>>ploggi+(OP)
What I'd really love to see is a marriage between NixOS and Qubes, allowing for full-system declarative configuration, including the various systems which will be running under Qubes.
NixOS has containers that show how this could work, but they're only via systemd-nspawn, so not as jailed as Qube's domUs.