i’m very confident in my #nix (os) skills on the server (running three #homelab servers on it). however, never really used it on the mac. recently been thinking whether it would be worth migrating my homebrew file from my dotfiles repo over to some nix config. anyone using it that way or has links/ opinions?

A new module is available: 'programs.herdr'. Herdr is a terminal workspace and agent manager. The new module lets you install it and declaratively configure its TOML config file.
#NixOS #Nix #HomeManager

GuixPkgs: every Guix package, as a Nix flake via @pbsds https://lobste.rs/s/rm7qnt #nix
https://fzakaria.com/2026/06/25/guixpkgs-every-guix-package-as-a-nix-flake

Oh great, nixos-rebuild tried to be smart again. You apparently need to keep a dirty worktree of the root git project or it'll clone all of the submodules from github (once you found the changelog where it tells you how to enable submodule support).

Why can't you just be normal?

I used relative paths for a reason. I didn't want you to download it from github each time. The local repo is the authoritative one...

Edit: or deleting the remote from the git repo, that also worked

#nixos #nix

[lien] Arcanesys - Gestion de flotte NixOS en GitOps signé #gik #git #nix

A new module is available: `programs.hyprland-qt-support`. This module enables Hyprland Qt support — a Qt6 QML style provider for hypr* apps. It can be configured through the `settings` attribute.
#NixOS #Nix #HomeManager

#NixOS #Nix

The `programs.firefox.globalExtensions`, `programs.floorp.globalExtensions`, and `programs.librewolf.globalExtensions` options now assert that the browser package is managed by Home Manager. On Darwin, setting `programs.<browser>.darwinDefaultsId` also satisfies this requirement. If you used `globalExtensions` with `package = null`, set `package` to a non-null browser package or switch back to `profiles.<name>.extensions.packages`.
#NixOS #Nix #HomeManager

I have a PoC patch to fix this, if you are on #nix or #nixos, you can likely just use this flake: https://github.com/krisztianfekete/clipway

What's the general opinion of the #Nix community on hardening systemd services? Aka. adding isolation and restriction properties?

Is there a reason it is currently not that commonly done? Would PRs in that regard be appreciated or would it just be dismissed?

#systemd #NixOS

The 'programs.uv' module can now manage uv-installed Python versions and tools declaratively. Use {option}`programs.uv.python.versions` to install Python versions (with {option}`programs.uv.python.default` selecting the default interpreter per implementation) and {option}`programs.uv.tool.packages` to install tools. Unpinned entries track the latest release on each activation, while pinned ones (e.g. `"3.12.4"` or `"black==24.1.0"`) stay put. Set {option}`programs.uv.python.prune` or {option}`programs.uv.tool.prune` to make the managed set fully declarative, removing versions and tools that are no longer listed.
#NixOS #Nix #HomeManager

The `programs.codex.plugins` and `programs.codex.marketplaces` options were added to configure Codex plugins and local plugin marketplaces declaratively.
#NixOS #Nix #HomeManager

Nix Tip:

        registry.unstable.to = {
          type = "github";
          owner = "NixOS";
          repo = "nixpkgs";
          ref = "nixos-unstable";
        };
        registry.master.to = {
          type = "github";
          owner = "NixOS";
          repo = "nixpkgs";
          ref = "master";
        };

Works, but if you already have them pulled into your flake

        registry = {
          unstable.flake = inputs.nixpkgs-unstable;
          master.flake = inputs.nixpkgs-master;
        };

Is both faster for you, and nicer for github.

#Nix #NixOS

@xcabal05 I'm in the first batch and haven't gotten mine yet. I'm a fulltime #SailfishOS user since its beginnings though and I am happy thus far. It's a real Linux in the pocket, terminal, ssh, #nix, etc. which is what matters to me. The Android apps I need work fine. But expect annoyances here and there. I really hope the new phone fixes annoyances I have with my Sony Xperia 10iii now. Most notably the camera sometimes not saving photos or videos and network switching wrecking connectivity.

So, I gave #devenv a try.

I'm used to work with #nix #flakes but I have to admin the devenv.nix file is less cluttered which lead to a better UX. But this comes at the cost of an extra devenv.yaml file. Why not, not a fan, but it works.

