QixOS

Qubes with Nix. The security and compartmentalisation of QubesOS, plus the configurability, shareability and packages of NixOS.

QixOS gives you a way to manage multiple VMs with strong security isolation through nix configuration files. It tries to reinvent as few wheels as possible, instead opting to combine various giants to play to their strengths.

QixOS installs inside an existing QubesOS system as an extension. Installation does not mean having to risk your existing qubes nor does it mean having to alter those qubes in any way. You can install it and play around with it while slowly migrating the things you feel comfortable to a declarative .nix configured setup.

QixOS is meant to make it easy to share configurations between users. A configuration can live either locally on your machine or in a remote git repository. Either way you reference it using it using a url which points to a nix flake. Configurations are meant to be able to be installed with a low degree of trust. The configuration only activates inside of the specific AppVM that it is deployed to.

There is a github community repo meant to share configurations with others. If you want to share with others please make a PR which either submits a configuration to your own user directory or submit a link to your own repo.

QixOS is in public alpha

Signing key

6FF0 D321 E958 C33A 1EF8  30F6 A887 CDDA 93F1 699A
op <op@qixos.org>