3 ms·
I’m picking this nit: > When is a build reproducible? > “A build is reproducible if given the same source code, build environment and build instructions, any
by jt2190 2y ago
I’m picking this nit:
> When is a build reproducible?
> “A build is reproducible if given the same source code, build environment and build instructions, any party can recreate bit-by-bit identical copies of all specified artifacts.”
> Neither Nix or NixOS gives you these guarantees.
This really makes me question whether all of the quirkiness of Nix is worth it if it can’t actually “pay off” with true reproducibility.
[1] “NixOS is not reproducible (2022) https://linderud.dev/blog/nixos-is-not-reproducible/ https://linderud.dev/blog/nixos-is-not-reproducible/
[2] “non reproducible issues in NixOS” https://github.com/orgs/NixOS/projects/30 https://github.com/orgs/NixOS/projects/30
- walterbell 2y agoDoes Guix offer guarantees of build reproducibility?
- Yotsugi 2y agoIt isn't worth it, if you care about freedom and configurability, Gentoo exists. >reproducibility would like to see people reproduce software that embeds build timestamp into the binary.
- Cyph0n 2y agoNonetheless, Nix/NixOS is more reproducible than the majority of other build systems and distros out of the box. But yes, if this is a hard requirement, you’ll be better off with a different choice. Keep in mind that this is but one of the features NixOS provides. I would say the config-driven approach to OS management is extremely powerful. As an example, I could bring up my homelab’s external reverse proxy on a generic VPS in a few minutes over SSH using a single command. This includes SSH keys, Telegraf, Nginx with LetsEncrypt certs, and automatic OS upgrades. No Ansible needed :) See: https://github.com/nix-community/nixos-anywhere https://github.com/nix-community/nixos-anywhere