Merge pull request #67 from DeterminateSystems/remove-single-user

Remove references to single-user mode

doc/manual/redirects.js

@@ -271,13 +271,10 @@ const redirects = {
     "sect-multi-user-installation": "installation/installing-binary.html#multi-user-installation",
     "sect-nix-install-binary-tarball": "installation/installing-binary.html#installing-from-a-binary-tarball",
     "sect-nix-install-pinned-version-url": "installation/installing-binary.html#installing-a-pinned-nix-version-from-a-url",
-    "sect-single-user-installation": "installation/installing-binary.html#single-user-installation",
     "ch-installing-source": "installation/installing-source.html",
     "ssec-multi-user": "installation/multi-user.html",
-    "ch-nix-security": "installation/nix-security.html",
     "sec-obtaining-source": "installation/obtaining-source.html",
     "sec-prerequisites-source": "installation/prerequisites-source.html",
-    "sec-single-user": "installation/single-user.html",
     "ch-supported-platforms": "installation/supported-platforms.html",
     "ch-upgrading-nix": "installation/upgrading.html",
     "ch-about-nix": "introduction.html",

doc/manual/source/SUMMARY.md.in

@@ -10,9 +10,7 @@
     - [Obtaining a Source Distribution](installation/obtaining-source.md)
     - [Building Nix from Source](installation/building-source.md)
   - [Using Nix within Docker](installation/installing-docker.md)
-  - [Security](installation/nix-security.md)
-    - [Single-User Mode](installation/single-user.md)
-    - [Multi-User Mode](installation/multi-user.md)
+  - [Multi-User Mode](installation/multi-user.md)
   - [Environment Variables](installation/env-variables.md)
   - [Upgrading Nix](installation/upgrading.md)
   - [Uninstalling Nix](installation/uninstall.md)

doc/manual/source/installation/index.md

@@ -1,18 +1,11 @@
 # Installation
 
 This section describes how to install and configure Nix for first-time use.
+Nix follows a [multi-user](./multi-user.md) model on both Linux and macOS.
 
-The current recommended option on Linux and MacOS is [multi-user](#multi-user).
-
-## Multi-user
-
-This installation offers better sharing, improved isolation, and more security
-over a single user installation.
-
-This option requires either:
-
-* Linux running systemd, with SELinux disabled
-* MacOS
+```console
+$ curl -L https://nixos.org/nix/install | sh -s -- --daemon
+```
 
 > **Updating to macOS 15 Sequoia**
 >
@@ -22,23 +15,6 @@ This option requires either:
 > ```
 > when running Nix commands, refer to GitHub issue [NixOS/nix#10892](https://github.com/NixOS/nix/issues/10892) for instructions to fix your installation without reinstalling.
 
-```console
-$ curl -L https://nixos.org/nix/install | sh -s -- --daemon
-```
-
-## Single-user
-
-> Single-user is not supported on Mac.
-
-This installation has less requirements than the multi-user install, however it
-cannot offer equivalent sharing, isolation, or security.
-
-This option is suitable for systems without systemd.
-
-```console
-$ curl -L https://nixos.org/nix/install | sh -s -- --no-daemon
-```
-
 ## Distributions
 
 The Nix community maintains installers for several distributions.

doc/manual/source/installation/installing-binary.md

@@ -19,11 +19,6 @@ This performs the default type of installation for your platform:
 - [Multi-user](#multi-user-installation):
   - Linux with systemd and without SELinux
   - macOS
-- [Single-user](#single-user-installation):
-  - Linux without systemd
-  - Linux with SELinux
-
-We recommend the multi-user installation if it supports your platform and you can authenticate with `sudo`.
 
 The installer can configured with various command line arguments and environment variables.
 To show available command line flags:
@@ -42,7 +37,7 @@ The directory for each version contains the corresponding SHA-256 hash.
 All installation scripts are invoked the same way:
 
 ```console
-$ export VERSION=2.19.2 
+$ export VERSION=2.19.2
 $ curl -L https://releases.nixos.org/nix/nix-$VERSION/install | sh
 ```
 
@@ -64,24 +59,6 @@ $ bash <(curl -L https://nixos.org/nix/install) --daemon
 You can run this under your usual user account or `root`.
 The script will invoke `sudo` as needed.
 
-# Single User Installation
-
-To explicitly select a single-user installation on your system:
-
-```console
-$ bash <(curl -L https://nixos.org/nix/install) --no-daemon
-```
-
-In a single-user installation, `/nix` is owned by the invoking user.
-The script will invoke `sudo` to create `/nix` if it doesn’t already exist.
-If you don’t have `sudo`, manually create `/nix` as `root`:
-
-```console
-$ su root
-# mkdir /nix
-# chown alice /nix
-```
-
 # Installing from a binary tarball
 
 You can also download a binary tarball that contains Nix and all its dependencies:

doc/manual/source/installation/nix-security.md

@@ -1,15 +0,0 @@
-# Security
-
-Nix has two basic security models. First, it can be used in “single-user
-mode”, which is similar to what most other package management tools do:
-there is a single user (typically root) who performs all package
-management operations. All other users can then use the installed
-packages, but they cannot perform package management operations
-themselves.
-
-Alternatively, you can configure Nix in “multi-user mode”. In this
-model, all users can perform package management operations — for
-instance, every user can install software without requiring root
-privileges. Nix ensures that this is secure. For instance, it’s not
-possible for one user to overwrite a package used by another user with a
-Trojan horse.

doc/manual/source/installation/single-user.md

@@ -1,9 +0,0 @@
-# Single-User Mode
-
-In single-user mode, all Nix operations that access the database in
-`prefix/var/nix/db` or modify the Nix store in `prefix/store` must be
-performed under the user ID that owns those directories. This is
-typically root. (If you install from RPM packages, that’s in fact the
-default ownership.) However, on single-user machines, it is often
-convenient to `chown` those directories to your normal user account so
-that you don’t have to `su` to root all the time.

doc/manual/source/installation/uninstall.md

@@ -154,12 +154,3 @@ which you may remove.
 > You do not have to reboot to finish uninstalling Nix.
 > The uninstall is complete.
 > macOS (Catalina+) directly controls root directories, and its read-only root will prevent you from manually deleting the empty `/nix` mountpoint.
-
-## Single User
-
-To remove a [single-user installation](./installing-binary.md#single-user-installation) of Nix, run:
-
-```console
-rm -rf /nix ~/.nix-channels ~/.nix-defexpr ~/.nix-profile
-```
-You might also want to manually remove references to Nix from your `~/.profile`.

doc/manual/source/installation/upgrading.md

@@ -32,9 +32,3 @@ $ sudo nix-env --install --file '<nixpkgs>' --attr nix cacert -I nixpkgs=channel
 $ sudo launchctl remove org.nixos.nix-daemon
 $ sudo launchctl load /Library/LaunchDaemons/org.nixos.nix-daemon.plist
 ```
-
-## Single-user all platforms
-
-```console
-$ nix-env --install --file '<nixpkgs>' --attr nix cacert -I nixpkgs=channel:nixpkgs-unstable
-```