf from gnupg but using it with git and sops just worked.
And even if it didn't, with #NixOS it is easy to undo the change again.

2025-03-06 10:50:07 UTC

- reply

I neither like #Launchpad and their rather unconventional way to display branches and put so much less focus on code and so much on branch names nor their focus on breezy instead of git nor cgit as browsing GitHub/GitLab/Gitea/you name it is way more pleasant and faster to find things. Pressing T to find a file or doing a quick search on the web make things so much faster.

2025-03-06 10:48:07 UTC

I like that #Debian links to their developer portal with a link to Salsa from packages.debian.org, so that you can actually find stuff. On #Ubuntu when you search something on packages.ubuntu.com and try to find the source you are usually a bit out of luck. A way I found is to try to file a bug, then click on #Launchpad on the "Source tab" and then "Browse source" and then you land in their cgit. :NotLikeThis: :NotLikeThis: :NotLikeThis:

2025-03-03 19:22:12 UTC

- reply

Apparently log.date=rfc is what I was searching for. Finally things are in a familiar order.

2025-03-03 18:16:30 UTC

Sometimes I forget how many commits nixpkgs get. Searched the history a bit for a change and ecountered this: Sat Feb 22
Oh, Feburary 2022 is a while ago that surely cannot be it.
💀 that's 9 days ago, Feb 22nd.
Now I need to search how to change the git date format to something reasonable.

2025-02-27 12:50:24 UTC

- reply

I would rather frame it: they don't want to or don't care and the only thing that matters is that they can scrape as much data as possible in the shortest amount of time with no regard for losses

2025-02-27 10:54:39 UTC

- reply

@npub147p…eeaz that code is tremendously simple... It is literally an attribute set with one function, a few inherits and a few with. Nothing crazy

2025-02-27 10:50:34 UTC

- reply

Flakes do not use any new syntax elements. A flake.nix file is valid nix code with or without the feature. It is just a new structure that expects certain attributes and functions at certain places.

2025-02-27 10:45:38 UTC

- reply

There is a difference between the nix language itself which is pretty simple and what people make out of it but you haven't seen enough crazy shit out there to appreciate it. For example if is pretty standard in Ruby to template functions and then call eval on them, so that you never actual find the function name in the code

2025-02-23 05:06:46 UTC

- reply

Not only that but also bringing existing infra to its knees and causing downtimes by that hunger. Otherwise I would have never noticed that they were doing that.

2025-02-23 01:23:14 UTC

- reply

Not a big fan of Claude. They have been none stop scanning or more like dossing the infra I manage until I blocked them.

2025-02-12 14:32:03 UTC

So the #lix people got me convinced to give it a try and either I am a magnet for bugs and a born QA tester or else I do not know anymore...

2025-02-03 12:29:01 UTC

- reply

@npub1ws3…halv @npub103f…kaf3 @npub13fl…9ycn sadly xmpp has no moderation...

2024-10-19 02:49:24 UTC

I tried updating a package in OpenWrt today and it had all the bad experiences of classic distros:
- mountains of shell scripts paired with Makefiles and some magic ✨
- caching issues inside the above
- none determinism of the two above
- suddenly it works and you don't know why and cannot reproduce it because of the three above
Maybe I just build a static go package and copy it over. Seems easier if I am honest.

2024-10-09 22:09:31 UTC

"Da kann ich endlich die Backups auf die gleiche Festplatte ablegen"
#c3d2leaks

2024-10-08 23:38:21 UTC

And we are running the latest mastodon release

2024-10-08 08:06:45 UTC

- reply

Fangen wir gar nicht erst mit Leerzeichenfehlern an

2024-10-07 15:53:07 UTC

- reply

Ist unser Logo da gespiegelt?!

2024-10-04 11:05:18 UTC

And again I am very disappointed by a distro claiming to be "sTabLe". That tagline is just wishful thinking and religious belief at this point.
Completely removing a package between patch releases because of a minor security issue that cannot be fixed because a compiler update would be required and patching is unviable. In "sTabLe" distro land backporting a newer compiler to a separate package is an impossible task including because of stupid rules.

2024-10-04 11:05:18 UTC

- reply

Glad that every issue in that chain could be worked around by *myself* on #NixOS without getting to ugly.

2024-10-02 23:34:37 UTC

"Du bist der Philipp Amthor des Chaos" #c3d2leaks

2024-10-01 17:34:34 UTC

"Ich hätte niemals von bogomips erzählen sollen"
#c3d2leaks

2024-09-27 07:43:24 UTC

- reply

Also all the people out there recommending to just don't print and completely uninstall cups: maybe I have to print a documents to earn money or to not lose substantial amounts of money or to not get into legal troubles. I am glad for anyone that is so lucky to never have to print anything but I am unfortunately not so privileged.
I still hate printers, they are devils work.

2024-09-27 07:43:23 UTC

So the hyped up cups vulnerability just dropped which claims to affect every unix system out there. The hype just never mentioned that you need to have a package installed and a service running which realistically is only installed on print servers and desktops. So first thinking that potentially all of my machines could be affected but that potential number just dropped to 1. Well, hype, what shall you do.

2024-09-25 16:10:09 UTC

Ran into another instance of LTS distros holding you back because they only have 2 year old compilers and rather tinker some patch together than having a somewhat recent compiler.
If I ever start a new project and it gets somewhat popular I will probably support rolling distros with a offset of a couple of weeks but not stable or even LTS distros. Just so much pain and holding you back on the ground.

2024-09-23 16:33:03 UTC

- reply

Schade, man sieht die kaputte Brücke gar nicht :(

2024-09-11 19:06:40 UTC

- reply

Isn't it systemd/nixos?

2024-09-04 08:25:32 UTC

- reply

das klingt ja nach absolut hochwertigen Content...

2024-09-04 07:14:25 UTC

- reply

Irgendein bullshit wird trotzdem ausgegraben werden... Kann ja nicht sein.