!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

543 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/30125 Servers

Load older messages


SenderMessageTime
28 Jan 2026
@stroadburbia:devhack.netabacef I just guessed that I had to change the system variable to aarch64-linux from the lila readme 17:40:03
@julienmalka:matrix.orgJulienI think there is a branch to reintroduce aarch64 outputs but I don’t know if it works17:40:50
31 Jan 2026
@martijn:boers.emailmartijn joined the room.15:36:56
1 Feb 2026
@raboof:matrix.orgraboofyes I used the branch at https://github.com/nix-community/lila/pull/117 - sadly there's something wrong with the nix tests when run through qemu (https://github.com/NixOS/nix/issues/13045)10:24:19
@raboof:matrix.orgraboofI represented Nix at the reproducible-builds BOF at FOSDEM. People are (rightfully) pretty excited about the progress on full-source bootstrap (both https://chaos.social/@nzbr/115973847897716839 and https://github.com/NixOS/nixpkgs/pull/479322)10:39:35
@sigmasquadron:matrix.orgFernando Rodrigues changed their profile picture.10:42:15
@raboof:matrix.orgraboofit's good to see there's recent progress on https://lore.kernel.org/all/20260113-module-hashes-v4-0-0b932db9b56b@weissschuh.net/ - currently we typically disable module signing in NixOS (because we have no great way to achieve reproducible signatures), this could be an attractive way to allow reproducibly locking down modules. Supporting out-of-tree modules would still need some thought/work, though.10:48:41
@raboof:matrix.orgraboof I'm still sympathetic to this goal, but I learned the Debian project (who have spent a lot of energy fixing build path differences causing unreproducibilities) have gone in the opposite direction: they have essentially given up on making build paths not influence the build and are moving to fixating the build path instead. Since they don't do that lightly, when we start varying the build path on Nix Linux, I think we should at minimum have an escape hatch to opt select derivations out of that variation. 10:53:56
@accelbread:matrix.orgaccelbreadIm currently using the module hashes patchset on my kernel and works fine. Though it seems you can use secureboot keys to sign modules after building. Might be possible to sign kernel modules at activation time?22:32:40
@raboof:matrix.orgraboofI'm not sure if that makes sense - AFAICS the point of module integrity checking is to make sure that nobody, not even root, can load an insecure module and gain kernel-level access that way. If that is the usecase then allowing you to sign additional/other modules at activation time seems to defeat the purpose?22:42:26
2 Feb 2026
@accelbread:matrix.orgaccelbreadthats fair. i currently have secure boot keys available to root for activation, and i guess you could use dm-verity for modules/firmware if not protecting from root anyways01:38:18
7 Feb 2026
@stroadburbia:devhack.netabacef @raboof:matrix.org: I think reproducible.nixos.social is down. My computer is currently contributing hashes to the aarch64 evaluation 21:05:38
@stroadburbia:devhack.netabacef* @raboof:matrix.org: I think reproducibility.nixos.social is down. My computer is currently contributing hashes to the aarch64 evaluation21:07:06
8 Feb 2026
@grimmauld:grapevine.grimmauld.deGrimmauld (migrated to @grimmauld:m.grimmauld.de) changed their display name from Grimmauld (any/all) to Grimmauld (migrated to @grimmauld:m.grimmauld.de).11:04:22
@grimmauld:grapevine.grimmauld.deGrimmauld (migrated to @grimmauld:m.grimmauld.de) left the room.11:12:00
9 Feb 2026
@julienmalka:matrix.orgJulien abacef: I am sorry, the site was indeed briefly down yesterday for... reasons... (I forgot to pay to domain renewal) 08:11:27
@julienmalka:matrix.orgJulien * abacef: I am sorry, the site was indeed briefly down on saturday for... reasons... (I forgot to pay to domain renewal) 08:11:43
@julienmalka:matrix.orgJulien * abacef: I am sorry, the site was indeed briefly down on saturday for... reasons... (I forgot to pay the domain renewal) 08:11:53
@amadaluzia:unredacted.orgamadaluzia removed their profile picture.22:30:09
@amadaluzia:unredacted.orgamadaluzia set a profile picture.22:32:50
10 Feb 2026
@mon:tchncs.depneumatic changed their display name from ribosomerocker to pneumatic.10:28:27
@amaan:amaanq.comamaan joined the room.17:34:11
19 May 2021
@grahamc:nixos.org@grahamc:nixos.org set the history visibility to "world_readable".16:14:09
@qyliss:fairydust.spaceAlyssa Ross joined the room.16:14:59
@baloo_:matrix.orgbaloo joined the room.16:15:12
@baloo_:matrix.orgbaloo 16:15:29
@grahamc:nixos.org@grahamc:nixos.orgchanged room power levels.16:21:56
@grahamc:nixos.org@grahamc:nixos.orgchanged room power levels.16:22:02
@immae:matrix.orgimmae (he/him) joined the room.16:23:59
@sumner:sumnerevans.comsumner joined the room.16:35:41

Show newer messages


Back to Room ListRoom Version: 6