In-depth tutorials, product updates, Nix commentary, and more from the Determinate Systems team
A live, public view of the CVEs we track in Determinate Secure Packages, the fixes we ship for them, and how much work that is.
Determinate Nix 3.22.2 moves onto upstream Nix 2.35, gives nix eval a --drv-link flag that keeps the garbage collector away from freshly instantiated derivations, and makes nix copy fast again against older daemons.
The CRA will take effect in two stages, with reporting obligations beginning on September 11, 2026. Compliance is likely to be a hurdle for many enterprises, but we're confident that Nix and Determinate provide an industry-leading solution.
Determinate Nix 3.21.9 makes evaluation measurably faster by reusing fetcher cache results, and teaches Determinate Nixd to pick the right trusted cache keys when you point it at FlakeHub's FedRAMP environment
It's the Rust-native, Nix-aware companion to FlakeBOM that turns SBOMs from a report on what exists on a system into something you can act on
Determinate Nixd now routes FlakeHub Cache requests to the nearest cache node, making substitution faster for most users, especially those outside the United States
An all-and-sundry batch of performance work, a faster nix copy, multi-threaded store optimization, and speedier binary caches, remote stores, and parallel evaluation, plus some changes to Determinate Secure Packages and flake schemas
FlakeHub, our platform providing secure Nix binary caching, private flakes, and more, is now FedRAMP High authorized (Certification Class D under FedRAMP's 2026 Consolidated Rules) listed in the FedRAMP Marketplace, and available at flakehub.us, bringing enterprise Nix to federal agencies and contractors handling Controlled Unclassified Information
We're introducing an exportedSchemas output to provide a more intuitive experience.
Making package cooldowns for Nixpkgs available to all Determinate users by default
Make this your most confident and secure Nixpkgs upgrade yet
It's lightning fast, it provides comprehensive metadata coverage, and it's the perfect complement to Determinate Secure Packages
Checking in on the current state of our supply chain efforts and an initial glance at FlakeBOM
Nix isn't a magical solution to all supply chain woes but it does offer our industry a fighting chance
Support for CNSA algorithms, a new nix serve command, fetchTarball is now lazy, and more.
Vital security patches plus some other fun stuff
Categories
Tags
