This one's the gold standard IMO. The rabbit hole is deep, but the important parts are all at the surface.

QubesOS is great when you want VMs with hardcore hardware isolation out of the box.

NixOS is great when you just want to do whatever you want, with hardcore reproducibility...including everything that Qubes does with isolation.