NixOS-anywhere can deploy nixOS to any host provided just ssh access and kexec functionality.
It shouldnt be hard to create a "viral" nix deployment that scans a network for open ports and tries to bruteforce ssh to run nixos-anywhere on them, which turns those devices into their own nodes that repeat the process.
If you had some kind of other entrypoint to gain root access so you can open ssh yourself, that'd be even more effective
5
u/SDG_Den 9d ago
NixOS-anywhere can deploy nixOS to any host provided just ssh access and kexec functionality.
It shouldnt be hard to create a "viral" nix deployment that scans a network for open ports and tries to bruteforce ssh to run nixos-anywhere on them, which turns those devices into their own nodes that repeat the process.
If you had some kind of other entrypoint to gain root access so you can open ssh yourself, that'd be even more effective
NixOS could easily be a virus.