me and fedora have been boxing for a while now and I’m thinking I want to try something else after I finish designing my next home server case for it.

I’m considering NASty https://github.com/nasty-project/nasty as it’s doing pretty much everything out of box I want to do with this next one already, and even though it’s young, it’s build on nixOS, which I consider mature at this point.

But I have no experience with nixOS. It sounds like it’s a less obnoxious form of fedora coreOS. Any opinions?

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 11 points 19 hours ago* (last edited 19 hours ago) (5 children)

Fedora always felt slower no matter what I did with it. Selinux sent me to therapy. Cockpit always felt incomplete. Some updates require me to box with fedora to get it to boot again because selinux had an opinion.

Fedora touched me in places they don’t even have on the doll.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 4 points 19 hours ago (4 children)

    . Fedora touched me in places they don’t even have on the doll

    ;D That's going in my lexicon. Moreover, I feel duly warned; thanks for that.

  • source
  • parent
  • hideshow 4 child comments
  • [–] [S] 5 points 19 hours ago* (3 children)

    It’s not necessarily a bad thing, SELinux is doing exactly what it’s supposed to do. The default is no, and you’re gonna have to convince it otherwise. I’m just not all that great at convincing it otherwise cleanly.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 18 hours ago (2 children)

    Just know that NixOS has no support for SELinux or apparmor. Though if you are into that model of 'no by default' I have something related but for the files under root: https://github.com/nix-community/impermanence

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 1 point 10 hours ago* (last edited 9 hours ago) (1 child)

    Which is weird but I get it. I wanted to force myself to learn selinux with fedora and I get it I’m just bad at it. I shoudnt have a headless machine running all the time without some protections, but I suppose I could do well enough by having ip2d and bittorrent in a VM and local only stuff in containers. its not great but it should be good enough.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 5 hours ago

    I never tried SELinux before and I don't know all that much about NixOS but apparently it has to do with how NixOS works under the hood which makes it hard and there's no incentive to actually struggle to implement support.

    A big shame because SELinux model is something I would love to have on my system as I don't want everything to have access to everything by default.

  • source
  • parent