3 ms·
An already built container is reproducible in the same way that a binary artifact is reproducible. Nix is reproducible to its core, including hash integrity of
by smilliken 7y ago
An already built container is reproducible in the same way that a binary artifact is reproducible. Nix is reproducible to its core, including hash integrity of every tool used to execute the build. Anybody should be able to build a bit-for-bit identical copy from scratch.
It's quite an ambitious goal, and I'm still surprised it succeeded. Unlike docker, nix can't be naive about what's being built. For example, it has to understand the specifics of python and python packages, and build its own infrastructure instead of using the existing tools like docker.
- georgyo 7y ago> An already built container is reproducible in the same way that a binary artifact is reproducible. Nix is reproducible to its core, including hash integrity of every tool used to execute the build. Anybody should be able to build a bit-for-bit identical copy from scratch. This is the goal, but not actually the case. Nix/guix does many things to make reproducible outputs more likely, however people are very good at putting things in a package that are not deterministic, such as the build time down to the milisecond.