|
|
|
|
|
|
by WhatIsDukkha
327 days ago
|
|
|
So this seems like a bit of a half measure in the sense that it doesn't provide client side build? With guix I can bit for bit reproduce with my client machine the upstream binaries. This seems flawed to assume that google's servers are uncompromised, its vastly better to have distributed ability to reproduce. https://guix.gnu.org/manual/en/html_node/Invoking-guix-chall... |
|
|