Notes 
NixOS is a Linux distribution built entirely on the Nix package manager, where the whole system (kernel, packages, services, and configuration) is declared in a single set of files. Upgrades are atomic and fully reproducible rollbacks are a built-in feature.
Reviewed by Marco Wollank
NixOS
nixos.org 5.0 (8)
Rate NixOS: No account needed
Threat level
Hardened
A hardened pick. Worth the effort once you have chosen to shrink your footprint on purpose. Enough for most people. Threat levels
Our take
NixOS takes the reproducibility idea further than any other mainstream distro: you can commit your system config to a repo and rebuild an identical machine elsewhere, which is a real privacy and security advantage because accidental drift is impossible. The Nixpkgs collection is among the largest of any package manager. The learning curve is steep (the Nix language and its functional approach to configuration are genuinely unfamiliar territory), and some proprietary software or closed-source drivers require extra effort. The right choice for technically curious users who want a fully auditable, reproducible system and are prepared to invest time upfront.
GitHub at a glance
NixOS/nixpkgs MIT hacktoberfestlinuxnixnixosnixpkgs
Stars
26,705
+64 this week
Forks
20,627
284 watching
Last commit
today
healthy
Star history
Issues
84% closed
9,758
open
49,966
closed
+828 / -591
opened / closed, last 4 weeks
Opened vs closed, last 12 weeks
Commits, last 26 weeks
100,799 commits, active 26 of 26 weeks
Languages
- Nix 94.8%
- Shell 2.1%
- Python 1.9%
- Other 1.2%
Updated daily from the GitHub API. Star tracking since Jun 22, 2026.
Website at a glance
nixos.org
C score 50
Basic website security headers
Graded by Mozilla HTTP Observatory, tested 1d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
NixOS alternatives
Fedora Workstation Fedora Workstation: User friendly and easy to setup
Ubuntu Ubuntu: User friendly and easy to setup
macOS Apple's desktop OS. A real privacy step up from Windows, but closed and US-based.
secureblue secureblue is a security-hardened immutable Linux OS built on Fedora Atomic Desktops. It ships as OCI bootable container images and applies kernel hardening, a hardened memory allocator from GrapheneOS, and a hardened Chromium browser called Trivalent.
Kicksecure Kicksecure is a security-hardened Debian-based Linux distribution that applies a broad set of kernel and userspace hardening settings out of the box, reducing the attack surface without requiring manual configuration. It also serves as the foundation for the Whonix anonymity OS.
Fedora Atomic Desktops Fedora Atomic Desktops (Silverblue, Kinoite, and others) are immutable Fedora variants where the base OS is read-only and updated atomically via rpm-ostree. Applications run as Flatpaks, and rollback to a prior OS image is built in.
NixOS license, in plain English
MIT Permissive
Do almost anything: use, change, and ship it, even inside closed-source products. The only condition is keeping the copyright notice.
Permits
- Commercial use
- Modification
- Distribution
- Private use
Requires
- License and copyright notice
Does not provide
- Liability cover
- Warranty
Why it matters: Permissive licensing lets anyone reuse this, including inside closed products. That is freedom to build on, but no guarantee that downstream copies stay open.
Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.