Erethon's Corner

Attending NixCon 2025

Mon, 22 Sep 2025 00:00:00 +0000

In early September of 2025 I attended NixCon in Rapperswil-Jona in Switzerland. It was my first time attending a Nix specific event and I had a blast!

This Week in NixOS, Week 35 2025

Sun, 31 Aug 2025 00:00:00 +0000

Keeping the streak up, here's the fourth week of This Week In NixOS.

This Week in NixOS, Week 34 2025

Sun, 24 Aug 2025 00:00:00 +0000

Lots of interesting things happened this week in the NixOS ecosystem. Here are my highlights.

This Week in NixOS, Week 33 2025

Sun, 17 Aug 2025 00:00:00 +0000

Second week of my NixOS notes on what happened in the community or that I learned that I found interesting.

This Week in NixOS, Week 32 2025

Sun, 10 Aug 2025 00:00:00 +0000

I often send to friends links about the NixOS ecosystem that I find interesting. I figured it's better if I write about it so I have an easily accessible archive of these links. Keep in mind, these links are based on my personal preferences and my observations.

How NixOS is built

Thu, 31 Jul 2025 00:00:00 +0000

I recently got the urge to better understand how NixOS is built and how secure the build pipeline is. So, I started looking at all the build systems involved, the infrastructure they run on, how everything is managed and which build jobs are running in these systems. This is my attempt at documenting the above.

25.05 Zero Hydra Failures

Sun, 06 Jul 2025 00:00:00 +0000

In a previous post, I mentioned how I participated in the 25.05 Zero Hydra Failures event, where participants aim to fix build failures in Nixpkgs before the release date of the next NixOS version. In this post, I'll document the few fixes I managed to land and what I learned in the process.

Zero Hydra Failures filtering

Fri, 16 May 2025 00:00:00 +0000

I've been participating in the NixOS 25.05 Zero Hydra Failures event where people are encouraged to fix build failures in Nixpkgs. The website for the event is zh.fail (clever use of the fail tld!) and here's the current list of all failing packages and tests. I looked around in the website but I didn't find any way to filter failures only for Linux or architecture (x86_64/aarch64). This feature was requested when the zh.

TIL: Hugo's GitInfo

Mon, 03 Mar 2025 00:00:00 +0000

While catching up with my RSS feed, I ran into this post by Farid Zakaria which describes how they automatically add the latest git commit hash to their statically generated blog. This gave me the idea to do something similar on my Hugo theme and blog, as I frequently look for a source link when reading other people's blogs.

My Nix(OS) notes

Fri, 21 Feb 2025 00:00:00 +0000

A friend recently asked me to document some of my Nix(OS) workflows and any tips I might have about Nix and NixOS. This page will be structured more like a wiki page and less like a blog post. These notes come from me using Nix in NixOS and aren't meant as a "Nix 101". They are things that I find noteworthy and might be useful to newcomers.

TIL: Zizmor and GitHub Actions security

Fri, 13 Dec 2024 00:00:00 +0000

I was reading up on the recent Ultralytics GitHub Action compromise and I stumbled upon this great analysis of the situation. In it, zizmor is introduced, which is a static analysis tool for GitHub Actions. I experimented with it a bit and I have to say it's working great. It correctly identified misconfigured GitHub Actions on some repositories I was working on. It's another tool that's worth having as part of your CI.

Trying out logs and TILs

Tue, 03 Dec 2024 00:00:00 +0000

I often find myself wanting to blog about something, but I get stuck on trying to write a blog post that's perfect, which is a big mental barrier. The longer it takes me to publish something, the harder it gets, hence why I haven't posted about my updates since May. I'm also guilty of having multiple long essay-like posts, that are half-finished for years now, which apply a constant pressure in my posts backlog, making the situation worse.

As an attempt to fix this, I'm giving TILs and log entries a try.

/tmp is not a tmpfs on NixOS

Mon, 02 Dec 2024 00:00:00 +0000

The other day I realized that /tmp/ on my NixOS installations is not a tmpfs as I'm used to from other distros. Instead, NixOS relies on this systemd timer that cleans up old files from /tmp/. This is not NixOS specific, other systemd based distros also run this timer. Looking at the NixOS boot.tmp related options, we see there's an option (cleanOnBoot) that clears files on boot and is disabled by default.

