3 ms·
Author here! Both nix and guix are exciting projects with a lot of enviable security properties. Many here can attest that using them feels like, and perhaps i
by msuozzo 1y ago
Author here!
Both nix and guix are exciting projects with a lot of enviable security properties. Many here can attest that using them feels like, and perhaps is, the future. I see OSS Rebuild as serving more immediate needs.
By rebuilding packages from the registries people already use, we can bring some of those security properties to users without them needing to change the way they get their software.
- deleted 1y ago[deleted]
- Y_Y 1y agoWhy not help them help bring their packages to users, rather than borrowing and circumventing the existing effort?
- kam 1y agoNixpkgs pulls source code from places like pypi and crates.io, so verifying the integrity of those packages does help the Nix ecosystem along with everyone else.