2 ms·
Ok, so what tools are less work to create a reproducible build than using docker carefully?
by taberiand 1y ago
Ok, so what tools are less work to create a reproducible build than using docker carefully?
- soraminazuki 1y agoThe Nix package manager. It forces all inputs to a package be specified precisely. Files either have to come from the build recipe or have its hash verified. Builds are properly sandboxed and can't freely access the network. Dependencies are completely static and no "resolution" ever takes place. The tool catches sources of irreproducibility for you.