Best practices for air-gapped NixOS servers with untrusted users?

Hi everyone, I’m looking for advice on the best workflow for managing software installations on an air-gapped (offline) NixOS server shared by untrusted users. Setup & Constraints The server has no direct outbound internet access. Users log in via SSH, but they are untrusted (so they cannot be added to nix.settings.trusted-users). Users want to manage their own software environments (e.g., via Home Manager). Core Idea In theory, building a package offline only requires having all of...