https://killedbymicrosoft.info/

Add it to the list

Gentlemen, there’s a solution here you’re not seeing

Source for it being forgotten is just my feeling on it, as for the scraping off part see here for a quick overview of cryogenic freezing history.

Edit: well, seems I was too slow

He never was afaik

Forgotten and most that were frozen had to be scraped out of the the cryo chamber for one reason or another.

It’s more that capitalism is causing “the end of the world”. Between now and the total deaths of all life on earth, I remain hopeful that there will be some positive systematic change before it gets too far.

systemic issues that have no end in sight

Some would disagree, just ask scientists how long the current trajectory can remain.

IMO storing Passkeys in Google Password Manager is a bad idea in general.

Pray I do not adjust it further.

Add renovate bot (self-hosted or not) or a similar not to your nixos repository to automatically update your lock file. Enable automatic system rebuilds (not live, nixos-rebuild boot…) to keep in sync with the repo.

Include multiple nixos systems in one repo, then reuse configuration or even make them reference each other (if you want that)

Find an issue to report upstream (or even add a pull request)

Fully automate your reinstall using disko and nixos-anywhere (don’t forget luks)

Be happy (optional)

Go over everything you’ve written in your repo so far, realise it’s formatted wrong and spend 2 hours fixing it until it no longer works

Build a derivation for something that doesn’t exist (also add a pull request if applicable and you’ve got time to maintain it)

Add a little nixpkgs-unstable, as a treat (use overlays)

Backups

Build a server so convoluted, kubernetes is easier to manage (I am here)

Wasn’t this the case for a long time? Since they started deduplicating the root partition and making it read-only/ a pain to write to?

Edit: https://github.com/Universal-Debloater-Alliance/universal-android-debloater-next-generation/wiki/FAQ

Tldr: You couldn’t uninstall from /system, only from /data and now you can only disable them. Looking at the wiki also shows that there’s not much difference between a data-only uninstalled system app and a data-only disabled app.

Huh? You don’t like strong copyleft licences?

Wait you are enjoying NixOS? I though we were all in for the suffering?

Probably not, they likely mean the alcoholic drink

One must imagine Sisyphus deaf

It’s a *feature*

There exists shims that are signed by Microsoft and were not revoked. Normally this would be fine but these shims had weaknesses that allowes hackers to load any code using them. Normally the shims should only run other signed/trusted code. These vulnerable shims can be used to bypass secure boot by replacing your existing bootloader with the shim and then running rootkits/hackerOS/whatever and bypass bitlocker using TPM or just running a level 0 virus that can’t be detected by the OS on any PC which trusts Microsoft’s keys (99% of all PCs)

To prevent this you’d have to not trust the vulnerable shims by either adding them manually to the exclusions list or using your own secure boot keys which would only trust the few bootloader files your pc uses and no other files.

Worst case: it behaves as if secure boot wasn’t on. Without secure boot you wouldn’t need this exploit cause then you can replace the bootloader with whatever you want anyways. With or without secure boot you need administrative permission to replace the bootloader so this is only an issue after your PC is already compromised or if someone had physical access to your PC.

tldr: Either use your own keys or don’t trust secure boot.

I have a Server with ~16 podman services, each their own user, network namespace and uids. This is managed using NixOS and Home manager (which supports quadlets) but I am changing my setup to a single node k3s cluster with user namespaces because that seems simpler to manage. Here a snippet for how the subuids/subuids are defined:

users.users.<username> = {
        subUidRanges = [{
            startUid = 100000+65536*( config.users.users.<username>.uid - 999);
            count = 65536;
        }];
        subGidRanges = [{
            startGid = 100000+65536*( config.users.users.<username>.uid - 999);
            count = 65536;
        }];
        home = "[...]";
        isNormalUser = true;
        linger = true;
        group = "users";
        openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
    };