Determinate Systems

Today we're thrilled to announce the launch of our newest offering: Determinate Secure Packages. A drop-in replacement for Nixpkgs, it offers secure, signed, auditable Nix packages for the enterprise, including CVE monitoring and SLA-backed remediation, per-release SBOMs, optional FIPS-compliant builds, packages cached in FlakeHub Cache, cryptographic signing, and more. Link in thread 🔗🧵👇

Determinate Nix 3.20.0 is now out and ready to install determinate.systems/blog/changelog…

In case you haven't updated Determinate Nix in a while, version 3.20.0 is out and it includes some important security patches and bug fixes. You can find details and install/upgrade instructions in our most recent blog post. Link in thread 🧵🔗👇

DetNix version 3.20.0, mostly security fixes but some fun stuff too determinate.systems/blog/changelog…

Just in time for the weekend, another Determinate Nix release 🚀❄️! Mostly security patches but, as always, you'll find some fun stuff as well 🎢🕺💃 Check it out in our most recent changelog post for version 3.20.0. This is the one you really want 😎 Link in thread 🧵👇🔗

@sentry Determinate Nix now uploads crash reports to Sentry determinate.systems/blog/sentry

Determinate Nix now uploads anonymized crash reports to @sentry. We're excited to take this next logical step toward improving DetNix's stability as proactively as possible. Link in thread 🧵👇🔗

Determinate Secure Packages is patched against Dirty Frag on rolling and 25.11. The rolling-fips variant is queued for final release.

For any Nix or Nix-curious folks near Ann Arbor, we're hosting a happy hour THIS EVENING at Bill's Beer Garden from 5:30 until 7 pm. Come chat all things Nix with drinks on us ❄️ 🚀 🍻. RSVP at this link: luma.com/ty9lvhnx

Nix friends in Ann Arbor / Detroit area folks: come have a drink on me! 5:30 tonight at Bill’s Beer Garden. RSVP: luma.com/ty9lvhnx

Determinate Nix 3.19.1 fixes the latest round of Nix CVEs and is fully available through all channels. status.determinate.systems/incidents/41b9…

We are tracking two vulnerabilities (one high and one moderate) in Nix, and a coordinated Determinate Nix 3.19.1 release is in progress. More details on our status page: status.determinate.systems/incidents/41b9…

Long-term support for Determinate Secure Packages 25.11 determinate.systems/blog/secure-pa…

DetSys is announcing long-term support for Determinate Secure Packages 25.11 through May 2028 🎉🛡️📦 Based on the nixos-25.11 branch of Nixpkgs but with an SLA for CVEs, SBOMs, all covered packages built on SOC 2 Type II infra and cached in FlakeHub Cache, and all with a one-line change in your flakes. Read today's blog post for more at the link in thread 👇🧵🔗

Tracking: CVE-2026-31431 "Copy Fail", a local privilege escalation in the kernel that is exploitable from within the Nix sandbox. We're preparing to ship the patch via Determinate Secure Packages channels shortly. Subscribe for details: rootly.com/teams/determin…

@grhmc The Nix moment is upon us determinate.systems/blog/the-nix-m…

From LLMs to the supply chain to hardware and beyond, Nix is the right tool—and paradigm—for our time. In our new post, CEO @grhmc lays out why he thinks the Nix moment is upon us and how DetSys is leading the way. Link in thread 🔗🧵👇

📣 Our next webinar kicks off soon, focusing on how Nix and flakes solve the "works on my machine" problem for good. Register now to join live or get the recording: luma.com/bdafz6ca

@lucperkins Permanently solving the "works on my machine" problem using Nix development environments, Wednesday, April 22nd at 12pm EDT 👇 luma.com/bdafz6ca

📢 Don't forget to sign up for our upcoming webinar, "Permanently solving the 'works on my machine' problem with Nix and flakes," this upcoming Wednesday, April 22nd at 12 pm EDT, where @lucperkins will talk about Nix development environments and the whole category of problems that they solve. And if you forget to sign up, there are... zero consequences because we record them. But always a bit more ✨ special ✨ to see it live, no? Link in thread 🔗🧵👇

@lucperkins Permanently solving the "works on my machine" problem using Nix development environments, Wednesday, April 22nd at 12pm EDT 👇 luma.com/bdafz6ca

📢 Another DetSys webinar is on the way! Next week, on Wednesday, April 22nd at 12 pm EDT, catch our own @lucperkins talk about permanently solving the "works on my machine" problem using Nix development environments. If this is an issue you're running into, we promise you won't to miss this one. More details and RSVP using the link in thread 🔗🧵👇