# How Our Server Got It's Groove Back

URL: /show/linux-unplugged/524/
> Can we build an indestructible server that stands up to the test of giving out root login to the Internet?

- Show: [LINUX Unplugged](/show/linux-unplugged/)
- Episode: 524
- Date: 2023-08-20
- Hosts: chris, wes, brent
- Duration: 01:06:16
- Audio: https://aphid.fireside.fm/d/1437767933/f31a453c-fa15-491f-8618-3f71f1d565e5/301bf82e-5fde-47c9-8129-5fc5c6ef7fc4.mp3



Sponsors:
- [Tailscale](/sponsors/tailscale.com-lup/index.md): Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
- [Linode Cloud Hosting](/sponsors/linode.com-lup/index.md): A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.
- [Kolide](/sponsors/kolide.com-lup/index.md): Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn’t trusted and secure, it can’t log into your cloud apps.




### Episode Links

  * [🎉 Alby](https://getalby.com/ "🎉 Alby") — Boost into the show, first grab Alby, top it off, and then head over to the Podcast Index.
  * [⚡️ LINUX Unplugged on the Podcastindex.org](https://podcastindex.org/podcast/575694 "⚡️ LINUX Unplugged on the Podcastindex.org") — You can boost from the web. Once Alby is topped off, visit our page on the Podcast Index.
  * [Spokane Linux Love, Sat, Sep 16, 2023, 1:00 PM | Meetup](https://www.meetup.com/jupiterbroadcasting/events/295568221 "Spokane Linux Love, Sat, Sep 16, 2023, 1:00 PM | Meetup") — It's finally happening! Let's get together at Iron Goat Brewing.
  * [Best laptops for NixOS - Help - NixOS Discourse](https://discourse.nixos.org/t/best-laptops-for-nixos/8545 "Best laptops for NixOS - Help - NixOS Discourse")
  * [Mobile NixOS](https://mobile.nixos.org/ "Mobile NixOS")
  * [Devices List — Mobile NixOS](https://mobile.nixos.org/devices/index.html "Devices List — Mobile NixOS")
  * [Iron Goat Brewing](https://irongoatbrewing.com/ "Iron Goat Brewing")
  * [LinuxFest Northwest 2023 Sponsorship Prospectus](https://lfnw.org/linuxfest-northwest-2023-sponsorship-prospectus.pdf "LinuxFest Northwest 2023 Sponsorship Prospectus") — LinuxFest Northwest 2023 will be held October 20-22, 2023 at Bellingham Technical College. The Fest is a free and open community event dedicated to provide and support educational activities related to Linux and Open Source Software.
  * [NixOS friendly hosters - NixOS Wiki](https://nixos.wiki/wiki/NixOS_friendly_hosters "NixOS friendly hosters - NixOS Wiki")
  * [Install and Configure NixOS on a Linode | Linode Docs](https://www.linode.com/docs/guides/install-nixos-on-linode/ "Install and Configure NixOS on a Linode | Linode Docs")
  * [Star-History](https://star-history.com/ "Star-History") — We know, you can't fully trust a project's GitHub stars alone. It is, however, a good way to determine if a tool is an adequate one and if it's likely to grow, if you use it correctly.
  * [disko](https://github.com/nix-community/disko "disko") — NixOS is a Linux distribution where everything is described as code, with one exception: during installation, the disk partitioning and formatting are manual steps. disko aims to correct this sad 🤡 omission.
  * [nixos-anywhere](https://github.com/numtide/nixos-anywhere "nixos-anywhere") — You can then initiate an unattended installation with a single CLI command. Since nixos-anywhere can access the new machine using SSH, it's ideal for remote installations.
  * [Immutable infrastructure for mutable systems](https://grahamc.com/blog/erase-your-darlings/ "Immutable infrastructure for mutable systems") — I erase my systems at every boot.
  * [NixOS Series 4: "Stateless" Operating System](https://lantian.pub/en/article/modify-computer/nixos-impermanence.lantian/ "NixOS Series 4: "Stateless" Operating System") — Here's the question: is it really necessary to store the contents of /etc on the disk drive? They're going to be regenerated on each reboot or config switch anyway.
  * [NixOS ❄: tmpfs as root](https://elis.nu/blog/2020/05/nixos-tmpfs-as-root/ "NixOS ❄: tmpfs as root") — One fairly unique property of NixOS is the ability to boot with only /boot and /nix. Nothing else is actually required. This supports doing all sorts of weird things with your root file system.
  * [Nixos and Erasing My Darlings](https://hanckmann.com/posts/nixos-and-erasing-my-darlings/ "Nixos and Erasing My Darlings")
  * [Impermanence - NixOS Wiki](https://nixos.wiki/wiki/Impermanence "Impermanence - NixOS Wiki") — Impermanence in NixOS is where your root directory gets wiped every reboot (such as by mounting a tmpfs to /). Such a setup is possible because NixOS only needs /boot and /nix in order to boot, all other system files are simply links to files in /nix. /boot and /nix still need to be stored on a hard drive or SSD.
  * [impermanence: Modules to help you handle persistent state on systems with ephemeral root storage [maintainer=@talyz]](https://github.com/nix-community/impermanence "impermanence: Modules to help you handle persistent state on systems with ephemeral root storage \[maintainer=@talyz\]")
  * [Example ZFS + tmpfs root configuration](https://gist.github.com/ChickenParmigiana/72e5ee51bc08c07ac1bbc5ea39a90bad "Example ZFS + tmpfs root configuration")
  * [NixOS on Btrfs+tmpfs](https://cnx.gdn/blog/butter/ "NixOS on Btrfs+tmpfs")
  * [A plan to stabilize the new CLI and Flakes incrementally](https://github.com/NixOS/rfcs/pull/136 "A plan to stabilize the new CLI and Flakes incrementally") — Ever since the closing of RFC 49, we've had the new CLI and Flakes marked as experimental, with no clear plan forward.
  * [project Stratis](https://stratis-storage.github.io/ "project Stratis")
  * [Backups - Perfect Media Server](https://perfectmediaserver.com/04-day-two/backups/ "Backups - Perfect Media Server")
  * [Podverse GitHub](https://github.com/podverse/ "Podverse GitHub") — Podverse has a bounty out for Android Auto.
  * [Jay Sam Bee in Philadelphia NixOS Bounty](https://paste.docs.lol/reader/ColludeLemniscus "Jay Sam Bee in Philadelphia NixOS Bounty") — Jay has a bounty for getting Wallabag on NixOS.
  * [Self-Hosted 102: NixOS is a bit Flakey](https://selfhosted.show/102 "Self-Hosted 102: NixOS is a bit Flakey")
  * [completenoobs.com](http://completenoobs.com/ "completenoobs.com")
  * [OpenStreetMap.org](http://openstreetmap.org/ "OpenStreetMap.org") — OpenStreetMap is a map of the world, created by people like you and free to use under an open license.
  * [OSMand.net](http://osmand.net/ "OSMand.net")
  * [OSM is an extensible editor for ​OpenStreetMap](http://josm.openstreetmap.de/ "OSM is an extensible editor for ​OpenStreetMap")
  * [OSM is an extensible editor for ​OpenStreetMap](http://f-droid.org/packages/net.osmtracker/ "OSM is an extensible editor for ​OpenStreetMap")
  * [Street­Complete](http://f-droid.org/en/packages/de.westnordost.streetcomplete/ "Street­Complete") — Help to improve the OpenStreetMap with StreetComplete!
  * [nixpkg.py](https://github.com/soltros/nixpkg.py "nixpkg.py")



