FAQ

What makes it secure?

The defaults are closed, and every change to the system can be undone. security lists the settings.

Where do the packages come from?

They come from the Nix package collection, which is unpacked in /rod/nixpkgs at a pinned revision. The revision changes only when you run rod +s or rod +u.

How do I go back after a bad update?

rod takes a frame before each install, remove and update. scram flash --boot FRAME returns the packages, the configuration and the home directories to that frame. Alternatively, choose a frame in the boot menu. See troubleshooting.

What happens to my files when I flash a frame?

They return to the state of the frame, except for directories that were left out. A frame of the current state is taken first, so a flash can itself be undone.

Is a frame a backup?

No. A frame is stored on the same disk as the system. See backups.

How do I install something that is not in the collection?

See package not in rod.

Does it run on real hardware?

It has been run only in QEMU with KVM and OVMF. See hardware status.