Writing · nixos
3 posts tagged nixos, newest first.
Every provider publishes a trust page nobody can check. Ours is generated at build time from artifacts the hosts sign themselves — and the build refuses to render numbers no host put its key behind.
Three months, four NixOS hosts, 1,221 commits, and a CI pipeline that did not exist in August — plus the week the commit log changed hands for good.
On NixOS a config change edits a file, not a running process. Without restartTriggers the deploy is green and the old configuration stays resident in memory.