since I haven't yet used it, should I try #NixOS on my backup NAS?

@freya no

ok here we ggo. #NixOS ZFS root on the backup NAS

@wyatt oh/

@freya my opinion is no, just use a normal distro like gentoo or debian or whatever

container fetishization as a distro is dumb
(yes i know it's not "exactly" containers but it's obviously for container people)

ok I've got a live image, /run/current-system/sw appears to be "ok I suppose we can sort of have a standard Unix-looking filesystem but not really"

@wyatt nixos is not a container distro?

@freya I've had people argue with me that it's not actually and they're people who usually know what they're talking about so i take their word for it

and now I get to figure out how the fuck to do NixOS root on ZFS

ew. ok, if that's your thing then do it, i'll have no part in containers though

update: success! NixOS is now running on Yttrium. Is there a declarative way to tell my zpool to expand to the other drives in my machine, or do I do that th old way?

update: NFS shared to my primary NAS, fwupd installed, nfs server running, this is actually working

update: NixOS still deosn't have

boot.loader.secureboot.enabled = true;

or anything like that? despite using systemd-boot..... that seems really dumb

I feel like the Linux community really fucked up in not embracing things like secure boot and mandatory disk encryption with TPM2 binding after the lies spread by anti-UEFI, anti-Secureboot people born out of misunderstandings about Windows 8 requirements

@freya we're in favor of that sort of thing, yeah, though it's .... TPM binding is nice but it's an after-the-fact detection system, which, while still genuinely helpful, is less comforting for us with an activist threat model than it would be to a corporation for which everything comes down to financial loss and can be averaged out and forgotten

@ireneista @freya TPM can be used to seal a disk encryption key and simply not give access to the disk and refuse to boot on tampering

@freya wdym? What lies?

@tranquillity oh there was a whole *thing* about how "oh, well, secure boot is a way for microsoft to control what you can run on your pc!" and "secrue boot is the root of evil drm!" and "uefi is microsoft's evil vehicle of evilness to do evil!" and all this shit

@freya there is https://github.com/nix-community/lanzaboote

@charlotte yeah, but afaik that requires tracking nixos-unstable, which might make my zfs explode

@freya it shouldn’t? certainly hasn’t for me when i was still using zfs. it even defaults to linux lts

@charlotte oo, noted