[anotherhue]

> reproducible builds

Nixpkgs please! It's the most successful reproducibility experiment I know of.

[dongcarl]

Absolutely!

Fun fact: all of the current website's infra is NixOS-based

Fun fact #2: I overhauled Bitcoin Core's reproducible build system to use Guix (a Nix-inspired functional package manager)

[joshspankit]

Side quest: Would you share the infra stack and how it’s set up?

[dongcarl]

It's mostly bash scripts (I know I have stockholm syndrome there) and nixos-rebuild: https://www.haskellforall.com/2023/01/announcing-nixos-rebui...

All the nix deployment tools had too much magic and broke, but nixos-rebuild always works and it's part of Nix!

Disko was great for bootstrapping servers: https://github.com/nix-community/disko