Nix Configuration

Nix Configuration defines the declarative specification of system settings, packages, services, and user environments managed by the Nix package manager and the NixOS operating system. It enables reproducible and consistent system states by describing the entire system setup in one or more configuration files, primarily using the Nix expression language. This approach abstracts away imperative commands for software installation or system modification, replacing them with a purely functional configuration that can be version-controlled, audited, and rolled back.

Core Concepts of Nix Configuration

Declarative Configuration

Nix Configuration is essentially a set of Nix expressions that specify desired system properties including installed packages, enabled services, system options, hardware configuration, and user-specific settings. Instead of manually running installation commands, users write these configurations and apply them via Nix tools, ensuring the system matches the declared state.

Functional and Immutable Nature

The configuration is functional and immutable: each package or system component builds from pure functions without side effects, ensuring builds are reproducible and isolated. Changes in configuration result in new system generations, allowing multiple versions to coexist and enabling atomic upgrades and rollbacks.

Configuration Files

The primary configuration file for NixOS is /etc/nixos/configuration.nix, which imports modules and defines system-wide options. Users can also create additional Nix expressions for custom packages or configurations. The modularity of Nix configurations promotes reusability and composability of system setups.

Structure and Components of Nix Configuration

System Options

System options control various aspects of the OS, such as networking, file systems, kernel parameters, time zone, locales, and security policies. These options are usually set within the configuration.nix file using attribute assignments, for example:

{
  networking.hostName = "my-nixos";
  time.timeZone = "Europe/Berlin";
  services.openssh.enable = true;
}

Package Management

Packages are declared in the configuration under environment.systemPackages. This attribute lists all packages to be installed system-wide, ensuring they are available in user environments and globally in the system profile.

{
  environment.systemPackages = with pkgs; [
    vim
    git
    firefox
  ];
}

Service Definitions and Modules

NixOS services are configured declaratively as modules, each exposing a set of options. Enabling a service typically involves setting its enable flag to true and supplying any additional configuration it requires.

{
  services.nginx.enable = true;
  services.nginx.virtualHosts."example.com" = {
    root = "/var/www/example";
    enableSSL = true;
  };
}

Modules can be composed and imported, allowing users to extend or override default behaviors.

Hardware and Kernel Configuration

Hardware support and kernel modules are configured through options specifying drivers, file systems, and kernel parameters. For example:

{
  boot.kernelModules = [ "kvm-intel" "vboxdrv" ];
  fileSystems."/" = {
    device = "/dev/sda1";
    fsType = "ext4";
  };
}

User and Group Management

User accounts and groups are defined declaratively, specifying user names, UIDs, groups, shells, and authorized SSH keys:

{
  users.users.alice = {
    isNormalUser = true;
    home = "/home/alice";
    shell = pkgs.zsh;
    extraGroups = [ "wheel" "network" ];
    openssh.authorizedKeys.keys = [
      "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA..."
    ];
  };
}

Applying and Managing Nix Configuration

Building and Activating Configuration

After editing the configuration files, the system configuration is built and applied using:

sudo nixos-rebuild switch

This command builds the new system generation in isolation, then switches the system to use it atomically, activating all changes including package installs and service restarts.

Rollbacks and Generations

Every system build creates a new generation, preserving the previous state. Users can roll back to older configurations easily:

sudo nixos-rebuild switch --rollback

The system keeps multiple generations, enabling safe experimentation and recovery from misconfigurations.

Customizing with Overlays and Packages

Nix Configuration supports overlays, which allow users to extend or override existing packages without modifying the core Nixpkgs repository. This is typically done by defining an overlay function in a separate file and importing it within the configuration.

self: super: {
  myCustomPackage = super.callPackage ./my-package.nix {};
}

Advanced Topics in Nix Configuration

Home Manager Integration

Home Manager is a tool built on top of Nix that manages user-specific configurations declaratively, including dotfiles, shell environments, and user services. It can be integrated into Nix Configuration or used independently, applying the same principles of reproducibility and declarative management.

Configuration Modules and Extensibility

NixOS’s modular design allows users to write their own configuration modules to encapsulate complex setups, define new options, and create reusable configuration fragments. Modules can export options, hooks, and new services, facilitating customization beyond the built-in modules.

Security and Reproducibility

Nix Configuration emphasizes security by isolating builds, reducing side effects, and enabling deterministic builds. This approach helps avoid configuration drift, ensures system integrity, and allows verification of system states, important for environments requiring compliance and auditability.

Summary of Nix Configuration Content

• Definition: A declarative specification expressing the entire system state in Nix expressions.
• Core Elements: System options, package lists, service configurations, hardware settings, and user accounts.
• File Location: Primarily /etc/nixos/configuration.nix on NixOS systems.
• Management: Built and activated via nixos-rebuild commands, supporting rollbacks.
• Extensibility: Supports overlays, custom modules, and integration with tools like Home Manager.
• Benefits: Reproducibility, atomic upgrades, rollbacks, composability, and security.

Nix Configuration is central to the Nix ecosystem, enabling powerful, reliable, and maintainable system management through purely functional and declarative definitions.