Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Declarative System Sovereignty
- How imperative configuration management leads to drift and audit failures.
- The Nix store, derivations, and pure functions for system construction.
- NixOS compared to traditional distributions: immutability and atomic upgrades.
Installation and Basics
- Installing NixOS from an ISO image with manual and automated partitioning options.
- The Nix language: sets, functions, and imports.
- Structure of configuration.nix and the module system.
- Searching for packages and options using nix search and manual pages.
Package and Service Management
- Installing packages system-wide versus per-user using nix-env.
- Enabling systemd services declaratively.
- Custom package overrides and overlays.
- Garbage collection and store optimization.
Reproducible Environments
- Using nix-shell and shell.nix for ad-hoc development.
- Nix Flakes for lockfile-based reproducibility.
- Using devenv and devshell to streamline team onboarding.
- Integrating Direnv for automatic environment switching.
Remote Deployment
- Managing fleets with NixOps and Colmena.
- Configuring remote builds and binary caches.
- Managing secrets with agenix and sops-nix.
- Testing deployments using NixOS VMs and containers.
System Updates and Rollbacks
- Using nixos-rebuild in switch, test, and boot modes.
- Performing atomic rollbacks to previous system generations.
- Managing channels and pinning for reproducible updates.
- Emergency recovery procedures and bootloader configuration.
Advanced Topics
- NixOS containers and lightweight virtualization techniques.
- Cross-compilation and ARM builds.
- Generating custom ISO and netboot images.
- Continuous integration for Nix packages using Hydra.
Requirements
- Advanced Linux system administration and shell scripting skills.
- Understanding of functional programming concepts.
- Familiarity with Git and version-controlled configuration management.
Audience
- Infrastructure engineers looking for reproducible, declarative systems.
- DevOps teams aiming to replace Ansible, Puppet, or Chef with Nix.
- Organizations that require bit-for-bit reproducible deployments.
21 Hours
Testimonials (2)
experienced trainer
Monika Biskupska - Osrodek Przetwarzania Informacji - Panstwowy Instytut Badawczy
Course - Kubernetes Security Fundamentals (LFS460)
trainer has hands-on knowledge
