Graham Christensen
@grahamc.com
determinate.systems. Nix obsessed.
he/him
📻 no5ig
he/him
📻 no5ig
Pinned
Graham Christensen
@grahamc.com
· Nov 26
Getting started with Determinate
Put Determinate Nix and FlakeHub to work in your organization
docs.determinate.systems
-- NEW FOLLOWER CHECKPOINT --
If you have a mac and you're Nix-curious, install Determinate from the macOS package: docs.determinate.systems/getting-star...
...and if you have trouble, @ me so I can ask you questions.
If you have a mac and you're Nix-curious, install Determinate from the macOS package: docs.determinate.systems/getting-star...
...and if you have trouble, @ me so I can ask you questions.
@dangoodin.bsky.social re your DNS article ... for a good time:
dig +noall +short disk.vhd.gz.base64.grahamc.com TXT | cut -d'"' -f2 | base64 -d | gzip -d > minimal.vhd
dig +noall +short disk.vhd.gz.base64.grahamc.com TXT | cut -d'"' -f2 | base64 -d | gzip -d > minimal.vhd
July 18, 2025 at 1:52 PM
@dangoodin.bsky.social re your DNS article ... for a good time:
dig +noall +short disk.vhd.gz.base64.grahamc.com TXT | cut -d'"' -f2 | base64 -d | gzip -d > minimal.vhd
dig +noall +short disk.vhd.gz.base64.grahamc.com TXT | cut -d'"' -f2 | base64 -d | gzip -d > minimal.vhd
Where do people get good stickers from? In the distant past I've used StickerMule.
May 16, 2025 at 7:48 PM
Where do people get good stickers from? In the distant past I've used StickerMule.
Hey y’all, I could use help: if you’re using the determinate nix installer in GitHub actions and you’re seeing an increase in CI failures — let me know? We’re slowly rolling out a new version and suspect there is an edge case we haven’t covered.
May 13, 2025 at 12:45 PM
Hey y’all, I could use help: if you’re using the determinate nix installer in GitHub actions and you’re seeing an increase in CI failures — let me know? We’re slowly rolling out a new version and suspect there is an edge case we haven’t covered.
An awkward UX issue of Determinate Nix is that we serve it from FlakeHub Cache, which has no unauthenticated access. We do that to make the auth backend very straightforward, avoiding complexity that could lead to leaking customer cache entries. But...
April 29, 2025 at 2:07 AM
An awkward UX issue of Determinate Nix is that we serve it from FlakeHub Cache, which has no unauthenticated access. We do that to make the auth backend very straightforward, avoiding complexity that could lead to leaking customer cache entries. But...
💪
ugh i am not a fan of flake registries: they are implicitly imported silently; flakes that use them cannot be shared or imported by others; the default list is centralized
only real value I see is better command syntax nix run myregistry#foo
only real value I see is better command syntax nix run myregistry#foo
April 26, 2025 at 4:22 PM
💪
The next release of Determinate Nix will start addressing two issues that commonly confuse our users:
1. `nix-channel` is deprecated, and using it will issue a warning.
2. Using an indirect flakeref or implicit registry input in a flake.nix will also raise a warning.
>>>
1. `nix-channel` is deprecated, and using it will issue a warning.
2. Using an indirect flakeref or implicit registry input in a flake.nix will also raise a warning.
>>>
April 26, 2025 at 3:29 PM
The next release of Determinate Nix will start addressing two issues that commonly confuse our users:
1. `nix-channel` is deprecated, and using it will issue a warning.
2. Using an indirect flakeref or implicit registry input in a flake.nix will also raise a warning.
>>>
1. `nix-channel` is deprecated, and using it will issue a warning.
2. Using an indirect flakeref or implicit registry input in a flake.nix will also raise a warning.
>>>
Reposted by Graham Christensen
Determinate Nix 3.3.1 is now out and folks, it is not playing games. We've added JSON logging to Nix and a whole new UX around fixing hash mismatches during Nix builds—and we've fixed some long-standing paper cuts to boot.
determinate.systems/posts/change...
determinate.systems/posts/change...
Changelog: JSON logging, a new experience around hash mismatches, and more
JSON logging has the potential to unlock all kinds of ergonomic benefits, starting with hash mismatches but with plenty of room to expand beyond that
determinate.systems
April 16, 2025 at 8:23 PM
Determinate Nix 3.3.1 is now out and folks, it is not playing games. We've added JSON logging to Nix and a whole new UX around fixing hash mismatches during Nix builds—and we've fixed some long-standing paper cuts to boot.
determinate.systems/posts/change...
determinate.systems/posts/change...
