As an bitcoiner I want an secure and easy to move os from
hardware to hardware without breaking the configurations
and reinstalling packages. Backing up .dot files works good.
I have used debian derivates for years...
As a computer geek it's still great but for thinkering. But
for valuable libaries like "Bitcoin layer 1 and ontop layers "
I want to step up my opsec by minimize updates as less as
possible but still be current.
In searching of the best solutions I stumble upon
immutable oses. First was ostree of fedora. Then nix os After doing my due diligence I found guix.
immutable oses. First was ostree of fedora. Then nix os After doing my due diligence I found guix.
I liked quix over nix because of what could understand within my
technical limits.
1 Guix and Nix are both immutable en updates are generational,
meaning that you can update after you are 100% sure and rollback
if necesary.
2 Packages is run separate form each other. something like containers
( still doing due diligence to understand the difference
compartmentalisation technologies available )
3 System deamons like systemd guix has his own services manager
called Shepherd. Shepherd is a service manager that looks after
the herd of daemons running on the system. Like the difference
between systemd and openrc shepherd is more modular as i could
understand and more secure in my view
4 Managing Guix is less complicated than nix os but still steep
learning curve for a guy like me. You have to know Guile to
configure the configuration files that will make the installation
unattended. As a could understand that guile (lisp derived ) is
a general programing laguage less specific like
nix (haskell derived ) so more accessable.
5 The config file is separated for the hardware config file. Means
that I can easy port all my installation configuration to other
hardware with ease ( look up delarative configuration) I can
easilly use the same config and change a little to run on mobile
desktop or server. Image the flexablity it would bring. Orange
pill is a breeze. You can make a template and Have an os running
in no time for the new pleb.
There are more differences but for me that are a few that I like
My plan for the future is open a gitlab account. Use that account
specific for the config file of "Citadel Os" I will post a bounty
for the one who can make this config file possible and be peered
review for security. I want it with all bell and whistles, like
full disk encryption,heads, pam, selinux ecetra. And more important
also mobile version.
I Know is guix is kernel is not so popular but we can try it with
linux kernel for those who have not an opensource hard ware and
for those who has purism/pine64 devices or like wait and see the
demand for support for hurd.
If some body wants to take this idea away is welcome. It wil be a
product for us all.