NixOS: Declarative Linux for Reproducible Sovereign Infrastructure培訓

Declarative System Sovereignty

• Why imperative configuration management leads to drift and audit failure.
• Understanding the Nix store, derivations, and pure functions for system construction.
• Comparing NixOS with traditional distributions: immutability and atomic upgrades.

Installation and Basics

• Installing NixOS from ISO with manual and automated partitioning.
• The Nix language: sets, functions, and imports.
• Structure of configuration.nix and the module system.
• Searching packages and options using nix search and man pages.

Package and Service Management

• Installing packages system-wide versus per-user with nix-env.
• Enabling systemd services declaratively.
• Custom package overrides and overlays.
• Garbage collection and store optimization.

Reproducible Environments

• Using nix-shell and shell.nix for ad-hoc development.
• Leveraging Nix Flakes for lockfile-based reproducibility.
• Utilizing devenv and devshell for streamlined team onboarding.
• Integrating Direnv for automatic environment switching.

Remote Deployment

• Managing fleets with NixOps and Colmena.
• Configuring remote building and binary caches.
• Managing secrets with agenix and sops-nix.
• Testing deployments using NixOS VMs and containers.

System Updates and Rollbacks

• Using nixos-rebuild in switch, test, and boot modes.
• Performing atomic rollbacks to previous generations.
• Managing and pinning channels for reproducible updates.
• Emergency recovery procedures and bootloader configuration.

Advanced Topics

• NixOS containers and lightweight virtualization techniques.
• Cross-compilation and ARM builds.
• Generating custom ISO and netboot images.
• Implementing Hydra continuous integration for Nix packages.