Determinate Systems

For Nix folks intrigued by evaluation-time WebAssembly support in Determinate Nix, we just shipped a substantial upgrade to our documentation, which now includes suggested use cases, instructions for shipping Wasm modules in flakes, and more 🔗 docs.determinate.systems/determinate-...

Still on NixOS 25.05? Upstream support is long gone, but we've patched eMudhra, PHP, and hundreds of other CVEs. Get critical security patches today without migrating to a new release. Determinate Secure Packages 25.05 (Emergency Legacy Extension) now available: determinate.systems/blog/emergen...

We've released updates for today's PHP remote exec vulnerabilities to Determinate Secure Packages (plus FIPS variants). This is in addition to already-pushed fixes for the eMudhra CA compromise. Please update your flakes ASAP. For more, see our status page. status.determinate.systems

We're pleased to report that we have pushed fixes for the eMudhra intermediate CA compromise for all distributions of Determinate Secure Packages (including FIPS variants). We urge all customers to update their flakes as soon as possible. status.determinate.systems

We at DetSys are fully aware of the eMudhra intermediate CA compromise and are pushing fixes to all distributions of Determinate Secure Packages ⛔ 🔏 We'll notify you when we have done so and we advise you to update your flakes at that time. status.determinate.systems

Determinate Nix 3.23.3 is now out 🎉 ❄️ 🚀 and the multi-version changelog for this release covers security fixes for some Nix CVEs, a new feature we're calling "baked flakes," OpenTelemetry tracing, improvements to Wasm support and parallel eval, and so much more. determinate.systems/blog/changel...

Great news for people who use Nix on macOS: our Native Linux Builder for Determinate Nix is now officially GA 🎉 🙌 🍎 That means that you can install Determinate Nix, log into FlakeHub, and immediately use it, without a request for access. Read more on our blog 🔗 determinate.systems/blog/native-...

You may have seen a recent security advisory for Nix involving CVE-2026-110449, CVE-2026-110450, and a few others. Providing the most secure Nix possible is a top-line commitment for us, and we're happy to report that these were fixed in Determinate Nix v3.23.2 🔐 ❄️ 🚀 github.com/Determina%E2...

Determinate Nix can now export OpenTelemetry traces 🔭 ❄️ 🚀 If you have questions like "where is Nix spending its time in CI?" you now have a wellspring of data that you can push to Grafana, Datadog, Honeycomb, and many others. Happy observing 😎 determinate.systems/blog/determi...

We're excited to announce a change to Determinate Secure Packages with the introduction of long-term support (LTS). We now support some distributions for a full 5 years, starting with 26.05 🎉 LTS is available to all customers starting now 🔗 🚀 ❄️ determinate.systems/blog/determi...

If you’re at NixCon 2026 in the lovely Kraków 🇵🇱, we have a booth! Several of us will be camped out here throughout the conference, so don’t hesitate to come say hello and talk anything Nix, supply chain, Linux, and much more.

We’re proud to sponsor NixCon 2026! Nix has moved well beyond being a powerful tool for individual developers and has become core infrastructure for the world' most important companies. At DetSys, we’re building the platform enterprises need to adopt Nix with confidence. See you in Kraków.

Good news for GitHub Enterprise users: FlakeHub now supports auth via Enterprise Managed Users 🔐 🎉 If your org uses an IdP like Entra, Okta, or a SAML/SCIM-based solution, they can now log into FlakeHub that way, providing a crucial identity governance win ❄️ 🚀 🔗 determinate.systems/blog/flakehu...

If you're headed to Kraków 🇵🇱 for NixCon, come chat with other Nix folks (and us!) at our DetSys Happy Hour on Thursday, Sept 24th. No agenda, just free drinks/snacks, a lovely venue, and convivial Nix-y times. Register at the link below to find out the place and time 🔗 ❄️ 🚀 🍻 luma.com/detsys-1ts6

Yesterday, we announced our new CVE remediation dashboard for Determinate Secure Packages 📈 ❄️ 🚀 Take a look if you haven't seen it yet 👀 security.determinate.systems/cves/dashboard Or for a more detailed perspective, check out the new post on our blog 🔗 determinate.systems/blog/secure-...

Every CVE we fix for Determinate Secure Packages is now visible on a public dashboard 📊 🔒 We've made our remediation process fully trackable. As of today: 988 CVEs fixed within SLA in the last 30 days, 0 overdue 😊 Take a look for yourself ❄️ 🚀 security.determinate.systems

Determinate Nix 3.22.2 is now out! 🎉 That means a new upstream base (2.35.2), 5-12% faster evaluation with mimalloc, HTTP/3 binary cache fetching, faster `nix copy` over slow links, GC roots for `nix eval`, Replit auth for FlakeHub, and more ❄️ 🚀 🔗 determinate.systems/blog/changel...

We are proud sponsors of NixCon 2026 and we are excited to see many of you there! Let us know if you are attending using the linked form so you can receive invites to the events we are hosting outside of the conference. More details soon! forms.gle/MqH29QpubqGW...

