Next at #scale23x / #planetnix : insightful+fun talk by Sam Fu about running sandboxed #nix builds inside #kubernetes pods.

Lots of gnarly stuff in there! User namespaces! Procmount masking! And much more :)