me and fedora have been boxing for a while now and I’m thinking I want to try something else after I finish designing my next home server case for it.
I’m considering NASty https://github.com/nasty-project/nasty as it’s doing pretty much everything out of box I want to do with this next one already, and even though it’s young, it’s build on nixOS, which I consider mature at this point.
But I have no experience with nixOS. It sounds like it’s a less obnoxious form of fedora coreOS. Any opinions?
Just know that NixOS has no support for SELinux or apparmor. Though if you are into that model of ‘no by default’ I have something related but for the files under root: https://github.com/nix-community/impermanence
Which is weird but I get it. I wanted to force myself to learn selinux with fedora and I get it I’m just bad at it. I shoudnt have a headless machine running all the time without some protections, but I suppose I could do well enough by having ip2d and bittorrent in a VM and local only stuff in containers. its not great but it should be good enough.
I never tried SELinux before and I don’t know all that much about NixOS but apparently it has to do with how NixOS works under the hood which makes it hard and there’s no incentive to actually struggle to implement support.
A big shame because SELinux model is something I would love to have on my system as I don’t want everything to have access to everything by default.