3 ms·
It does still require trust, though. You can lie about the contents since the hash only covers the build inputs, so someone could break the sandboxing. Of cour
by sterlind 6y ago
It does still require trust, though. You can lie about the contents since the hash only covers the build inputs, so someone could break the sandboxing.
Of course, since builds are reproducible you can catch this if you build it yourself and compare the actual content-hashes.
- Ericson2314 6y agoI would say the trust issues with build remotes and substitutors are fairly independent of the caching policy? The caching model is about when the drv changes ((drv, output) is the cache key, basically), the trust model is one one can download something to avoiding build to fill in the value for the new cache key. Note also that with the new floating content-addressed derivations, the trust stuff is much easier to think about.