nix.dev
vulnix
nix.dev | vulnix | |
---|---|---|
17 | 4 | |
2,041 | 397 | |
12.1% | 5.8% | |
9.6 | 1.2 | |
8 days ago | 26 days ago | |
Nix | Python | |
Creative Commons Attribution Share Alike 4.0 | BSD 3-clause "New" or "Revised" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
nix.dev
-
Dependencies Belong in Version Control
Nix (https://nix.dev/) can provide all of this, although in a smarter way than just through dumping everything in the VCS. Some projects use it already to provide a reproducible development environment and if done right a clean build is just a `nix-build` away.
- An Overview of Nix in Practice
-
Virtualizing Development Environments in 2023
Author doesn’t mention it but I wonder if tried or considered Nix/NixOS’s reproducible developer environments and ruled them out for any reason. I couldn’t tell from the article if there’s something unique to his requirements that disqualifies them.
https://nixos.org/explore
https://nix.dev/
-
I'm almost ready to take the plunge, but first ...
if you want something a more in-depth, zero to nix is a great resource for all things nix (they have a section dedicated to flakes here, but i would pay attention to the notice at the top about reading some other things first), along with nix.dev, and of course, the nixos wiki article on flakes
-
Why not native support for pkgs.dockertools for apple silcion
On nix.dev it say I would need to cross compile to make it work, is there some way in which i can build natively on my machine.
-
Cachix 1.3: Nix uploads unleashed
Hey
Cachix founder here. Here are a few links for getting started:
- https://nix.dev Nix tutorials
- https://devenv.sh Fast, Declarative, Reproducible, and Composable Developer Environments
Let me know if you have any questions. Domen
- Zero to Nix, an unofficial, opinionated, gentle introduction to Nix
-
How to learn using NixOS?
Nix pills and nix.dev are my favorites, alongside the official documentation.
-
So I find nix really hard to learn and understand - is there any truly excellent resources out there on learning nix?
https://nix.dev/ is the best in depth resource I know but it's a work in progress.
-
Dev environments in the cloud are a half-baked solution
For folks looking to understand why this is so https://nix.dev and https://devenv.sh/
vulnix
-
Is NixOS a thing?
it is very easy to scan your entire dependency tree for known vulnerabilities for Nix, all the way up to a whole OS
-
What Are Your Most Used Self Hosted Applications?
Initially I spent a lot of time as I used it as an opportunity to learn Nix/NixOS. I used Nix intentionally as it's a rolling release and also it's declarative and intended for reproducible deployments, so I don't need to deal with an OS like Ubuntu that slowly gets crufty and out of date and needs a clean-up or upgrade or complete re-install. And if I do need to re-install, it should be mostly a one-liner.
For security there are these scanners:
https://github.com/flyingcircusio/vulnix
https://github.com/andir/nix-vulnerability-scanner
I also run all services in docker and my network uses VLANs behind an OPNSense firewall. I use Wireguard as a pinch point into my network to access most services. So I'm not too worried about the security aspect.
Upgrading on Nix is pretty easy - just bump your lock file and it will get the latest packages, assuming you are on the unstable channel. But unstable does break on occasion. You an also use the latest stable release of Nix and selectively choose unstable packages, which is probably the way to go. I rarely need to fix anything - it's pretty stable. It only starts eating time when I want to add or upgrade some element to the system, but I always make sure to never do any action that isn't captured in Nix config and backed up, so that I don't have to come back and figure out what exactly I did or how something works again. It's been fine. Nix has a pretty steep learning curve, but considering its power, I think it's absolutely worth it.
-
Is there an easy way to see changes made by `nixos-rebuild switch`?
Along with the results of the diff the comment also provides the results of running vulnix
- vulnix: Vulnerability (CVE) Scanner for Nix/NixOS
What are some alternatives?
jenv - Manage your Java environment
opencve - CVE Alerting Platform
devenv - Fast, Declarative, Reproducible, and Composable Developer Environments
nix-alien - Run unpatched binaries on Nix/NixOS
nix-starter-configs - Simple and documented config templates to help you get started with NixOS + home-manager + flakes. All the boilerplate you need!
awesome-selfhosted - A list of Free Software network services and web applications which can be hosted on your own servers
Joplin - Joplin - the secure note taking and to-do app with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.
devenv - Pluggable development environments builder that has potential to support any language or framework environment
expbox - Vulnerability Exploitation Code Collection Repository
nixpkgs-upkeep - Auto-updates and CI 🤖 for Nixpkgs
cyberowl - A daily updated summary of the most frequent types of security advisories currently being reported from different sources.