Re:Spectrum OS: a declarative, reproducible, compartmentaliz...
by aidenn0 on Wednesday September 15, 2021 @12:06AM
(#28535165)
I think I might be misunderstanding you, but that's completely false. Nix sandboxes things and every single C project I've used with "./configure && make && make install" works with zero boilerplate.
[ Parent
| on HN ]
Re:Spectrum OS: a declarative, reproducible, compartmentaliz...
by sa1 on Wednesday September 15, 2021 @12:38AM
(#28535315)
Yeah, it definitely works, and nix works around the problem, and lets you, the user, install the packages, but the builds are not guaranteed to be reproducible.
Re:Spectrum OS: a declarative, reproducible, compartmentaliz...
by aidenn0 on Wednesday September 15, 2021 @12:58AM
(#28535419)
They are as reproducible as you can get with C builds and far more reproducible than most other build systems across many different languages.
Re:Spectrum OS: a declarative, reproducible, compartmentaliz...
by sa1 on Wednesday September 15, 2021 @01:16AM
(#28535511)
Yeah, that's the point, as far as you can get with C builds isn't far enough. We're criticizing C build systems here, not nix.
Re:Spectrum OS: a declarative, reproducible, compartmentaliz...
by aidenn0 on Wednesday September 15, 2021 @10:34AM
(#28539594)
I mean is there a build system not named "bazel" that does a better job of making reproducible builds than a C autoconf project built with Nix?
Re:Spectrum OS: a declarative, reproducible, compartmentaliz...
by gilgad13 on Wednesday September 15, 2021 @11:02AM
(#28540018)
There's a lot of wiggle room in "better", but there are a decent number of distros for which ~95% of the packages are built in a reproducible way, including Debian, Arch, and Yocto: https://reproducible-builds.org/citests/