Thomas Bereknyei retweeted
cargo+libnix: "incremental builds" split into 3 categories:
1. minimal file lists (detect root crate changes)
2. build.rs (environment discovery)
3. rustc -C incremental=/incremental-target \ (binary substitudes the rust way - a lookup table)
For (1.) I've created a specification of the problem at: github.com/nixcloud/cargo/is…
I am making some progress with a prototype branch but since it adds a lot of complexity to the project I'm hesitant to add it just yet.
Thomas Bereknyei retweeted
I'm currently trying an experimental feature in cargo+libnix which, for each root-crate (that is your code),
1. builds it using the whole source code directory of your project
2. then extracts the .d file and builds the crate another time but with the minimal file list
3. it finished the build
next time you type: `cargo build` it knows the list and a README.md change won't trigger rebuilds. This is only a start and covered by github.com/nixcloud/cargo/is…
Next i need to find a fix for the build.rs concept which is much harder to solve properly because such scripts, in theory, could search your whole harddrive, download stuff from the internet and are evil [tm] by design. This is in part covered by github.com/nixcloud/cargo/is… but i need to put it into a dedicated ticket and use #3 only as a reference to these topics.
It is truly wild that i got this far and guess how much could be done if someone "would" actually pay me for any of this. 😜
Yaaaaasssss! Do it!
I'm playing with a CMake integration, similar to nix-ninja, just one level higher.
Pro-tip: interactive development should produce and build the same fine-grained vanilla derivations that are the ones wrapped in a pure dyn-drv build. Turns into great UX.
Thomas Bereknyei retweeted
cargo (libnix) 1.99.0+v1 is out: cargo builds Rust crates as one nix derivation per unit.
• Rust 1.99
• fixes linking with rustc's bundled lld (rustc ≥1.90)
• ~1600-unit projects like grok-build now evaluate and build
• 31/31 test projects pass
github.com/nixcloud/cargo/re…
Thomas Bereknyei retweeted
relocatable binaries on Linux built via Nix supported in kernel 7.3, brought to you by @fmzakari at tacosprint.org
Thomas Bereknyei retweeted
#buck2 #nix #nixpkgs #nixos the integration between these things can be frighteningly good....
What's stopping us?
fzakaria.com/2026/10/17/one-…
Thomas Bereknyei retweeted
everytime i need something for nix mic92 already built it
1. github.com/Mic92/tribuchet
2. github.com/Mic92/nix-grpc-st…
rbe but for nix
Thomas Bereknyei retweeted
Replying to @joschelboschel @bereknyei
This is just for love. And having fun with the models. Indirectly our amazing customers who help pay the bills / tokens.
I still have lots of ideas I want to try out. Create a new frontend for monorepos. Add better build provenance tracking. Next step is to integrate with nixbot
Thomas Bereknyei retweeted
Replying to @yrashk
Try github.com/nixcloud/cargo/bl… as it could help with the disk space problem for rust.
Thomas Bereknyei retweeted
Okay is this cursed or is it blursed?
fzakaria.com/2026/10/12/nixp…
#nix #nixpkgs and.... #typescript
Thomas Bereknyei retweeted
Replying to @domenkozar
if you're building a new nix interpreter as well, we can share the conformance test suite: github.com/numtide/nix-confo… . It would be nice to standardize the language.
Thomas Bereknyei retweeted
CFP submission made easy! Join the SCaLE Program Committee for a live Speaker Q&A. Bring your questions, your talk ideas, or both!
📅 Thursday, Oct. 8
⏰ 12–1pm
🔗 meet.google.com/fri-ckaq-tto
CFP details: socallinuxexpo.org/scale/24x…
Thomas Bereknyei retweeted
Sometimes the funniest moments happen when the cameras are rolling and the actors have absolutely no idea what’s coming. While filming Scary Movie 5 (2013), the crew reportedly decided to prank Ashley Tisdale by secretly asking an extra to perform a stunt in the most awkward and over-the-top way possible.
Ashley tried desperately to stay in character as the ridiculous performance unfolded, but keeping a straight face became nearly impossible. Then came the perfectly timed camera zoom, which finally pushed her over the edge and made the moment even funnier.
Looking back, Ashley joked, “I did my best, but that camera zoom got me.” It was one of those hilarious behind-the-scenes moments where an unexpected prank and a genuine reaction created something no script could have planned.
Thomas Bereknyei retweeted
Candidacy is live: github.com/NixOS/SC-election…
Thomas Bereknyei retweeted
Send me to the fire.
github.com/NixOS/SC-election…
Thomas Bereknyei retweeted
Excited to announce that I'm launching a new startup, @LilithSemi , together with Sebastian Kraus! 🚀
With Lilith Semi, we're building open-source tools for hardware development and security-critical infrastructure.
Our first release is Chock, a security-first harness for AI coding agents.
Since 2026, AI agents have become good at tasks beyond simple web development. As companies start dealing with real workflows, enterprises, especially in regulated industries, are becoming more conscious about how they handle sensitive data.
I've been dealing with supply chain security for a while, and one thing I've learned is how important it is to work with safe AI harnesses. When you're dealing with sensitive data, the risk simply isn't worth it.
That's why Chock sandboxes AI agents in a using standard sandboxing primitives.
We're currently working on micro-VMs as the next step.
👉 Check it out: chock.ws
And if you're at NixCon 2026 in Kraków, come find us and let's talk.
#AISecurity #AIHarness #SupplyChainSecurity #DeveloperTools #OpenSource #NixCon2026
















