Nixorium v2.0.0-beta.1

Added

• Per-user rootless Docker daemons with declarative subordinate UID/GID ranges.
• A writable ~/.local/npm global prefix, available in every login session for tools such as Codex and Claude Code.
• An opt-in veyonNativeHosts canary for Veyon 4.11's PipeWire/XDG portal Wayland backend.
• Setuid wrappers for Veyon's authentication and Wayland input helpers.

Changed

• Updated nixpkgs from NixOS 25.11 to 26.05 and refreshed all flake inputs.
• Updated Veyon from the local 4.10.0 derivation to its official 4.11.0 flake.
• Updated the GNOME Remote Desktop reconnect patch for GNOME 50's connection throttler.
• Switched development packages to the current stable Node.js and PHP aliases.
• Migrated the controller sleep policy to NixOS 26.05's structured systemd settings.
• Disabled automatic ZFS root-pool imports because the shared Disko layout uses Btrfs.
• Excluded Docker data, the npm cache, and global npm tools from student home snapshots.

Security

• Removed every normal user from the root-equivalent docker group.

Breaking

• Docker now uses a per-user rootless socket and storage. Existing rootful images and containers are not migrated.