4.12 nixcon-2025 2025-09-05 2025-09-07 3 00:05 https://talks.nixcon.org Europe/Zurich Aula (4.101) Short talk 2025-09-05T10:00:00+02:00 10:00 00:35 None nixcon-2025-79332-opening-ceremony en Opening of the conference false https://talks.nixcon.org/nixcon-2025/talk/QEN3WD/ https://talks.nixcon.org/nixcon-2025/talk/QEN3WD/feedback/ Aula (4.101) Long talk 2025-09-05T10:45:00+02:00 10:45 00:45 None nixcon-2025-73183-sustainable-nix-2025-state-of-the-union Ron Efroni en Lets explore how to ensure the sustainability of the Nix ecosystem with community leads including the SC and Foundation. We will dive into what it takes to create and maintain a robust, reliable environment for years to come. Covering the community’s milestones in 2024, from infra to governance, and about both the hard-won lessons and the innovations shaping Nix’s future. false https://talks.nixcon.org/nixcon-2025/talk/9VKFRM/ https://talks.nixcon.org/nixcon-2025/talk/9VKFRM/feedback/ Aula (4.101) Lightning talk 2025-09-05T11:40:00+02:00 11:40 00:10 None nixcon-2025-80838-nixos-mediation-a-free-mediation-service Jonas Chevalier (zimbatm) en Presenting https://nixos-mediation.org/ ; what it is, how you can benefit from it, and a small retro. false https://talks.nixcon.org/nixcon-2025/talk/CDU788/ https://talks.nixcon.org/nixcon-2025/talk/CDU788/feedback/ Aula (4.101) Long talk 2025-09-05T13:30:00+02:00 13:30 00:25 None nixcon-2025-78621-introducing-nixops4 Robert Hensing en NixOps4 is the successor of NixOps. Why did NixOps fail, and how does NixOps4 address its shortcomings? Will NixOps4 replace Terraform/OpenTofu? Will the demo work? https://github.com/roberth/nixcon-2025-slides `nix run github:roberth/nixcon-2025-slides` false https://talks.nixcon.org/nixcon-2025/talk/YCDXZM/ https://talks.nixcon.org/nixcon-2025/talk/YCDXZM/feedback/ Aula (4.101) Short workshop 2025-09-05T14:05:00+02:00 14:05 00:45 None nixcon-2025-75563-free-software-talk-and-discussion Zoë Kooyman en This talk explores the challenges and opportunities faced by the free software movement today. It offers a broad reflection on what "freedom" means in modern computing — and why it's more relevant than ever. Touching on questions of trust, corporate co-option, licenses, and the ethics of technology, it emphasizes the role of community engagement and governance structures. With urgency and clarity, it calls on developers to think beyond code and to take responsibility for the digital world we are collectively building. The talk will be followed by an involved discussion with the audience. false https://talks.nixcon.org/nixcon-2025/talk/NGPKNY/ https://talks.nixcon.org/nixcon-2025/talk/NGPKNY/feedback/ Aula (4.101) Long talk 2025-09-05T15:00:00+02:00 15:00 00:25 None nixcon-2025-78456-flatpaks-the-nix-way Gabriele Modena en Nix and Flatpak are often seen as solving similar problems from different angles: one declarative and reproducible, the other sandboxed and user-friendly. But what happens when you try to make them work together? And why would you want to do it? In this talk, I’ll present nix-flatpak (https://github.com/gmodena/nix-flatpak), an open-source project to declaratively manage Flatpak apps with Nix. This project started as a personal learning experiment to understand Nix, flakes, and module design, and grew into a practical tool to bridge the Nix and Flatpak ecosystems. We’ll cover: - A quick primer on Flatpaks and why they matter for desktop NixOS users - How Flatpak installations are managed declaratively in nix-flatpak - Architecture decisions and tradeoffs: convergent state vs full reproducibility - How to test and validate the module logic across system and user installations - What’s ahead: improving UX, stability, and community feedback The talk is intended to be interactive. I’ll share how the project evolved, but also open the floor to ideas, questions, and use cases from the community. Your feedback will directly shape the future of nix-flatpak. false https://talks.nixcon.org/nixcon-2025/talk/XJ9JLH/ https://talks.nixcon.org/nixcon-2025/talk/XJ9JLH/feedback/ Aula (4.101) Short talk 2025-09-05T15:35:00+02:00 15:35 00:25 None nixcon-2025-79117-the-nix-binary-cache-and-aws Tarus Balog en Behind the Scenes of `cache.nixos.org`: Scaling Nix’s Binary Cache to Infinity The Nix binary cache is the silent powerhouse of the Nix ecosystem: every day, it fields thousands of requests per second—amounting to nearly 6 billion requests per month!—for NixOS and Nix users worldwide. But what makes it work at scale, how—or why—is its simplicity a virtue, and how does an ongoing partnership between AWS and the Nix Foundation ensure its availability for years to come? In this fireside chat, join Ron (Flox), Tarus (AWS), Tom Bereknyei and moderator Ross (Flox) for a conversation about: - What the Nix binary cache actually is… - …and why it matters for the community, reproducibility, and even the survival of historical software; - How AWS came to support `cache.nixos.org` - Why the binary cache’s “dumb” design is a feature, not a bug; - What goes in the cache? - Challenges and lessons learned: scaling, cost optimization, and keeping things simple - Why this partnership is important for the Nix ecosystem Whether you’re a builder, a Nix maintainer, a user, or just curious about how open source infra runs at global scale, this conversation will offer insights, anecdotes, and a look at how communities and clouds can support each other. false https://talks.nixcon.org/nixcon-2025/talk/QXZJ9H/ https://talks.nixcon.org/nixcon-2025/talk/QXZJ9H/feedback/ Aula (4.101) Long talk 2025-09-05T16:10:00+02:00 16:10 00:45 None nixcon-2025-79038-supply-chain-security-panel-discussion Martin SchwaighoferArian van PuttenShahar "Dawn" OrJulien Malka / Luj en Nix is a very promising technology for fundamentally improving supply chain security. In some ways its lives up to this promise already, in a lot of ways pieces of the overall puzzle are still missing, fall short in implementation, adoption or UX. Our panelists all work on supply chain security related tools and topics in the the Nix ecosystem, which we will use as a starting point to plainly discuss which issues they are trying to address and how they might fit into an overall picture. Come join us to find out what we all do and do not see in the overall picture, based on the puzzle pieces we, you or other people in the community are holding. Our panelists: * John Ericson * [Julien Malka](https://luj.fr) * Arian van Putten * Martin Schwaighofer Moderator: * Shahar "Dawn" Or false https://talks.nixcon.org/nixcon-2025/talk/XWQC8U/ https://talks.nixcon.org/nixcon-2025/talk/XWQC8U/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:05:00+02:00 17:05 00:05 None nixcon-2025-79335-sponsored-lightning-talk-flox Sponsored Rok Garbas en Sponsored Lightning Talk - Flox false https://talks.nixcon.org/nixcon-2025/talk/WDXCBX/ https://talks.nixcon.org/nixcon-2025/talk/WDXCBX/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:10:00+02:00 17:10 00:05 None nixcon-2025-79341-sponsored-lightning-talk-determinate-systems Sponsored Cole Mickens en Sponsored Lightning Talk - Determinate Systems false https://talks.nixcon.org/nixcon-2025/talk/LXR7DK/ https://talks.nixcon.org/nixcon-2025/talk/LXR7DK/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:15:00+02:00 