!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

533 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/30119 Servers

Load older messages


SenderMessageTime
2 Dec 2022
@cbwang:matrix.orgcbwang
In reply to @rick:matrix.ciphernetics.nl
Do you burn that on a usb stick and boot from it?
I would prefer to burn it on a DVD
18:17:45
@rick:matrix.ciphernetics.nl@rick:matrix.ciphernetics.nlOr whatever nix18:17:50
@cbwang:matrix.orgcbwang
In reply to @rick:matrix.ciphernetics.nl
Or do you start with a host os and a statically linked nix or so?
Start with a nix that is built from a gcc bootstrapped from stage0
18:18:38
@rick:matrix.ciphernetics.nl@rick:matrix.ciphernetics.nlAnd that you can build on whatever host I guess?18:20:23
@cbwang:matrix.orgcbwangYeah, and the nix binary should be reproducible on any x86 compatible hardware.18:21:00
@rick:matrix.ciphernetics.nl@rick:matrix.ciphernetics.nlYeah, at least x86_6418:21:27
@cbwang:matrix.orgcbwang
In reply to @cbwang:matrix.org
Thanks! I'm basically naively wondering if it is possible to build an ENTIRE minimum NixOS iso completely from source code of free software and with COMPLETELY no binaries (except stage0) involved at all.
I guess some people would love this. The cryptocurrency community for example, they treated security extremely seriously. The Solarwinds and XcodeGhost attack had demonstrated what a supply chain attack is capable of.
18:29:17
@cbwang:matrix.orgcbwangPerhaps some day, some one would publish this: he compiled an entire NixOS from source code, except the 256-bytes stage0 is binary. Then he publishes his (gpg-signed) entire chain of trust, how he bootstrapped stage0 -> stage1 -> gcc -> nix -> ... NixOS iso, and telling the world that anyone can reproducible this chain of trust.18:33:52
@cbwang:matrix.orgcbwang* Perhaps some day, some one would publish this: he compiled an entire NixOS from source code, except the 256-bytes stage0 is binary. Then he publishes his (gpg-signed) entire chain of trust, how he bootstrapped stage0 -> stage1 -> gcc -> nix -> ... NixOS iso, and telling the world that anyone can reproduce this chain of trust.18:40:42
@foxboron:archlinux.orgFoxboron
In reply to @cbwang:matrix.org
Besides, if we really can achieve that, then we are going to have the first host OS that all the binaries are free
Guix is already doing this fwiw
18:50:28
@foxboron:archlinux.orgFoxboronThey started https://bootstrappable.org/ as a subproject under reproducible builds a few years ago. They have also been working hard on reducing the compiler stages beyond the seed binary with work on GNU mes C18:51:51
@cbwang:matrix.orgcbwang
In reply to @foxboron:archlinux.org
Guix is already doing this fwiw
However from https://data.guix.gnu.org/repository/1/branch/master/latest-processed-revision/package-reproducibility it seems that more than 10% of Guix packages are not reproducible
18:54:03
@atemu12:matrix.orgatemu12 cbwang: I wouldn't be surprised if was a similar number for us aswell. 18:57:58
@foxboron:archlinux.orgFoxboron
In reply to @cbwang:matrix.org
However from https://data.guix.gnu.org/repository/1/branch/master/latest-processed-revision/package-reproducibility it seems that more than 10% of Guix packages are not reproducible
Making the seed bootstrapping reproducible is a different problem from making everything reproducible.
18:59:39
@foxboron:archlinux.orgFoxboronArch is the most reproducible still i think, but we have made no efforts into bootstrapping stuff19:00:22
3 Dec 2022
@cbwang:matrix.orgcbwang
In reply to @foxboron:archlinux.org
Making the seed bootstrapping reproducible is a different problem from making everything reproducible.
Yeah, so perhaps we can combine the package reproducibility of NixOS with the seed bootstrapping reproducibility of Guix
00:28:28
6 Dec 2022
@federicodschonborn:matrix.org@federicodschonborn:matrix.org joined the room.13:01:02
@connorbaker:matrix.org@connorbaker:matrix.org left the room.15:17:32
8 Dec 2022
@terrestrialpedestrian:cat.casaterrestrialpedestrian joined the room.18:04:54
10 Dec 2022
@rimuru:gentoo.chat@rimuru:gentoo.chat changed their profile picture.00:25:49
12 Dec 2022
@notgne2:wizbos.club@notgne2:wizbos.club changed their profile picture.18:22:20
14 Dec 2022
@nahfe:nahfe.xyz@nahfe:nahfe.xyz changed their display name from NAHFE to Herman.10:55:05
@alesya-h:nixos.devAlesya Huzik joined the room.11:11:36
@nahfe:nahfe.xyz@nahfe:nahfe.xyz changed their display name from Herman to NAHFE.11:31:35
@nahfe:nahfe.xyz@nahfe:nahfe.xyz changed their display name from NAHFE to Herman.11:33:32
16 Dec 2022
@fbecart:matrix.orgfbecart joined the room.08:17:43
19 Dec 2022
@rimuru:gentoo.chat@rimuru:gentoo.chat changed their profile picture.11:54:08
20 Dec 2022
@tpw_rules:matrix.orgtpw_ruleshttps://github.com/NixOS/nixpkgs/pull/20695501:11:33
@rick:matrix.ciphernetics.nl@rick:matrix.ciphernetics.nlStep by step 09:43:54
24 Dec 2022
@jaredmohammed:matrix.orgJared Mohammed changed their profile picture.20:53:49

Show newer messages


Back to Room ListRoom Version: 6