https://nick.detello.com/tags/nixos/Recent content in Nixos on Nick DeTello - Nicholas DeTelloHugoen-usMon, 28 Sep 2026 00:00:00 +0000https://nick.detello.com/blog/sharing-host-nix-store-builder-vm/Mon, 28 Sep 2026 00:00:00 +0000https://nick.detello.com/blog/sharing-host-nix-store-builder-vm/A build VM can read its host’s Nix store through a read-only share. The host’s files stay immutable; the VM’s view of them doesn’t. Its garbage collector can hide shared files behind overlay whiteouts unless the VM is told, on every start, that those files are still needed.https://nick.detello.com/blog/isolating-nix-remote-builder-microvm-shared-host/Sun, 20 Sep 2026 00:00:00 +0000https://nick.detello.com/blog/isolating-nix-remote-builder-microvm-shared-host/Distributed builds lend spare capacity to CI, but build scripts execute untrusted code. I isolate them in a builder VM with its own kernel, restricted access and resources the host can reclaim.