17:15 00:05 None nixcon-2025-74833-how-i-wish-bazel-had-nix-develop Srini en Nix's package composition model makes developer environments a natural extension of its core abstractions. A simple `shell.nix` declaration combined with `nix develop` provides native tooling access and IDE integration that other build systems struggle to achieve without significant engineering investment. At LinkedIn, I experienced this contrast firsthand while migrating Go repositories to Bazel. I spent six months reverse-engineering Bazel's sandbox internals, writing custom rules to extract SDK paths, generate `direnv` configurations, and create LSP settings files. This enabled developers to use native Go commands via shell and IDE within Bazel workspaces, which proved crucial for broader adoption ([Bazelcon 2024 talk](tinyurl.com/srini-bazelcon-talk) on this topic). In this talk, I'll contrast months of custom engineering against Nix's declarative approach - just a few lines of config that solve the same problem in a manner that's harmonious with the build system. false https://talks.nixcon.org/nixcon-2025/talk/HMKXYP/ https://talks.nixcon.org/nixcon-2025/talk/HMKXYP/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:20:00+02:00 17:20 00:05 None nixcon-2025-79338-consulting-driven-open-source Sponsored Jonas Chevalier (zimbatm) en How consulting companies can help businesses do Open Source. Lessons from practical experience. false https://talks.nixcon.org/nixcon-2025/talk/VP7NYN/ https://talks.nixcon.org/nixcon-2025/talk/VP7NYN/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:25:00+02:00 17:25 00:05 None nixcon-2025-79102-ricochets Yvan Sraka en I made a thing to manage the Linux machines of my friends and family: https://sraka.xyz/posts/ricochets.html, it's a hack with a custom NixOS default channel :) false https://talks.nixcon.org/nixcon-2025/talk/RDSBZN/ https://talks.nixcon.org/nixcon-2025/talk/RDSBZN/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:30:00+02:00 17:30 00:05 None nixcon-2025-79340-sponsored-lightning-talk-cachix Sponsored Domen Kožar en Sponsored Lightning Talk - Cachix false https://talks.nixcon.org/nixcon-2025/talk/KTXAHT/ https://talks.nixcon.org/nixcon-2025/talk/KTXAHT/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:35:00+02:00 17:35 00:05 None nixcon-2025-79112-jail-nix-a-library-to-easily-jail-your-nixos-derivations-in-bubblewrap Alex David en Given the amount of software written in memory unsafe languages, and the rise in supply chain attacks, I prefer to run as much software as possible within some kind of security boundary (mostly using bubblewrap and qemu). [Bubblewrap](https://github.com/containers/bubblewrap) is the sandboxing tool at the core of Flatpak, but it is intentionally designed to be very low level. Using bubblewrap, one can write wrappers for every package on their system, but getting the flags right can be error prone, and often lead to annoying debug cycles to get a program to run correctly. `jail.nix` is a nix library I have been working on to make wrapping Nix derivations in bubblewrap jails more ergonomic by using higher level combinators to achieve concrete objectives (like giving a program access to the network, or allowing it to render to a Wayland compositor). The library is open source, the source [can be found here](https://git.sr.ht/~alexdavid/jail.nix). This talk will give a tour of the features of jail.nix and how to integrate it with a NixOS configuration. false The slides for my talk! https://talks.nixcon.org/nixcon-2025/talk/3QH3PZ/ https://talks.nixcon.org/nixcon-2025/talk/3QH3PZ/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:40:00+02:00 17:40 00:05 None nixcon-2025-79337-systemd-sysupdate-systemd-repart-nixos-ota-updates Sponsored Jacek Galowicz en This talk is for engineers, architects, and developers building embedded, IoT, or appliance-like Linux systems that need reliability and secure remote updates. This session provides a quick overview of how to construct a robust, A/B-style OTA update mechanism using only features that are already upstreamed in NixOS and systemd. We will explore the synergy of this trio: - NixOS: Used as the declarative foundation for building bit-for-bit reproducible, small, hardened, and immutable system images. - systemd-repart: To define the A/B partitioned disk layout directly from the NixOS configuration itself. - systemd-sysupdate: As the on-device engine for securely fetching, deploying, and atomically activating a new system version, with automatic rollbacks on boot failure. false https://talks.nixcon.org/nixcon-2025/talk/XSSVLD/ https://talks.nixcon.org/nixcon-2025/talk/XSSVLD/feedback/ Aula (4.101) Lightning talk 2025-09-05T17:45:00+02:00 17:45 00:05 None nixcon-2025-79116-building-a-nix-binary-cache-for-fun-and-profit @techknowlogick en One of the core parts of NixOS is the binary cache, but with limited real-world implementations, there aren't many opportunities to explore and learn the in-depth details of how they work. The speaker, having recently built one, will share some lessons learned, and let everyone know how interesting they can be. **Profit not guaranteed true https://talks.nixcon.org/nixcon-2025/talk/SHJ7FR/ https://talks.nixcon.org/nixcon-2025/talk/SHJ7FR/feedback/ Aula (4.101) Long workshop 2025-09-05T19:30:00+02:00 19:30 01:00 None nixcon-2025-74541-how-to-fix-infinite-recursion berberlennart en We welcome you to the first Nix improv gala event. Four candidates from the crowd compete against each other. They each get the same task and have to explain in 1 minute how they solve it – as entertaining as possible! For example: How do you fix infinite recursion? true https://talks.nixcon.org/nixcon-2025/talk/GRXDCW/ https://talks.nixcon.org/nixcon-2025/talk/GRXDCW/feedback/ Lecture Hall (5.002) Long talk 2025-09-05T10:45:00+02:00 10:45 00:45 None nixcon-2025-78934-what-if-github-actions-were-local-first-and-built-using-nix Domen Kožar en We're going to dive into examples behind how GitHub Actions can be designed using Nix, while having little to no difference between local development environment and CI running somewhere else. false https://talks.nixcon.org/nixcon-2025/talk/S8SKEG/ https://talks.nixcon.org/nixcon-2025/talk/S8SKEG/feedback/ Lecture Hall (5.002) Short talk 2025-09-05T11:40:00+02:00 11:40 00:25 None nixcon-2025-79070-rewriting-the-hydra-queue-runner-in-rust Simon Hauser en The Hydra Queue Runner is a critical component responsible for orchestrating and executing build tasks within the Hydra infrastructure. Its reliability and efficiency are paramount for our Nix community, serving as a key component of the Nixpkgs infrastructure that builds the world's largest package set. A significant challenge with the current implementation lies in the communication between the Queue Runner and the builders. This system, built on SSH, directly read from and wrote to the running Nix daemon, which imposed a hard limit on connected builders. This talk will begin by explaining the current Hydra CI infrastructure and how Hydra works as a whole, looking at the evaluator, Queue Runner, PostgreSQL, hydra-notify, and hydra-web components and how they interact with one another. We will then detail the comprehensive redesign and re-implementation of the Hydra Queue