“Qubes-like VM-based isolation with declarative configuration” is what Spectrum[1,2] tries to build on top of Nix. It’s in active development, but doesn’t seem

“Qubes-like VM-based isolation with declarative configuration” is what Spectrum[1,2] tries to build on top of Nix. It’s in active development, but doesn’t seem to be particularly usable yet. [1] https://spectrum-os.org/design.html https://spectrum-os.org/design.html [2] https://news.ycombinator.com/item?id=28530861 https://news.ycombinator.com/item?id=28530861