undefined | Better HN

0 points38362936481y ago0 comments

Nix doesn't require everything to be built from source, sure, but everything downloaded must match a provided hash. What's the difference between downloading source code and binaries at that point?

0 comments

ryukafalz1y ago

It's easier to audit source code than binaries, and easier to audit it once than once for each architecture.

3836293648OP1y ago

Auditing is irrelevant to whether or not it's reproducable, which was the question here.

You also forgo any improvements to compiler improvements

j / k navigate · click thread line to collapse