A web page to display my time zone

Tue, 25 Jun 2024 00:00:00 +0000

I recently had to share my time zone information with a group of people online. While it's easy to say "My time zone is XYZ", I thought it would be better if I had a web page that was easy to remember and had this information available for everyone to see. So, I created tz.erethon.com.

April 2024 updates

Fri, 03 May 2024 00:00:00 +0000

I spent a big part of April on moving parts of my infrastructure and computers to NixOS. As part of this, I devoted some time to better understand NixOS and get a grip on how things work upstream. I also kept up to date with the ongoing situation in the community, a good summary of which can be found here. I don't like the word drama, as I think it downplays the importance of it, but it is what people call it currently. Let's dive in the details of what I was up to!

Early 2024 updates

Thu, 04 Apr 2024 00:00:00 +0000

Since I didn't post monthly updates so far in 2024, here's a 2024 Q1 update on what I've been up to.

Comparing Reticulum and Meshtastic

Wed, 31 Jan 2024 00:00:00 +0000

I've blogged about both Reticulum and Meshtastic before (1, 2, 3, 4) and I've even given a presentation about both of them. The past few months, I started getting more involved with Reticulum, however I'm still reading the Meshtastic Discord to keep up with the project. In both communities, I see one question that comes up often: "Which one is better?". I want to try to answer this question and hopefully help people understand these projects better.

December 2023 updates

Tue, 09 Jan 2024 00:00:00 +0000

In December, I didn't have much time to work on tech things since I spent a large part of it away from home. Still, here are some interesting things that happened.

November 2023 updates

Thu, 07 Dec 2023 00:00:00 +0000

November was a bit of a slow month, but here are some updates on the things I worked on.

My tiny archivemail alternative in Rust

Thu, 30 Nov 2023 00:00:00 +0000

Almost ten years ago, I blogged about my email setup (1, 2, 3). Since then, not a lot has changed. I still download my emails locally with mbsync, use mutt to view and compose emails, msmtp to actually send emails, and finally notmuch to index emails. A crucial part of the setup that I didn't mention, was archivemail.

Archivemail is a Python 2 application that archives older emails and cleans up mailboxes. I used it to prune my big public mailboxes such as mailing lists, forum updates (lobste.rs), etc.

As I mentioned, archivemail is written for Python 2, which isn't supported by Debian anymore and thus, I had to look for an alternative. I found Chewmail, which looks like a potential Perl option, but instead, I decided to write a small replacement in Rust for fun.

October 2023 updates

Thu, 02 Nov 2023 00:00:00 +0000

Updates on some of the things I've been up to during October 2023.

What happens when a Matrix server disappears?

Wed, 21 Jun 2023 00:00:00 +0000

Ever since I started using Matrix, I always wondered what would happen if a Matrix homeserver got deleted and then recreated, without any data on the database. Would the federated servers complain a lot about it? Would federated rooms work once the server was recreated and started federating again? I never had the chance or time to properly investigate this.

Well, that is until the hardware node that hosted my Matrix database died.

Introduction to Reticulum

Fri, 19 May 2023 00:00:00 +0000

In my last two posts [1, 2] about Meshtastic, I mentioned how I wanted to experiment with Reticulum. Now, I'm excited to share my experience and provide an introduction to the project!

More notes on Meshtastic and its v2.0 update

Sun, 08 Jan 2023 00:00:00 +0000

In a previous post I documented my experience with the Meshtastic project and one of the TTGO T-Beam boards. Since then, I've experimented more with meshtastic and its capabilities, while the new version 2.0 of the project got released, so some updated notes are in order!

Meshtastic: Quick review and some notes

Fri, 05 Aug 2022 00:00:00 +0000

A friend recently introduced me to the Meshtastic project, an open source "platform" for creating long range, off-grid, mesh networks for short messages based on LoRa. After playing with the hardware and the software for a few days, here are my thoughts on it and notes on how it works.

What a malicious matrix homeserver admin can do

Wed, 13 Jul 2022 00:00:00 +0000

I run my own Matrix homeserver that I share with friends and family. Ever since I started working for Element back in February of 2020, I've learned a lot more about the Matrix protocol and what's possible to do with it. During a conversation with a few privacy minded friends that use my HS (HomeServer), I pointed out that the admin of a homeserver has a lot of power over their accounts and that they as users explicitly trust the admin. In this post, I want to explore and document the ways a malicious admin can mess with the privacy of a Matrix account. Note: malicious admin in this case can also mean a hacked admin.

