Hacker News: RaitoBezarius

New comment by RaitoBezarius in "Dutch governments builds alternative for Microsoft based on NixOS"

RaitoBezarius — Fri, 25 Sep 2026 13:11:36 +0000

Hi (Sécurix developer), we wrote our documentation in English and in French: https://cloud-gouv.github.io/securix.

Maintaining both languages is hard but we will do our best.

New comment by RaitoBezarius in "A week in Matrix"

RaitoBezarius — Sat, 01 Aug 2026 12:22:11 +0000

I'm part of the sysadmin team who studied the migration paths for the Dendrite in question in this blog post and unfortunately as a volunteer it's hard to find the time to invent migration paths (even if we have the knowledge) and make it happen while there's also many other needs unaddressed elsewhere.

Given that you seem expert in the matter, would you like to help and own the migration? That'd be awesome!

Misadventures in DTrace: how to debug the macOS kernel

RaitoBezarius — Thu, 15 May 2025 13:45:54 +0000

Article URL: https://jade.fyi/blog/misadventures-in-dtrace/

Comments URL: https://news.ycombinator.com/item?id=43995049

Points: 2

# Comments: 0

New comment by RaitoBezarius in "Show HN: Lix – Change Control for AI and Apps"

RaitoBezarius — Wed, 26 Mar 2025 14:50:45 +0000

Hello, we already have the name: http://lix.systems/. It'd be great if you would consider another name otherwise we will have to compete for the SEO and confuse a lot of our userbases :(.

Good luck with your product!

New comment by RaitoBezarius in "Nix 2.24 is vulnerable to (remote) privilege escalation"

RaitoBezarius — Tue, 10 Sep 2024 14:40:23 +0000

https://git.lix.systems/lix-project/lix/src/branch/main/src/...

New comment by RaitoBezarius in "Nix 2.24 is vulnerable to (remote) privilege escalation"

RaitoBezarius — Tue, 10 Sep 2024 09:23:17 +0000

> The security team is composed of unpaid volunteers who work on numerous time-sensitive projects simultaneously. You may not be aware, but since a group of maintainers and contributors left earlier this year to form their own fork called "Lix," there have been many vacant positions across several Nix teams.

This is not true, there have been many vacant positions across several Nix teams because the original project has been unable to keep these people. When challenged about this inevitable situation of depleted labor, the answer of people involved in leadership was, "It's OK, we will have new people joining us anyway.".

Lix has been trying to connect with the Nix maintenance team, with very timid results from the Nix side. We continue to hope this will lead to a better cooperation.

Also, you say that they are "unpaid volunteers", the Nix maintenance team is composed of folks who have full-time responsibilities in VC companies who sells Nix-based products.

New comment by RaitoBezarius in "Tvix – A New Implementation of Nix"

RaitoBezarius — Tue, 16 Apr 2024 23:24:55 +0000

Tvix is compatible with Nix, thus it follows the /nix/store/$hash-$name naming scheme.

New comment by RaitoBezarius in "Tvix – A New Implementation of Nix"

RaitoBezarius — Tue, 16 Apr 2024 23:12:44 +0000

(Tvix developer here) 2 years after, Flakes are still what they are, IMHO, a pile of layering violations.

I do not see a path forward for them in Tvix before we get to fix them layer by layer, which Nix is trying to do (slowly?).

At some point, once we stabilize a bunch of things, I have some plans to do what I call the right design of Flakes, but it does not involve modifying completely the core of the interpreter to leak this implementation detail everywhere, but more make this a library concept.

New comment by RaitoBezarius in "Tvix – A New Implementation of Nix"

RaitoBezarius — Tue, 16 Apr 2024 23:10:54 +0000

Tvix developer here; Tvix is quite different from Nix and is a clean restart, in my humble opinion, it would be quite hard to integrate some features of Tvix in the current Nix because you have two targets: (a) getting the feature in the existing architecture of Nix (b) evaluating a good architecture for the feature itself in the ideal architecture.

New comment by RaitoBezarius in "Tvix – A New Implementation of Nix"

RaitoBezarius — Tue, 16 Apr 2024 23:09:27 +0000

Tvix developer here; we do have Windows in mind. Rust makes a bunch of things easier regarding this, but _not everything_. It's not a priority.

