top | item 44652930

(no title)

WhatIsDukkha | 7 months ago

So this seems like a bit of a half measure in the sense that it doesn't provide client side build?

With guix I can bit for bit reproduce with my client machine the upstream binaries.

This seems flawed to assume that google's servers are uncompromised, its vastly better to have distributed ability to reproduce.

https://guix.gnu.org/manual/en/html_node/Invoking-guix-chall...

discuss

order

akdor1154|7 months ago

It does provide client side build, see the bottom shell snippets.