edit:

I've updated & expanded the list (finished for today)

you are viewing a single comment's thread
view the rest of the comments
[–] 12 points 1 month ago (6 children)

Maybe look into something like impermanence and having root on tmpfs. It’s what made NixOS really “click” for me.

  • source
  • hideshow 6 child comments
  • [–] [S] 2 points 1 month ago (3 children)

    This looks quite interesting but I honestly can't think of any use case where I would find this useful for me. Also this seems like something best to try in VM first. I'll keep this one in a bookmark though, may become useful later. Thanks!

  • source
  • parent
  • hideshow 3 child comments
  • [–] 9 points 1 month ago (2 children)

    impermanence forces you to be intentional with your system, where files are persisted, which is great for: hygiene like feeling like the computer was freshly formatted on each boot; using NixOS as intended by keeping things declarative (in other words, "nixmaxxing"); security also, to a lesser extent tbh, but it'd be protecting against malware nesting at impermanent paths

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 4 points 1 month ago (1 child)

    I get it but for now I find this to be a bit too overly declarative for my taste. For now I'll focus on things that actually matter for my use case but as I've said. I'm bookmarking this to try later in VM.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 1 month ago

    That's what I like about OpenWrt, every update wipes everything but what's explicitly configured. And the first update that doesn't break anything is a rela satisfaction, meaning your whole configuration is contained in a few files listed somewhere

  • source
  • parent
  • [–] 1 point 1 month ago*

    I tried root on tmpfs with Guix once and I kept running into RAM limitations, especially when building large programs. For NixOS, I use BTRFS and their script to clear the root filesystem on reboot (although I had to do some extra steps since I had systemd enabled for initrd)

  • source
  • parent