Runner, transitioning from its existing architecture to a robust, high-performance solution built in Rust, specifically to overcome these limitations. We will present an overhaul of the remote communication protocol, migrating from the SSH implementation to gRPC, leveraging its benefits for performance, type safety, and interoperability. This change also benefits our ability to introduce generic messages unrelated to the Nix protocol, which enables the monitoring of the system utilization of all builders, making scheduling decisions more agile. Furthermore, we introduced comprehensive tracing capabilities, making the new Queue Runner significantly more debuggable and maintainable. We will then dive into the build pipeline, distinguishing between steps and runnables, examining the changes made to the build queues (now handling each platform with a separate queue) and what is needed to resolve a derivation. Lastly, we will present compelling benchmarks demonstrating how these changes have significantly accelerated builds and enabled a substantial increase in the number of concurrently connected machines. false Slides https://talks.nixcon.org/nixcon-2025/talk/SNFQ7J/ https://talks.nixcon.org/nixcon-2025/talk/SNFQ7J/feedback/ Lecture Hall (5.002) Long talk 2025-09-05T13:30:00+02:00 13:30 00:45 None nixcon-2025-74291-you-can-t-spell-devshell-without-hell Zach Mitchell en Ever wondered how “nix develop” works? What kind of arcane horrors make our reproducible developer environments work? In this talk we’ll begin by explaining how “nix develop” works, then we’ll use that understanding to explore what it looks like to create an improved devshell experience, including improved startup times, extension to shells other than Bash, and adding packages without needing to exit and re-enter the shell. Along the way we’ll discuss some of the cursed idiosyncrasies of different shells, and some of the patterns for working around them. In the end we’ll all need therapy, but we’ll know more about how our shells are conspiring against us and why we should all be using Fish. false https://talks.nixcon.org/nixcon-2025/talk/MAEMPM/ https://talks.nixcon.org/nixcon-2025/talk/MAEMPM/feedback/ Lecture Hall (5.002) Short talk 2025-09-05T14:25:00+02:00 14:25 00:25 None nixcon-2025-78971-the-road-towards-a-nixos-ui Kenji BertholdQubasa en Imagine a Sim-City-style interface for managing your infrastructure: drag a machine onto the field, connect it to a service, and you're done. Behind the scenes, the clan.lol project turns that visual layout into the correct Nix modules - automatically configuring machines, managing secrets, and setting up a mesh VPN. In this presentation we detail: - **Visualize and Configure Networks in 3D** - A "Sim City" inspired 3D-UI to configure your selfhosted network without writing Nix! - **Portable Multi-Machine Module System** * Network-wide modules that configure multiple machines * Support for complex, role based relationships between machines (e.g. client, server) * Generation and distribution of secrets via generators - **Multi VPN support** * Support for running multiple VPNs at once * Deployment picks best suitable VPN connection * Extensible interface so users can define their own. - **Multi-Platform support** * Integrated MacOS support with nix-darwin. * Service Provisioning support false The Road
 Towards a 
NixOS UI - Slides https://talks.nixcon.org/nixcon-2025/talk/KX7AMW/ https://talks.nixcon.org/nixcon-2025/talk/KX7AMW/feedback/ Lecture Hall (5.002) Short talk 2025-09-05T15:35:00+02:00 15:35 00:25 None nixcon-2025-78677-is-nixos-ready-for-the-cra Lukas Beierlieb en The Cyber Resilience Act (CRA) is the EU's most important regulation for software in the last decade. While it makes an exception for open-source software and impact NixOS directly, any commercial product that includes NixOS has to comply with the CRA to allow offering in the EU. In this talk, we give insights into the CRA’s requirements, showcase that Nix tooling with its focus on reproducibility is very well positioned for compliance, and point out the unsolved shortcomings. We focus on the update mechanism, SBOM tooling (together with matching CVEs from vulnerability mechanisms), and support durations. false https://talks.nixcon.org/nixcon-2025/talk/3XBNPB/ https://talks.nixcon.org/nixcon-2025/talk/3XBNPB/feedback/ Lecture Hall (5.002) Short talk 2025-09-05T16:10:00+02:00 16:10 00:20 None nixcon-2025-79107-nix-based-development-environments-at-shopify-reprise Josh Heinrichs en Over the past year at Shopify we've undergone a lot of changes internally. We moved from cloud development to local development, multirepo to monorepo, and Homebrew / Apt to Nix. Today, the majority of development is being done inside Nix-based environments. Some may recall that Shopify was using Nix back in 2019[1], so what happened? This talk will cover: * Why that effort stalled * How devenv reignited interest in Nix * How we approached incrementally migrating a huge collection of projects * Where we're at today, and lessons learned along the way * The many benefits Nix has brought * The challenges of supporting a large polygot org with developers working at every layer of the stack * Where we're headed [1] https://www.youtube.com/watch?v=rYzjKCIqUVk false slides https://talks.nixcon.org/nixcon-2025/talk/UPHTPD/ https://talks.nixcon.org/nixcon-2025/talk/UPHTPD/feedback/ Lecture Hall (5.002) Short talk 2025-09-05T16:40:00+02:00 16:40 00:20 None nixcon-2025-78940-my-first-nix-aha-a-newcomer-s-perspective Kavisha Kumar en Abstract: When I first saw a colleague of mine typing "nix-shell", I had no idea what it did — but running it felt like magic. A swirl of "/nix/store/..." messages later, a fully working dev environment, with all the right tools and no system mess! Like Alice, I was “curiouser and curiouser.” In this talk, I’ll share the key “aha!” moments from my first few weeks with Nix — how I came to understand derivations, the Nix store, and pure builds. I’ll walk through the “from confusion to clarity” moments that helped me go from feeling lost in a sea of unfamiliar terminology to confidently writing my first Nix expressions. Along the way, I’ll highlight the resources, metaphors, and mental models that made the biggest difference — and the ones that didn’t. The Nix community is filled with passionate and experienced users, but for newcomers, the learning curve can feel overwhelming. This talk is not a tutorial, but a reflection: a newcomer’s perspective on what it’s like to learn Nix today, what helped me “get it,” and where the community can do more to support others on the same journey. Target Audience: - Beginners or those who are still wrapping their heads around Nix. - More experienced users who want to improve the Nix learning experience will also benefit, as they’ll gain a fresh perspective on how to present these concepts. false https://talks.nixcon.org/nixcon-2025/talk/FMTH39/ https://talks.nixcon.org/nixcon-2025/talk/FMTH39/feedback/ Lecture Hall (5.002) Short talk 2025-09-05T17:10:00+02:00 17:10 00:20 None nixcon-2025-78825-life-without-kubernetes-hosting-mirrors-with-nixos Sizhe Zhao en Kubernetes is good for many machines with complex networking setups, but not that good for a 2-machine one, especially when there's