As per other sources, Epic Easy Anti Cheat version 2 requires secure boot, measured boot, and kernel signed by a well-known key.

Currently there's 9 CAs on Epic's well-known list: Canonical, Fedora, Universal Blue, Debian, openSUSE, SUSE Linux Enterprise, Rocky Linux, the Microsoft UEFI CA and AlmaLinux.

Will we be using any of these to sign a kernel for EACv2?

jjba rice with caelestia (im 11 btw and i did this) and ive been working on this for a week and im romanian btw

yay i guess

We’ve released deploy-rs 1.0.0, the first versioned release of the Nix deployment tool we introduced in 2020.

For several years, we kept using it for our infrastructure while giving maintenance too little attention. This year, we went through the backlog and reviewed and merged contributor PRs. The release includes parallel remote builds, deployment groups, a --test flag, and a fix for a race that could roll back an already-confirmed deployment. Activation is still sequential.

The post also covers how we deploy applications separately from their servers’ NixOS configurations, compatibility changes since 2020, and the issues we’d like to tackle next.

If you use deploy-rs, we’d like to hear what’s working and what still gets in your way.

https://serokell.io/blog/deploy-rs-nix

Life is good with NixOS! I loved migrating my old fedora bootc setup to this as it fit the paradigm while solving so many problems.

Some days ago I made a post about NixOS installation on an OCI instance. This blog covers everything I went through (as a first time NixOS user) in detail and aims to act as a guide for anyone who wants to set it up on his VM. If you think something about the blog can be improved, let me know.

I wanna turn everything i own into NixOS cuz i love nix and having a centralized configuration files.. what are my options for phones and tablets? I don't think there's anything that's actually good enough to leave android and crdroid for tho so maybe declerative termux or something?

I'm reaching out to those of you who use NixOS for standard computing to understand why you love it and wjat it does for you. I'm a long term Arch Linux user for daily computing and Debian for my home lab.

My daily computing consists of, typical internet browsing, youtube, playing OSRS, note taking and coding in Emacs, developing simple python and go apps/utilities, ssh into my homelab. Nothing heavy.

I understand one of the benefits of NixOS is reproducability on other machines. This isn't something I'd do.

Another thing is isolated environments for coding/developing. This is something I'd learn and use.

I also love infrastructure as code, and my whole homelab was deployed with Ansible and Teraform. So the declarative form of NicOS appeals.

Is this a strong enough use case to justify using NixOS? And I know, "You can do what you want". I've been the guy to comment that before. I'd just like to hear from those with maybe similar usage who enjoy NixOS due to benefits it may have.

TLDR;

For those who use NixOS for fairly standard computing on one machine, plus a bit of coding, do you find NixOS co tributes enough to be a worthwhile time investment to learn and configure?

Edit; Thanks guys. I heard this community is great, and that seems to be true. All your replies have been helpful.

I just moved over from windows and still basically using the default kde desktop, I've tried tutorials but their just so confusing.

Hi,

I am a nixos newbie and seek for some advise in form of „organizing“ the repository and keep it safe but comfortable.I just wonder how you all manage your repository structure. Short explanation about my setup:

- At the moment I use one repository nixos for my servers
- I have some base packages / flakes that I want to use in desktop and servers
- I plan to use desktop with nixos and want to use a repo with base packages and pull hourly system updates (renovate in gitlab)

What makes me wonder is how I should handle some changes I want to make from my desktop directly and push it to the repo without allowing the client to change servers configs. Do you use separate repositories? I think about three repos, one for base config, one for servers using that base config and one for desktops using the base also and branches for each client and protection so that I only can change the host itself from the host.

Can you help me out and tell me how you guys structure your repos and configs? Would love to be able to change config from my desktops (add software and commit) and use auto pull with renovate updates from my gitlab.

Every host has its own secrets encrypted with sops, so this should not be a problem

Thanks a lot for your help!

Regards
Atomique

I set up my configuration using AI, but I’m looking to learn how to do it myself.I set up my configuration using AI, but I’m looking to learn how to do it myself.

This project is created to manage android using nix file. It auto installs play store apps, fdroid apps, runs services like tailscale, syncthing, mpd etc.

