Using Nix in Production and Designing for Impermanence

Can we build an indestructible server that stands up to the test of giving out root login to the Internet?

Sponsored By:

• Tailscale: Tailscale is a Zero config VPN. It installs on any device in minutes, manages firewall rules for you, and works from anywhere. Get 20 devices for free for a personal account.
• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.
• Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn’t trusted and secure, it can’t log into your cloud apps.

Support LINUX Unplugged

Links:

• 🎉 Alby — Boost into the show, first grab Alby, top it off, and then head over to the Podcast Index.
• ⚡️ LINUX Unplugged on the Podcastindex.org — You can boost from the web. Once Alby is topped off, visit our page on the Podcast Index.
• Spokane Linux Love, Sat, Sep 16, 2023, 1:00 PM | Meetup — It's finally happening! Let's get together at Iron Goat Brewing.
• Best laptops for NixOS - Help - NixOS Discourse
• Mobile NixOS
• Devices List — Mobile NixOS
• Iron Goat Brewing
• LinuxFest Northwest 2023 Sponsorship Prospectus — LinuxFest Northwest 2023 will be held October 20-22, 2023 at Bellingham Technical College. The Fest is a free and open community event dedicated to provide and support educational activities related to Linux and Open Source Software.
• NixOS friendly hosters - NixOS Wiki
• Install and Configure NixOS on a Linode | Linode Docs
• Star-History — We know, you can't fully trust a project's GitHub stars alone. It is, however, a good way to determine if a tool is an adequate one and if it's likely to grow, if you use it correctly.
• disko — NixOS is a Linux distribution where everything is described as code, with one exception: during installation, the disk partitioning and formatting are manual steps. disko aims to correct this sad 🤡 omission.
• nixos-anywhere — You can then initiate an unattended installation with a single CLI command. Since nixos-anywhere can access the new machine using SSH, it's ideal for remote installations.
• Immutable infrastructure for mutable systems — I erase my systems at every boot.
• NixOS Series 4: "Stateless" Operating System — Here's the question: is it really necessary to store the contents of /etc on the disk drive? They're going to be regenerated on each reboot or config switch anyway.
• NixOS ❄: tmpfs as root — One fairly unique property of NixOS is the ability to boot with only /boot and /nix. Nothing else is actually required. This supports doing all sorts of weird things with your root file system.
• Nixos and Erasing My Darlings
• Impermanence - NixOS Wiki — Impermanence in NixOS is where your root directory gets wiped every reboot (such as by mounting a tmpfs to /). Such a setup is possible because NixOS only needs /boot and /nix in order to boot, all other system files are simply links to files in /nix. /boot and /nix still need to be stored on a hard drive or SSD.
• impermanence: Modules to help you handle persistent state on systems with ephemeral root storage [maintainer=@talyz]
• Example ZFS + tmpfs root configuration
• NixOS on Btrfs+tmpfs
• A plan to stabilize the new CLI and Flakes incrementally — Ever since the closing of RFC 49, we've had the new CLI and Flakes marked as experimental, with no clear plan forward.
• project Stratis
• Backups - Perfect Media Server
• Podverse GitHub — Podverse has a bounty out for Android Auto.
• Jay Sam Bee in Philadelphia NixOS Bounty — Jay has a bounty for getting Wallabag on NixOS.
• Self-Hosted 102: NixOS is a bit Flakey
• completenoobs.com
• OpenStreetMap.org — OpenStreetMap is a map of the world, created by people like you and free to use under an open license.
• OSMand.net
• OSM is an extensible editor for ​OpenStreetMap
• OSM is an extensible editor for ​OpenStreetMap
• Street­Complete — Help to improve the OpenStreetMap with StreetComplete!
• nixpkg.py