diff --git a/home/common/core.nix b/home/common/core.nix
index 1e726698..a6eebc42 100644
--- a/home/common/core.nix
+++ b/home/common/core.nix
@@ -37,6 +37,7 @@
     zstd
     caddy
     gnupg
+    duperemove  # find duplicate extents in files and remove them with punch_hole(btrfs)
 
     # productivity
     hugo
diff --git a/home/common/development.nix b/home/common/development.nix
index 69d9e937..6ed0390b 100644
--- a/home/common/development.nix
+++ b/home/common/development.nix
@@ -11,6 +11,7 @@
     # cloud native
     skopeo
     docker-compose
+    dive                 # explore docker layers
     kubectl
     kubernetes-helm
     terraform
@@ -61,15 +62,12 @@
     rustup
 
     # python
-    (python3.withPackages(ps: with ps; [
+    (python310.withPackages(ps: with ps; [
       ipython
       pandas
       requests
       pyquery
     ]))
-    # need to run `conda-install` before using it
-    # need to run `conda-shell` before using command `conda`
-    # conda
 
     # db related
     dbeaver
diff --git a/home/linux/desktop/creative.nix b/home/linux/desktop/creative.nix
index 91e55a37..aa8ed11b 100644
--- a/home/linux/desktop/creative.nix
+++ b/home/linux/desktop/creative.nix
@@ -10,9 +10,11 @@
     # gimp      # image editing, I prefer using figma in browser instead of this one
     inkscape  # vector graphics
     krita     # digital painting
-    kicad     # 3d printing, eletrical engineering
     musescore # music notation
     reaper    # audio production
+
+    # this app consumes a lot of storage, so do not install it currently
+    # kicad     # 3d printing, eletrical engineering
   ];
 
   programs = {
diff --git a/modules/nixos/gui-apps.nix b/modules/nixos/gui-apps.nix
index a01af6dc..ee7991a2 100644
--- a/modules/nixos/gui-apps.nix
+++ b/modules/nixos/gui-apps.nix
@@ -3,14 +3,14 @@
 {
   # this params has problem with home-manager,
   # so defined as NixOS Module here.
-  nixpkgs.config.permittedInsecurePackages = [
-    "electron-19.0.7"  # required by wechat-uos, and it's already EOL
-    "openssl-1.1.1t"   # OpenSSL 1.1 is reaching its end of life on 2023/09/11
-  ];
+  # nixpkgs.config.permittedInsecurePackages = [
+  #   "electron-19.0.7"  # required by wechat-uos, and it's already EOL
+  #   "openssl-1.1.1u"   # OpenSSL 1.1 is reaching its end of life on 2023/09/11
+  # ];
 
-  environment.systemPackages = with config.nur.repos.xddxdd; [
+  environment.systemPackages = [
     # packages from nur-xddxdd
-    wechat-uos
+    # config.nur.repos.xddxdd.wechat-uos
   ];
 
   # flatpack is recommended to install other apps such as netease-cloud-music/qqmusic/...