| 2 Dec 2022 |
cbwang | In reply to @rick:matrix.ciphernetics.nl Do you burn that on a usb stick and boot from it? I would prefer to burn it on a DVD | 18:17:45 |
@rick:matrix.ciphernetics.nl | Or whatever nix | 18:17:50 |
cbwang | In reply to @rick:matrix.ciphernetics.nl Or do you start with a host os and a statically linked nix or so? Start with a nix that is built from a gcc bootstrapped from stage0 | 18:18:38 |
@rick:matrix.ciphernetics.nl | And that you can build on whatever host I guess? | 18:20:23 |
cbwang | Yeah, and the nix binary should be reproducible on any x86 compatible hardware. | 18:21:00 |
@rick:matrix.ciphernetics.nl | Yeah, at least x86_64 | 18:21:27 |
cbwang | In reply to @cbwang:matrix.org Thanks! I'm basically naively wondering if it is possible to build an ENTIRE minimum NixOS iso completely from source code of free software and with COMPLETELY no binaries (except stage0) involved at all. I guess some people would love this. The cryptocurrency community for example, they treated security extremely seriously. The Solarwinds and XcodeGhost attack had demonstrated what a supply chain attack is capable of. | 18:29:17 |
cbwang | Perhaps some day, some one would publish this: he compiled an entire NixOS from source code, except the 256-bytes stage0 is binary. Then he publishes his (gpg-signed) entire chain of trust, how he bootstrapped stage0 -> stage1 -> gcc -> nix -> ... NixOS iso, and telling the world that anyone can reproducible this chain of trust. | 18:33:52 |
cbwang | * Perhaps some day, some one would publish this: he compiled an entire NixOS from source code, except the 256-bytes stage0 is binary. Then he publishes his (gpg-signed) entire chain of trust, how he bootstrapped stage0 -> stage1 -> gcc -> nix -> ... NixOS iso, and telling the world that anyone can reproduce this chain of trust. | 18:40:42 |
Foxboron | In reply to @cbwang:matrix.org Besides, if we really can achieve that, then we are going to have the first host OS that all the binaries are free Guix is already doing this fwiw | 18:50:28 |
Foxboron | They started https://bootstrappable.org/ as a subproject under reproducible builds a few years ago. They have also been working hard on reducing the compiler stages beyond the seed binary with work on GNU mes C | 18:51:51 |
cbwang | In reply to @foxboron:archlinux.org Guix is already doing this fwiw However from https://data.guix.gnu.org/repository/1/branch/master/latest-processed-revision/package-reproducibility it seems that more than 10% of Guix packages are not reproducible | 18:54:03 |
atemu12 | cbwang: I wouldn't be surprised if was a similar number for us aswell. | 18:57:58 |
Foxboron | In reply to @cbwang:matrix.org However from https://data.guix.gnu.org/repository/1/branch/master/latest-processed-revision/package-reproducibility it seems that more than 10% of Guix packages are not reproducible Making the seed bootstrapping reproducible is a different problem from making everything reproducible. | 18:59:39 |
Foxboron | Arch is the most reproducible still i think, but we have made no efforts into bootstrapping stuff | 19:00:22 |
| 3 Dec 2022 |
cbwang | In reply to @foxboron:archlinux.org Making the seed bootstrapping reproducible is a different problem from making everything reproducible. Yeah, so perhaps we can combine the package reproducibility of NixOS with the seed bootstrapping reproducibility of Guix | 00:28:28 |
| 6 Dec 2022 |
| @federicodschonborn:matrix.org joined the room. | 13:01:02 |
| @connorbaker:matrix.org left the room. | 15:17:32 |
| 8 Dec 2022 |
| terrestrialpedestrian joined the room. | 18:04:54 |
| 10 Dec 2022 |
| @rimuru:gentoo.chat changed their profile picture. | 00:25:49 |
| 12 Dec 2022 |
| @notgne2:wizbos.club changed their profile picture. | 18:22:20 |
| 14 Dec 2022 |
| @nahfe:nahfe.xyz changed their display name from NAHFE to Herman. | 10:55:05 |
| Alesya Huzik joined the room. | 11:11:36 |
| @nahfe:nahfe.xyz changed their display name from Herman to NAHFE. | 11:31:35 |
| @nahfe:nahfe.xyz changed their display name from NAHFE to Herman. | 11:33:32 |
| 16 Dec 2022 |
| fbecart joined the room. | 08:17:43 |
| 19 Dec 2022 |
| @rimuru:gentoo.chat changed their profile picture. | 11:54:08 |
| 20 Dec 2022 |
tpw_rules | https://github.com/NixOS/nixpkgs/pull/206955 | 01:11:33 |
@rick:matrix.ciphernetics.nl | Step by step | 09:43:54 |
| 24 Dec 2022 |
| Jared Mohammed changed their profile picture. | 20:53:49 |