博客來Turn your NixOS machines into auditable, rollback ready systems you can change with confidence.
NixOS gives you reproducible configuration, but it can still feel risky when a rebuild might lock you out of a remote server or break a workstation you rely on. Pinning Nixpkgs, wiring NixOS modules, and managing system generations all matter, yet they can be hard to connect into a day to day workflow.
This book walks you through concrete upgrade and rollback drills so you can treat NixOS as an operational tool, not a science experiment. Across scenarios as a fleet operator, laptop rebuilder, homelab maintainer, and CI release engineer, you learn how to move from ＂apply and hope＂ to deliberate, observable change.
- Pin and govern flake inputs and the lock file so rebuilds stop pulling surprise Nixpkgs changes.
- Structure NixOS module sets so each option has a clear owner and diffs stay readable as systems grow.
- Model profiles for laptops, homelab hosts, CI runners, and fleets, then connect them to specific system generations.
- Configure substituter endpoints, keys, and trust so fast builds do not turn into a supply chain risk.
- Keep secrets and recovery tokens out of the Nix store, and reason about GC root retention without losing rollback safety.
- Use system closure and system generation diffs to audit upgrades before rebooting or switching remote hosts.
- Rehearse revert strategies so you can select an earlier system generation confidently during incidents.
- Tame disk usage while still preserving enough history to recover from bad deployments.
This is a code heavy guide. Throughout the book you apply working Nix, NixOS module, Bash, and Systemd examples to build real configurations that you can adapt to your own machines and pipelines.
Grab your copy today and turn NixOS into a reliable, repeatable part of your operations toolkit.
