Evan Jarrett's Avatar

Evan Jarrett

@evan.jarrett.net

DevOps Engineer. Working on @atcr.io #kubernetes #homelab enthusiast Husband of @jarrett.mom North TX πŸ’™

130 Followers  |  173 Following  |  205 Posts  |  Joined: 08.06.2023  |  2.6002

Latest posts by evan.jarrett.net on Bluesky

Nerd sniped me into researching this a bit
But I’m the Kubernetes container guy. Nix is out of my expertise lol.

24.01.2026 04:17 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

This was my last year, I’m down to spam, and a few accounts that won’t let me change emails without contacting support.
Still obviously use it for YouTube. I pretty much avoid places that do not provide email based sign in now. Set up wildcard aliases so you can marcospizza@mycoolemail.com

21.01.2026 18:02 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0
screenshot of workflow logs from tangled.org

screenshot of workflow logs from tangled.org

⚠️ did you just echo your API_KEY in your workflow?

spindles will now automatically erase secrets from logs! rest assured, your API key will not be beamed to the world.

big thanks again, to @evan.jarrett.net for the contribution!

4/7

21.01.2026 15:25 β€” πŸ‘ 46    πŸ” 3    πŸ’¬ 1    πŸ“Œ 0
screenshot of a tangled workflow file

screenshot of a tangled workflow file

✳️ we now inject common env vars into workflows ✳️

no more munging git output, just use TANGLED_COMMIT_SHA or TANGLED_REF_NAME instead!

see the full list of variables on the docs: docs.tangled.org/spindles.htm...

big thanks to @evan.jarrett.net for the proposal & the implementation!

3/7

21.01.2026 15:25 β€” πŸ‘ 47    πŸ” 3    πŸ’¬ 1    πŸ“Œ 0

Dpop demon hunters

18.01.2026 03:35 β€” πŸ‘ 20    πŸ” 5    πŸ’¬ 0    πŸ“Œ 0

Waiting for the leaflet.

17.01.2026 01:02 β€” πŸ‘ 3    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

I have a similar problem with building a docker credential helper. I currently do confidential client flow on the appview, and create jwts for docker. I think ideally id want to have the helper be a conf client. That way keys for it don’t leave your machine.

16.01.2026 15:25 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Yeah so this made me look deeper into how I (and claude) am using indigo... turns out half of it is just raw http requests.

15.01.2026 04:01 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

I was about to say I hadn't ran into this, but I looked and I guess I gave up and just did a GET on the xrpc directly instead of using indigo lol.

15.01.2026 03:41 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

I would be totally down with those banners as long as donating actually removed them.

dev.pdsls.donated:true

13.01.2026 02:00 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

So after a quick look, basically in one spot I was ingesting records where I shouldn’t have which partially created some appview DB entries.
And indigo has a way to verify the records, but I wasn’t using it because didn’t think I needed it until now…

13.01.2026 01:53 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

I'm clearly seeing this DID in the logs, and its acting like a profile record partially exists for it. could be from before they suffixed the records.
Its not breaking anything, but something is still getting ingested and so its just now something I have to review.

12.01.2026 19:12 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

I also can't obviously prevent you, or others from making broken records. I'm clearly going to have to be better about validating what I'm ingesting now.

12.01.2026 18:55 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

i don't really care if you re-publish in lexicon.schema although it seems redundant.

But creating metadata records on our namespaces can cause problems when we try and ingest our records.
you could have created store.lexicon.status.io.atcr.* if you wanted individual records for each.

12.01.2026 18:47 β€” πŸ‘ 5    πŸ” 0    πŸ’¬ 2    πŸ“Œ 0

I wish you wouldn't have created random records on our NSIDs for this and instead prefixed them with store.lexicon.*

For example, what happens if I now create an io.atcr.log schema? does it collide with the record you created in the PDS already?

On a related note: pdsls.dev/at://did:web...

12.01.2026 17:41 β€” πŸ‘ 6    πŸ” 0    πŸ’¬ 3    πŸ“Œ 0

Wait this is silly the whole point of publishing them is for them to be discovered lol.
Noticed what seem to be xrpc endpoints in this list too? I didn’t realize it was standard to publish those

08.01.2026 17:53 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

bsky.app/profile/evan...

07.01.2026 03:22 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Pagination bug :/ apparently when you have over 50 users you need to loop more, who would have thought.

06.01.2026 15:57 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Have you tried just hitting the breakers and seeing which circuit it’s on? Might help you figure out where it’s powered from.
If it’s a timer, it should be accessible somewhere.

06.01.2026 01:31 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

I had thought of this too. but was thinking they could have turned into tennis balls

05.01.2026 19:03 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Should be able to:
git config β€”local user.email

04.01.2026 00:57 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

I now deployed what should hopefully be the fix for this.

03.01.2026 23:41 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Merged.
Reminder to set your email address used for git in tangled settings so that commits are linked with your account.

03.01.2026 23:29 β€” πŸ‘ 3    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

I didnt deploy, i just tried clearing the cache.
The tldr is a race condition in the permission check causes you to get backed-off.
But you hit the race condition again.

I’m surprised i haven’t hit this issue in testing. but @besaid.zone hit this yesterday too.

03.01.2026 22:06 β€” πŸ‘ 1    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

Should be able to try again now.

03.01.2026 21:44 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

My initial thought is they all probably use to be brighter, and they are all dim now with age and weather…
Yours was just the first to go out.
Whats the point of a light that is super dim?

03.01.2026 05:30 β€” πŸ‘ 0    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

Ok I know they gave us like a week of bonus time, but i swear I’m hitting the limit more the last 2 days than i ever had

02.01.2026 23:19 β€” πŸ‘ 3    πŸ” 0    πŸ’¬ 0    πŸ“Œ 1

Under β€œGot any good client metadata examples” realized i wasn’t specific until as i pressed reply

02.01.2026 22:27 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 1    πŸ“Œ 0

The link to leaflet seems to be missing the h in https.

Also I have an example that uses permission sets atcr.io/oauth-client...

02.01.2026 22:23 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 2    πŸ“Œ 0

Classic Claude still wanting to use β€œFederated with the Bluesky network”
But this an awesome idea. I’ll probably take it for a spin this week

23.12.2025 13:48 β€” πŸ‘ 2    πŸ” 0    πŸ’¬ 0    πŸ“Œ 0

@evan.jarrett.net is following 20 prominent accounts