Marco "Ocramius" Pivetta
@ocramius.mastodon.social.ap.brid.gy
OSS maintainer, Laminas, Mezzio, Roave, previously ZendFramework, Doctrine (ORM) Project.
IT Consultant / software architect for a living.
Daily curse of @nyunyu
[bridged from https://mastodon.social/@ocramius on the fediverse by https://fed.brid.gy/ ]
IT Consultant / software architect for a living.
Daily curse of @nyunyu
[bridged from https://mastodon.social/@ocramius on the fediverse by https://fed.brid.gy/ ]
Stingy capybara.
November 7, 2025 at 5:34 PM
Stingy capybara.
I perhaps found a middle-ground in letting the hypervisor provision the keys to be mounted: it ain't pretty, but it allows me to make the entire provisioning completely declarative, without the private keys leaking out to the provisioner
![terraform {
required_providers {
ssh = {
source = "loafoe/ssh"
version = "~> 2.7.0"
}
}
}
variable "key_names" {
type = set(string)
default = ["key1.txt", "key2.txt", "key3.txt"]
}
variable "target_host" {
type = string
}
resource "ssh_resource" "make_key" {
for_each = var.key_names
host = var.target_host
user = "root"
agent = true
timeout = "30s"
commands = [
"age-keygen -o ${each.value} || true",
"age-keygen -y ${each.value} | xargs",
]
}
output "produced_keys" {
value = {
for key, instance in ssh_resource.make_key : key => trim(instance.result, "\n")
}
}](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:hoib2uszi3lqjc6qba2q3fnx/bafkreifjidq25zls2usbgl4cosryetrjl676xfdlwwp4awnifx5gqjyvue@jpeg)
November 2, 2025 at 3:30 AM
I perhaps found a middle-ground in letting the hypervisor provision the keys to be mounted: it ain't pretty, but it allows me to make the entire provisioning completely declarative, without the private keys leaking out to the provisioner
![# Build an ISO:
# ```sh
# nix build .#nixosConfigurations.installation-iso.config.system.build.isoImag
# ```
# install it to your disk:
# ```sh
# dd if=result/iso/nixos-graphical-25.11.20251025.6a08e6b-x86_64-linux.iso of=/dev/sd<X> bs=4M status=progress conv=fdatasync
# ```
nixosConfigurations.installation-iso = nixpkgs.lib.nixosSystem {
system = "x86_64-linux";
modules = [
({ pkgs, modulesPath, ... }: {
imports = [ (modulesPath + "/installer/cd-dvd/installation-cd-graphical-combined.nix") ];
environment.systemPackages = [
pkgs.nano
pkgs.gparted
];
})
];
};
};](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:hoib2uszi3lqjc6qba2q3fnx/bafkreibzub5zytpv2o44nenh2prc3tosbcqxeco7ht4sb6e5e4aly5snvu@jpeg)
Just used this in a ticket: I'm really the best software architect.
October 28, 2025 at 6:38 PM
Just used this in a ticket: I'm really the best software architect.
#bmw sucks. #homeassistant
Ref: https://github.com/home-assistant/core/issues/152646
Ref: https://github.com/home-assistant/core/issues/149750
Ref: https://github.com/home-assistant/core/issues/152646
Ref: https://github.com/home-assistant/core/issues/149750
October 6, 2025 at 1:19 PM
October 3, 2025 at 8:31 AM
Really like #homeassistant 's generic thermostat stuff, but it's so much work to come up with a thermostat setup that I like.
Ended up making thermostats for "on-duty" and "away" temperatures, then piping the resulting data into a third "overrideable" […]
[Original post on mastodon.social]
Ended up making thermostats for "on-duty" and "away" temperatures, then piping the resulting data into a third "overrideable" […]
[Original post on mastodon.social]
September 21, 2025 at 9:11 PM
Really like #homeassistant 's generic thermostat stuff, but it's so much work to come up with a thermostat setup that I like.
Ended up making thermostats for "on-duty" and "away" temperatures, then piping the resulting data into a third "overrideable" […]
[Original post on mastodon.social]
Ended up making thermostats for "on-duty" and "away" temperatures, then piping the resulting data into a third "overrideable" […]
[Original post on mastodon.social]
Also, thanks IntelliJ for allowing me to highlight the DB connections before I mess something up gloriously.
