Solving Dumb Hacker Problems With Nix | Ryan Basden

Hacker environment chaos

Ryan Basden, ex-Fox red team and pentest director, describes recurring "dumb hacker problems": broken dependencies, inconsistent tool versions, and ad-hoc VM sprawl. He turned to Nix after Arch Linux dotfiles failed to deliver the declarative reproducibility he expected.

What Nix actually is

Nix is simultaneously a package manager (drop-in for apt, brew, pacman), a pure functional expression language, and the foundation for NixOS declarative system configuration. Packages live in the Nix store with content-addressed paths, enabling rollbacks and identical environments across machines.

Practical hacker workflows

Basden covers home-manager dotfiles, ephemeral root filesystems that wipe on reboot while persisting the store, atomic generation rollbacks after breaking a desktop, and systemd-nspawn containers without Docker. Trade-offs include abstraction complexity and friction when Nix wraps systemd behaviors he prefers to manage directly.