"a bootstrap chain for NixOS which builds the whole system from a small hand-auditable binary seed" (via embedding-shapes) — discussion

#nix #security