
A window into our security processes: introducing the Determinate Secure Packages CVE Remediation Dashboard
A live, public view of every CVE we're tracking in Determinate Secure Packages, its SLA deadline, and where it stands right now.
80 slices of Nix-related goodness for your perusal

A live, public view of every CVE we're tracking in Determinate Secure Packages, its SLA deadline, and where it stands right now.

Determinate Nix 3.22.2 moves onto upstream Nix 2.35, gives nix eval a --drv-link flag that keeps the garbage collector away from freshly instantiated derivations, and makes nix copy fast again against older daemons.

The CRA will take effect in two stages, with reporting obligations beginning on September 11, 2026. Compliance is likely to be a hurdle for many enterprises, but we're confident that Nix and Determinate provide an industry-leading solution.

Determinate Nix 3.21.9 makes evaluation measurably faster by reusing fetcher cache results, and teaches Determinate Nixd to pick the right trusted cache keys when you point it at FlakeHub's FedRAMP environment

It's the Rust-native, Nix-aware companion to FlakeBOM that turns SBOMs from a report on what exists on a system into something you can act on

Determinate Nixd now routes FlakeHub Cache requests to the nearest cache node, making substitution faster for most users, especially those outside the United States

An all-and-sundry batch of performance work, a faster nix copy, multi-threaded store optimization, and speedier binary caches, remote stores, and parallel evaluation, plus some changes to Determinate Secure Packages and flake schemas

We're introducing an exportedSchemas output to provide a more intuitive experience.

Making package cooldowns for Nixpkgs available to all Determinate users by default

Make this your most confident and secure Nixpkgs upgrade yet

It's lightning fast, it provides comprehensive metadata coverage, and it's the perfect complement to Determinate Secure Packages

Nix isn't a magical solution to all supply chain woes but it does offer our industry a fighting chance

Support for CNSA algorithms, a new nix serve command, fetchTarball is now lazy, and more.

Vital security patches plus some other fun stuff

Determinate Nix now uploads crash reports to Sentry, enabling Determinate Systems to catch and fix bugs long before they reach your critical systems.

Determinate Secure Packages 25.11 is now generally available, with security maintenance committed through May 2028.

The stars are aligning in unmistakable ways for Nix and we are leading the charge.

An important security update plus some improvements

NixOS AMIs for Determinate are now available in AWS GovCloud and AWS European Sovereign Cloud, providing a better option for teams with strict data residency and regulatory requirements

Determinate Nix now enables you to declare custom flake output types, making flakes more flexible and introspectable than ever

Determinate Nix now supports Wasm functions in Nix expressions, bringing a range of new possibilities to the Nix ecosystem

This updates we're shipping this week are making Determinate Nix a different beast entirely

Unlimited parallel evaluation cores by default, support for authenticating to FlakeHub from Google Cloud Platform, and the usual bevy of fixes and adjustments.

Improvements to nix-darwin, nix-eval-jobs compatibility with Determinate Nix, and some other fun stuff

fetchTree improvements and a new builtins.filterAttrs function

A new nix ps command, some prettier output, some flake registry improvements, and other goodies

We bid adieu to Intel Macs and deliver some solid developer experience improvements

Nix flakes are a powerful way to manage inputs and outputs in Nix, designed to bring determinism, reproducibility, and discoverability to the ecosystem.

nix narioA fresh new take on distributing software with Nix

Taking a step back to survey the many recent changes in Determinate Nix and to look ahead to much more on the way.

Parallel evaluation drastically cuts evaluation time and improves import-from-derivation (IFD) performance.

Determinate Nix introduces a new type of flake input for sources and determinate-nixd upgrade now works without logging in.

Loads of UX and performance improvements in Determinate Nix, plus a nix-darwin module

A major advance for macOS users and for Nix in cross-platform contexts

Nix users on macOS should upgrade to Determinate Nix 3.8.1 as soon as possible.

nix flake check, improved flake locks, and lazy trees rolled out to 20% of usersDeterminate Nix 3.8.0 (based on Nix 2.30) cuts minutes from CI runs, fixes a bug involving flake inputs, and rolls out lazy trees to more users.

nix store delete in Determinate Nix 3.7.0Performance and UX improvements across the board, plus lazy-trees rolling out to some users.