only one maintainer and zero documentation. At [GeekPie](https://github.com/ShanghaitechGeekPie), I've migrated [our mirror infrastructure](https://mirrors.shanghaitech.edu.cn/) to NixOS and in this talk I want to show how Nix helps us achieve more with less code & maintenance. false https://talks.nixcon.org/nixcon-2025/talk/MKJPLZ/ https://talks.nixcon.org/nixcon-2025/talk/MKJPLZ/feedback/ Lecture Hall (5.002) Short talk 2025-09-05T17:40:00+02:00 17:40 00:25 None nixcon-2025-78866-what-can-t-be-configured-with-nix June Stepp en From a seat at NixCon, it may feel like Nix can do anything, solve any problem, but is that true? It's time to find the limits of configuration with Nix.. if there are any. true https://talks.nixcon.org/nixcon-2025/talk/EP7AHE/ https://talks.nixcon.org/nixcon-2025/talk/EP7AHE/feedback/ Workshop room 1 (4.0114) Short workshop 2025-09-05T13:30:00+02:00 13:30 01:00 None nixcon-2025-79118-a-journey-into-nix-with-flox-how-to-convince-your-boss-security-department-peers-neighbours Tanja Ulianova en Ready to bring Nix into your team’s day-to-day? This interactive workshop shows you how Flox bridges the gap between Nix usage and a production-ready workplace—arming you with the tools, tactics, and success stories you need to: Sell Nix Internally: Craft a compelling “why Nix?” pitch for engineers, managers, and IT Overcome common objections around complexity and onboarding Unblock Nix Adoption: Define and share reproducible environments-as-code—no root privileges required Leverage Flox’s binary cache to deliver prebuilt packages in minutes Hands-On Hacking Session: Scaffold a new Nix-based project using Flox manifests Debug and iterate live: “works for me” guarantees across macOS, Linux, and ARM Real-World Wins & Lets Convince Your Boss, Peers, IT/Security Dep: Explore case studies from Fortune 500s who adopted the ways of Nix Learn best practices for multi-team collaboration, CI/CD integration, and stakeholder buy-in What You’ll Walk Away With: A tested playbook for pitching, piloting, and scaling Nix with some Flox help! A working Flox+Nix demo project you can show your boss tomorrow Templates for stakeholder presentations, success metrics, and rollout plans Insider tips and tricks from engineers who have “been there, built that” false https://talks.nixcon.org/nixcon-2025/talk/DAAMER/ https://talks.nixcon.org/nixcon-2025/talk/DAAMER/feedback/ Workshop room 1 (4.0114) Long workshop 2025-09-05T15:00:00+02:00 15:00 02:00 None nixcon-2025-79086-getting-started-with-nix-common-mistakes-and-how-to-dodge-them Rok Garbas en New to Nix? Want to finally understand what the hype is about—or help someone else get started? This workshop is your gateway into the world of reproducible builds, declarative environments, and dependency sanity. Designed for developers who are curious but haven’t yet made the leap, this hands-on session introduces the core concepts of Nix from the ground up. We’ll walk through installation (yes, including flakes), basic CLI usage, and the Nix language fundamentals, all with plenty of time for experimentation and Q&A. You’ll get your first taste of what makes Nix different—from the store model to derivations—and how it can change the way you develop, test, and deploy software. Expect a collaborative, beginner-friendly environment where questions are welcome and real-world use cases are front and center. Whether you’re a solo hacker, part of a team trying to reduce “it works on my machine” problems, or just Nix-curious, this workshop will help you build confidence and momentum for your Nix journey. Bring your laptop, a terminal, and an open mind. You might just leave with a new favorite tool—and a deeper appreciation for the Nix ethos. false https://talks.nixcon.org/nixcon-2025/talk/SGTUF7/ https://talks.nixcon.org/nixcon-2025/talk/SGTUF7/feedback/ Aula (4.101) Lightning talk 2025-09-06T10:45:00+02:00 10:45 00:05 None nixcon-2025-81384-saturday-opening-ceremony en Opening day 2 false https://talks.nixcon.org/nixcon-2025/talk/XVBSXD/ https://talks.nixcon.org/nixcon-2025/talk/XVBSXD/feedback/ Aula (4.101) Short talk 2025-09-06T11:00:00+02:00 11:00 00:25 None nixcon-2025-79111-the-bikes-have-been-shed-the-official-nix-formatter Silvan Mosberger en The history of how the [official Nix formatter](https://github.com/NixOS/nixfmt) was successfully established, along with its struggles and lessons. We go over: - How Nix didn't have a formatter for its first 15 years before the first ones were written - How an RFC to standardise the formatter took 3 years, 50 meetings and 600 comments to get accepted - How one of the most active codebases with 40k Nix files and 15k monthly commits got fully reformatted - What problems still exist and what the future of Nix formatting holds false https://talks.nixcon.org/nixcon-2025/talk/GCGE7K/ https://talks.nixcon.org/nixcon-2025/talk/GCGE7K/feedback/ Aula (4.101) Short talk 2025-09-06T11:35:00+02:00 11:35 00:25 None nixcon-2025-79213-derivationbuilder-extracting-nix-s-sandboxing-logic-for-library-use John Ericson en The most subtle part of Nix's store layer is the exact logic used to sandbox derivations. Mess up the daemon protocol, Local Store SQLite usage, drv file parsing, or other such things, and things should blow up immediately. [Fail Fast](https://en.wikipedia.org/wiki/Fail-fast_system) helps a lot! Mess up the sandboxing logic, however, and you might not notice for a while until you try to build just the right sort of derivation. For most of Nix's history, the sandboxing logic has been embedded within the build scheduling logic (which builds or downloades dependencies) thus entangling it with hefty other machinery that makes all sorts of assumption about how IO, concurrency, etc. should work. In other words, it was not written in a way that made it easy to use from any other program but Nix itself. In the last few months, however, we've finally untangled it and moved it into its own component, and then reworked it to give it a simple interface for FFI. In this talk, we'll briefly go over that work, and then demonstrate its use a simple example executable written in a friendlier language than C++. false https://talks.nixcon.org/nixcon-2025/talk/ZAHLMN/ https://talks.nixcon.org/nixcon-2025/talk/ZAHLMN/feedback/ Aula (4.101) Short talk 2025-09-06T13:30:00+02:00 13:30 00:45 None nixcon-2025-79067-steering-committee-foundation-board-panel NixOS Foundation boardNix Steering Committee en Discussion & Q&A false https://talks.nixcon.org/nixcon-2025/talk/RZPTFK/ https://talks.nixcon.org/nixcon-2025/talk/RZPTFK/feedback/ Aula (4.101) Long talk 2025-09-06T14:25:00+02:00 14:25 00:25 None nixcon-2025-78838-garn-a-faster-friendlier-nix-in-typescript Julian Kirsten Arni en Nix is a powerful tool, but it also comes with some well-known problems: a steep learning curve, bad error messages, and slow evaluation. What if we could solve these three problems in one stroke? garn is an experiment in doing just that. With garn, you define derivations with TypeScript instead of in the Nix language. TypeScript is familiar to most developers, well-documented, and supported by rich editor tooling - thus lowering the learning barrier. And instead of stack traces, you mostly get (much nicer) type errors. garn also rethinks the CLI, clarifying the core