But, while #devenv configs are composable locally, they can't import a remote config as #flake does.

Also, `devenv shell` breaks my #tmux / #nvim setup where my #flake works like a charm.
So, yeah, I'll keep my #flake for now.
At work and at home.

CC @Ilygad

NixOS - Das Multi-Host-Setup individualisieren

In meinem letzten Beitrag der NixOS-Reihe zeige ich, wie man einen einzelnen Rechner aus dem gemeinsamen Setup herauslöst und individuell konfiguriert – ohne die anderen Rechner auch nur zu berühren.

#NixOS #Nix #Flakes #Nix_Store #Linux

https://gnulinux.ch/nixos-das-multi-host-setup-individualisieren

A new module is available: `programs.pi-coding-agent`. The module supports declarative configuration of Pi Coding Agent including settings, keybindings, models, and global context (AGENTS.md). For MCP server support, use the existing `programs.mcp` module which writes to `~/.config/mcp/mcp.json`.
#NixOS #Nix #HomeManager

The `programs.gemini-cli` module has been renamed to `programs.antigravity-cli`. Existing `programs.gemini-cli` configurations are migrated automatically and emit rename warnings. The Antigravity CLI module writes settings and permissions to `~/.gemini/antigravity-cli`, MCP server configuration to `~/.gemini/config/mcp_config.json`, and skills to `~/.gemini/config/skills`.
#NixOS #Nix #HomeManager

NixOS - Major-Upgrade, Pakete aus 'unstable' einbinden und "Wegwerf-Pakete"

Ein Major-Update steht an. Zudem binden wir Programme aus dem Rolling-Release-Zweig ein – und nutzen Software, ohne sie überhaupt zu installieren.

#Nix #NixOS #Flakes #Linux

https://gnulinux.ch/nixos-major-upgrade-unstable-wegwerf-pakete

NixOS - Multi-User-Setup einrichten

Weitere Benutzer werden anlegt – am Beispiel eines Gastnutzers und einer neuen regulären Benutzerin. Nebeneffekt des heutigen Setups: Heute wird nochmal ganz klar, welche "Nixe" für was zuständig ist.

#Nix #NixOS #Flakes #Linux

https://gnulinux.ch/nixos-pakete-aus-unstable-einbinden-und-quot-wegwerf-pa

@nobodyinperson

Ok, but this probably is really the best I can do to simplify it.

But I'm not sure if it is a good idea to use something called "legacyPackages".

(Also just a disclaimer I don't really fully understand what I'm doing here. But it works, so...)

#NisOS #Nix

Alt...

{ description = "Nix dev environment"; inputs = { nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11"; }; outputs = { nixpkgs, ... }: { devShells = nixpkgs.lib.genAttrs nixpkgs.lib.systems.flakeExposed ( system: { default = nixpkgs.legacyPackages.${system}.mkShell { nativeBuildInputs = with nixpkgs.legacyPackages.${system}; [ git git-lfs yq jq python313 python313Packages.pip python313Packages.setuptools python313Packages.wheel python313Packages.cython python313Packages.ansible-core python313Packages.pyyaml python313Packages.jinja2 python313Packages.pyopenssl python313Packages.requests python313Packages.libselinux python313Packages.netaddr ]; }; } ); }; }

Just learned that you can use #NIX to build #OCI containers. To be fair the format appears to be a bit unintuitive at first sight, but I guess I'll give it a try soon anyway.

Alt...

# docker.nix { pkgs ? import <nixpkgs> {} }: pkgs.dockerTools.buildImage { name = "my-dev-env"; tag = "latest"; copyToRoot = pkgs.buildEnv { name = "image-root"; paths = [ pkgs.python311 pkgs.git pkgs.nodejs pkgs.bashInteractive ]; }; config = { Cmd = [ "${pkgs.bashInteractive}/bin/bash" ]; Env = [ "MY_VAR=hello" ]; }; }

But sadly none of this helps me understand what the c'n'p-crimes I've committed here a few months ago and what that first github repo it references is or why it is needed :D

(note, this is a shell.nix though)

#Nix #NixOS

Alt...

