phaer

#!/usr/bin/env bash
# Given a hostname of a host, this uses "clan secrets" to copy the age identity key for 
# sops-nix into a disk image built outside the nix store.
# The file will be owned root:root with u+rw perms inside the vm, but will still only
# be as secure as the disk image is, as it contains the age identity key unencrypted.
# This can still be very useful to build ready-to-boot appliances which can already
# non-interactively, access secrets on first-boot.

set -eu

phaer

amazon

- result/master/amazon:{out}
+ result/new/amazon:{out}
• The set of input derivation names do not match:
    - nixos-system-unnamed-25.05pre-git
    + nixos-system-unnamed-amazon-25.05pre-git
• The input derivation named `closure-info` differs

phaer

import json
import uuid
import subprocess
from pathlib import Path

age_identity = Path("~/.passage/identities").expanduser()
store_dir = Path("~/.passage/store").expanduser()

folders = []
items = []

phaer

 $(nix-build -A packages.odoo.config.lock.refresh --no-out-link)/bin/refresh
 nix-build -A packages.odoo 

phaer

# https://stackoverflow.com/questions/7136385/calculate-day-number-from-an-unix-timestamp-in-a-math-way
# https://howardhinnant.github.io/date_algorithms.html#civil_from_days
let
  t = builtins.currentTime;
  z = t / 86400 + 719468;
  era = (if z >= 0 then z else z - 146096) / 146097;
  doe = (z - era * 146097);
  y' = (yoe) + era * 400;
  doy = doe - (365 * yoe + yoe / 4 - yoe / 100);
  yoe = (doe - doe / 1460 + doe / 36524 - doe / 146096) / 365;

phaer

{ name ? "hello"
, text ? "echo 'Hello World'"
, pkgs ? import <nixpkgs> {}
}:
builtins.derivation {
  inherit name;
  inherit (pkgs) system;
  builder = "${pkgs.busybox}/bin/busybox";
  args = [
    "sh"

phaer

#!/usr/bin/env bash
# TODO: run in nix shell gitlab:abstract-binary/nix-nar-rs, nix-shell does not support
# flakes, nix shell no shebangs atm.

STORE_PATH="/nix/store/4q7ij8ivy09vbhini8j0gzd7f77z0bwn-disk-image"
FILE_NAME="nixos.root.qcow2"
CACHE_URL="https://nix-dabei.cachix.org"

HASH="$(echo "$STORE_PATH" | sed 's|^/nix/store/\([^-]*\)-.*$|\1|')"
NAR_INFO_URL="$CACHE_URL/$HASH.narinfo"

phaer

{ pkgs, lib, config, ... }:
let
  cfg = config.my.secrets;
  makeSecretServiceUnit = name: value:
    lib.nameValuePair "secret-${value.secret}" {
      description = "template for secret ${value.secret}";
      serviceConfig = {
        Type = "oneshot";
        RemainAfterExit = true;
      };

phaer

#!/usr/bin/env python3
"""
Pandocs Org-Parser does not handle generic multi-line metadata keys. Only
their last line ends up in the AST and so this can't be solved (easily) with
lua filters.

We use python to extract org metadata keys before the first non-metadata line
and output them in YAML for use with pandoc's --metadata-file. E.g.

  #+TITLE: Letter

phaer

import sys
import json
from collections import OrderedDict
from contextlib import contextmanager


def resolve_json_pointer(spec, reference):
    prefix, definitions, name = reference.split('/')
    return spec.get(definitions).get(name)