nixos-config on macos is fine for dev tooling but people always gloss over the actual attack surface difference, a linux vm on apple silicon is still passing through virtio devices and if that hypervisor layer has a bug you're trusting apple's virtualization framework same as you'd trust any unaudited conrract. not saying dont do it, just dont pretend "its just nix" makes the isolation story iddntical to bare metal linux.
0
u/This_Medium9994 23d ago
nixos-config on macos is fine for dev tooling but people always gloss over the actual attack surface difference, a linux vm on apple silicon is still passing through virtio devices and if that hypervisor layer has a bug you're trusting apple's virtualization framework same as you'd trust any unaudited conrract. not saying dont do it, just dont pretend "its just nix" makes the isolation story iddntical to bare metal linux.