If you missed it: the video of my talk on Reproducible Builds of Android Apps at FOSDEM is live now. Feedback welcome 😊
https://fosdem.org/2026/schedule/event/8VDKQR-reproducible_builds_for_android_apps/
Eagerly waiting for the talk by @SylvieLorxu on our Download Statistics to become available, as I unfortunately could not attend it myself in person…
@lrvick Hi! I’m not sure what the “GNU way of doing things” is but Guix has a long track record regarding #bootstrapping and #ReproducibleBuilds and is used in production:
https://guix.gnu.org/en/blog/tags/bootstrapping/
(The “like no distro before it” punchline on the stagex home page is… questionable.)
That said, it’s good news that more distros are joining Guix and live-bootstrap on this journey!
@rekahsoft Guix goes further than any other distro and was a big inspiration, but it is not 100% reproducible/bootstrapped, trusts downloaded binaries, has a single-party trust model, chooses the GNU way of doing things above all others.
As a desktop-first distro with thousands of packages it would make it incredibly difficult to ever fully clear those bars.
Our threat model mandated the design a distro and release process built for supply chain security.
@lrvick Hi! I’m not sure what the “GNU way of doing things” is but Guix has a long track record regarding #bootstrapping and #ReproducibleBuilds and is used in production:
https://guix.gnu.org/en/blog/tags/bootstrapping/
(The “like no distro before it” punchline on the stagex home page is… questionable.)
That said, it’s good news that more distros are joining Guix and live-bootstrap on this journey!
