USAF Veteran. Ekapkgs BDFL. 20.09, 21.05, 21.11 NixOS Release Manager and functional programming enthusiast.
Washington, USA
Joined August 2020
- Tweets1.9K
- Following218
- Followers2.1K
- Likes27.7K
I was looking into alternatives for zstd, brotli had some impressive numbers, but felt like a python native implementation was going to be maintenance deal breaker. Little did i know that it would be a security concern as well
BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy.
The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device.
This week in Ekala #5 (Oct 11 - Oct 18)
mkDerivation supports "extensions" to avoid pname clobbering
Pre+post hooks no longer need to be explicitly written into respective phase.
cmakeEntries migration sweep
ekapkgs-cli cache: zstd compression for chunks, inline <1KB records into db
`ekapkgs-update review` command added
ekala-project.github.io/twie…
EEP: pre and post hooks no longer need to be reconstituted in the build phase, instead have the default builder run them before and after the respective phase.
github.com/ekala-project/eep…
[Ekapkgs] Nix native container runtime. Leverage migration, port contract, and service defintion to make container images.
github.com/ekala-project/eep…
Crazy idea: Per service migration logic as part of service modules. Move away from global `stateVersion` paradigm. github.com/ekala-project/eep…
![[0045] Service migrations by jonringer · Pull Request #46 · ekala-project/eeps](https://pbs.twimg.com/card_img/2114808621024321536/6MAfHRvM?format=jpg&name=800x419)
Jonathan Ringer retweeted
Whole Nix elections are now about voting against my commit access, that's a much greater cause than actually fixing due processes.
domenkozar.com/2026/08/04/ni…
As long as I'm alive, Ekapkgs will never let someone with little to no code contributions in the past year paint people as bad actors, gaslight them with false hope, then condescendingly berate them.
The era of clowns and circus in Nix will soon be irrelevant.
Crazy Idea: Make your CI/CD into an mcp server
github.com/ekala-project/eka…
`config.allowUnfree = true;` is now the default for Ekapkgs. People who are concerned can set to false, and use the new `licenses.accept = [ ... ]` to allow for individual packages to evaluate.
Good or bad? allowFree = true by default?
github.com/ekala-project/cor…
Decided to make /usr/lib/ a fuse mount instead, and leverage the existing package index to lookup the soname to package. DSO cache optimization removes the need for ekapkgs libraries to require further fuse usage and transitive deps are directly refernced in the nix store. github.com/ekala-project/eka…
Good or bad? allowFree = true by default?
github.com/ekala-project/cor…
Decided to consolidate Ekapkgs updates into a This week in Ekapkgs blog.
- structuredAttrs on by default
- cmakeEntries + mesonFeatures (replacing Flags equivalent)
- numerous updates to the ekapkgs cli
ekala-project.github.io/twie…
Jonathan Ringer retweeted
Development update on factorseal, a local secrets vault for Linux, macOS, and Windows.
I dive into why we've built another secrets vault in Rust, across Linux, macOS and Windows.
github.com/cachix/factorseal
The same is also true of FOSS upstreams. Really FOSS works because it's a high trust society and there's severe reputational harm if you abuse it.
Jonathan Ringer retweeted
Launched a new fun #nix project for no purpose other than it being interesting and fun
seenix.dev/ lets you visualize Nix closures
Accompanying blog post: fzakaria.com/2026/09/15/visu…
Here is #git as known to #nixpkgs:
Thinking of repurposing this account for Ekapkgs bot updates github.com/juanringer
For fun, I wired up `mkEkaPackage` to use nushell, actually makes the "builder script" significantly easier to read than esoteric bash. github.com/ekala-project/cor…
Now considering the use of nushell as well, since structuredAttrs serializes to JSON and it's a natural fit. Another instance of @Mic_92 living in the future with repkgs.