> Which is why I'm very disappointed that distributions are not pushing reproducible builds as a top priority. If nothing else, this might make me switch to Nix

> Which is why I'm very disappointed that distributions are not pushing reproducible builds as a top priority. If nothing else, this might make me switch to NixOS soon. Yes, it's unfortunately a step in the wrong direction, which is alarming considering the scale at which Docker is used. I haven't used Nix, but I use Guix, and GuixSD is its distribution. Like Nix, it's a functional package manager, so not only do you get package signing, but you also get a fully verifiable and reproducible (barring certain packages that aren't yet reproducible) state of the entire system. It's not that containers and Docker can't succeed in solving some of these problems. Guix can create docker images, for example. Better yet, it can run things in isolation in containers, even ad-hoc, without the need for Docker. https://www.gnu.org/software/guix/news/running-system-services-in-containers.html https://www.gnu.org/software/guix/news/running-system-servic... You can even run your browser in a container and share the X11 session: https://github.com/pjotrp/guix-notes/blob/master/CONTAINERS.org https://github.com/pjotrp/guix-notes/blob/master/CONTAINERS.... (And in that regard, we also have Qubes OS, but that doesn't have the benefit of a functional package manager, unless you use Guix/Nix of course.)