4 ms·
Nix doesn't require everything to be built from source, sure, but everything downloaded must match a provided hash. What's the difference between downloading so
by 3836293648 2y ago
Nix doesn't require everything to be built from source, sure, but everything downloaded must match a provided hash. What's the difference between downloading source code and binaries at that point?
- ryukafalz 2y agoIt's easier to audit source code than binaries, and easier to audit it once than once for each architecture.
- 3836293648 2y agoAuditing is irrelevant to whether or not it's reproducable, which was the question here. You also forgo any improvements to compiler improvements