Arian van Putten arianvp

What the heck is `/usr/lib/ignition` on MacOS

Contains one entrypoint _lightupthenight
Refers a whole bunch of strings related to pre-boot env
I expect something with Darwin boot-loader?

Didn't find a single reference on google; hence creating this gist to crowdsource info

Native Secure Enclave backed ssh keys on MacOS

It turns out that MacOS Tahoe can generate and use secure-enclave backed SSH keys! This replaces projects like https://github.com/maxgoedjen/secretive

There is a shared library /usr/lib/ssh-keychain.dylib that traditionally has been used to add smartcard support to ssh by implementing PKCS11Provider interface. However since recently it also implements SecurityKeyProivder which supports loading keys directly from the secure enclave! SecurityKeyProvider is what is normally used to talk to FIDO2 devices (e.g. libfido2 can be used to talk to your Yubikey). However you can now use it to talk to your Secure Enclave instead!

Asynchronous post-build-hook

this hook queues up store paths on a unix domain socket and then spawns a service to actually push the store path to the cache through socket activation

works on MacOS and Linux

	{
	pkgs,
	lib,
	config,
	...
	}:
	{
	options.ec2.nix-instance-store = {
	device = lib.mkOption {
	type = lib.types.string;

	#!/bin/bash

	# Calculates the median amount of seconds since a file has been changed
	# by taking the time between creation and last edited for eadch line
	# 0 means the file was never changed since creation

	for file in $(git ls-files '.c' '.h'); do
	if [ -f "$file" ]; then
	times=($(git blame --line-porcelain "$file" \| grep '^author-time ' \| awk '{print $2}' \| sort -n))
	count=${#times[@]}

	arian@Arians-MacBook-Pro systemd % awk '{ cmd = "perl -e '\''print scalar localtime(" $1 ")'\''"; cmd \| getline date; close(cmd); print date, $2 }' sorted-times.txt
	Wed Nov 5 21:49:52 2008 src/libudev/libudev-util.c
	Mon Jun 15 13:22:38 2009 src/libudev/libudev.c
	Sat Jul 3 19:48:33 2010 src/core/target.c
	Wed Aug 11 04:38:55 2010 src/initctl/initctl.c
	Fri Oct 8 16:06:23 2010 src/shared/utmp-wtmp.c
	Tue May 24 04:20:35 2011 src/shared/devnode-acl.c
	Fri Jul 22 04:21:18 2011 src/test/test-install.c
	Fri Oct 7 21:06:39 2011 src/libsystemd/sd-journal/lookup3.c
	Tue Jan 10 01:34:15 2012 src/libudev/libudev-queue.c

	{
	"action": "completed",
	"workflow_job": {
	"id": 41546348818,
	"run_id": 14796710445,
	"workflow_name": "CI",
	"head_branch": "main",
	"run_url": "https://api.github.com/repos/MercuryTechnologies/github-actions-skipped-spans-reproducer/actions/runs/14796710445",
	"run_attempt": 13,
	"node_id": "CR_kwDOOjaRi88AAAAJrFr5Eg",

	#!/bin/sh

	set -e

	rm -rf unsigned

	unsigned="file:///$PWD/unsigned"

	# show that content addressed store paths verify without signatures
	ca=$(nix store add-path ./file --store "$unsigned")

	#!/bin/sh
	cat "$(nix-build ci -A eval.full --max-jobs 4 --cores 2 --arg chunkSize 10000)"/outpaths.json \| jq -r '.[]\|values[]\|values' \| sort \| uniq \| cut -c 12-43 \| xargs -P128 -I {} curl --head https://nixos.tvix.store/{}.narinfo

Arian van Putten arianvp

What the heck is /usr/lib/ignition on MacOS

Native Secure Enclave backed ssh keys on MacOS

Asynchronous post-build-hook

What the heck is `/usr/lib/ignition` on MacOS