The NixOS change waits for a manual switch

wraptile lets Claude Code edit the NixOS config for his machines. He blocks the agent from running nixos-rebuild switch, and he switches himself after review.

Done with Claude CodeEasyOctober 21, 2026

What was done

On 09 October 2026 wraptile writes that the machines run NixOS, with one config repo that sets up all of them. Claude Code is used on that repo. He refuses to let Claude run nixos-rebuild switch. He reads each change before he switches manually.

How it went

The rule is that he switches himself. The comment does not say how many changes he has accepted.

Worth knowing

He does not describe a specific commit, or what happened the last time a switch failed. Secrets in the repo are not discussed.

How to do it

Ask Claude Code to edit [file] in the NixOS repo for [machine].
Read the diff before anything is activated.
Run nixos-rebuild switch yourself if the change is right.

Try it with Claude Code

Edit [file] for [machine] in the NixOS config. Show the diff. Do not run nixos-rebuild switch and do not deploy until I say yes.

Replace text in brackets with your own.

Done when. The diff has been read, and switch has not been run unless you ran it yourself.

Safety rule. Claude Code is not allowed to run nixos-rebuild switch. You read the diff and switch yourself.

Read the original

Read the original · comment by wraptile on Hacker News · October 9, 2026

More examples

A first app approved after a month

The author built his first app in Replit, with ChatGPT for the planning. The build took less than a week. Approval took a month.

ReplitNewreddit.comFebruary 21, 2026

Grok built 8 terminal games side by side

u/pzarevich watched Grok build 8 terminal games in C in agenc-core, one task per game. The orchestrator gathered and checked them at the end. A transfer from a Ledger device requires physical approval. He does not say a transfer was made.

GrokNewreddit.comJuly 22, 2026

Agent builds run on Windows VMs

bentcorner let the agents build and test over SSH on WSL in remote Windows VMs. The Mac is no longer used for those build runs.

Valgfri agentNewnews.ycombinator.comOctober 18, 2026

Codex installed Claude Code and asked for a review

u/Bulldagshunter had Codex work through a defect review. Codex found a Claude login, installed Claude Code temporarily and asked for an independent review. The first pass was stuck in plan mode. The second pass ran tests in a sandbox, with the Nexus library outside. He thinks Codex should have asked first.

CodexNewreddit.comJuly 28, 2026