When offered the option to run other people’s code, a prime
consideration is often ease of deployment. While much progress has been
made in support of rapid deployment, the security implications of those
quick deployments is often overlooked. In this post, we look at a new
feature of guix time-machine and guix pull in support of one-line
deployment commands : the ability to download channel files, but without
compromising on security. Sharing code The normal workflow to share software and make it easily deployable with
Guix goes like this: someone puts their packager hat on and…
While Guile Scheme has a lot of hidden gems, like (ice-9 peg), parsing command line arguments is not one of its strengths in my opinion. Even if there are many powerful approaches to structured argument parsing, there is no API simple enough for me to know it by heart (as opposed for example to Python ArgumentParser).
On the internet, anyone can make a request to your web
service. Especially in this time of abusive web crawling linked to
AI/LLM companies, it's essential to program in a defensive style and
stay in control, even when faced with a volume of requests that can't
be handled.
Over the past week or two I've been working on a new web framework for
Guile. This is based on the knowledge I've accumulated over the past 7
years working on things like the Guix Data
Service, Guix Build
Coordinator and Nar
Herder, but also based on their
code, as I've used Claude Code running Claude Opus 4.6 to build this
(a large language model).
I've got a new homeserver/NAS (Network Attached Storage), previously I
was using some Raspberry Pis, but I've wanted for a while a low power
board that has SATA ports for attaching hard drives and one that could
run GNU Guix, and the ZimaBoard 2 looked like it might be a good option.
About
Planet Guix is a meta-blog that collects posts from the blogs of various Guix hackers and contributors.