I really don't like getting close to customer data manually.
I really don't like getting close to customer data manually.
September 3, 2025 at 7:36 PM
Also, thanks IntelliJ for allowing me to highlight the DB connections before I mess something up gloriously.
I really don't like getting close to customer data manually.
I really don't like getting close to customer data manually.
Splash screens on websites: the clear indicator that a software company has failed to understand websites.
August 26, 2025 at 9:44 AM
Splash screens on websites: the clear indicator that a software company has failed to understand websites.
On a more positive note, they stocked up on their own honey reserves: not much for me to harvest, but hopefully means that I can do the Varroa treatment next month, with little to no worries about them surviving winter. #beekeeping
August 9, 2025 at 6:12 PM
On a more positive note, they stocked up on their own honey reserves: not much for me to harvest, but hopefully means that I can do the Varroa treatment next month, with little to no worries about them surviving winter. #beekeeping
Here's some heavy beekeeping debt.
This beehive was left half-full for 1 month, and the bees have obviously built without any support: it is now impossible to inspect, and it will require a delicate transplant operation in April 2026...
This beehive was left half-full for 1 month, and the bees have obviously built without any support: it is now impossible to inspect, and it will require a delicate transplant operation in April 2026...
August 9, 2025 at 6:01 PM
Here's some heavy beekeeping debt.
This beehive was left half-full for 1 month, and the bees have obviously built without any support: it is now impossible to inspect, and it will require a delicate transplant operation in April 2026...
This beehive was left half-full for 1 month, and the bees have obviously built without any support: it is now impossible to inspect, and it will require a delicate transplant operation in April 2026...
It seems like there are some people in the street. #perugia #umbriajazz
July 12, 2025 at 7:33 PM
It seems like there are some people in the street. #perugia #umbriajazz
Not my greatest wiring, but it's doing its job.
Central heating control with a Kincony T16m and thermal expansion valves.
#esphome #homeassistant
Central heating control with a Kincony T16m and thermal expansion valves.
#esphome #homeassistant
July 12, 2025 at 1:41 PM
Not my greatest wiring, but it's doing its job.
Central heating control with a Kincony T16m and thermal expansion valves.
#esphome #homeassistant
Central heating control with a Kincony T16m and thermal expansion valves.
#esphome #homeassistant
Still learning the ropes, but so satisfying to see ~10kg of honey coming out of a single healthy hive.
I might reconsider my wish to own a sauna though 🥵
#beekeeping
I might reconsider my wish to own a sauna though 🥵
#beekeeping
July 6, 2025 at 11:46 AM
Still learning the ropes, but so satisfying to see ~10kg of honey coming out of a single healthy hive.
I might reconsider my wish to own a sauna though 🥵
#beekeeping
I might reconsider my wish to own a sauna though 🥵
#beekeeping
Mead came out alright: effectively tastes like a strong acidic wine, with a linden aftertaste. Considering this was made with the remains of a dead hive, I'm satisfied.
July 2, 2025 at 10:48 AM
Mead came out alright: effectively tastes like a strong acidic wine, with a linden aftertaste. Considering this was made with the remains of a dead hive, I'm satisfied.
I experienced a problem with windows...
June 20, 2025 at 3:59 PM
I experienced a problem with windows...
WW1 entrenchment diving today: impress what people built in the middle of nowhere.
May 18, 2025 at 4:22 PM
WW1 entrenchment diving today: impress what people built in the middle of nowhere.
May 16, 2025 at 1:37 PM
May 16, 2025 at 1:01 PM
Luigi Cardamone telling strategies for preventing the "files divided by type" mess that most PHP frameworks (erroneously) teach us. #phpday
May 16, 2025 at 12:35 PM
Luigi Cardamone telling strategies for preventing the "files divided by type" mess that most PHP frameworks (erroneously) teach us. #phpday
Next: Luigi Pecorella teaches us about Friûl and its language, as well as how they re-organised a DB without FKs to reduce complexity and improve performance. #phpday
May 16, 2025 at 12:30 PM
Next: Luigi Pecorella teaches us about Friûl and its language, as well as how they re-organised a DB without FKs to reduce complexity and improve performance. #phpday
