NixCon 2025

How NixOS is built: From Pull Request to your `/nix/store`
2025-09-06 , Aula (4.101)

Let's follow the lifecycle of a change in Nixpkgs; from opening the Pull Request until the change makes it our local /nix/store. We'll explore all the CI systems involved in this process, how they interact, where and how they're defined in our codebases, and finally the security implications of each step.


YouTube recording: YouTube recording Link to slides: Link to slides

SRE by trade, but my interests lie in security, decentralization, radio communications, self-hosting and automation.
FOSS contributor to various projects, blog available at https://blog.erethon.com/, recently fell in love with NixOS.