We build Docker images from Nix then deploy them to Atlassian’s internal PaaS.

The benefits we get:

• I can build any image we ship to production, byte-for-byte
• When we change 1 line of code, we’re 100% confident only what we changed will be shipped
• All of our services use the same build commands

The problems we have:

• Documentation is not great, so Nix is hard to teach
• Very common things like pinning cause lots of questions (e.g. what’s problems are caused by Import From Derivation?)
• Therefore most team members rely on the few people who have invested the time reading nixpkgs and the Nix source

I think the problems are mostly solvable and the benefits can’t be obtained from any existing tools.