Notes on my DIY modular synth journey

Mon, 21 Feb 2022 00:00:00 +0000

I want to build a DIY modular synthesizer. A lot of the music I enjoy listening comes from synthesizers, so I want to experiment with it. Moreover, I haven't done any analog electronics work in a long time, so I see it as a creative way to get back into analog hardware.

I have no experience with modular synths, so I'll be documenting my work and research here, with links and resources I found useful.

LS32 LCD name badge + Rust

Sun, 13 Dec 2020 00:00:00 +0000

During 36c3 last year the FOSSASIA assembly was selling some cheap bluetooth LCD name badges and I got one as to have something to fiddle with during the night at the hotel. There were a couple of demo units in the assembly and the people selling the badges encouraged everyone to try pairing their phones (via bluetooth) to the demo units before purchasing, as some phones weren't able to pair with the badges. When I was next in line to purchase one, I was asked if I wanted to try one of the demo units in case it doesn't work and I replied something along the line "If it doesn't work, I'll make it work", which made people in the line laugh. As it turns out, neither of the two phones I had access to paired with the badge, so it came down to figuring out how this thing worked and what other ways there were to program it.

Infrastructure as Code without using the cloud

Wed, 06 Nov 2019 00:00:00 +0000

One of my favorite conversations I had with a colleague back in early 2015 was about Ansible, the future of provisioning VMs, pets vs cattles, Infrastructure as Code and the ways an organization can make sure that an administrator isn't leaving behind a backdoor when they leave the organization. We had that discussion on the day they gave their one month notice and announced their resignation.

Plotting room temperature and humidity using Prometheus, Grafana and a DHT11 sensor

Sun, 22 Jul 2018 00:00:00 +0000

Last week we installed an airconditioning unit in our house and yesterday a DHT11 humidity and temperature sensor arrived that I had ordered in the past from ebay and had totally forgotten about it. So, I got the idea to monitor the temperature and humidity in the room, to see how well the airconditioning unit works.

What better way to do this than use Prometheus, Grafana and a spare Raspverry Pi Zero W I had lying around.

Cryptopals Set 1 reading list (spoilers ahead)

Tue, 26 Jun 2018 00:00:00 +0000

I've decided to Go through (this will make sense in a bit) the Cryptopals Challenges in order to get more familiar with crypto related concepts and Golang (^_^), which I'm using to solve the problems. The code I've written for solving the challenges is published in this git repo and I'll be documenting any helpful resources on this blog.

How I do my Computing

Sun, 19 Feb 2017 00:00:00 +0000

This is a long time coming post that I've kept postponing (pun intended) for ages.

I enjoy browsing The Setup and I always longed for an easy way to share the way I do my computing with friends, besides linking them my dotfiles. This blog post is supposed to fill that void. A lot of this info is already documented in my private Emacs wiki, this is a more lengthy representation of it.

Migrating to Hugo

Thu, 11 Aug 2016 00:00:00 +0000

A bit over two years ago I blogged about migrating to Octopress from Wordpress, this time I'll blog about migrating to Hugo from Octopress.

I started messing around with Hugo because I was experimenting with Go and wanted to take a look at a simple and complete Go project. I ended up liking the simplicity of setting up a new site and decided to try porting my blog to it.

Can we really trust the official Docker images?

Thu, 03 Sep 2015 03:53:22 +0300

Yeap, this is another rant on the security practices of Docker users. Like we didn't have enough of those already.

Using msmtp to handle mail delivery

Tue, 02 Jun 2015 03:53:22 +0300

Following the example of GKH and others, I've added one more piece of software on my email setup and workflow. That piece is msmtp, a very simple and lightweight SMTP client, that integrates really well with the rest of my setup.

On proper git commit messages and frequent git pushes

Sat, 28 Mar 2015 15:37:51 +0200

Edit: This post was written many years ago. Back then I was a lot more strict on how other people did things and I now understand this was a mistake. I'm leaving this post here as a reminder of past mistakes.

Note: this is a rant on how people use git.

When I was introduced to git, I was told I should read this great post on git commit messages by Tim Pope. Ever since, I've been trying to follow that system in all of my commits across all projects.

NotMuch is awesome

Tue, 17 Mar 2015 08:18:56 +0200

In one of my previous posts, I explained my email setup in detail. Since then I've added one more piece of software on the "stack". It's called NotMuch and it's an email indexer.

