[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qubes-devel
Subject:    Re: [qubes-devel] Deterministic builds for Qubes OS -- the shortcut?
From:       HW42 <hw42 () ipsumj ! de>
Date:       2015-12-25 11:03:23
Message-ID: 567D227B.4090305 () ipsumj ! de
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Manuel Amador (Rudd-O):
> On 12/23/2015 10:39 PM, Wojtek Porczyk wrote:
> > About transition, there is no decision. I can only say we are quite
> > annoyed with Fedora lately because of several reasons, so we consider
> > our options. Our current state of internal, face to face discussion
> > boils to those points:
> 
> PLEASE, please consider NixOS harder.  They have solved the problem, and
> there are a substantial number of benefits to going with it.
> 
> I'm happy to answer questions.

NixOS is an interesting OS. But they haven't "solved" reproducible
builds (in the sense of bit-for-bit reproducible) (see [0]).

I don't think NixOS makes reproducible build much easier. They have the
same problem with timestamps, etc. as any distro. And AFAIK the only
distro which has done much effort to get rid of such stuff is Debian (I
definitively don't wan't do say that other distros have done nothing).

You also need to consider other things when choosing an OS. For example
the last time when I checked NixOS (for another problem, and ca. 1.5
years ago so might be no longer correct) it had problems with timely
security updates.

The only point where I think NixOS (and Guix [1] even more) has
significant advantages in regards to reproducible builds is automatic
complete boostraping of the whole distro.

[0]: https://nixos.org/wiki/GSOC_2015_ideas_list#Deterministic_Builds
[1]: https://www.gnu.org/software/guix/
-----BEGIN PGP SIGNATURE-----
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=1xoI
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-devel+unsubscribe@googlegroups.com. To post to this group, \
send email to qubes-devel@googlegroups.com. To view this discussion on the web visit \
https://groups.google.com/d/msgid/qubes-devel/567D227B.4090305%40ipsumj.de. For more \
options, visit https://groups.google.com/d/optout.


[prev in list] [next in list] [prev in thread] [next in thread]