NixOS flakes, OpenWrt hardware, and Fedora mail

NixOS and OpenWrt discussions led the day with flake input guidance and fresh hardware support. Fedora mail changes, a BuildKit security note, and a heated packaging debate rounded out the traffic.

Prefer nixos.org tarballs for flake inputs

A PSA on the NixOS Discourse recommends channels.nixos.org tarballs over GitHub sources for flake inputs. The advice cites smaller size, independence from GitHub, and improved command-not-found behavior. Flake maintainers should care because the switch can cut download bulk and rate-limit friction.

OpenWrt snapshots gain GL.iNet BE10000 support

OpenWrt snapshot support has been merged for the GL.iNet BE10000 Slate 7 Pro, built on the MT7987A with Wi-Fi 7 and 6 GHz. Forum posts note that touchscreen and panel UI work is still underway. Users tracking Wi-Fi 7 routers now have a mainline path for this model.

Shunt policy routing merges into OpenWrt

The resolver-agnostic policy routing package shunt has been merged into OpenWrt master after forum review. It steers traffic without regard to which DNS backend is running. Operators who mix DNS stacks gain a cleaner policy layer without backend lock-in.

Fedora plans around Gmail send-as removal

Fedora developers are discussing Gmail's coming removal of send-as support for @fedoraproject.org addresses. The thread weighs running an authenticated SMTP relay as a project-side fix. Contributors who send Fedora mail through Gmail need to adjust before the cutoff.

Nixpkgs tracks BuildKit restricted-file CVE

A nixpkgs issue tracks upstream BuildKit CVE-2026-33748, where a Git URL subdir component can expose restricted files. Discussion is still thin on the tracker. Users of BuildKit-backed Nix or container builds should watch for fixed package revisions.

Omniflake bundles twelve thousand flakes

Omniflake offers one input that aggregates roughly 12 thousand GitHub flakes. Early reports cite large lockfile reductions and fewer GitHub rate-limit hits. Maintainers drowning in flake inputs may simplify dependency graphs with the aggregator.

OpenWrt support work for GL.iNet Flint 4

OpenWrt forum contributors continue work to support the GL-BE14000 Flint 4, with attention on missing PHY drivers and safe flashing methods. The thread remains active and technical. Prospective owners should wait for clearer flashing guidance before installing.

Omarchy packaging debate turns on politics

A NixOS Discourse request to package Omarchy shifted into a heated dispute over associating with DHH and his user base given political views. Participants remain split on whether such association belongs in packaging decisions. Contributors following the packaging request will find the thread now centers on that conflict.