Application Isolation using NixOS Containers (2021) | Dark Hacker News