3 ms·
I really would like to use it in the enterprise. But secure boot was not easy to do the last time I used it. And i still don’t have a clue how to package things
by weitzj 4y ago
I really would like to use it in the enterprise. But secure boot was not easy to do the last time I used it. And i still don’t have a clue how to package things which are delivered as Deb or rpm packages (I.e. a vpn client)
And getting management approval to build a packaging team so that you are not the only person In the company to go to, is a hard sell
- kaba0 4y agoWell if there is no other source/binary available then you have to uncompress the deb/rpm file (both have some utility for that), look up the dependencies from somewhere, copy the extracted files over to the nix output dir, and patch-elf all the binaries to link to the nix-version of the dynamic lib. This sounds more difficult than it is, the result will be a copied over binary file that has its “libc.so” and other dynamic libs replaced in the ELF-header with “/nix/store/hdjdewuieu737-libc/libc.so”. I recommend looking up a package in nixpkgs which has a similar install story, that’s the easiest way to write a new package. In case you only want to run it locally https://github.com/thiagokokada/nix-alien https://github.com/thiagokokada/nix-alien and similar programs work fine with the binary.
- phaer 4y agoAfaik it's not finished yet, but there recently has been quite a lot of activity regarding secureboot for nixos https://github.com/nix-community/lanzaboote/ https://github.com/nix-community/lanzaboote/