Datacenter-as-Code: The Arcana of Our Omniscient Build System Based on Nix
summary
A team uses Nix to build a global, deterministic dependency graph that produces binaries, Docker images, VM images and Kubernetes manifests and drives CI so only changed nodes rebuild. The demo shows a pipeline from binary → Docker image → manifest with a 4‑replica deployment where editing a string triggers just the needed rebuilds; tests run inside nyxos VMs, a failing test caused by a capitalization bug is fixed and the VM redeploys. The effort targets SecNumCloud certification by using a Nix-driven dependency graph plus nyxos VMs and tests for reproducible, auditable infrastructure-as-code.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:05Sens and project overview
- 3:12Nix vs Terraform
- 10:56Nix ecosystem benefits
- 13:24Nix for Infra-as-Code demo
- 19:23Build and test optimization
- 23:38Global dependency tree
- 25:23Global tree demo with Nix
- 36:06Advanced use cases
- 38:20Q&A
related talks
30mA beginner's journey: Scaling self-hosted platform infrastructure with Nomad
27mInfrastructure as (first-class) Code
01h 02mTools and Techniques for Infrastructure as Code
01h 01mTaming the Modern Data Center
33mIntent-based holistic data center management
01h 02mTools and Techniques for Infrastructure as Code
50mInfrastructure-From-Code and the end of Microservices
23mUnleashing Potential Across Teams: Infrastructure as Code