I was looking into alternatives for zstd, brotli had some impressive numbers, but felt like a python native implementation was going to be maintenance deal breaker. Little did i know that it would be a security concern as well
BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy.
The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device.
2
0
24
998
This week in Ekala #5 (Oct 11 - Oct 18)
mkDerivation supports "extensions" to avoid pname clobbering
Pre+post hooks no longer need to be explicitly written into respective phase.
cmakeEntries migration sweep
ekapkgs-cli cache: zstd compression for chunks, inline <1KB records into db
`ekapkgs-update review` command added
ekala-project.github.io/twie/blog/this…
mkDerivation supports "extensions" to avoid pname clobbering
Pre+post hooks no longer need to be explicitly written into respective phase.
cmakeEntries migration sweep
ekapkgs-cli cache: zstd compression for chunks, inline <1KB records into db
`ekapkgs-update review` command added
ekala-project.github.io/twie/blog/this…
0
0
3
138
EEP: pre and post hooks no longer need to be reconstituted in the build phase, instead have the default builder run them before and after the respective phase.
github.com/ekala-project/…
github.com/ekala-project/…
0
0
6
260
[Ekapkgs] Nix native container runtime. Leverage migration, port contract, and service defintion to make container images.
github.com/ekala-project/…
github.com/ekala-project/…
0
1
29
1,189
Crazy idea: Per service migration logic as part of service modules. Move away from global `stateVersion` paradigm. github.com/ekala-project/…
3
1
26
969
Jonathan Ringer retweeted
Whole Nix elections are now about voting against my commit access, that's a much greater cause than actually fixing due processes.
domenkozar.com/2026/08/04/nix…
domenkozar.com/2026/08/04/nix…
13
1
94
5,915
As long as I'm alive, Ekapkgs will never let someone with little to no code contributions in the past year paint people as bad actors, gaslight them with false hope, then condescendingly berate them.
The era of clowns and circus in Nix will soon be irrelevant.
The era of clowns and circus in Nix will soon be irrelevant.
Nix clowns celebrating humiliating me, keep going guys, I know you can go deeper :)
10
1
141
4,744
`config.allowUnfree = true;` is now the default for Ekapkgs. People who are concerned can set to false, and use the new `licenses.accept = [ ... ]` to allow for individual packages to evaluate.
Good or bad? allowFree = true by default?
github.com/ekala-project/…
3
0
38
1,206
Decided to make /usr/lib/ a fuse mount instead, and leverage the existing package index to lookup the soname to package. DSO cache optimization removes the need for ekapkgs libraries to require further fuse usage and transitive deps are directly refernced in the nix store. github.com/ekala-project/…
Crazy Idea: Allow for `nix-ld` to consume a mapping of .so names to packages. When loading an application at start time, have nix-ld install missing libraries then resume starting the application.
Effectively make "missing libraries" from a common thing on Nix to non existent.
1
1
15
1,334
Good or bad? allowFree = true by default?
github.com/ekala-project/…
github.com/ekala-project/…
8
1
27
7,888
Decided to consolidate Ekapkgs updates into a This week in Ekapkgs blog.
- structuredAttrs on by default
- cmakeEntries + mesonFeatures (replacing Flags equivalent)
- numerous updates to the ekapkgs cli
ekala-project.github.io/twie/blog/this…
- structuredAttrs on by default
- cmakeEntries + mesonFeatures (replacing Flags equivalent)
- numerous updates to the ekapkgs cli
ekala-project.github.io/twie/blog/this…
0
2
26
856
Jonathan Ringer retweeted
Development update on factorseal, a local secrets vault for Linux, macOS, and Windows.
I dive into why we've built another secrets vault in Rust, across Linux, macOS and Windows.
github.com/cachix/factors…
I dive into why we've built another secrets vault in Rust, across Linux, macOS and Windows.
github.com/cachix/factors…
4
4
51
2,302
The same is also true of FOSS upstreams. Really FOSS works because it's a high trust society and there's severe reputational harm if you abuse it.
@jonringer117 @neogoose_btw Nix does have flakes and those flakes could turn malicious and it would be nice to have an "evil filter" (so, let's say when there are suddenly binaries that shouldn't be there, etc.). Basically, a supply chain agent.
2
0
20
780
Jonathan Ringer retweeted
Launched a new fun #nix project for no purpose other than it being interesting and fun
seenix.dev lets you visualize Nix closures
Accompanying blog post: fzakaria.com/2026/09/15/vis…
Here is #git as known to #nixpkgs:
seenix.dev lets you visualize Nix closures
Accompanying blog post: fzakaria.com/2026/09/15/vis…
Here is #git as known to #nixpkgs:
2
6
29
1,536
Thinking of repurposing this account for Ekapkgs bot updates github.com/juanringer
4
0
70
1,139
For fun, I wired up `mkEkaPackage` to use nushell, actually makes the "builder script" significantly easier to read than esoteric bash. github.com/ekala-project/…
Now considering the use of nushell as well, since structuredAttrs serializes to JSON and it's a natural fit. Another instance of @Mic_92 living in the future with repkgs.
4
0
30
1,585