Periodic reminder that FlakeHub serves flakes as tarballs from S3, completely independently of GitHub’s infrastructure. This is a great option to consider if you’re looking to harden your Nix workflows against GitHub outages 🔗 flakehub.com

The EU Cyber Resilience Act's 24-hour reporting clock starts September 11 🇪🇺 📋 But don't fret! Instead, read our new blog post to see how Nix and Determinate Secure Packages can put you on such exceptional supply chain footing that the CRA will be a breeze 🔗 ❄️ 🚀 determinate.systems/blog/nix-cyb...

Determinate Nix 3.21.9 is now out! And it includes faster evaluation thanks to a fix in the store path cache plus an important cache key config change targeted to users of FlakeHub Cache in our FedRAMP environment. This is the one you really want, folks ❄️ 🚀 🔗 determinate.systems/blog/changel...

Determinate Systems co-founders @grahamc.com and @niksnut.bsky.social recently joined the Full Time Nix podcast to talk Determinate Nix, FedRAMP High Authorization for FlakeHub, post-quantum cryptography, and running Nix in arenas like finance and defense 🎤 ❄️ 🚀 fulltimenix.com/episodes/det...

Introducing FlakeAudit, a CLI for evaluating SBOMs against custom policies 🔍 📋 ❄️ 🚀 It checks licenses, vulnerabilities, and much more to determine if your software is actually shippable. And it combines beautifully with FlakeBOM and Determinate Secure Packages. determinate.systems/blog/introdu...

Determinate Nix 3.21.8 is out 🎉 🚀 ❄️ FlakeHub Cache now routes to your nearest node (faster in Australia, Asia, and Africa) and Determinate Nixd applies config changes automatically. Plus three reliability improvements. To upgrade: sudo determinate-nixd upgrade determinate.systems/blog/changel...

Defense tech teams using Nix can now use FlakeHub for CUI workflows in a FedRAMP Class D (High) environment! Nix delivers reproducible builds. FlakeHub adds private flakes, caching, access controls, and provenance, with less infrastructure to manage. Learn more here: flakehub.com/fedramp

We are hosting another Nix meetup in Portland, Oregon, next week. Join us on Monday, July 27, for casual drinks and conversations about Nix with members of the Determinate Systems team and other Nix enthusiasts from around the Rose City. See more details and RSVP here: luma.com/pj3eprqz

A new release of Determinate Nix is out 🎉🚀❄️ Version 3.21.7 comes with a whole bunch of fixes, performance improvements, and DX upgrades. Most importantly, Determinate Nix is now built with Determinate Secure Packages. Folks, this is the one you really want 😎 determinate.systems/blog/changel...

FlakeHub has achieved FedRAMP High Authorization and is now listed in the FedRAMP Marketplace 🎉🏛️🔐 That means secure Nix packages, caching, private flakes, and more are now available to federal agencies and orgs handling Controlled Unclassified Information (CUI). determinate.systems/blog/flakehu...

📣 Portland (Oregon) Nix friends, we’re doing it again! 🎉 Join the Determinate Systems team on July 27 for drinks, pizza, and plenty of Nix talk with fellow reproducible systems enthusiasts. More details and RSVP here: luma.com/pj3eprqz

For people using flake schemas with Determinate Nix, please be aware that we've made a change to how schemas work. It isn't a breaking change yet but we wanted to provide ample forewarning. Have a read and update your flakes accordingly 🍁 ❄️ 🔄 determinate.systems/blog/flake-s...

Need to generate an SBOM from a Nix flake? We’re hosting a live walkthrough this Thursday, June 18 at 9am PT / 12pm ET. We’ll show how FlakeBOM turns Nix flakes into SBOMs, then connect that to a broader supply chain security workflow with Determinate Secure Packages. Register: luma.com/flakebom

Your SBOM should understand your build graph, not just the final artifact. This Thursday, June 18, join Determinate Systems for a live look at FlakeBOM, our new CLI for generating SBOMs from Nix flakes and Determinate Secure Packages. More details and RSVP here: luma.com/flakebom

We're in the dog days of secure software supply chain summer and we brought popsicles: Nixpkgs with package cooldowns protects Determinate Nix users from supply chain attacks. Even sweeter, Determinate Nix is free for everyone and the best way to use Nix at work. determinate.systems/blog/nixpkgs...

Determinate Secure Packages 26.05 is out and set to rock your Nixpkgs update world, with SLA-backed CVE fixes, full coverage in FlakeHub Cache, access to FlakeBOM, FIPS support, and more now available to teams on Nixpkgs 26.05 or upgrading to it 📦 🔐 ⬆️ ❄️ 🚀 determinate.systems/blog/determi...

We're excited to announce FlakeBOM, a CLI for generating CycloneDX SBOMs from Nix flakes. Lightning fast and complete with VEX metadata and support for information not provided by other tools, it's the perfect complement to Determinate Secure Packages ❄️ ⚡ 📦 🚀 determinate.systems/blog/introdu...

One of our favorite things about Determinate Secure Packages is that adoption doesn't involve refactoring or building out an integration. You swap out a flake reference to get started and `nix flake update` to pull security fixes. That's really it 📦 🔐 ❄️ 🚀 determinate.systems/secure-packa...

Secure Nixpkgs for the enterprise is here (and has been for a while now!) 📦 ❄️ 🚀 In today's blog post we catch up with Determinate Secure Packages. Find out how it's transforming the supply chain, about the strides forward that we've made, and how to get started. determinate.systems/blog/supply-...