git.scottworley.com Git - nixos-qemu-vm-isolation/blob - README

   1 Isolate NixOS QEMU VMs from each other and from the host by using a
   2 squashfs for the VM's /nix/store that contains only the VM's dependencies
   3 (like the installer has) rather than a virtio mount of the host's entire
   4 /nix/store.
   5
   6 **Update:** `virtualisation.useNixStoreImage` exists now!  But it doesn't
   7 work!  :(  See the note in `checks/mount-grep.nix`