user-facing concepts in Nix, and how they relate to one another. What *exactly* is a devshell? A check? A NixOS configuration? What operations make sense with them? By thinking of these as first-class objects instead of "just derivations", garn makes the UX more approachable, and more powerful. The currently-released version of garn generates Nix code, which means we still incur the cost of (often slow) Nix evaluation. But we are working on a second version which ditches Nix evaluation altogether, and uses Nix only to build .drv files. This opens the door to substantial speed improvements, with techniques such as pre-evaluating Nix (FFI) code, caching evaluation in a finer-grained way, async IFD, and even using WASM as an alternative to IFD. This talk will show how garn works both above and under the hood. It's aimed at anyone interested in making Nix faster and more accessible. false https://talks.nixcon.org/nixcon-2025/talk/RJSMCA/ https://talks.nixcon.org/nixcon-2025/talk/RJSMCA/feedback/ Aula (4.101) Short talk 2025-09-06T15:00:00+02:00 15:00 00:25 None nixcon-2025-79124-how-nixos-is-built-from-pull-request-to-your-nix-store Dionysis Grigoropoulos en Let's follow the lifecycle of a change in Nixpkgs; from opening the Pull Request until the change makes it our local `/nix/store`. We'll explore all the CI systems involved in this process, how they interact, where and how they're defined in our codebases, and finally the security implications of each step. false https://talks.nixcon.org/nixcon-2025/talk/RF93ZE/ https://talks.nixcon.org/nixcon-2025/talk/RF93ZE/feedback/ Aula (4.101) Short talk 2025-09-06T15:35:00+02:00 15:35 00:20 None nixcon-2025-73840-finix-an-experimental-os-featuring-finit-as-pid-1-to-explore-the-nixos-design-space aanderse en NixOS is a remarkably flexible and powerful operating system, but its stability and scale can make it a challenging environment for exploring unconventional ideas. finix is an experimental Nix-based OS I built to break free from some of the constraints of upstream NixOS — a fully functional, Nix-built system that embraces rapid and bold experimentation over stability. This talk will walk through how I built finix, how I reuse much of NixOS’s scaffolding, and why I chose to try a different init system, finit. But more than the implementation details, I want to share how having a small, purpose-built codebase has created space to rapidly prototype ideas — like alternative service frameworks or minimal module sets — and see what works. finix isn’t meant to replace anything, but it could serve as a useful place to explore concepts that might one day feed back into the broader NixOS ecosystem, or at least help us think differently about how it’s designed. Beyond finix itself, I’d like to use this talk to advocate for a more diverse ecosystem of sibling projects in the Nix community — especially to better support efforts like the Nix-based BSD project. Valuable ideas don’t always need to go upstream to have an impact. Though built for experimentation, I run finix as my daily driver — and on my laptop, it’s just as smooth and capable as NixOS. That reliability makes it a practical foundation for trying out new ideas in real-world use, and it’s convinced me that we need more room for experiments like this — and more space for alternative perspectives in our community. false https://talks.nixcon.org/nixcon-2025/talk/Q8VUKL/ https://talks.nixcon.org/nixcon-2025/talk/Q8VUKL/feedback/ Aula (4.101) Short talk 2025-09-06T16:05:00+02:00 16:05 00:20 None nixcon-2025-78764-when-not-to-nix-working-with-external-config-and-sops-nix Ryota en Nix has got so many bells and whistles to meet most of the requirements, staying declarative with modularised setup to allow code reuse. However, this comes with a bit of a challenge for those who are starting the Nix journey -- it can be quite complex, or at least so does it seem. This talk focuses on some simpler approaches to use separate non-Nix files such as JSON, YAML and/or TOML for the configuration management. There are some gotchas around using file content, file as path, and potentially mixing and matching with Nix managed configs. The integration with other tools such as SOPS Nix will also be an interesting mix, where it is simpler to create a separate config file and substitute secret information with SOPS. Once you know the tools and solutions of not using Nix to get started, the Nix journey will be an easier one to get started with, and perhaps actually lead you to further Nix usage for areas where Nix language makes it easier. false https://talks.nixcon.org/nixcon-2025/talk/CPF8EH/ https://talks.nixcon.org/nixcon-2025/talk/CPF8EH/feedback/ Aula (4.101) Lightning talk 2025-09-06T16:35:00+02:00 16:35 00:05 None nixcon-2025-78830-novacustom-coreboot-laptops-and-mini-pcs-focused-on-privacy-and-customisation Sponsored Wessel klein Snakenborg - NovaCustom en This year, NovaCustom is a Silver Sponsor of NixCon25! But did you ever hear of us? NovaCustom is a custom laptop supplier from the Netherlands. We provide laptops and mini PCs with Dasharo coreboot open source firmware. We have a strong focus on security, privacy protection and customisation. So(,) similar to NixOS. I guess these values are in our Dutch roots! Alongside this lightning talk, we invite you to visit our stand during NixCon25 on Saturday, the 6th of September. Here, we will showcase our V54 and V56 laptop Series (preinstalled with NixOS, what else?), as well as our Nuc BOX mini PC. We are joining NixCon25 to see how we can strengthen the compatibility between NovaCustom computers and NixOS. Additionally, we are looking forward to get in touch with anyone for further discussions about hardware, firmware and software. Do we see you in Rapperswil-Jona? 🇨🇭 false https://talks.nixcon.org/nixcon-2025/talk/QZGSVN/ https://talks.nixcon.org/nixcon-2025/talk/QZGSVN/feedback/ Aula (4.101) Lightning talk 2025-09-06T16:40:00+02:00 16:40 00:05 None nixcon-2025-79342-how-jane-street-does-distributed-nix-builds Sponsored Aspen Smith en Sponsored Lightning Talk - JaneStreet false https://talks.nixcon.org/nixcon-2025/talk/8DMXUU/ https://talks.nixcon.org/nixcon-2025/talk/8DMXUU/feedback/ Aula (4.101) Lightning talk 2025-09-06T16:45:00+02:00 16:45 00:05 None nixcon-2025-79125-share-your-daemons-with-your-peers Yannik Sander en The `ssh-ng` store implementation allows connecting to remote daemons over ssh. However, between server management, key exchanges, and device discovery, SSH is not the most user friendly. Unfortunately `ssh-ng` is also the only store implementation for active remotes built into nix. Let's ignore that fact and forward a remote daemon via P2P instead. Why would you do this? Does this work? And what can we learn from it? This talk might answer any or all of that. false https://talks.nixcon.org/nixcon-2025/talk/FBZBUS/ https://talks.nixcon.org/nixcon-2025/talk/FBZBUS/feedback/ Aula (4.101) Lightning talk 2025-09-06T16:50:00+02:00 16:50 00:05 None nixcon-2025-79096-nixci-demo syd en In this demo I will demo https://nix-ci.com/ to showcase how Nix can give us zero-config locally reproducible CI. false https://talks.nixcon.org/nixcon-2025/talk/FHMLKZ/ https://talks.nixcon.org/nixcon-2025/talk/FHMLKZ/feedback/ Aula (4.101) Lightning talk 2025-09-06T16:55:00+02:00 