From 1032bc895342fdba2ab0f3d779106fc9abde89eb Mon Sep 17 00:00:00 2001
From: Iulian Meghea <iulian@plumelo.com>
Date: Thu, 26 Feb 2026 07:36:38 +0000
Subject: [PATCH] feat: add Nix support to devops image

Install upstream Nix in single-user mode so that nix build and
nix flake work out of the box for the coder user.

- Add xz-utils (required by the Nix installer to decompress the tarball)
- Create /nix owned by coder before switching to that user
- Run the official nixos.org installer with --no-daemon (no systemd needed)
- Write ~/.config/nix/nix.conf to enable nix-command and flakes
- Prepend ~/.nix-profile/bin to PATH via ENV
---
 images/devops/Dockerfile | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/images/devops/Dockerfile b/images/devops/Dockerfile
index 30261e4..40fafb2 100644
--- a/images/devops/Dockerfile
+++ b/images/devops/Dockerfile
@@ -7,7 +7,7 @@ RUN <<EOF
 set -e
 
 apt-get update
-apt-get install -y --no-install-recommends gnupg software-properties-common unzip
+apt-get install -y --no-install-recommends gnupg software-properties-common unzip xz-utils
 
 # Add HashiCorp repository
 curl -fsSL https://apt.releases.hashicorp.com/gpg | gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
@@ -31,6 +31,19 @@ apt-get install -y --no-install-recommends \
 
 # Cleanup
 rm -rf /var/lib/apt/lists/*
+
+# Create /nix owned by coder for single-user Nix install
+mkdir -p /nix
+chown coder:coder /nix
 EOF
 
 USER coder
+
+# Install Nix in single-user mode (no daemon, no systemd required)
+RUN curl -L https://nixos.org/nix/install | sh -s -- --no-daemon
+
+# Enable flakes and nix-command
+RUN mkdir -p ~/.config/nix && \
+    echo 'experimental-features = nix-command flakes' > ~/.config/nix/nix.conf
+
+ENV PATH="/home/coder/.nix-profile/bin:${PATH}"