[dekz]

The comment you are replying to mentions once the docker image is built, referring to the built layers. These are guaranteed to be identical.

Building from scratch, is not always guaranteed to be identical.

[k__]

Ah okay, got this wrong :)

Yes, the pre-build images are always identical.

Nix starts a step before this with solving the problem, so building from scratch is also guaranteed to be identical.