| 27 Aug 2025 |
 Anders | Newcomer to the meetup here. Where in the hotel are we meeting? | 15:41:05 |
 lillecarl | $somewhere in the lobby, look for nerds 😄 | 15:41:26 |
| Anders | I will do my best! If anyone arrives early then feel free to come say hello to me. I am the guy with long hair and (not so long) beard sitting with my computer at a round table in the bar section. | 15:43:47 |
| lillecarl | Thanks for today, @claesatwork:matrix.org: looking forward to see your "simple secrets" solution! 😁
If anyone is curious for how the cknix store copy works it's here: https://github.com/Lillecarl/cknix/blob/main/createstore.py
Plumbum shall be replaced with native subprocess (so I can do async properly) and all but hardlinks will be removed since it'll use bind mount for RO and overlayfs for RW mounts :) | 19:26:03 |
| lillecarl | If anyone is running a non-critical Kubernetes and would like to try it out, please shout-out to give me motivation to actually get it out of WIP :p | 19:27:06 |
| lillecarl | (and most subprocess calls could probably be native python instead now that we only need hardlinks, but "cp" is pretty good) | 19:28:19 |
 Claes | thanks, I will try to show you next time! | 21:09:07 |
|  @palsternacka:matrix.org joined the room. | 21:09:24 |
|  chrillefkr joined the room. | 21:53:53 |
| 28 Aug 2025 |
| lillecarl | In reply to @claesatwork:matrix.org
thanks, I will try to show you next time! Nice! Remembered https://search.nixos.org/options?channel=unstable&query=zramSwap ? :) | 11:41:18 |
| Claes | In reply to @lillecarl:matrix.org
Nice! Remembered https://search.nixos.org/options?channel=unstable&query=zramSwap ? :) I will definitely enable it on at least one of my NixOS hosts. Seems too good to be true :-) | 13:08:27 |
 kraem | it truly is like https://web.archive.org/web/20090826232515/http://www.downloadmoreram.com/ :) | 13:12:56 |
| lillecarl | In reply to @claesatwork:matrix.org
I will definitely enable it on at least one of my NixOS hosts. Seems too good to be true :-) Virtual memory is dark magic only special kernel wizards with superpowers can comprehend. All I know is those wizards want you to have a good amount of swap space so they can perform their spells without constraints.
(Honestly actually really: Swap is essential even if you have boatloads of RAM since it uses LRU to keep hot shit in fast memory and yesteryears Zara collection on the bench, everyone who says you don't need swap haven't spoken to the superpowered wizards) | 13:21:36 |
| Claes | That disk swap is good, that I think is obvious. It is just an addition to RAM. But that taking part of the RAM and compressing data into it, is less obvious. But I will definitely try | 17:29:01 |
| lillecarl | https://asciinema.org/a/I6RXVGmCyCcHnXInvh5DKph4C
read-write nix store in kubernetes with overlayfs 😄 yayy | 17:49:38 |
|  ollito joined the room. | 20:39:24 |
| 29 Aug 2025 |
| Claes | In reply to @lillecarl:matrix.org
https://asciinema.org/a/I6RXVGmCyCcHnXInvh5DKph4C
read-write nix store in kubernetes with overlayfs 😄 yayy It would be interesting to see the data you pipe into kubectl apply in the first command, it seems to be the magic sauce :-) | 08:17:14 |
| lillecarl | In reply to @claesatwork:matrix.org
It would be interesting to see the data you pipe into kubectl apply in the first command, it seems to be the magic sauce :-) https://gist.github.com/Lillecarl/cbd2e037f1fba7c145a37c3f33d5f926
Essentially everything except the daemonset,csidriver and the ubuntu pod is reduntant(in the current state). Currently the volume is just "ephemeral" so the expression metadata is straight in the podspec under volumeAttributes rather than through the expression CRD.
The reason for having a CRD to stick nix expressions into is so that they can be built ahead of pod-creation time, but I've reprioritized to just make sure it works reliably building on pod creation. It'll still be "kewl enough" to hopefully attract more eyes and ideas 😄
| 08:54:03 |
| lillecarl | Another thing to build is a minimal activation script (sigh we don't get away from those hey) that copies cacerts, users, groups, nss and such from /nix/store into their "well-known paths" so #most applications Just work ™️ 😄 | 08:57:55 |
