Time travel without borders
Summary
The article examines security implications of Guix's time-machine and pull features for one-line deployments. It explains sandboxed evaluation of channel files, the concept of trusted channels, and the use of Software Heritage (SWHID) to ensure reproducible, verifiable deployments. It provides practical guidance for secure, automated software deployment in Guix workflows.