Lazy trees are ready to roll out, and an improvement to the sandboxing security.

Adding a powerful, feature-rich, open source CI/CD system to our roster

Support for macOS Tahoe and nearing general availability for lazy trees

A second life for a much-loved freebie

Shell auto-completion scripts for Determinate Nixd, improved installation and garbage collection, more intelligible log messages, and more.

Our determinate-nix-action now succeeds on many more self-hosted environments, including Kubernetes-backed CI environments.

A GitHub Action dedicated to installing Determinate Nix

This long-awaited feature makes Nix and flakes dramatically more efficient in a wide range of scenarios

When it comes to sub-optimal constructs, less really is more

JSON logging has the potential to unlock all kinds of ergonomic benefits, starting with hash mismatches but with plenty of room to expand beyond that

Some juicy tidbits from Determinate Systems' first ever webinar

Business-class Nix for critical infrastructure, complete with a flake stability guarantee

fh fetchLocal builds getting you down? Build in CI and pull bytes over the wire instead.

Just a version change but one that should make things more straightforward for users

nix-darwin now enables Determinate to manage Nix, a big win for Determinate users on macOS

Easy nix-darwin integration, Determinate Nix updates, and other bug fixes.

FlakeHub Cache transforms Nix deployments by eliminating local builds and evaluation. See how to deploy Home Manager configs instantly on both macOS and Linux.

Some unfortunate decisions by GitHub have forced us to wind down free caching with the Magic Nix Cache by 1 February 2025

Updates in Determinate Nix 0.3.0 and nix-installer 0.33.0.

I've known this since before I found Nix in 2016

Business-class binary caching and fine-grained access control for flakes enable organizations to seamlessly scale Nix adoption across teams and projects

Determinate Nix is a Nix distribution for teams

Determinate software will no longer support macOS Monterey (version 12), following Apple's dropped support.

Skip the unskippable: eliminate the macOS Full Disk Access approval on AWS EC2 with Determinate.

Determinate solves a key problem with TLS/SSL certificates on macOS.

Usage patterns suggest unambiguously that the Determinate Nix Installer no longer needs to support this system type.


Making Wasm's potential portability a reality

For years, macOS upgrades have broken Nix. We've updated the Determinate Nix Installer to ensure that this no longer happens, eliminating yet another annoyance for macOS users.

Flake schemas enable you to teach Nix about new flake output types.

Nix builds at speeds you never thought possible.

A powerful new way to keep your Nix flakes in line with best practices.

How I used Nix to turn Open Policy Agent policies into standalone CLI tools

How and why I replaced Nix's Bash-based standard environment with a much more powerful and expressive build apparatus.


Introducing a brand new, beginner-friendly learning resource for Nix and the Nix ecosystem.

While it's great to fall in love with Nix and want to use it to build and configure just about everything, let's face it: few of us are in a position to do so, especially in the workplace. "Hey team, let's Nixify our entire stack!" is unlikely to endear you to your coworkers at daily standup.

Make your CI pipeline both strictly declarative and reproducible across environments by replacing third-party Actions with Nix shell environments.

All you need is the Nix CLI and a flake URL to run executables using Nix. There's nothing else quite like it in our industry.

Like many of you, I work on a lot of different projects. Even when a project is less serious—hey, I should check out this new JS framework!—I strive to reduce the friction involved with setting up the project's dev environment to the absolute bare minimum possible.

How I used Home Manager and a personal project called Nome to declutter and optimize my home environment using Nix.

Introducing Determinate Systems, a company devoted to bringing the immense benefits of Nix to the software world. Our values, our mission, and what the future holds.

Hydra is a fantastic tool for building small and large software collections. It is also a great tool for orchestrating releases.