grhmc

8 ms·

1.
by grhmc 8mo ago
Hey y'all, I'm Graham the CEO of DetSys. Determinate Secure Packages has been a huge effort we've made to help customers in the national security, medical, aerospace, etc. industries more comfortable using Nix in their workfl
2.
Determinate Secure Packages: Nixpkgs with SBOMs, FIPS, and SLA'd CVE Patching(determinate.systems)
5 points by grhmc 8mo ago|1 comments
3.
by grhmc 10mo ago
Yikes! This is exactly the kind of invariant I'd expect Aurora to maintain on my behalf. It is why I pay them so much...
4.
by grhmc 1y ago
Hey folks, CEO of Determinate here. We've been working on this for ages , and am thrilled to finally have it rolling out to real users. Let me know if you have questions!
5.
by grhmc 1y ago
Yeah! It also skips a lot of IO and other complicated bits, which hopefully pans out to being more reliable and performant!
6.
by grhmc 1y ago
DetSys CEO here. We've been working on this for months, and I am so excited for this to be out. This is the third time I've been part of a Linux remote builder on macOS, and we got it right this time. It is magical. The VM just co
7.
by grhmc 1y ago
Hey folks, Graham - CEO of Determinate Systems here. Happy to answer any questions!
8.
by grhmc 1y ago
CEO of Determinate here again, happy to answer questions!
9.
by grhmc 2y ago
Hey folks, Determinate Systems CEO here. I'm really happy about this release, and what it means for our ability to get features like parallel evaluation, lazy trees, and other work into customer hands and ultimately -- ideally -- merge
10.
by grhmc 2y ago
(DetSys Cofounder here) I've had Raspberry Pi's give up their last ghostly breath evaluating NixOS.
11.
by grhmc 2y ago
> Even as someone who does think Flakes are better than the prior solutions, I'm increasingly of the opinion that Flakes would be better moved to a layer outside the core Nix project - advancing them within core Nix at this stage se
12.
by grhmc 2y ago
Of course :).
13.
by grhmc 2y ago
I mean, it sort of is, on the heals of two other announcements earlier this week: * https://determinate.systems/posts/announcing-determinate-nix... * https://determinate.systems/posts/flakehub-cach
14.
by grhmc 2y ago
My man.
15.
by grhmc 2y ago
I love your project, Jon! I think the Nix ecosystem will be improved by having more, smaller things, where the boundaries are clear.
16.
by grhmc 2y ago
Hell yeah. Speaking my language! I don't know, but we need that!
17.
by grhmc 2y ago
I think those are fair perceptions and concerns. Regarding experimental features like flakes: the reality is they're incredibly stable. I've written about this before: https://determinate.systems/posts/experim
18.
by grhmc 2y ago
Back in the day, adopting Git was also clumsy and hard to implement. It was buoyed significantly by the investments GitHub made into its usability. I agree Nix is going to have to evolve to gain wider adoption. It's part of the work we
19.
by grhmc 2y ago
They're great! But also still miss fundamental pieces that Nix gets right. Especially the way the build and dependency graph goes right to the root of every package, and comes together to completely describe the system you're runn
20.
by grhmc 2y ago
I feel that. This is one place where the "nix is everything, everything is nix" mentality hurts the project. NixOS modules are where the abstract config option sauce lives. It isn't an inherent part of Nix. As Nix (and NixOS)
21.
by grhmc 2y ago
Hear hear. It takes continuous effort not just on documenting, but also reducing the need for documentation by cutting interfaces and accidental complexity.
22.
by grhmc 2y ago
Hi Steve! Well. The future isn't evenly distributed yet :). There is work in flight to make Nix support Windows. Also, and I know this doesn't count, but it works great in WSL today.
23.
by grhmc 2y ago
A FlakeHub organization with private flakes and cache is $20/user/month, plus at-cost storage and bandwidth. Members of that organization get automatic access to the private flakes and read access to the cache. In the future, we&#
24.
by grhmc 2y ago
Whew. "Everything" is a tough one, today. 1. I know there is an upcoming book, NixOS in Production. There is a lot of great info in there! 2. Have you seen https://zero-to-nix.com/ ?
25.
by grhmc 2y ago
Eelco's typical online handle is "niksnut", which obviously means "nix nut" but also "good for nothing" :).
26.
by grhmc 2y ago
Hey folks CEO of Determinate Systems, and the author of the blog post. I'd be glad to answer questions about the post and what we're doing!
27.
by grhmc 2y ago
Yes! 1. Enable systemd: https://devblogs.microsoft.com/commandline/systemd-support-i... 2. Install as normal: curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix |
28.
by grhmc 2y ago
I believe a lot of this comes from Nix being largely "low policy", meaning you can do anything, any way you want, you just have to figure out how. Our goal is to make a more high-policy version that has more workflow and "rai
29.
by grhmc 2y ago
We won't break our customers. Indeed, part of the motivation for our downstream distribution is to be able to ship some of our patches faster than upstream wants to. However, these patches are generally about usability improvements tha
30.
by grhmc 2y ago
lol. We have two closed source projects that are meaningful in any way: FlakeHub, and determinate-nixd. Everything else we have is, and all of our improvements to Nix are, open source and permissively licensed. That includes Determinate Nix

More ›