16:55 00:05 None nixcon-2025-79343-nix-ninja-incremental-builds-using-dynamic-derivations Sponsored Edgar Lee en Nix builds packages from sources as monolithic units – if you change one source file, Nix rebuilds the entire package from scratch. We open-sourced nix-ninja which leverages the experimental “dynamic derivations” feature to bring compilation-unit level granularity to Nix builds. We target ninja build files, a common format for describing build graphs used by popular build systems like CMake and meson. This means existing CMake/meson projects can use nix-ninja in place of a regular ninja binary to incrementally build using Nix as a backend. Nix-ninja can compile CppNix today, but we’re still very early in development. I’d like to quickly introduce the project and inspire more interest in dynamic derivations. false https://talks.nixcon.org/nixcon-2025/talk/X9RTAR/ https://talks.nixcon.org/nixcon-2025/talk/X9RTAR/feedback/ Aula (4.101) Lightning talk 2025-09-06T17:00:00+02:00 17:00 00:05 None nixcon-2025-78563-recreational-receipt-printing Lillith "Infinidoge" en I bought a receipt printer on eBay for $50, and it is one of the best purchases I've ever made. Here's how I packaged the drivers for Nix, how I legitimately use it in my every day life, and some significantly sillier Nix-related uses. false https://talks.nixcon.org/nixcon-2025/talk/WNQEA8/ https://talks.nixcon.org/nixcon-2025/talk/WNQEA8/feedback/ Aula (4.101) Lightning talk 2025-09-06T17:05:00+02:00 17:05 00:05 None nixcon-2025-79344-expressvpn-nix-securing-privacy-at-scale Sponsored Samuel Tam (@usertam) en Come join our Nix world domination plans inside ExpressVPN! Much of the production pipelines for Lightway (our custom VPN protocol) and TrustedServer (our in-memory server architecture) are already there, but will Nix one-up our game? My verdict is yes :D false PDF Slides v2 PPTX Slides v2 https://talks.nixcon.org/nixcon-2025/talk/XYRRBF/ https://talks.nixcon.org/nixcon-2025/talk/XYRRBF/feedback/ Aula (4.101) Lightning talk 2025-09-06T17:10:00+02:00 17:10 00:05 None nixcon-2025-75779-agenix-shell-secrets-in-your-flake-s-shells-the-nix-way Andrea Ciceri en Leveraging `age` and `agenix`, this project makes it easy to inject secret-containing environment variables into your flake-based `devShells`. It simplifies onboarding for new developers by enabling secure secret sharing, and helps make projects more self-contained by removing the need for external secrets managers. https://github.com/aciceri/agenix-shell false https://talks.nixcon.org/nixcon-2025/talk/BABGSX/ https://talks.nixcon.org/nixcon-2025/talk/BABGSX/feedback/ Aula (4.101) Lightning talk 2025-09-06T17:15:00+02:00 17:15 00:05 None nixcon-2025-79336-maintaining-nixos-stability-for-years-cra-compliance-without-re-certification Sponsored Florian Pester en Shipping NixOS into products presents two challenges: the EU Cyber Resilience Act demands years of vulnerability management, SBOMs, and „security by design.“ Additionally, every OS upgrade can necessitate costly re-certifications. A pragmatic solution is to offer long-term support for specific NixOS releases (24.05, 26.05, …) and maintain a minimal, test-gated backport stream. This approach aligns with CRA obligations and avoids the re-certification cycle associated with frequent release changes. This approach is packaged as Ctrl-OS (Cyberus Technology Resilient Linux): a community-oriented NixOS LTS with a five-year support period, CRA-readiness, CVE tracking with continuous patch delivery, and SLAs with guaranteed fix timelines. The key takeaways are vendor-agnostic: strategies for mitigating re-certification risk and demonstrating security maintenance while adhering to the Nix philosophy. Furthermore, we will outline our plans for upstreaming and how to participate in the Ctrl-OS Open Beta to contribute to the development of a sustainable LTS narrative for NixOS. false Slides https://talks.nixcon.org/nixcon-2025/talk/PUWGED/ https://talks.nixcon.org/nixcon-2025/talk/PUWGED/feedback/ Aula (4.101) Lightning talk 2025-09-06T17:20:00+02:00 17:20 00:05 None nixcon-2025-79061-nix-in-the-wild Ross Turk en In this talk, we’ll share lessons from real teams using Nix in the wild: from startups building AI workflows to large orgs managing cloud infrastructure. Based on a series of interviews and stories, we’ll cover what’s working, what’s not, and how teams are making Nix part of their day-to-day development. We’ll talk about: * Why teams decide to use Nix * How they roll it out across engineering * Common challenges and how people solve them * Real-world examples of Nix in CI, AI, and production environments If you’ve ever wondered what it’s like to bring Nix to work—this talk will give you a clear, honest look. false https://talks.nixcon.org/nixcon-2025/talk/XSRZH8/ https://talks.nixcon.org/nixcon-2025/talk/XSRZH8/feedback/ Aula (4.101) Lightning talk 2025-09-06T17:25:00+02:00 17:25 00:05 None nixcon-2025-79339-what-is-clan Sponsored Brian McGee en A brief introduction to the Clan project and its goals https://clan.lol false Single slide to display during the talk https://talks.nixcon.org/nixcon-2025/talk/ZUJADF/ https://talks.nixcon.org/nixcon-2025/talk/ZUJADF/feedback/ Aula (4.101) Lightning talk 2025-09-06T17:30:00+02:00 17:30 00:05 None nixcon-2025-79119-styx-faster-substitution-less-disk-space David Reiss en I pushed a simple question—how fast can I make NixOS updates—way too far, and came up with something slightly crazy. The result combines various technologies to deduplicate data in a Nix store both on disk and over the network, add differential compression, and also enable on-demand fetching, without compromising system performance. I'll describe the ideas behind the system, trade-offs, and performance numbers. true https://talks.nixcon.org/nixcon-2025/talk/TQSJBE/ https://talks.nixcon.org/nixcon-2025/talk/TQSJBE/feedback/ Aula (4.101) Lightning talk 2025-09-06T17:45:00+02:00 17:45 00:15 None nixcon-2025-80826-closing-ceremony Farhad Mehta en Closing ceremony So long, and thanks for all the bees! false https://talks.nixcon.org/nixcon-2025/talk/TEPUWK/ https://talks.nixcon.org/nixcon-2025/talk/TEPUWK/feedback/ Lecture Hall (5.002) Short talk 2025-09-06T11:00:00+02:00 11:00 00:25 None nixcon-2025-78963-nixos-on-loongarch64 Weijia WangAleksana en Explain the current state of the LoongArch64 ecosystem, issues encountered with the Nixpkgs/NixOS port, and what to expect next false https://talks.nixcon.org/nixcon-2025/talk/BMXTFW/ https://talks.nixcon.org/nixcon-2025/talk/BMXTFW/feedback/ Lecture Hall (5.002) Short talk 2025-09-06T11:35:00+02:00 11:35 00:25 None nixcon-2025-79041-python-packaging-with-nixpkgs-pyproject-nix-uv2nix adisbladis en There is a broad range of possibilities when packaging Python with Nix. The amount of Python formats alone can be overwhelming: `requirements.txt`, `setup.py` & `pyproject.toml`, not to mention Conda! This talk aims to explain Python packaging with Nix, focusing on `pyproject.nix` & `uv2nix`, but I will also talk about other approaches and their trade-offs. We'll start off with a short primer on the different Python packaging formats & methods while explaining a few of the things that make Python packaging particularly murky & difficult. Then we'll go through a range