Tag
This article details a method for passphrase-less server reboots on NixOS using kexec, enhancing security and reducing reboot time for encrypted systems.
The article explores using NixOS to inspect and manage systemd schedules at build time for self-hosted services, enhancing runtime checks.
nixpkgs-multiverse is a Nix flake that provides access to every version of every package that ever existed in Nixpkgs, allowing users to easily pin and mix historical package versions without multiple flake inputs.
This open-source project enables Nix and NixOS on the NVIDIA DGX Spark, providing USB boot images and a NixOS module for configuring the hardware.
This talk explains how to use Nix to achieve full reproducibility from development environments, builds, to cloud deployments, and showcases Antithesis's Nix-based "command set" framework as a replacement for messy scripts.
This article argues that secrets should not be stored in configuration files, using an audit of NixOS modules to show that a quarter of them require workarounds to separate secrets from config. It advocates for dedicated runtime channels for secrets.
The author recounts the failure of their Raspberry Pi home server's SD card and their process of rebuilding with a focus on minimizing writes and improving redundancy using NixOS, zram, and external backups.
Spindle introduces a new microVM engine that runs each workflow in its own lightweight virtual machine, supporting NixOS configuration, Docker builds, and caching for fast subsequent runs.
The author describes migrating their homelab from Proxmox to NixOS with Incus, highlighting the benefits of declarative configuration and reproducibility over imperative systems.
A guide on building minimal NixOS ISOs and reducing their size, with comparisons to Alpine Linux and step-by-step optimization techniques.
machine0 is a CLI tool for provisioning persistent NixOS and Ubuntu VMs with dedicated resources, static IPs, per-minute billing, and features like suspend/resume and golden images.
Sécurix is a NixOS-based secure operating system developed by the French digital department (DINUM) for hardened environments with strong isolation, reproducibility, and policy-driven configurations, currently in alpha.
NixOS 26.05 'Yarara' is released, featuring systemd in initrd, GNOME 50, deprecation of x86_64-darwin, and thousands of package updates.
The NNN Stack combines NixOS, Niri compositor, and Noctalia shell to create a declarative, scrollable, and reproducible desktop environment, inviting users to contribute their dotfiles.
A developer shares a technique for symlinking dotfiles on NixOS using systemd-tmpfiles, without relying on home-manager or additional tools.
This article introduces Lanzaboote, a UEFI UKI stub written in Rust that enables Secure Boot support for NixOS. It solves NixOS-specific boot challenges by deferring signature checking to UEFI while keeping kernels and initrds separate from the UKI binary.
A tutorial explaining secrets management options for NixOS, comparing tools like sops-nix, agenix, and ragenix, with practical examples of using sops-nix for encrypted secrets management.
The article advocates for mandatory version stamping in all software programs to improve incident response, using the i3 window manager's version reporting system as a case study, and covers implementation details with Go and NixOS.
A technical guide on using microvm.nix on NixOS to create ephemeral VMs for safely running coding agents without access to personal files.
The author re-evaluates the usability of Wayland on Linux in 2026, noting improvements but persistent issues with NVIDIA drivers and 8K monitor support, making it still not ready for their setup.