The location of the store is not really the main blocker in those sorts of situations, IMHO.

New comment by RaitoBezarius in "Tvix – A New Implementation of Nix"

RaitoBezarius — Tue, 16 Apr 2024 23:07:52 +0000

Tvix developer here; correctness is still not guaranteed, there's nothing to use here except if you already understand well Nix concepts to pick parts and build stuff on the top of it and accept the inherent instability :).

New comment by RaitoBezarius in "Tvix – A New Implementation of Nix"

RaitoBezarius — Tue, 16 Apr 2024 23:07:22 +0000

Not ready, so not a good reason to use it yet.

Building Ubuntu Images in Nix

RaitoBezarius — Mon, 06 Nov 2023 13:26:37 +0000

Article URL: https://linus.schreibt.jetzt/posts/ubuntu-images.html

Comments URL: https://news.ycombinator.com/item?id=38162290

Points: 5

# Comments: 0

New comment by RaitoBezarius in "NixOS RFC 136 approved: A plan to stabilize the new CLI and Flakes incrementally"

RaitoBezarius — Sun, 13 Aug 2023 01:43:36 +0000

I moved to npins which has slightly more features that niv.

But niv has been great, I wish we can have patching natively so all my tons of patches can be bolted on faster.

New comment by RaitoBezarius in "NixOS RFC 136 approved: A plan to stabilize the new CLI and Flakes incrementally"

RaitoBezarius — Sun, 13 Aug 2023 01:42:18 +0000

For example, Flakes have no concept of cross compilation and makes this use case extremely tedious to use.

Flakes were a RFC then merged as an experimental feature and shilled too much to the community to the point they are now a quasi standardized feature even though they didn't go through RFC and therefore ignored all the valuable feedback.

This whole debacle made a lot of invested people tired on both sides.

New comment by RaitoBezarius in "The NixOS Foundation’s Call to Action: S3 Costs Require Community Support"

RaitoBezarius — Sat, 03 Jun 2023 22:10:38 +0000

Honestly, we are an open source project, not a company. If we have the money, of course, we would prefer to spend it there and do better and more with it.

If this is threatening in a serious countenance, our growth and ability to conduct our project. I'm not sure if we need all the 9s of durability of S3, given that people already lost all their buckets on S3.

We do not have the money to store 5x or 6x the contents of the cache.

So we much prefer to have control, and we have enough skills to run all that shit easily, the problem is that the skilled people are in rare availability and are usually working on harder problems than running that. So ultimately, this is a balance problem.

Disclaimer: NixOS developer, 23.05 Release Manager.

New comment by RaitoBezarius in "The NixOS Foundation’s Call to Action: S3 Costs Require Community Support"

RaitoBezarius — Sat, 03 Jun 2023 21:27:28 +0000

It is also probably impossible given some sources completely disappeared.

New comment by RaitoBezarius in "Super Colliding Nix Stores: Nix Flakes for Millions of Developers"

RaitoBezarius — Fri, 26 May 2023 02:14:14 +0000

Did you mention sandboxed builds? Actively preventing pip to execute code arbitrarily at install time? Same for Node.js?

I cannot live without that anymore, that's the new golden standard.

New comment by RaitoBezarius in "Super Colliding Nix Stores: Nix Flakes for Millions of Developers"

RaitoBezarius — Fri, 26 May 2023 02:11:06 +0000

Those benchmarks are wrong and misleading. Tvix contributor (but mostly reviewer I would say) here. We still don't have finished the integration with our own store, using the Nix store forces us to be slower than Nix, therefore the claims are bogus alas.

Tvix can *evaluate* a serious (?) chunk of Nixpkgs, but we have strictness bugs in some areas.

Tvix has no builder yet.

NixOS 23.05 beta is released

RaitoBezarius — Mon, 22 May 2023 20:04:49 +0000

Article URL: https://github.com/NixOS/nixpkgs/commit/8966c43feba2c701ed624302b6a935f97bcbdf88

Comments URL: https://news.ycombinator.com/item?id=36036026

Points: 4

# Comments: 1