Fixed
- Real Nixpacks CLI: Source deployments use the actual Nixpacks 1.37.0 executable instead of trying to run the CLI command inside
ghcr.io/railwayapp/nixpacks, which is a build-base image and contains nonixpackscommand. - Consistent Host and Agent Builds: The Ubuntu installer and NineDeploy runtime image provision the same pinned CLI for local and remote deployments.
Security
- Verified Build Toolchain: AMD64 and ARM64 Nixpacks release archives are downloaded from the official release and checked against architecture-specific SHA-256 digests before installation.