My email Server Setup

Wed, 11 Mar 2015 20:52:37 +0200

Wanting to have more control over my email, I decided to setup my own mail server. I thought I had a pretty good understanding of how mail works, considering my mutt/offlineimap/imapfilter setup, but I must say I was pleasantly surprised while setting everything up.

My mail setup using Mutt/OfflineIMAP/imapfilter

Fri, 27 Feb 2015 19:46:52 +0200

Update 17/03/2015: I'm also using NotMuch now, for more info check out this post.

Update 2/6/2015: I've added msmtp to the mix, check out my new post about it.

This is part of a series of posts where I describe my workflow and OS setup.

Kippo findings round two

Sun, 28 Dec 2014 13:46:23 +0200

It's been over a month since I set up twelve Kippo hosts using my Ansible playbook, time to get some stats.

Deploying Kippo with Ansible

Tue, 25 Nov 2014 14:38:06 +0200

I've been running some instances of Kippo for quite some while now with great results. I recently wrote an Ansible playbook to automate the process of deploying Kippo hosts and also make it scalable. You can find the playbook on my GitHub page, specifically here.

My tmux config and a small tmux primer

Thu, 13 Nov 2014 23:48:20 +0200

It's been a little over a month since I started using tmux. Below, I'll try to explain most of my .tmux.conf, a bit of my current workflow using awesome + tmux and various cool stuff you can do with tmux. My latest .tmux.conf can be found on my dotfiles repo on GitHub.

Updating tmux without killing active sessions

Fri, 10 Oct 2014 17:53:02 +0300

I've been using tmux for a while, and even though I didn't like it at first, now I'm in love with it. I'm mostly using it as a GNU Screen alternative, but I don't use some of its fancy features like tabs, mainly because my window manager takes care of multiple terminal windows for me.

Making a RS-232/UART adaptor

Wed, 28 May 2014 22:54:33 +0300

A couple of months ago I wanted to experiment with the serial console of an old router I had laying around. Not wanting to buy a UART to RS-232 adaptor, I decided to make one myself. After all, I had some spare MAX3232 left over from a previous project (for which I still haven't blogged).

Octopress here I come!

Wed, 28 May 2014 01:31:11 +0300

I decided to port my blog to Octopress and move away from Wordpress after all these years. The reason for this is twofold:

I've really gotten used to working with vim, git, github and the surrounding workflow.
Static site generators are all the rage currently, so who am I to miss out?

Why Octopress and not something based on Python like Pelican or Nikola? I simply decided to do something that will get me out of my comfort zone and also teach me something new. I already know how to use venv, let's see what RVM has to offer.

Raspi + SDR + ADS-B = awesome

Sun, 15 Dec 2013 01:23:17 +0300

A lot of people have combined a RasPi and a SDR dongle to get a low power consumption ADS-B tracker. Tomasz Miklas has created an image for the Raspberry Pi, that has everything that is needed to run your own aircraft tracking "service" already set up. I've finally had a chance to experiment with it and this will be my short review.

An intro to SDR

Mon, 25 Feb 2013 01:27:38 +0300

For the past two months I've been reading about SDR and everything related to radio telecommunications. For those that don't know what SDR is (and are too bored to click the previous link), Software Defined Radio is a system that implements hardware subsystems of a typical radio in software. People have been designing their own SDRs with FPGAs for quite some time now, but in the last year there has been a huge "revolution". It turns out that a lot of cheap USB digital TV tuners based on the Realtek RTL2832U chip can be tuned at a wide range of frequencies.

My Kippo findings after three months

Sun, 13 Jan 2013 01:30:42 +0300

Three months ago I installed Kippo in a low end VPS of mine. About a month after that, I got bored of manually checking kippo everyday so I made a small script to automate the process. Fast forward another two months and here we're.

Making an ugly Ethernet tap

Mon, 07 Jan 2013 00:12:56 +0300

A long time ago, I saw this in the Hak5 store. After reading about it in mossmann's blog, I found somewhat interesting that using this easily built device you can HACK THE PLANET.

An ethernet tap is a passive device used to monitor traffic between two hosts using a third one. For more info on network taps read here.

Arp spoofing with Python

Sun, 23 Sep 2012 21:32:43 +0300

I decided to reinvent the wheel by making an ARP spoofer in python using raw packets, thinking it would be a nice practice.