In-depth tutorials, product updates, Nix commentary, and more from the Determinate Systems team
Determinate builds on Nix to provide enterprises with an exhaustive account of what they're running and the means to stay decisively ahead of the ever-more-challenging vulnerability curve
nix top, faster garbage collection, parallel instantiation, and moreDeterminate Nix 3.24.1 fixes the Broccoli2Shell Brotli vulnerability, adds a live nix top view of active builds, fixes a garbage collection slowdown in large evaluations, instantiates derivation dependencies in parallel, speeds up store database writes, and more.
Determinate Secure Packages 25.05 (Emergency Legacy Extension) brings critical security support to NixOS 25.05.
Determinate Nix 3.23.3 fixes four security vulnerabilities, exports OpenTelemetry traces, introduces baked flakes that require almost no evaluation, fixes several garbage collector races, moves parallel evaluation onto fibers, makes builtins.wasm faster and safer, and rolls up the performance and reliability work from 3.22.3 through 3.23.3.
Determinate Nix's Native Linux Builder for macOS is now enabled for every macOS user who's logged in to FlakeHub
Determinate Nix now exports OpenTelemetry traces of evaluations, builds, substitutions, HTTP requests, and daemon connections to any OTLP backend, including Honeycomb, Grafana Tempo, Jaeger, and Datadog.
We're replacing our original Determinate Secure Packages product with a long-term support (LTS) offering with 5 years of support for a subset of distributions, providing our customers with substantially longer planning horizons
FlakeHub now works for organizations on GitHub Enterprise Managed Users, extending the single sign-on, SCIM provisioning, and Conditional Access Policy rules your identity provider already enforces on GitHub to features like FlakeHub Cache and private flakes
A live, public view of the CVEs we track in Determinate Secure Packages, the fixes we ship for them, and how much work that is.
Determinate Nix 3.22.2 moves onto upstream Nix 2.35, gives nix eval a --drv-link flag that keeps the garbage collector away from freshly instantiated derivations, and makes nix copy fast again against older daemons.
The CRA will take effect in two stages, with reporting obligations beginning on September 11, 2026. Compliance is likely to be a hurdle for many enterprises, but we're confident that Nix and Determinate provide an industry-leading solution.
Determinate Nix 3.21.9 makes evaluation measurably faster by reusing fetcher cache results, and teaches Determinate Nixd to pick the right trusted cache keys when you point it at FlakeHub's FedRAMP environment
It's the Rust-native, Nix-aware companion to FlakeBOM that turns SBOMs from a report on what exists on a system into something you can act on
Determinate Nixd now routes FlakeHub Cache requests to the nearest cache node, making substitution faster for most users, especially those outside the United States
An all-and-sundry batch of performance work, a faster nix copy, multi-threaded store optimization, and speedier binary caches, remote stores, and parallel evaluation, plus some changes to Determinate Secure Packages and flake schemas
FlakeHub, our platform providing secure Nix binary caching, private flakes, and more, is now FedRAMP High authorized (Certification Class D under FedRAMP's 2026 Consolidated Rules) listed in the FedRAMP Marketplace, and available at flakehub.us, bringing enterprise Nix to federal agencies and contractors handling Controlled Unclassified Information
Categories
Tags
