Supported features¶
The generated guide lists a bounded set of reusable features with their actual import paths, prerequisites, state ownership and check names. A check name is a way to obtain evidence, not a claim that the current revision has passed it. See support and validation records.
| Feature | Platforms and interface | Dependencies and state | Checks |
|---|---|---|---|
| Independent Home Manager starter, source | x86_64-linux, aarch64-linux, aarch64-darwin. templates.starter | Nix; independent Nixpkgs and Home Manager 26.05 pins. Generated configuration; activation must be explicitly chosen | Export extraction, native home/generated-config checks and x86 Linux console VM |
| Apple silicon system example, source | aarch64-darwin. templates.darwin | Native Apple silicon Mac; independent stable Nixpkgs and nix-darwin pins. Build-only example; operating-system activation requires adaptation | Native system build and generated Zsh/plist check; no activation claim |
| Graphical practice VM, source | x86_64-linux. packages.x86_64-linux.public-demo-vm | QEMU; Sway software rendering; disposable local console. Practice disk remains separate from the host account | Graphical login, real terminal keybindings and generated Git behavior |
| Validation and performance records, source | x86_64-linux, aarch64-linux, aarch64-darwin. workstation-evidence CLI and validationManifest | Git; Nix for system validation; native host for platform-specific evidence. Private local receipts and logs; reviewed summaries may be shared | Source filtering, failed/skipped evidence, timeouts, process cleanup and comparison regressions |
| Git defaults, source | x86_64-linux, aarch64-linux, aarch64-darwin. Home Manager source-file import | Home Manager; libsecret on Linux or Keychain on macOS for credential storage. Repositories and credential-backend data remain user-owned | public-guide-recipes; public consumer checks |
| File search, source | x86_64-linux, aarch64-linux, aarch64-darwin. Home Manager source-file import | Home Manager; shell integration module for keybindings. No application database; searched files remain user-owned | public-guide-recipes; public consumer checks |
| Shell prompt, source | x86_64-linux, aarch64-linux, aarch64-darwin. Home Manager source-file import | Home Manager; shell integration. No persistent application state required | public-guide-recipes; public consumer checks |
| Secure Boot preparation, source | x86_64-linux. security.secureBootLanzaboote options | Lanzaboote flake input; UEFI; attended key enrollment and recovery. Signing keys, ESP and recovery material require independent protection | Configuration contracts; physical enrollment and recovery remain operator checks |
| Application recovery drills, source | x86_64-linux. services.applicationRecovery.applications options | Provisioned backup repository; application-specific export and semantic checks. Exports, backup repositories and drill receipts; live recovery remains operator-owned | Real SQLite/Restic fixture and NixOS lifecycle test; no live restore claimed |
| Service and backup health, source | x86_64-linux. hardware.storage.encryptedRoot.health options (desktop-local) | Desktop storage policy; operator-provided unattended notification command. Freshness receipts and pending delivery state; notification acceptance is tested separately | Health collection, failed delivery retries and recovery transition fixtures |
| Windows guest, source | x86_64-linux. virtualisation.libvirtWorkstation.windowsVm options | libvirtWorkstation module; myLib; KVM; user-supplied Windows media. Disk, firmware variables and virtual TPM must be recovered together | Domain XML and seed tests; installed Windows runtime requires the actual guest |
Build .#feature-catalog to inspect the machine-readable inventory. The guide
build inserts this same inventory into this page. Its source lives in
feature-catalog.nix.
The option reference comes from the owning Nix declarations. The public shell recipes use ordinary Home Manager settings and link their complete source so preferences stay inspectable.
The Windows guest is an integration feature for a compatible Linux host. Its runbook explains installation, state ownership and native validation. It is not part of the public starter or graphical demonstration.