Reposted by Graham Christensen
Let’s be real: any GitHub Action could expose your secrets at any time. Just look at the latest CVE uncovered in the popular tj-actions/changed-files Action. Static, long-lived secrets are a major 🚩. The solution? Don't rely on them, there is a better way. 🧵👇
March 17, 2025 at 8:48 PM
Let’s be real: any GitHub Action could expose your secrets at any time. Just look at the latest CVE uncovered in the popular tj-actions/changed-files Action. Static, long-lived secrets are a major 🚩. The solution? Don't rely on them, there is a better way. 🧵👇
@arrdem.com nice to find you again =)
March 17, 2025 at 8:54 PM
@arrdem.com nice to find you again =)
@hankgreen.bsky.social my daughter is named Io, and ++ on your video about paying more attention to Jupiter's moons.
March 12, 2025 at 5:14 PM
@hankgreen.bsky.social my daughter is named Io, and ++ on your video about paying more attention to Jupiter's moons.
can we please just get a move on, and (1) make Ed25519 FIPS-140, and (2) get Ed25519 in HSMs and AWS KMS?
March 1, 2025 at 2:02 AM
can we please just get a move on, and (1) make Ed25519 FIPS-140, and (2) get Ed25519 in HSMs and AWS KMS?
Autonomous Sensory Materials Lithography
February 27, 2025 at 6:16 PM
Autonomous Sensory Materials Lithography
This Firefox ToS hubbub is wild. It is amazing they didn't have one before. Lawyers like to spell out things like "If you type things into our program, we will do things with it." Which is the fundamental operating principle of a browser! You type things into it, and things happen!
February 27, 2025 at 2:12 PM
This Firefox ToS hubbub is wild. It is amazing they didn't have one before. Lawyers like to spell out things like "If you type things into our program, we will do things with it." Which is the fundamental operating principle of a browser! You type things into it, and things happen!
How is it that most glasses companies take 7-10 days, when there are plenty of companies that will get them to you next day?
February 26, 2025 at 11:49 PM
How is it that most glasses companies take 7-10 days, when there are plenty of companies that will get them to you next day?
Reposted by Graham Christensen
To support streamlined NixOS deployments to AWS, we now offer Determinate NixOS AMIs that come with Determinate Nix and fh, the CLI for FlakeHub, installed. Authenticate with STS, apply your configuration, and you're off to the races.
https://determinate.systems/posts/nixos-amis
https://determinate.systems/posts/nixos-amis
Introducing Determinate AMIs for NixOS
Deploy NixOS configurations with just two commands
determinate.systems
February 25, 2025 at 5:19 PM
To support streamlined NixOS deployments to AWS, we now offer Determinate NixOS AMIs that come with Determinate Nix and fh, the CLI for FlakeHub, installed. Authenticate with STS, apply your configuration, and you're off to the races.
https://determinate.systems/posts/nixos-amis
https://determinate.systems/posts/nixos-amis
Evidently, GitHub Actions' API has no way to trigger a workflow, and then know the ID of the run that was triggered.
February 15, 2025 at 3:28 AM
Evidently, GitHub Actions' API has no way to trigger a workflow, and then know the ID of the run that was triggered.
Maps, being so utterly political, are touched by the digital age. Online maps present different boundaries and names depending on where you are.
February 11, 2025 at 2:06 PM
Maps, being so utterly political, are touched by the digital age. Online maps present different boundaries and names depending on where you are.
Hey @quinnypig.com, is it possible AWS support actually gets >500 cases per second? At that rate, is it better to send a thank you reply, or is it more polite to silently resolve closed tickets to avoid extra messages?
January 29, 2025 at 1:20 PM
Hey @quinnypig.com, is it possible AWS support actually gets >500 cases per second? At that rate, is it better to send a thank you reply, or is it more polite to silently resolve closed tickets to avoid extra messages?
Do I know any swift devs that do contract work? I’ve got a project!
January 24, 2025 at 7:34 PM
Do I know any swift devs that do contract work? I’ve got a project!
Winter runners, how different is it to run at 4F than 10F?
January 24, 2025 at 2:58 PM
Winter runners, how different is it to run at 4F than 10F?