fishinthecalculator @ fishinthecalculator @lemmy.ml

Posts

7

Comments

21

Joined

5 yr. ago

I think it's worth the effort since it prevents numerous risks at the root, for sure it's not enough. I agree that bootstrapping wouldn't necessarily solve the XZ attack, but I think that should be solved by big tech paying FOSS maintainers enough or at all to prevent them from burning out.

About the BSD experience that looks like a big amount of work but definitely worth it, I'm sure they didn't ship many packages as Guix ships but I guess the projects have different goals and requirements.

My point on binaries was not really about reproducibility as nowadays most distros have reproducible builds: Arch, Debian, RHEL, SUSE and probably more. My point is that packages in Guix are bootstrapped from a very small binary seed, something like 357 bytes, which highly mitigates the risk of Trusting Trust attacks

I find Guix far better on almost every remark, in no particular order:

• as you said some part of the Nix community is made of techbros (even if Guix attracts some fossbros as well)
• the way governance is structured in the Nix community is brittle, just see the drama from which all the new Nix forks spawned
• better documentation. The doc for Nix is scattered, the Guix manual, albeit not perfect, is much more complete
• the Guile language is far clearer than Nix, also you don't have to use it only for package recipes, you can build full applications with it
• the Guix story around trustability of binaries is far better (checkout how Guix boostrapps everything), entires classes of vulnerabilities are prevented by design
• the Guix UX is far better designed imho, the command line is intuitive and well documented and features are easily composable
• the community is not diverging, as is the case for Nix flakes
• Guix as well provides OCI integration, check out the point about enabling gocix

Totally Guix, it has no systemd and is able to roll back to the last working in case you break anything somehow

Defintely this, it's also the best option to run Fediverse instances such as Bonfire https://fishinthecalculator.me/blog/bonfire--guix-a-love-story.html

This. Thank you. @PotatoesFall you can check out my personal instance to see the microblogging flavour in action: bonfire.fishinthecalculator.me

Can someone explain how this can/would work for a Lemmy user?

Very similarly to how you now can interact with Mastodon instances

could this connect to Lemmy somehow, or would that require an integration between bonfire and Lemmy?

It could, maybe it already somewhat can . It shouldn't require now nor never an explicit integration as they should be able to speak the same language (ActivityPub) . you can try interacting with my personal instance bonfire.fishinthecalculator.me .

How would instances of bonfire decide whether to connect or federate with Lemmy or vice versa?

I don't know about Lemmy but bonfire can have block list both at the instance and the user level, so the admin can provide defaults but then each user is able to customize them

I would say bonfirenetworks.org

Maybe the point is that you cannot demand that the whole world knows the same set of concepts as you do. Otherwise just learn to remove cancer by yourself instead of forcing a person that studied decades to get down their trone and do their job

A little too pitchy imho. It is just a regular linux distro with each system update creating a new fs snapshots .

Just use Nix/Guix lmao

They do very different things even if the outcome is the same. You are not rollingback your system by downgrading each package. You are statefully changing your filesystem. Rollbacks in Nix and Guix are internet free, atomic and reproducible because they amount to changing the target of a single symlink

I guess you are not entitled free support once you execute a free program

I think functional distros like Guix or Nix are just another thing. Their ability of programming , provisioning and deploying software environments is unparalleled. My personal favorite is Guix since, while having less packages than Nix, it has the most consistent experience: everything is in Scheme from the top to the bottom of the distro. Also it pushes really hard on a sane bootstrapping story while allowing for impurity through channels like nonguix .

The main downside is the lack of tutorials and a documentation that's very intense, let's say. typical of GNU projects. I suggest the System Crafters youtube channel which has a lot of nice tutorials

with nonguix the lines are like five instead of one, but yes there are less packages than nix. the real selling point imho is how everything is human-sized and consistent

Yes and if you like lisp or FSDG compliance have a look at Guix

Working Screensharing from first boot lmao

Just use lisp

Like third grade history I believe

No. They are not equal and neither same. If you understand Italian I suggest you to search for Prof. Barbero videos on the topic. They are quite better than anything I'll be able to convey.

Fascism:

It's an authoritarian dictatorship happened between 1914 and 1945 in Italy. The fascist regime and ideology was strictly based on Mussolini's figure, people marched in straight lines down the streets, everyone wearing the same uniforms and Italy was a great imperialist nation (lol jk it wasn't but they quite believed it). Fascism and the fascist party stopped existing after partisans overthrew the regime. Fascism is a 20 years long dictatorship. After that there were some regimes around the world that were inspired by Mussolini such as the current ruling party Italy Fratelli d'Italia, Marine le Pen's party in France, those shitty AFD in Germany, orban's Regime, franco in Spain etc etc. They are called neofascists, because Fascism was a 20 years long regime happened in Italy between 1914 and 1945.

Communism:

Communism is a model of governace that's never been achieved in human history, as someone above said it's about classless, stateless, governance models. It's been around for like 200 years (the Communist Party Manifesto is from 1848), and in every country of the world there is/ has been a Communist Party and as we know they were always persecuted for being communist, stopped from going to the government and stopped from bulding a classless society when they managed to get to govern. Just see what the USA did in the last 50/60 years in every country that risked a communist government: Chile and latin America in general, Italy and so on an so forth.

Fascism =/= communism, and if you say the contrary you just don't know how they work.

Yes I definitely agree: free software is also a requirement for bootstrappability and reproducibility.