arianvp

Keeps varlink connection open for the HTTP 1.1 connection. one varlink call per HTTP POST, and stream back results

$ go run .
2026/03/02 12:45:42 connecting to /run/systemd/userdb/io.systemd.Multiplexer
2026/03/02 12:45:42 io.systemd.UserDatabase.GetUserRecord
2026/03/02 12:45:42 io.systemd.UserDatabase.GetMemberships
2026/03/02 12:45:42 closing /run/systemd/userdb/io.systemd.Multiplexer

arianvp

What the heck is /usr/lib/ignition on MacOS

• Contains one entrypoint _lightupthenight
• Refers a whole bunch of strings related to pre-boot env
• I expect something with Darwin boot-loader?

Didn't find a single reference on google; hence creating this gist to crowdsource info

arianvp

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

arianvp

{
  pkgs,
  lib,
  config,
  ...
}:
{
  options.ec2.nix-instance-store = {
    device = lib.mkOption {
      type = lib.types.string;

arianvp

#!/bin/bash

# Calculates the median amount of seconds since a file has been changed
# by taking the time between creation and last edited for eadch line
# 0 means the file was never changed since creation

for file in $(git ls-files '*.c' '*.h'); do
  if [ -f "$file" ]; then
    times=($(git blame --line-porcelain "$file" | grep '^author-time ' | awk '{print $2}' | sort -n))
    count=${#times[@]}

arianvp

arian@Arians-MacBook-Pro systemd % awk '{ cmd = "perl -e '\''print scalar localtime(" $1 ")'\''"; cmd | getline date; close(cmd); print date, $2 }' sorted-times.txt 
Wed Nov  5 21:49:52 2008 src/libudev/libudev-util.c
Mon Jun 15 13:22:38 2009 src/libudev/libudev.c
Sat Jul  3 19:48:33 2010 src/core/target.c
Wed Aug 11 04:38:55 2010 src/initctl/initctl.c
Fri Oct  8 16:06:23 2010 src/shared/utmp-wtmp.c
Tue May 24 04:20:35 2011 src/shared/devnode-acl.c
Fri Jul 22 04:21:18 2011 src/test/test-install.c
Fri Oct  7 21:06:39 2011 src/libsystemd/sd-journal/lookup3.c
Tue Jan 10 01:34:15 2012 src/libudev/libudev-queue.c

arianvp

{
  "action": "completed",
  "workflow_job": {
    "id": 41546348818,
    "run_id": 14796710445,
    "workflow_name": "CI",
    "head_branch": "main",
    "run_url": "https://api.github.com/repos/MercuryTechnologies/github-actions-skipped-spans-reproducer/actions/runs/14796710445",
    "run_attempt": 13,
    "node_id": "CR_kwDOOjaRi88AAAAJrFr5Eg",

arianvp

#!/bin/sh

set -e

rm -rf unsigned

unsigned="file:///$PWD/unsigned"

# show that content addressed store paths verify without signatures
ca=$(nix store add-path ./file --store "$unsigned")

arianvp

hello

arianvp

Asynchronous post-build-hook

this hook queues up store paths on a unix domain socket and then spawns a service to actually push the store path to the cache through socket activation

works on MacOS and Linux