Nix / NixOS

Podman provides stronger isolation than nixos-containers because the latter only supports rootful containers. Losing access to nixos modules is a disadvantage, altough most services I'd use podman containers for don't have any modules anyway.

E.g. I've used nixos container as a stop gap to use a major beta, because I didn't manage to adapt the nixos package accordingly.