Skip to main content
Nix with MDM

Zero-touch Nix deployment through your MDM

Determinate Nix installs silently through your existing MDM, whether that's JAMF, Mosyle, or another platform, with signed and notarized packages, automatic version handling, and one command to uninstall.

Zero-touch deployment

Push Determinate Nix to your whole fleet with no user interaction required. Install and configuration happen automatically through your MDM.

Signed and notarized packages

Every installer is Apple-verified and notarized, so your MDM's Gatekeeper checks pass cleanly every time.

Signature verification built in

The install script checks the package's Developer ID signature before running, so a tampered installer never executes.

Skips redundant reinstalls

A version check means re-running the install script across your fleet only updates the machines that are actually behind.

One-command uninstall

Remove Determinate Nix completely with a single command: sudo /nix/nix-installer uninstall.

Enterprise network ready

Automatic certificate handling means installs succeed out of the box behind Zscaler, Fortinet, and other enterprise proxies.

Works with your MDM

Deploy through the tools your fleet already runs or any MDM that can execute an installer script.

  • Deploy Determinate with MDM

    Deploy Determinate with MDM (opens in a new tab)

    The full deployment guide: prerequisites, the install script's verification steps, and how to update and uninstall fleet-wide.

  • Solving enterprise TLS certificates for Nix on macOS

    Solving enterprise TLS certificates for Nix on macOS

    How Determinate Nix handles enterprise TLS interception from tools like Zscaler without breaking builds.

  • macOS-related posts on our blog

    macOS-related posts on our blog

    Release notes, guides, and deep dives on running Nix and Determinate on macOS from the Determinate Systems blog.

  • Nix for macOS

    Nix for macOS

    The easy button for Nix on macOS: signed installers, Keychain integration, and a Nix that survives every macOS update.

Explore more solutions