2025-09-06 –, Aula
Let's follow the lifecycle of a change in Nixpkgs; from opening the Pull Request until the change makes it our local /nix/store
. We'll explore all the CI systems involved in this process, how they interact, where and how they're defined in our codebases, and finally the security implications of each step.
SRE by trade, but my interests lie in security, decentralization, radio communications, self-hosting and automation.
FOSS contributor to various projects, blog available at https://blog.erethon.com/, recently fell in love with NixOS.