NixOS switch-to-configuration: Rollback Policy and Journal Access Boundaries
NixOS deploys by building a new system closure with nixos-rebuild switch and then activating it through switch-to-configuration . A failure can surface at build time, during activation, or later at service runtime, and an interrupted activation can leave a partially applied generation rather than an atomic switch. The unresolved decision is policy: should a