The short version is it makes your whole system deterministic and auditable, and that does some automatic stuff that is very nice.

Basically you write a configuration for your computer, then it generates atomic images from your config and manages your system for you. You update by generating then switching to the new snapshot. If anything goes wrong, you roll back, and your system is exactly as it was.

The whole system lives as code, it’s tied to git, and up to hardware specific things, I can checkout the exact same system across machines.

This is really great for people like me who dislike having to manage long term state like a grub config change or managing firewall rules or fiddling with committing systemd changes and managing them directly.

The packages are very well thought out.

For example if you add a systemd service it has rules for starting and stopping and the system is smart enough to know when to use them. That makes things like updating a server really nice, it’s just one command and everything is done for you, anything not affected by an update doesn’t restart, so services run smoothly (I have one config that manages all my services, their URL, firewall rules and healthcheck, and automatically adds them to a system monitoring dashboard for example).

As another example I can manage accounts on my system very easily, and I can clean them up by just removing that user from the nix files, and the system will do all the Linux user management stuff for me. This is great on a server where you want limited permissions users running specific applications — I just define what they should have and it works.

That has costs. Everything has to be thought of as either a system package or a user package, updating system packages is always a snapshot change with lock file update. You’re also locked into using nix packages which can lag releases (though this is most package managers).

Your average Arch Linux user probably doesn’t care or like this, they like the full control and flexibility Arch provides (which is just different tastes/philosophies).

You can install user local applications too outside of your main nix configuration (with something like homebrew, which works great on nix), or you can use home-manager to add more nix and manage your apps and generate user account dot files files.

You can also use nix-env to create reproducible software builds without containers, but I find it a little heavy to manage and haven’t learned it.

Ohh I have an old i9 intel MacBook I could migrate to do this…

Only had 512gb though, it’s an old dev machine.

How’s the Linux support on it? Since it’s all thunderbolt ports I’m wondering how well it works.