nixos-cfgs
my NixOS system configs (by raehik)
lanzaboote
Secure Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur] (by nix-community)
| nixos-cfgs | lanzaboote | |
|---|---|---|
| 1 | 4 | |
| 2 | 688 | |
| - | 10.0% | |
| 7.4 | 8.9 | |
| 26 days ago | 10 days ago | |
| Nix | Rust | |
| - | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
nixos-cfgs
Posts with mentions or reviews of nixos-cfgs.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-03-11.
-
Lanzaboote vs. bootspec-secureboot
I had a very good time using lanzaboote as a NixOS newbie, simply following the documentation. It seems like it might be more friendly than bootspec-secureboot (which I haven't investigated). If it might be useful, I have a straightforward NixOS config using lanzaboote running on 2 machines at raehik/nixos-cfgs.
lanzaboote
Posts with mentions or reviews of lanzaboote.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-06-22.
-
What is there to NixOS that is not just `nix` the package/config/whatever manager?
Easy peasy secure boot with lanzaboote
-
Lanzaboote vs. bootspec-secureboot
I know of two projects for supporting Secure Boot on NixOS: Lanzaboote and bootspec-secureboot.
-
Nix-Powered Development with OCaml
Afaik it's not finished yet, but there recently has been quite a lot of activity regarding secureboot for nixos https://github.com/nix-community/lanzaboote/
-
It it secure to store LUKS full disk encryption keys in the TPM nowadays?
I've installed NixOS (a Linux distribution) to TerraMaster F2-423 NAS and enabled Secure boot with lanzaboote and LUKS full disk encryption. I enrolled my own secure boot keys becuase that looked like a requirement.
What are some alternatives?
When comparing nixos-cfgs and lanzaboote you can also consider the following projects:
runix - A type-safe Rust interface to the Nix CLI
nixos-apple-silicon - Resources to install NixOS bare metal on Apple Silicon Macs
sandkasten - Run untrusted code in an isolated environment
flambda-backend - The Flambda backend project for OCaml
ocaml-flake-example - An overly elaborate example of building a ‘Hello World’ package with Nix flakes, OCaml, and Dune
devenv - Fast, Declarative, Reproducible, and Composable Developer Environments