I experimented with several ways to run my services:

  1. “regular” systemd services (services.glance = { ... };)
  2. nix containers (containers.glance = { ... };)
  3. podman containers (virtualisation.oci-containers.containers.glance = { ... })

and I must say I’m starting to appreciate the last option (the least nixos-y) more and more.

Specifically, I appreciate that:

  • I just have to learn the app/container configuration, instead of also backwards-translating from their config into the various nixos options (of course the .yaml or whatever configuration files are still generated from my nixos config, I just do that in a derivation instead on relying on a module doing it for me)
  • Services are sometimes outdated in nixpks (even in unstable - and juggling packages between stable and unstable is yet another complication)
  • I feel like it’s more secure (very arguable and also of very little consequence since everything is on my homelab… it’s mainly for the warm fuzzies)

Do you guys use one of the options above? Something different?

  • mlaga97@lemmy.mlaga97.space
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 months ago

    Plain old docker compose since it seems to come with by far the fewest surprises and is most widely supported.

    Nearly every project of interest has a compose.yml available, which is hardly true for systemd services, nix services, or for podman/kubernetes.

    I was using podman-compose briefly, but it is just different enough to break in unclear ways and I kept having to fight with it so I went back to docker docker to eliminate the headache.

    • verstra@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      2 months ago

      This is the way. Docker (& compose) are not flawless, but they are predictable and useful enough for all my needs.

      I currently have around 12 containers running on my server, all trough docker compose. Only thing I use nix for is providing tools & their configs. And also restic backups.

  • ahoneybun@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 months ago

    I guess I’m weird and use the NixOS options and packages? I just have Jellyfin and Kavita setup currently but I want more.

    • monkA
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      No, that’s the way. Containers are glorified chroots to work around the fact that 20th century package managers can’t manage packages for shit. NixOS needs none of that.

  • thejevans@lemmy.ml
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 months ago

    I use proxmox as my hypervisor with:

    1. TrueNAS VM
    2. Home Assistant OS VM
    3. Debian VM for MDAD and MASH, but I’m slowly moving things to Nix when I can.
    4. NixOS VM for everything else using compose2nix for services designed for docker and regular systemd services where it makes sense.
  • vividspecter@lemm.ee
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    2 months ago

    I use both 1 and 3, personally (although docker rather than podman). I normally prefer the nix way but it doesn’t support every service. I like that nix config is all in one place. In theory, so is docker-compose to am extent but there are usually exceptions and things can get complex. I also hate having to directly manage containers with minimal commandline tools.

    But yeah the whole translate config routine in nix is kind of annoying, and I often need to experiment to get the options right if they aren’t documented.

  • SaintWacko@slrpnk.net
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 months ago

    My server runs Proxmox and I usually just run things as a systemd service each in its own virtual container

  • kahnclusions@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 months ago

    Like another commenter I’m also running Proxmox. I have a couple VMs to ensure certain services have total segregation, and otherwise usually configure systemd services from my nix flake.

  • malteneuss@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 months ago

    This is an important question for selfhosting, which there’s too little guidance. It should be systemd services somehow, but i want to deploy NixOS (the underlying platform) separate from independent collections of services (one collection per app/project) without having to use another tool or concept like Docker or Kubernetes… Also i’m really looking forward to NixOS “Contracts” https://github.com/ibizaman/selfhostblocks

  • cdombroski@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 months ago

    If the package you’re using stays up to date and doesn’t require much setup, you could plug a dockerTools.buildLayeredImage into the imageFile attribute. The name and the tag in the built image should match what’s in the image attribute. An example (busybox is only included for debugging):

            image = "my-calibre-web:latest";
            imageFile = pkgs.dockerTools.buildLayeredImage {
              name = "my-calibre-web";
              tag = "latest";
              contents = [ pkgs.busybox ];
              config.Cmd = [
                "${pkgs.calibre-web}/bin/calibre-web"
                "-p"
                "/config/app.db"
                "-g"
                "/config/gdrive.db"
                "-i"
                "0.0.0.0"
              ];
            };
    
  • sudo@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 months ago

    ansible-playbook even if its just one target host. Services might get hosted as systemd or docker, or a raw binary, whatever’s appropriate. The absible docker module is extremely similar to docker-compose. It only gets messy if you have a complicated system of networks and dependencies.