hi I'm still exploring stuff and I was thinking about nix, with all his stuff, what do you guys think? maybe someone with experience can tell me if I should stay away from that or could be a good choice for privacy, anonimity and security

  • alt@lemmy.ml
    ·
    10 months ago

    Most distros are somewhat equal when it comes to privacy, anonymity and security; with the likes of Fedora and openSUSE known for taking it more seriously out of the box than the other 'big bois', while some smaller distros like Kicksecure are known for their best-in-class[1] hardening that they offer by default.

    As for NixOS, it's really its own thing (together with Guix), and thus very different from any other distros. If you conquer it, you would be delightfully met by a system that enables you to do things unheard of in other distros. However, the learning curve is very steep. And perhaps even hardening it to the level that Fedora or openSUSE provide by default might not be trivial.

    1. Qubes OS is technically not a Linux distro. But it's worth mentioning as one generally tends to run Linux within a qube (read: VM), and in regards to security and privacy Qubes OS is simply unmatched, period.
  • Euphoma@lemmy.ml
    ·
    10 months ago

    If you don't have much experience with linux you should not use nixos. I don't think nixos is any different from debian or fedora in privacy, anonymity, or security. Many people even reduce their privacy by putting their config on github.

    • toastal@lemmy.ml
      ·
      10 months ago

      I mean yes you reduce your privacy by interacting with Microsoft GitHub in general, but posting your Nix config to the public isn’t much of a privacy concern since you shouldn’t have any plaintext secrets anyhow as a best practice since it would be compiled into the Nix store. There are a couple of different ways to encrypt secrets, as well as just not committing private *.nix to a public repository.

      • Euphoma@lemmy.ml
        ·
        10 months ago

        Other people will know what bootloader you use, what apps you use, etc. Yeah I guess its not a huge concern, but its something.

  • coolboole@infosec.pub
    ·
    10 months ago

    NixOS can be a real pain when it comes to pre boot encryption and secure boot. If you're intending on going deep into hardware security I'd avoid it.