···11+# Non Switchable Systems {#sec-non-switchable-system}
22+33+In certain systems, most notably image based appliances, updates are handled
44+outside the system. This means that you do not need to rebuild your
55+configuration on the system itself anymore.
66+77+If you want to build such a system, you can use the `image-based-appliance`
88+profile:
99+1010+```nix
1111+{ modulesPath, ... }: {
1212+ imports = [ "${modulesPath}/profiles/image-based-appliance.nix" ]
1313+}
1414+```
1515+1616+The most notable deviation of this profile from a standard NixOS configuration
1717+is that after building it, you cannot switch *to* the configuration anymore.
1818+The profile sets `config.system.switch.enable = false;`, which excludes
1919+`switch-to-configuration`, the central script called by `nixos-rebuild`, from
2020+your system. Removing this script makes the image lighter and slightly more
2121+secure.
···357357358358## Other Notable Changes {#sec-release-23.11-notable-changes}
359359360360+- A new option `system.switch.enable` was added. By default, this is option is
361361+ enabled. Disabling it makes the system unable to be reconfigured via
362362+ `nixos-rebuild`. This is good for image based appliances where updates are
363363+ handled outside the image.
364364+360365- The Cinnamon module now enables XDG desktop integration by default. If you are experiencing collisions related to xdg-desktop-portal-gtk you can safely remove `xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];` from your NixOS configuration.
361366362367- GNOME, Pantheon, Cinnamon module no longer forces Qt applications to use Adwaita style since it was buggy and is no longer maintained upstream (specifically, Cinnamon now defaults to the gtk2 style instead, following the default in Linux Mint). If you still want it, you can add the following options to your configuration but it will probably be eventually removed:
···11+# This profile sets up a sytem for image based appliance usage. An appliance is
22+# installed as an image, cannot be re-built, has no Nix available, and is
33+# generally not meant for interactive use. Updates to such an appliance are
44+# handled by updating whole partition images via a tool like systemd-sysupdate.
55+66+{ lib, modulesPath, ... }:
77+88+{
99+1010+ # Appliances are always "minimal".
1111+ imports = [
1212+ "${modulesPath}/profiles/minimal.nix"
1313+ ];
1414+1515+ # The system cannot be rebuilt.
1616+ nix.enable = false;
1717+ system.switch.enable = false;
1818+1919+ # The system is static.
2020+ users.mutableUsers = false;
2121+2222+ # The system avoids interpreters as much as possible to reduce its attack
2323+ # surface.
2424+ boot.initrd.systemd.enable = lib.mkDefault true;
2525+ networking.useNetworkd = lib.mkDefault true;
2626+}
+9
nixos/modules/profiles/minimal.nix
···18181919 documentation.nixos.enable = mkDefault false;
20202121+ # Perl is a default package.
2222+ environment.defaultPackages = mkDefault [ ];
2323+2424+ # The lessopen package pulls in Perl.
2525+ programs.less.lessopen = mkDefault null;
2626+2727+ # This pulls in nixos-containers which depends on Perl.
2828+ boot.enableContainers = mkDefault false;
2929+2130 programs.command-not-found.enable = mkDefault false;
22312332 services.logrotate.enable = mkDefault false;
···11+diff --git a/Makefile.PL b/Makefile.PL
22+index eaf47e0..32766d7 100644
33+--- a/Makefile.PL
44++++ b/Makefile.PL
55+@@ -146,7 +146,7 @@ extern "C"
66+ /* We use char because int might match the return type of a gcc2
77+ builtin and then its argument prototype would still apply. */
88+ char $f ();
99+-char (*f) ();
1010++char f;
1111+1212+ #ifdef F77_DUMMY_MAIN
1313+ # ifdef __cplusplus
···2828 generate = ...;
29293030 });
3131+3232+ Please note that `pkgs` may not always be available for use due to the split
3333+ options doc build introduced in fc614c37c653, so lazy evaluation of only the
3434+ 'type' field is required.
3535+3136 */
323733383439 inherit (import ./formats/java-properties/default.nix { inherit lib pkgs; })
3540 javaProperties;
4141+4242+ libconfig = (import ./formats/libconfig/default.nix { inherit lib pkgs; }).format;
36433744 json = {}: {
3845
···328328 gradle_5 = throw "gradle_5 has been removed because it's no longer being updated"; # Added 2023-01-17
329329 gr-ais = throw "'gr-ais' has been renamed to/replaced by 'gnuradio3_7.pkgs.ais'"; # Converted to throw 2023-09-10
330330 graylog = throw "graylog is now available in versions 3.3 up to 5.0. Please mind the upgrade path and choose the appropriate version. Direct upgrading from 3.3 to 4.3 or above is not supported"; # Added 2023-04-24
331331+ graylog-3_3 = throw "graylog 3.x is EOL. Please consider downgrading nixpkgs if you need an upgrade from 3.x to latest series."; # Added 2023-10-09
332332+ graylog-4_0 = throw "graylog 4.x is EOL. Please consider downgrading nixpkgs if you need an upgrade from 4.x to latest series."; # Added 2023-10-09
333333+ graylog-4_3 = throw "graylog 4.x is EOL. Please consider downgrading nixpkgs if you need an upgrade from 4.x to latest series."; # Added 2023-10-09
331334 gr-gsm = throw "'gr-gsm' has been renamed to/replaced by 'gnuradio3_7.pkgs.gsm'"; # Converted to throw 2023-09-10
332335 gringo = clingo; # added 2022-11-27
333336 gr-limesdr = throw "'gr-limesdr' has been renamed to/replaced by 'gnuradio3_7.pkgs.limesdr'"; # Converted to throw 2023-09-10