[Nix-dev] Sidestepping the community builds trust issue?

Michael Raskin 7c6f434c at mail.ru
Fri Dec 25 10:39:27 CET 2015


>That would be great if we had deterministic build outputs, but we currently
>have no easy way of determining whether a binary cache is corrupt or
>whether a build was nondeterministic.

Well, given five binary caches 4:1 and 2:2:1 hash distributions would
give some information. 

And in some sense both packages and caches would accumulate reputations.





More information about the nix-dev mailing list