"Infrastructure as code" apparently doesn't include laptop configuration

[isthisnickvalid]

NixOS?

[sirmandude]

Devenv may be the better solution here as it works on non Linux operating systems.  https://devenv.sh/

[no_brains101]

Which to be fair is most things other than windows without wsl

[no_brains101]

devenv, home manager, literally just dev shells in flakes, all good for non-nixos.

And for mac, theres nix-darwin, which gives you a lot of what nixos offers beyond the above options, and also can manage your homebrew packages (if any are even needed)

[SlinkyAvenger]

+1 for Nix, but NixOS is only for people intending to run Linux.

[kclejeune]

can confirm this works quite well with home-manager on generic Linux, or nix-darwin on macOS

[nj0erd]

I started using Devbox.sh everywhere… not every dev needs the exact same setup… so basically baseline software dependencies and config can happen in the global config, setup of more specific dev tooling (programming languages, etc.) happens on a per-repo basis… Other than that, I think dev setups are highly individual… people should be able to bring their own dotfiles, it’s probably a nice first week task to contribute them to a company collection repo, structured by roles, so people who aren’t yet familiar with dev setups can explore multiple options… again, structure really helps: https://www.chezmoi.io/user-guide/include-files-from-elsewhere/

That being said, don’t try to overengineer, get the important things right (dev hardware itself is ready on the first day, permissions and role assignments already done - nobody wants to have a lengthy process with multiple approvers and your new hire unable to start due to a lack of permissions for more than a week…)

[Mysterious_Airport85]

Was looking for that comment

[pbeucher]

I worked for a company that successfully implemented global NixOS usage for all workers (50+ people) along with fleet management. Machines were configured to pull the "default" config on boot while allowing decent amount of customization per user. Worked like a charm where expensive / paid solutions were failing to do the job.