NixPak – Sandboxing for Nix | Hacker News Reader