of Nix packaging possibilities, starting with using plain nixpkgs & culminating in `pyproject.nix` & `uv2nix`. Along the way the pros and cons of each will be explored and what approach to use when and where. false https://talks.nixcon.org/nixcon-2025/talk/Y8TSAW/ https://talks.nixcon.org/nixcon-2025/talk/Y8TSAW/feedback/ Lecture Hall (5.002) Long talk 2025-09-06T13:30:00+02:00 13:30 00:25 None nixcon-2025-72195-internet-scale-routing-with-nixos Yifei Sun en This talk will be in the format of an experience report. We will go over how to use the module system to declaratively manage BGP sessions, set up routing policies to manage traffic between hosts using addresses within advertised prefixes using systemd-networkd and nftables in a multi-upstream setup, and how to run a primitive anycast CDN. The talk will also include hiccups encountered while experimenting with the BIRD Internet Routing Daemon, Tailscale, and improvement plans. GitHub: https://github.com/stepbrobd/router Slides: https://stepbrobd.github.io/router/slides.pdf false https://talks.nixcon.org/nixcon-2025/talk/7YWTUC/ https://talks.nixcon.org/nixcon-2025/talk/7YWTUC/feedback/ Lecture Hall (5.002) Long talk 2025-09-06T14:05:00+02:00 14:05 00:25 None nixcon-2025-79076-nixos-compose-local-development-vms-made-easy Sönke Hahn en When working on a software project, it can often be useful to spin up local development versions of services that run in production. This can be as simple as running a database to run your tests against, or as complicated as spinning up dozens of machines that talk to each other, while allowing you to observe and debug complex interactions. In some non-Nix projects, `docker-compose` is used for this successfully, but it requires a lot of manual configuration. In projects where production machines are declared as NixOS configurations, the Nix ecosystem provides a lot of powerful building blocks for running VMs. But existing tools require a lot of manual configuration in order to run networks of VMs locally. They also have unintuitive interfaces and poor documentation, making it hard to use them (and, often, even to know about them!). `nixos-compose` addresses these problems. It's a polished CLI tool that makes it remarkably easy to: Start one or more VMs from a flake file, SSH into them for debugging, enable network communication between them, and access VMs from the host. In this talk, we’ll tour through the features and implementation of `nixos-compose`. `nixos-compose` is an open-source tool built by garnix: https://github.com/garnix-io/nixos-compose false https://talks.nixcon.org/nixcon-2025/talk/BRJ8XS/ https://talks.nixcon.org/nixcon-2025/talk/BRJ8XS/feedback/ Lecture Hall (5.002) Short talk 2025-09-06T14:40:00+02:00 14:40 00:20 None nixcon-2025-79104-nix-as-a-solution-to-embedded-linux Óli en In this talk we go over how we leveraged Nix to build our new Katla synthesizer. We go through setting up development environment, CICD, Linux kernel optimizations, cross-platform compilation and other steps that make Nix a standout solution when building hardware products with a team distributed around the globe. false https://talks.nixcon.org/nixcon-2025/talk/YGL3MV/ https://talks.nixcon.org/nixcon-2025/talk/YGL3MV/feedback/ Lecture Hall (5.002) Short talk 2025-09-06T15:10:00+02:00 15:10 00:25 None nixcon-2025-78645-a-field-guide-to-nix-at-the-corporate Aleksander Gondek en In this most remarkable presentation, I chronicle my extensive explorations through the untamed wilderness of enterprise landscape and the experiences of applying Nix within said corporate domain. The audience shall discover the arcane rituals of cargo cults development, learn to navigate the treacherous waters of organisational silos and master the craft of sanctifying Nix usage. Like a seasoned naturalist cataloging the flora and fauna of some newly discovered archipelago, I have meticulously documented the peculiar behaviors of people unfamiliar with Nix, the resistance patterns towards making the effort to learn it, and the curious customs of playing the responsibility ping-pong. This tongue-in-cheek talk aims to share a collection of arguments and concrete actions one can make, to convince others to use Nix at their workplace. The rebuttal of frequent misconceptions (Docker makes nix not needed) included. false https://talks.nixcon.org/nixcon-2025/talk/3RHWND/ https://talks.nixcon.org/nixcon-2025/talk/3RHWND/feedback/ Lecture Hall (5.002) Short talk 2025-09-06T15:45:00+02:00 15:45 00:20 None nixcon-2025-79018-embarrassingly-parallel-evaluations Guillaume Maudoux (@layus) en **tl;dr:** _How we reduced evaluation time for 300+ packages from 5 mintues to 5 seconds._ --- Nix offers an unparalleled collection of readily packaged C/C++ libraries, with the added benefits of cross-compilation support and a declarative configuration language. That's why we chose it to manage third-party dependencies for our Bazel-built monorepo. This not-too-common use of Nix as a polyglot build system for external libraries and tools led us to approach Nix in a different way, both in how we think about it and how we used it. Our usage scenarios seemed rarely exercised an we found several opportunities for optimization in Nix code itself. At the core of the problem, we had 300+ packages that we needed to evaluate and build on demand. These evaluation times quickly added up, and we had to rethink the design to get some optimizations. This task set is embarrassingly parallel as each package evaluation is independent. But we realized along the way that full parallelism wasn’t the best we could do. We will explain how we leveraged nix evaluation caches (plural!), flakes, manually crafted store paths and parallel execution to reduce evaluation time from 5 minutes to 5 seconds, and bring other less quantifiable improvements. The work led to a few interesting scripts and two main PRs to nix itself (see below), one of which is already merged and released while the second is subject to discussion because of its impact on other cached operations. We will use that discussion to illustrate the tradeoffs of caching parallel evaluation. false PR #10570 -- Share evaluation caches across installables PR #10590 -- Efficent parallel use of eval caches Slides https://talks.nixcon.org/nixcon-2025/talk/FZNRLC/ https://talks.nixcon.org/nixcon-2025/talk/FZNRLC/feedback/ Lecture Hall (5.002) Short talk 2025-09-06T16:15:00+02:00 16:15 00:25 None nixcon-2025-78628-from-pixels-to-pure-derivations-deterministic-logos-with-nix Daniel Baker en When we think of reproducibility, we often focus on software builds, but what about the logos and visuals that represent our projects? In this talk, I’ll share how I approached logo design for the NixOS project with the same rigor we apply to software: deterministic outputs, minimal storage overhead, and fully free tooling. I’ll discuss the journey of building my own FOSS tooling to generate NixOS logos as SVGs from source code. Existing tools like Inkscape or Blender were either not parametric enough or not designed for clean, annotated vector outputs. By combining principles of CAD, typography, and color theory, I created a pipeline for reproducible, fixed-output derivations (FODs) that ensure all branding assets are versioned, verifiable, and easy to regenerate. This talk will cover: 1. The challenges of finding FOSS tools for parametric logo design. 