6 ms·
"Doesn't even try" is too strong. "When compiling from the same source on independent infrastructure yields bit-by-bit identical results, this gives confidence
by narrowbyte 2y ago
"Doesn't even try" is too strong.
"When compiling from the same source on independent infrastructure yields bit-by-bit identical results, this gives confidence that the build infrastructure was not compromised and the artifact really does correspond to the source."
- https://reproducible.nixos.org/ https://reproducible.nixos.org/
- hansvm 2y agoThat's fair. Attempting to rationalize my choice of language: - Their homepage defines reproducibility to be something other than bitwise identical results. - Getting actual bitwise reproducible builds is still hard for most large projects, even with the work Nix has done (note that the quote you pulled doesn't actually say that Nix _does_ provide such builds, and the rest of that linked text just tries to highlight some of the tools you have at your disposal to achieve that). They do "try" insofar as they're aware of the desire for bitwise identical results, provide them in some cases, and provide tools to diagnose problems. They're also 20 years old and more than happy to call the current results reproducible. At the very least, it doesn't look like one of the top properties for the project.