Tried it (rpi4), working. Even managed to encrypt the SD. Can't get nixops to work from my x86_64 notebook to deploy on the rpi though, I gave up on that. Nix

Tried it (rpi4), working. Even managed to encrypt the SD. Can't get nixops to work from my x86_64 notebook to deploy on the rpi though, I gave up on that. Nixos is really nice, But I find that the declarative conf still has a lot to iron out. Currently I only use it as a base system with declarative podman containers for pihole, freeipa (manually docker-built from the fedora image), postgres, nextcloud. Only nginx installed via nixos conf on the base system. I use podman containers since I could not find a way to have user-namespaced containers, or even just containers that don't share the whole /nix, which I find as a huge security risk. I really don't care about disk space. Duplicate everything but let me isolate those containers as much as possible. Podman containers give me read-only filesystem, too. Maybe nixops might have helped, but it would have prevented me from going read-only filesystem I tried using the declarative part of nixos to configure nginx, but I ended up dumping all the nginx conf on the single "extra" conf variable since proper declarative nginx vhosting with more than one location just does not let you do what you want (and is broken: do NOT reader my locations!!). Manual dump of the conf also for the cni network management of podman. wpa_supplicant most of the times starts too early and I didn't manage to make it run later, crashed. I am using ethernet without problems. So for me Big Kudos to the Nix(,Os,Ops) teams for the work done, I believe that is the future we should work towards. But we are still a far way off on many things. Documentation is also really scarce (and at rare times wrong), which increase the already steep learning curve. So sorry for the 'bad' review, but know that I still do not lose faith and will keep learning and trying. The basic idea is really that good for a sysadmin like me.