colmena VS nix-index

- rpi nas

I also wipe my entire rootfs every boot with a zfs snapshot rollback[2] using the impermanence module[3] to keep specific stateful data one one of two datasets with regular snapshots: one is backed up with zfs send, the other is just for cache between reboots.

It took a little puzzling to get started, because I didn’t know about the impermanence module, so I built my own hacky solution. But I really love this setup. And the way I don’t have cruft to clean.

Also my backups are so much smaller now :’-)

[1]: https://colmena.cli.rs/

Answering your broader question (secret management) colmena does that for me outside the Nix store. I also use git-crypt to store secrets in the repo. There are also more Nix-y alternatives like agenix.

There are 4 tools I'm taking into consideration right now, but every suggestion is welcome: 1. deploy-rs - I don't know anything about it, heard about it like a day or two ago 2. NixOps - the official one, I don't know what to think, but I have concerns about Flakes compatibility 3. morph - I understand this as "NixOps, but better", no more toughs. 4. colmena - seems to be pretty straightforward with quite nice docs

They shouldn't be, Colmena stringifies the keyFile values which is the same approach as NixOps uses to avoid this. Apparently I implemented that part myself, haha.

I myself use colmena's apply-local. Anyway, totally relate to the meme. Using the same tool to manage your servers and workstations, and reusing stuff between them is amazing.

nix-index can be used to provide this functionality, and to automate this process you can use nix-index-database (setup instructions are in the README).

Are you using flakes? AFAIK `command-not-found` does not work with them. See https://github.com/NixOS/nixpkgs/issues/171054 and https://discourse.nixos.org/t/why-isnt-there-an-official-bui...

I think `nix-index` works as a replacement: https://github.com/bennofs/nix-index

If you are on another distro or mac os there is also nix-index

nix-index is another option for searching for pkgs. You can search by name, or by specific files within a pkg.

You can use nix-locate from https://github.com/bennofs/nix-index to find files on NixOS:

nix-index makes it trivial to find which package contains a given file.

There are two ways I know of: - If you use old-school channels, there's an index in the channel. In particular, the command-not-found hook is able to use that. In this particular case, you would have to guess that git will look for the git-clang-tools, and command-not-found that. This looks like it only works for programs, not arbitrary files. - In any case, you can use the more general nix-index. That's what I did because I use flakes.

I use nix-index a lot to find which derivation a file belongs to, but building the index takes a while and so I end up not updating it very frequently.

Look at the library missing say X Use nix-locate to find the derivation that includes libX.dylib file (if it can’t find the macOS dylib version of the file try using the same name for linux by changing dylib for so) Add the derivation to you environmental and try again It will find the next missing library on the next compile.