{ description = "Nix dev environment"; inputs = { flake-utils.url = "github:numtide/flake-utils"; nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11"; }; outputs = inputs@{ self, ... # Populate the inputs variable with all of its members }: inputs.flake-utils.lib.eachDefaultSystem (system: let pkgs = import inputs.nixpkgs { inherit system; config.allowUnfree = true; }; in { devShell = pkgs.mkShell { # packages = [ # pkgs.python3 # ]; nativeBuildInputs = with pkgs; [ git git-lfs yq jq python313 python313Packages.pip python313Packages.setuptools python313Packages.wheel python313Packages.cython python313Packages.ansible-core # python313Packages.ansible-lint python313Packages.pyyaml python313Packages.jinja2 python313Packages.pyopenssl python313Packages.requests python313Packages.libselinux # pip package is just called "selinux" python313Packages.netaddr ]; }; }); }

Ivre, il lança `nix flake update` sur le wifi du camping.

#nix

NixOS - Codeberg-Kommunikation optimieren und Troubleshooting

In diesem Teil optimieren wir die Kommunikation mit Codeberg, so dass keine Passwörter mehr eingegeben werden müssen. Git- und Codeberg-Troubleshooting inklusive.

#Nix #NixOS #Flakes #Git #Codeberg #Linux

https://gnulinux.ch/nixos-multi-user-setup-einrichten-und-die-kommunikation-mi

New work laptop acquired, a Thinkpad T14 with AMD CPU and 64GB RAM.

Installed #nixos with Gnome and it's working fine.

Only glitch so far is that the NFC hardware causes a core to spin at 100% with a little IRQ storm, but I don't need that so I just BIOS disabled it and it's all good now.

Configuration based Nix seems easy enough to install everything I wanted... Except...

I need to get two things running to be compliant with corp policies and both lack #nix packages.

The first is Kolide, but it looks like there's a nix flake for that... So I'll need to use flakes even though I wasn't intending to.

The second is fleetdm and I need fleetd, for which there's no package, but fleetctl is packaged and can build fleetd, so I guess that's the route... But it immediately means part of the system won't be managed by nix and I don't know if I like that... I guess it's doable, just dirty.

Overall though... This laptop is nice, the newer gnome is nice, nixos is nice.

NixOS - Setup-Guide, Teil 3

Im abschließenden Teil zeige ich, wie man in nur je 30 Minuten weitere eigene Rechner mit der vorhandenen NixOS Konfiguration von Null an aufsetzt und mit Codeberg synchron hält.

#Nix #NixOS #Flakes #Linux

https://gnulinux.ch/nixos-setup-guide-teil-3

I hate NixOS but I love NixOS.
So i wrote a Blogpost to explain.

And no it is not just "i can never leave NixOS"
it is actual critique and i am probably gonna leave NixOS

Here is the Blogpost why that is

Though it is super long with an expected reading time of almost 20min if you go purely by WPM

I hope you like it and it is understanable. I appreciate all thoughts!

If you like that one: check out my website in general i bet you will find more things you like :3

#nix #nixos #nixoslove #linux #blog #blogpost

NixOS - Setup-Guide, Teil 2

In diesem Teil geht es darum wie Starkoch NixOS wirklich zum Sternekoch wird. Wie man die Integration anderer Köche vorbereitet und wie die Speisekarte gesichert wird.

#NixOS #Nix #Flakes #Linux

https://gnulinux.ch/nixos-setup-guide-teil-2

😑 seriously?

#nix #nixos

Alt...

GitHub screenshot, NixOS/nix repo, showing "A user you've blocked has previously contributed to this repository", namely Claude

Would be really great if

> nix run codeberg:user/repo

was possible. It works for #GitLab and #GitHub already. #Codeberg should also work. Instead, one needs to write this unergonomic thing:

> nix run git+ssh://git@codeberg.org/<user>/<repo>

EDIT: You could upvote this feature request: https://github.com/NixOS/nix/issues/14064

#nix #nixos

Security Advisory: Local privilege escalation in Lix and Nix https://lobste.rs/s/g0crsm #nix #security
https://discourse.nixos.org/t/security-advisory-local-privilege-escalation-in-lix-and-nix/77407

#Arch #NixOS #Nix #Linux #Memes

Alt...

Arch Logo looking at Nix Look at me says the Nix I am the btw now.

