Secure Software Dependency Management Everywhere with Nix
Tom Berek and Farid Zakaria dive into reproducible builds, Nixpkgs dependency isolation, and SBOM verification using Nix and NixOS.
Summary
The Growing Need for Reproducible Software Environments
Modern software deployment faces persistent challenges from unwanted application updates, third-party cloud data harvesting, and Docker image bitrot. Declarative package management offers a reproducible alternative for self-hosting.
Declarative Package Management with Nix and Nixpkgs
Tom Berek and Farid Zakaria explain how Nixpkgs—spanning over 120,000 Linux packages—enables deterministic builds, precise dependency isolation, and atomic system rollbacks across diverse architectures.
Software Supply Chain Traceability and SBOMs
Nix provides complete traceability of build inputs and dependency hashes, automatically generating verifiable Software Bills of Materials (SBOMs) without manual auditing.
Reclaiming Software Sovereignty in Homelabs
Deploying Nix and NixOS in self-hosted homelabs empowers users to maintain software independence, escape vendor lock-in, and build secure, long-lasting computing environments.
Related talks
Community Stage·53 min
Tom Berek · Farid Zakaria · D Baker
Explores how Nix and NixOS provide reproducible software builds, declarative dependency management, and SBOM traceability across homelabs and enterprise environments.
Main Stage·38 min
Maksim Shudrak
Provides an insider breakdown of detecting and neutralizing the historic XZ Utils backdoor (CVE-2024-3094) before widespread Linux distribution deployment.
Main Stage·38 min
Maksim Shudrak
Provides an in-depth breakdown of discovering and neutralizing the historic XZ Utils backdoor (CVE-2024-3094) before stable Linux distribution deployment.