The NixOS group has efficiently perfomed a reproducabile construct of a) All packages that make it into the ISO, and b) The constructing of the ISO itself. That is progress from the 2021 announcement, which solely reproduced the person packages. Why are Reproducible Builds essential?
Whereas there are a selection of ‘side-benefits’, the principle level of Reproducible Builds is that it offers us a dependable strategy to confirm the binaries we ship are devoted to their sources, and haven’t been tampered with wherever within the construct pipeline (e.g. on Hydra).
They nonetheless haven’t arrived on the promised land but, as a result of there’s much more to to reap the advantages of reproducibility, equivalent to eradicating just a few hacks they put in to realize this, making extra packages reproducible, organising infrastructure to allow them to recurrently independently rebuild artifacts, and extra. However, progress!
