Viewing profile — lewo

> AI isn’t a chef. At best, it’s a steak machine. Seems this analogy is also correct regarding our climate! https://foodfootprint.nl/en/foodprintfinder/beef-steak/

On the other hand, the TPM spec is pretty complex, especially because they wanted to address privacy issues: the endorsement key, burned by the manufacturer, is only able to encryp…

Definitely not. But when someone looks at me, my gaze is drawn to that person, to say "hello" for instance. I have the same kind of feeling with a camera. (Maybe if i was living in…

On the french trains, you can sit opposite someone else. I'm feeling really uncomfortable when this person scrolls on its phone, with the phone back camera pointing to me for hours…

I think this is really close to the way nix2container works ( https://github.com/nlewo/nix2container ). nix2container generates metadata at build time and streams the required data…

In the same kind of spirit, when i was the tech team manager in a company without any transparent salary policy, i've been practicing what i've been called the "symmetrical salary …

More precisely, this is the price per person but if you travel alone, you have to share a room with someone else. Or you would have you to make private a double room which costs ab…

> With no way of splitting up the Nix dependencies into separate layers nix2container [1] is actually able to do that: you can explicitly build layers containing a subset of the de…

And regarding this part of the article > Particularly with GitOps and Flux, making changes was a breeze. i'm writing comin [1] which is GitOps for NixOS machines: you Git push your…

> Would Nix work well with GitHub Actions? You can use Nix with GitHub actions since there is a Nix GitHub action: https://github.com/marketplace/actions/install-nix . Every time t…

We have an issue to support non flake deployments: https://github.com/nlewo/comin/issues/30

No, it has been initially developed to manage a "COMmunity INfrastructure" and it sounds like the word "coming". I didn't know this meme but it's a nice coincidence because this in…

The main issue is to use configuration files residing somewhere in the filesystem. This looks like a global variable in a codebase (something we generally try to avoid). Instead, t…

> would be hard to beat "sync a file to a warm container and run it" It depends on the size of your Pex file (i don't think you mentioned it and sorry if i missed the info). With a…

> The key factor behind our decision was the realization that while Docker images are industry standard, moving around 100s of megabytes of images seems unnecessarily heavy-handed …

FYI, the nix2container [1] project (author here) aims to speedup the standard Nix container workflow (dockerTools.buildImage) by basically skipping the tarball step: it directly st…

To get Rust incremental builds, did you consider using something such as crane https://github.com/ipetkov/crane ? And regarding OCI images, i built nix2container ( https://github.c…

Another advantage of the gomod2nix approach concerns long term build reproducibility [1]. Having each source dependency in its own derivation would make easier source code mirrorin…

First, you should own your domain, to own your email identity. With a domain, Gandi (my employer) includes two mail addresses: imap, roundcube, sogo, sieve filters, aliases,... htt…

With https://github.com/nlewo/nix2container , I'm trying to make a more standalone tool. Basically, a Go binary takes a reference graph and produces a JSON file describing a contai…