This is a most excellent place for technology news and articles.
US: Let's sanction everyone everywhere all at once!
Also US: Why don't people want to be dependent on US systems? π
Yea we got a bit of the βinmates are running the asylumβ situation over here.
In the immortal words of the joker(paraphrased) this country needs an enema
Couldn't undermine the country more if they tried, which makes one wonder.
I wish. Organizations and countries/municipalities are far too lazy to make the change.
The time and money involved are both staggering. This isn't about you switching operating systems on your personal laptop.
Where are you going to get support staff anytime soon? All those Windows admins magically switching to Linux overnight?
Hell, Linux offers nothing remotely comparable to the power of Active Directory. That alone will keep Windows in the lead.
And more. This isn't about lazy.
Finally. Been saying for years, NixOS is the obvious choice for a gov distro.
Now we need to convince Canada to do the same. If everyone leaves Microslop, that would make a huge impact.
Why?
Honest question.
My guess would be the deterministic configuration management. If it's for a personal machine then do what you want to make it your own but if it's an organization (e.g. government) you want the machines to be as similar as possible to reduce maintenance. Think cattle, not pets.
Ansible is a thing though. It is also a more complete, mature and easily substitutable solution vs pinning your hopes on a single distro.
Programmers like NixOS because they are programmers.
Ansible is US-owned. Even though it's open source, Redhat, a US company, is the one that controls its lifecycle.
NixOS is based out of the EU.
Fun fact, Nix, Nixpkg and NixOS have their roots in the Netherlands. For example, Nixpkg was even described in a PhD thesis at Utrecht University.
I mean they sort of serve different purposes. You can build a NixOS ISO running your exact desired configuration that is good to go immediately upon install. Ansible would require post install configuration, yes it is scripted but it is additional overhead and time. I think a better alternative would be an OCI based distro with a Packer build pipeline, which could include Ansible steps higher up in the build process. But that's more complexity that Nix wouldn't require
i used ansible some years ago and i'm using nixos currently and you can not compare those two.
i was not fluent in ansible and i'm not fluent in nixos. yes you have to leave your comfort zone for nixos, but your get so so much more.
the jinja templates in yaml feel like a big hack if you used nixos.
would really be interesting to hear someone talk who is comfortable to use both of them.
It's close, but Ansible is often not deterministic.
from a sys admins perspective it's painfully easy to deploy across hundreds of machines. NixOS is declaritive and immutable. you can take one system configuration of NixOS and throw the same config on as many machines as you want. packages, dotfiles, whatever are all replicated the exact same way on each machine. You can lock all the packages/apps, configs, kernels, etc to a specific version therefore a sysadmin may only need to upgrade the lot once a year. if a user some how breaks their system it's as easy a fix as rolling back to the previous generation with a single menu option.
So basically say you have your computer and you want to replicate your exact setup to hundreds of other computers. with NixOS it's as simple as setting up a git repo for your nixos config, pushing to it, installing nixos on every other computer then cloning your repo to all the machines and rebuilding. done. now you have hundreds of other computers that all behave and work the same way your computer does.
If something needs updating or a fix needs to be rolled out all a sysadmin has to do is fix it on one machine, push the change, pull it for every other machine and rebuild. done.
I am curious, what makes NixOS such a good choice?
From the article:
Its use of the Nix package manager means that each package is installed in its own directory with immutable and signed contents. That alone means that the setup is incredibly easy to reproduce across multiple machines, something that is an obvious benefit when dealing with different facets of a government.
Id argue an immutable distro would likely serve the same purpose but maybe its also because nixos isnt as "locked down" so itd be easier to configure for a specific purpose?
But not curious enough to read the article.
You know, you could simply be helpful.
Sure.
It's in the fourth paragraph, starting with
From a technical point of view...
and ending with
... would usually balk at.
The only thing is this doesnβt yet do online user directories, local users only
Which is a big constraint right now
All middle powers need to align and collaborate on this. There is limited programming talent and gaps and especially security (ai) gaps need to be filled. EU, UK, Canada, Aus, NZ, SK, Japan should actively pool resources.
Windows is basically a zombie OS at this point, shambling along and eating brains.
Windows as a home user desktop is definitely coasting on momentum, though it is also the OS deployed on most new PCs which keeps it going.
I think the only thing really keeping Microsoft relevant is Active Directory (and Azure by extension) because a lot of organizations are dependent on AD internally, and there still aren't really any good alternatives that check all the same boxes. You could probably cobble together a working solution for ~90% of it with open source software, but it would be clunky, fragmented and feature-poor compared to an on-prem AD system. It would require a lot more administrative overhead to configure and maintain it, and user management would be a mess.
EntraID also seems corporate established. For a modern with system, with zero trust etc, you use EntraID instead of AD now.
Of course, legacy AD systems, if they exist, are also lock-in.
Neet, if NixOS get used more and more then the skills I acquired making my config will become marketable.
This great news! Away with USA!
So we did this because we didn't like what the court said not about us but Israel and its war crimes? This is the hill the admin is going to die (and drag us with them) on?
Netherlands: "Let's make The Netherlands great again."
United States: "What have we done."
We never should have let that horse into the hospital.