2. Deep dives into fonts, kerning, and color spaces to build a consistent design language. 3. How I integrated FODs with verification tooling to ensure logo correctness. 4. Lessons learned about repository hygiene and why developers should expose overlays and NixOS modules rather than forcing consumers to hack around flake outputs. false https://talks.nixcon.org/nixcon-2025/talk/HWQRXK/ https://talks.nixcon.org/nixcon-2025/talk/HWQRXK/feedback/ Lecture Hall (5.002) Long talk 2025-09-06T16:50:00+02:00 16:50 00:25 None nixcon-2025-78961-kubernetes-on-nix Lux en Running a production grade kubernetes cluster is a non trivial task. Although many commercial and non-commercial solutions are available, each comes with its own limitations. Some are primarily meant to set up a single node development cluster, others have hardly any flexibility. Here NixOS comes to the rescue, allowing us to build our cluster the way we want. However, because of the complexity of such a multi host setup, this is a bit more work than a `services.kubernetes.enable = true;`. We will look into the Kubernetes modules in NixOS, and how we can use them to set up a production grade cluster. For this we will consider what certificates we need, and how we can utilize a secret management solution like agenix to deploy them. We will also analyze how we can utilize Nix and the kubernetes addon-manager to configure our cluster from nix. Being able to install tools like ingress or the cert-manager is the final piece to describe the entire cluster in our nix config. false slides https://talks.nixcon.org/nixcon-2025/talk/AZF8PR/ https://talks.nixcon.org/nixcon-2025/talk/AZF8PR/feedback/ Lecture Hall (5.002) Short talk 2025-09-06T17:25:00+02:00 17:25 00:20 None nixcon-2025-79082-applying-graph2diff-neural-repair-to-build-errors-in-nixpkgs Mutsuha Asada en This talk is a progress report on my senior thesis, not a finished case study. Build failures drain CI and human resources, and nixpkgs exacerbates the challenge due to its mix of languages and build systems. [BuildMedic](https://ieeexplore.ieee.org/document/8330201) (SANER, 2018) addresses dependency issues in Maven, and graph neural networks were tested at [Graph2Diff](https://dl.acm.org/doi/10.1145/3387940.3392181) (ICSEW, 2020). However, no analogous tool yet exists for Nix, where r-ryantm updates dependencies but rarely pinpoints the root cause. I am adapting the Graph2Diff approach to nixpkgs by harvesting failure-fix pull request (PR) pairs and extracting abstract syntax trees (ASTs) and build logs. The roadmap covers: 1. Dataset creation, 2. model design; and 3. a workflow in which the GNN proposes edits. While it is possible to have an LLM perform repairs, in a large repository such as nixpkgs, the cost is significant and cannot be ignored. My goal is to incorporate automatic repairs into nixpkgs in a way that will make them feasible in the future and reduce the burden on maintainers. true Applying Graph2Diff neural repair to build errors in nixpkgs https://talks.nixcon.org/nixcon-2025/talk/WUFEPF/ https://talks.nixcon.org/nixcon-2025/talk/WUFEPF/feedback/ Workshop room 1 (4.0114) Long workshop 2025-09-06T13:30:00+02:00 13:30 02:00 None nixcon-2025-78788-mastering-nixos-integration-tests-advanced-techniques-for-fast-and-robust-multi-vm-tests Jacek Galowicz en Join our two-hour, hands-on workshop to master the NixOS integration test driver! Learn to simulate complex, multi-host networks and explore modern features like testing with lightweight VMs. We'll cover new integration test driver features, using the interactive mode for powerful debugging, and share best practices to avoid flaky tests. This is a perfect opportunity to enhance your NixOS skills, build more reliable systems, and streamline your CI/CD pipelines with powerful, real-world testing. We will also have a look at some of the NEW debugging features of the test driver. false https://talks.nixcon.org/nixcon-2025/talk/CSWTHH/ https://talks.nixcon.org/nixcon-2025/talk/CSWTHH/feedback/ Workshop room 1 (4.0114) Short workshop 2025-09-06T16:00:00+02:00 16:00 01:00 None nixcon-2025-78863-continuously-integrating-your-nix-config João ThallisClaudio Neto en Learn to add continuous integration checks to your Nix configuration in this hands-on workshop. We'll guide you through building automated pipelines that run tests, build your config, lint your code and catch configuration errors and mistakes on each change you make. Participants will walk away with a CI pipeline for their Nix configs or projects, transforming how they manage their systems with confidence and reliability. false https://talks.nixcon.org/nixcon-2025/talk/B9S93H/ https://talks.nixcon.org/nixcon-2025/talk/B9S93H/feedback/ Workshop room 2 (4.0115) Long workshop 2025-09-06T13:30:00+02:00 13:30 02:00 None nixcon-2025-78436-dendritic-pattern Shahar "Dawn" Or en Take a couple of hours to jump-start a re-organization of some of your configurations (NixOS, nix-darwin, home-manager, etc.). [The dendritic pattern](https://github.com/mightyiam/dendritic) has been inspiring and being adopted by Nix users recently. Take a look and if it seems interesting, show up and Dawn (mightyiam) will help you get started on a branch, and share tools and techniques to help make refactoring configurations easier and safer. Hopefully, you'd end up with code that is more readable, maintainable, clean and much more to your liking, if you jive with this pattern. false https://talks.nixcon.org/nixcon-2025/talk/REJ3LF/ https://talks.nixcon.org/nixcon-2025/talk/REJ3LF/feedback/ Workshop room 1 (4.0114) Long workshop 2025-09-07T10:00:00+02:00 10:00 02:00 None nixcon-2025-79506-hack en Hacking, spontaneous talks, projects, and more false https://talks.nixcon.org/nixcon-2025/talk/E7CY83/ https://talks.nixcon.org/nixcon-2025/talk/E7CY83/feedback/ Workshop room 1 (4.0114) Long workshop 2025-09-07T13:30:00+02:00 13:30 02:00 None nixcon-2025-79507-hackier en Hacking, spontaneous talks, projects, and more false https://talks.nixcon.org/nixcon-2025/talk/MPWSSF/ https://talks.nixcon.org/nixcon-2025/talk/MPWSSF/feedback/ Workshop room 1 (4.0114) Long workshop 2025-09-07T15:30:00+02:00 15:30 02:00 None nixcon-2025-79510-hackiest en Hacking, spontaneous talks, projects, and more false https://talks.nixcon.org/nixcon-2025/talk/V37HDD/ https://talks.nixcon.org/nixcon-2025/talk/V37HDD/feedback/ Workshop room 2 (4.0115) Long workshop 2025-09-07T10:00:00+02:00 10:00 02:00 None nixcon-2025-79505-hack en Hacking, spontaneous talks, projects, and more false https://talks.nixcon.org/nixcon-2025/talk/JZVXZC/ https://talks.nixcon.org/nixcon-2025/talk/JZVXZC/feedback/ Workshop room 2 (4.0115) Long workshop 2025-09-07T13:30:00+02:00 13:30 02:00 None nixcon-2025-79508-hackier en Hacking, spontaneous talks, projects, and more false https://talks.nixcon.org/nixcon-2025/talk/KUUZBL/ https://talks.nixcon.org/nixcon-2025/talk/KUUZBL/feedback/ Workshop room 2 (4.0115) Long workshop 2025-09-07T15:30:00+02:00 15:30 02:00 None nixcon-2025-79511-hackiest en Hacking, spontaneous talks, projects, and more false https://talks.nixcon.org/nixcon-2025/talk/WUAMKK/ https://talks.nixcon.org/nixcon-2025/talk/WUAMKK/feedback/