3 ms·

So, first of all, nix isn't a distribution, it's a build/packaging tool. Secondly, docker/containers are not a security mechanism

• pxc 3y ago
  Nixpkgs is a distribution, as is NixOS. Neither of those things is Nix, but it's an easy mistake to mentally correct when interpreting someone charitably. That said, GP didn't give you much to go off of. As for security, it's worth noting here that there are Nix-native tools for generating MicroVMs as well, if that's what folks are after with Kata and Firecracker.
  • fiddlerwoaroof 3y ago
    Nixpkgs isn’t really a distribution, but something relatively new (although a bit like FreeBSD ports and Gentoo’s portage): it’s a collection of build scripts designed to make it possible to build software cross-platform in a reproducible way.
    • pxc 3y ago
      Portage and *BSD ports systems are certainly software distributions. They're just source-based distributions. Nixpkgs includes the same kind of reuse and integration and patching that you see in other kinds of software distributions, like Linux distros or Conda.
      • fiddlerwoaroof 3y ago
        In this context I assumed “distribution” meant “operating system distribution”
        • pxc 3y ago
          Ah! Got you.