Tag

Nix

4 stories

Nix wanted $ORIGIN in the kernel. It got eBPF-driven loader swaps instead. (fzakaria.com)

$ORIGIN is the token that tells a Linux loader to find dependencies relative to its own folder; ld.so has honored it for years. Nix wanted the kernel to honor it too, so packages stop hardcoding /nix/store paths: what landed instead swaps loaders through binfmt_misc via eBPF, overriding only PT_INTERP so /proc/self/exe still points at the real binary.

One catch surfaced fast: it needs root, since it can't run in an unprivileged namespace yet. And one commenter had already hand-built a similar userspace trick before this became a kernel feature.

Not just a headline — the discussion unpacked

The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.

NixOS 26.05 ships from 2,842 contributors — and LLMs are quietly driving its adoption (nixos.org)

This release pruned hard: 17,532 outdated packages removed to keep nixpkgs maintainable, systemd now drives stage-1 boot by default, and x86_64-darwin support ends here — the last NixOS to build for Intel Macs.

The thread's surprise wasn't the changelog. One full-karma user said what got him over the famously steep learning curve was configuring the whole system with Claude Code; others noted an LLM can read your entire declarative OS and answer accurately instead of guessing at /etc.

He moved dotfiles from GNU Stow to Chezmoi. The thread climbed to Nix (rednafi.com)

The post explains why GNU Stow's symlink model broke down: edits flow back through the link into the repo, and files like ~/.zprofile already exist by the time Homebrew runs, so Stow refuses to manage them. Chezmoi's copy-and-template model fixed both.

Then the thread did its thing. Every Chezmoi pick drew a 'you're 6 months from Nix' reply, which drew a developer who rewrote Nix from scratch calling Home Manager 'demonstrably ill-posed,' which drew a wall of people who just use a git repo, Make, or rsync and never looked back.

Homebrew 6.0 makes third-party taps prove they're trustworthy before their code runs (brew.sh)

Mike McQuaid's 6.0 also makes the faster internal JSON API the default, sandboxes builds on Linux, and turns on confirm-before-install. Intel Macs drop to Tier 3 in September, a year before Apple cuts them.

Two users with maxed-out credibility told opposite stories: one fled to Mise and MacPorts over forced upgrades; the other just came back from Nix because Homebrew's Mac support and UX won.