[rowanG077]

With a binary cache that is not so bad, see for example what nix does.

[Pay08]

I don't really see how that's different from a normal binary install of a reproducible package. Especially with the lacking quality of a lot of Nix packages.

[bandrami]

If you're in a situation where you want reproducibility you're using nix to build your own packages anyways, not relying on their packages

[rowanG077]

It's not if you can pin the package. It gives you reproducable docker containers without having to rebuild the world. Wasn't that the entire question?

[Pay08]

Wasn't the question about modifying an existing image?

[rowanG077]

No, it was about putting apt update in docker file and it not being reproducible.