• 14 Posts
  • 622 Comments
Joined 1 year ago
cake
Cake day: September 1st, 2023

help-circle














  • It’s finally ready for mass adoption, IMO

    No way. It’s still a specialist OS. There’s no way I’m putting this into the hands of a linux newbie or even the average linux user. There config still doesn’t have a UI, the flakes vs non-flakes debate is still in full swing (nixpkgs doesn’t have flakes), the doc is far, far, far from user friendly, writing a nix package is still not easy, and so much more.

    Nix for sure was (and probably is) ahead of its time, but the UX is amongst the worst I’ve experienced - and I’ve written init and upstart services and configured my network with ipconfig before networkmanager was stable.

    Anti Commercial-AI license


  • So the certs end up in these files:

    • /etc/ssl/certs/ca-certificates.crt
    • /etc/ssl/certs/ca-bundle.crt
    • / etc/pki/tls/certs/ca-bundle.crt

    Only the first one is mentioned on stackoverflow as being used by Go on debian.

    Curl seems to have its default location compiled in by passing --with-ca-bundle , but after installing curlFull and running curl-config --ca, it doesn’t look like that was used and the “default” path is guessed.

    Looking further in the curl derivation there are these lines for darwin :

    lib.optionals stdenv.isDarwin [
          # Disable default CA bundle, use NIX_SSL_CERT_FILE or fallback to nss-cacert from the default profile.
          # Without this curl might detect /etc/ssl/cert.pem at build time on macOS, causing curl to ignore NIX_SSL_CERT_FILE.
          "--without-ca-bundle"
          "--without-ca-path"
        ]
    

    So, check the value of NIX_SSL_CERT_FILE outside nix shell and within. The path might have to be set there. I dunno how to do that automatically with nix shell, so it might have to be done manually.

    Anti Commercial-AI license




  • Re-installing an OS is easy

    Hmmm, this is where our opinions diverge. It’s easy when things go right. UEFI and MBR changed that. And I’ve had a few linux installations fail for obscure reasons (mostly hardware support).

    Installers also say “backup your data” but if you’re coming from windows, what do you do when your stuff is on onedrive? What if you know nothing about partitioning and the installer just wipes the entire disk clean even though you expected your D:/ with your backup to be kept?
    Oh, an should you keep that windows recovery partition? What’s on there? How do you access the data to check?

    There are a bunch of things to consider when installing to prevent data-loss and IMO they aren’t as straightforward as they seem.

    Doing a regular system update or upgrading from one LTS release to another are comparable to oil-check and changing a tire. Installing an OS, IMO, not so much.

    Anti Commercial-AI license


  • There’s just a lot of stuff going on and everybody can make an argument for knowing something:

    • Maths is the most important tool to mankind
    • It is imperative to understand your own brain because it makes a lot of decisions
    • If you drive a car, you better know how it works
    • Politics is crucial to our society and being an informed citizen is paramount

    And so on. It’s all true, but you only have so many hours in a day, and everybody has a different life. You could live in the most affluent society and be dealing with stuff that has nothing to do with computers.

    Also, who decides what’s “basic knowledge”? I know a lot about software, what I know about hardware is minimal. What’s minimal to me though might be advanced to another and vice versa.

    We should be trying to be more empathetic. Recommending an advanced Linux OS to a newbie isn’t empathetic. Expecting a user to know how to install an OS isn’t empathetic.

    Anti Commercial-AI license