A new `home.services` namespace has been added for nixpkgs modular services. Service modules shipped with packages (i.e. `pkgs.<name>.passthru.services.default`) drop in unchanged and are lifted to user systemd units. See the "Modular Services" chapter in the manual for details.
#NixOS #Nix #HomeManager

"nix" on Fedora Linux 44. What a time to be alive 😀

#linux #fedora #fedora44 #nix

NixOS - Setup-Guide, Teil 1

Das ist der Auftakt zu einem dreiteiligen Set-up-Guide. Es geht bei Null los und endet in einem Multi-Host-Set-up. Im Teil 1 beschreibe ich die NixOS-Idee, also den brillanten Paradigmenwechsel, sowie erste Schritte für Ein- und Umsteiger.

#NixOS #Nix #Flakes #Linux

https://gnulinux.ch/nixos-setup-guide-teil-1

A new module is available: 'programs.github-copilot-cli'. GitHub Copilot CLI brings the agentic Copilot coding experience to the terminal. The module manages the `~/.copilot/config.json` settings file (model, theme, trusted folders, hooks, feature flags, etc.) and the `~/.copilot/mcp-config.json` MCP server registry. Setting `enableMcpIntegration = true` reuses servers defined under `programs.mcp.servers`, with `programs.github-copilot-cli.mcpServers` taking precedence.
#NixOS #Nix #HomeManager

The `programs.thunderbird.languagePacks` option has been added to install and activate Thunderbird language packs. The `programs.thunderbird.policies` option has also been added to configure Thunderbird enterprise policies. These policies can install Thunderbird add-ons through `ExtensionSettings` and configure other supported application behavior. Thunderbird now supports accounts configured with `accounts.email.accounts.<name>.ews`, including the `outlook.office365.com-ews` flavor for Office365 Exchange accounts.
#NixOS #Nix #HomeManager

#SoftwareHeritage, #Nix, and #Guix cited as tools to improve the #reproducibility of research artifacts:
https://cacm.acm.org/news/is-there-a-way-to-solve-the-reproducibility-problem/

An attempt at #nix​ifying udev rules:

https://gitlab.com/nobodyinperson/yannix/-/blob/main/OPTIONS.md#servicesudevsimplerules

#nixos

Is NixOS a good first distro?

(By all means, explain your reasoning as to why or why not below.)

#NixOS #Nix #Linux

[lien] cloud-gouv/securix: Sécurix is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong isolation, reproducibility, and policy-driven configurations to ensure operational security and compliance. #security #gik #nix

@vivekanandanks Great, we need more good #nix content out there. Youtube is overrun by AI slop (and it's ridiculously hard on the webapp to ignore such channels). I'm on https://tube.tchncs.de for my videos.

[lien] Mon expérience avec le « vibe coding », par Gabriella Gonzalez - Flux Intelligence artificielle Developpez #fanboys #gik #dev #nix #ai

#nix #linux 👍🏻

@tux Nein, das wird nur der #nix Paketmanager sein. Aber das öffnet die Tür zu #homeManager, also einem "Mini-NixOS" nur für den User. Da kann man auch schon einiges mit erreichen.

#Nix Paketmanager kommt für #Fedora 😯

Hat das Teil den selben Funktionsumfang wie bei #NixOs ?

z.b. User anlegen, Firewall steuern usw?

https://fosstopia.de/fedora-44-beta/

Guix System - One Month Later https://lobste.rs/s/koymkj #lisp #nix
https://nemin.hu/guix-one-month-later.html

Wrote my first #Rust program today. A small utility to grab the last value of a matching column in a matching csv file. I had hacked something together with #qsv, #nushell and #python, but those were all too slow for fast repeated calls. This Rust version executes 10-100x faster: a few ms on a #RaspberryPi 4, neat! 👌

Rust and #nix is also a match made in heaven, omg is the experience better than Python 🫠

$ csvget scd30 co2
940.66

TIL that in #nix, "${./mydir}" will survive a garbage collection, but a plain ./mydir will not!

Took me way too long to figure this out. Didn't help that `just` gives a stupid error message about a missing shell when it can't change into its -d working directory. 🤦

https://github.com/casey/just/issues/2705