Impermanent NixOS: on a VM + tmpfs root + flakes + LUKS Jan 29, 2024