

Your specific NixOS problem it not unique
They do check some packages but not all, only the critical ones. And there is a tool to check if there a hydra build failures before updating.
But yeah it is problematic that NixOS is primarily source-based, most importantly as hydra builds everything and if a binary is not there, that is like always a build failure. Requesting those infos from hydra all the time also makes no sense, so this should really be solved on the branch/channel level
Yeah that would be the “cloud native” way XD
I have used Gitea actions and container registry before, it is okay.