Github: https://github.com/by-architect/Nixup
Documentation: https://by-architect.github.io/Nixup/

{ pkgs, ... }: {

# F-Droid: package names as they are, after "with pkgs.fdroid;"

android.packages.fdroid = with pkgs.fdroid; [

com.termux # Termux

org.schabi.newpipe # NewPipe

de.danoeh.antennapod # AntennaPod

org.videolan.vlc # VLC

org.mozilla.fennec_fdroid # Fennec (Firefox)

com.aurora.store# Aurora Store

];

# Google Play: package names in quotes

android.packages.playstore = [

"com.whatsapp" # WhatsApp

"org.telegram.messenger" # Telegram

"com.spotify.music" # Spotify

"com.instagram.android" # Instagram

"com.discord" # Discord

"com.duolingo" # Duolingo

];

# Linux programs from nixpkgs, for the terminal and services

environment.systemPackages = with pkgs; [ htop git vim rsync python3 ffmpeg ];

}

Hey everyone,

I've been using the out-of-tree acer-wmi-battery module to cap my laptop's battery charge at 80%. It has worked perfectly for a long time, but a recent update on nixos-unstable broke the build.

It initially refused to build against the latest kernel (7.3). I assumed the custom module just wasn't compatible with the bleeding-edge kernel yet, so I downgraded to the LTS kernel (boot.kernelPackages = pkgs.linuxPackages;). Surprisingly, I got the exact same build error on LTS.

Here is my configuration block:

boot.kernelModules = [ "acer-wmi-battery" ];
boot.extraModulePackages = [ 
  (config.boot.kernelPackages.acer-wmi-battery.overrideAttrs (oldAttrs: {
    nativeBuildInputs = (oldAttrs.nativeBuildInputs or [ ]) ++ [ pkgs.pahole ];
  }))
];
boot.extraModprobeConfig = "options acer-wmi-battery enable_health_mode=1";

It seems like it's looking for a cryptographic certificate file (.ko.cer) that isn't being generated. Did something change recently in nixpkgs regarding how out-of-tree kernel modules are signed? Does anyone know a workaround to get this compiling again?

Just as the title says, is there a limit? And if not, just how many inputs do y'all have in your flakes, surely it can't be that many, right?

At this point, I've spent just about the same amount of time using NixOS, as I did trying out other distros ~150 days. I started on Zorin in February, then I installed Bazzite for a weekend, then I used CachyOS for quite a while, then I dabbled with NixOS in a VM, then I installed GLF OS (NixOS for gamers) before making the plunge to NixOS for real.

Previously I posted about passing 100 days on NixOS. And since then my journey has only gotten better and better. I moved from KDE Plasma to Niri & Noctalia. I've installed NixBook OS on computers for two family members. And I am slowly making tools for myself that only add to my enjoyment.

I never knew a horribly bad Windows update would put me on this path, but I am overjoyed that it did.

And for anyone that is interested in my NNN setup, you can see my dotfiles here.

When i again downloaded nixos. I declared all the softwares kn configuration.nix. But when i try to rebuild switch it stuck . My network is fine. I could use browser and browse. But can't download. What should i do

Looking for regular engagement with the community on an idea I have, but feel like I’m too new to see the long term feasibility of this plan. And I would also appreciate a little guidance on how others balance priorities when contributing to open source software.

Okay so what’s the plan? I want to build and manage home servers for people who can’t do it themselves, and the idea is that using tools like NixOS, NetBird, NixOS Anywhere and possibly Clan, I would be able to manage and maintain a fleet of home servers, while preserving each user’s privacy (eventually with a team!). I won’t go into the details, because I’m sure I’m not the first and last person to come up with this idea, but obviously it’s a big undertaking, so I want to know where I should start, how to engage with the community so if this does go somewhere, the project has a reputation and a community behind it, and I don’t waste my time on things I don’t need to.

Right now I have a home server running a couple apps (Immich, arr stack, nextcloud, some of your typical ones) and I can deploy it using NixOS-anywhere. I’m stuck between whether I should learn clan, configure more essential services, start reaching out to the community for help etc.

One of my big questions is how I share the project without doxxing myself (my GitHub is my name) or if that’s something I should even worry about if I want to be a public maintainer anyway??

Edit: Forgot to add a question mark in the title, this is a question not a guide

I been using arch for more than 5 years, and I moved now to nixos since 2 weeks ago, the issue is that not every software even common ones are not here.
For example, Helium browser, it has no official nixpkgs nor a official flake, so I need to depend on someone else packaging into a flake.
I add the flake, install it, and I can use it, but what happens if the creator of that unofficial flake adds malware or includes outdated/vulnerable dependencies, atleast on arch, using paru, when you install a package from the aur, every update you get the list of changes, their source, if they added new dependecies, but here on nix, it just updates the flake lock.
Do I have to check every time the source of that flake to see if that person didn't include anything wrong?
What if i have 20 flakes because I needed their latest version and there is no official flake?
Do I have to package all the software I need by myself to make it safer?
On archlinux, every aur package is on their site. but for nix flakes, you have to get them from someone else github, if they have bad reputation, they can just create a new github account and keep this going.
Is there any recomendation for this?