#infosec #golang #Nix #NixOS #ReproducibleBuilds #ConfidentialComputing #Virtualization
| GitHub | https://github.com/katexochen |
| GitHub | https://github.com/katexochen |
Today I published an update on the #Canonical supported #upki project, which brings browser-grade Public Key Infrastructure to Linux through the efficient #CRLite data format, with the core revocation engine now functional and available to test!
Beyond current progress, this post explores broader integration, performance, and future capabilities like Certificate Transparency enforcement and Merkle Tree.
This is all part of the effort to increase the resilience of #Ubuntu machines by default, but I hope it has a wider benefit on the Linux ecosystem going forward!
Last year, I announced that Canonical had begun supporting the development of upki, a project that will bring browser-grade Public Key Infrastructure (PKI) to Linux. Since then, development has been moving at pace thanks to the tireless work of Dirkjan and Joe. In this post, I’ll explore the progress we’ve made, how you can try an early version, and where we’re going next. Architecture & Progress As a reminder, upki’s primary goal is to provide a reliable, privacy-preserving, and efficient cer...
PSA: Did you know that it’s **unsafe** to put code diffs into your commit messages?
Like https://github.com/i3/i3/pull/6564 for example
Such diffs will be applied by patch(1) (also git-am(1)) as part of the code change!
This is how a sleep(1) made it into i3 4.25-2 in Debian unstable.
Just released nix-init 0.3.3! Here are all the changes:
# Changes
- Use finalAttrs pattern instead of rec
- Drop compatibility with nurl < 0.4
# Features
- Rust: fetchCargoVendor support
- Headless mode
- stdenvNoCC.mkDerivation support
- Automatically format with nixfmt if it's found
- Better license detection
- Rust: emit LIBGIT2_NO_VENDOR when needed
- Improve error messages
# Fixes
- Remove legacy darwin sdk
- Go: drop -w from default ldflags
- Prefix unstable versions with 0-
- fetchCrate now works correctly
- GitHub: sort tags
- Python: fully remove outdated behavior of adding wheel to dependencies
- Normalize homepage URLs
- More consistency with nixfmt formatting

Generate Nix packages from URLs with hash prefetching, dependency inference, license detection, and more [maintainer=@figsoda] - nix-community/nix-init
The NixOS devroom is live! If you aren't at FOSDEM, you can follow the stream online: https://matrix.to/#/#2026-nix-and-nixos:fosdem.org