nixos-with-flakes/other-useful-tips

[giscus[bot]]

nixos-with-flakes/other-useful-tips

An unofficial and opinionated book for beginners

https://nixos-and-flakes.thiscute.world/nixos-with-flakes/other-useful-tips

[maribox]

Is it really a good idea to let all system settings be changed with user-level privileges?

[ryan4yin]

Remember the frequently used command sudo nixos-rebuild switch earlier in this book? These changes must be deployed in privileged mode to take effect, and you can always check what has been changed via git before deploying your nixos config.

[maribox]

Yeah but these changes could also be tampered with if a program has user-level access, right? And even if we can see all changes since the last build correctly, the user might forget to check git before rebuilding... Would it be a valid alternative to just run git on the actual folder with root privileges?

[ryan4yin]

I think this is more insecure, because you usually want to use tools such as Neovim/VSCode to help write nix code, do code formatting, syntax checking, error prompts, etc., then you have to give these editors and all their plug-ins root permission, which is obviously riskier.

[maribox]

Understandable, thanks!

[vaibd]

What about hardware-configuration.nix file? In the file itself it says may be overwritten. So, is it okay to sym link it?

[PhilVoel]

It's a nix file like any other and you can edit it all you want. But it was created based on yor system when you set up NixOS so it has settings that work with the system.
So without backup and knowing what you're doing you can seriously brick your system if you change it.
That's why a beginner shouldn't edit it but you definitely can.
But as I said, apart from containing some critical hardware-specific configs, it is not special. You could even move its contents into your main config file and delete hardware.nix altogether

[hackerncoder]

# Wiping history won't garbage collect the unused packages, you need to run the gc command manually as root:
sudo nix-collect-garbage --delete-old

--delete-old will delete all old profiles! The way it is written this is not clear.

[elvetemedve]

The section "Viewing and Deleting Historical Data" only deals with globally installed packages. I'm wondering how to do the same for Home Manager installed packages. I've tried this command below, but returned no results:
nix profile history --profile /etc/profiles/per-user/$USER

Though I found the list of generations by ls -l ~/.local/state/nix/profiles and the list of installed packages by nix-store -q --requisites /etc/profiles/per-user/$USER, it would be nice to use nix profile for that as well.