Tag
The article covers a presentation at the FOSSY conference explaining bootstrappable builds, which enable building entire systems from minimal trusted sources to enhance software security and reproducibility.
This article explains how to use Docker and Docker sandboxes for reproducible ESP32 firmware development, including integration with AI coding agents for safe, parallel environments.
The article explores missing elements in Python packaging specifications for achieving reproducible builds, which would improve supply chain security by enabling independent verification of distributions.
A blog post describing a new Bazel toolchain that compiles C++ code starting from the 357-byte stage0 bootstrap seed, achieving a fully source-bootstrapped and hermetic C++ toolchain within Bazel. The author demonstrates it building Abseil and GoogleTest unpatched from the Bazel Central Registry.
Chez Scheme 10.4.0 has been uploaded to Debian unstable after a long gap; the package moved to the Debian Scheme Dream Team, cross-compilation was fixed, and reproducible builds are now required for future releases.
This talk explains how to use Nix to achieve full reproducibility from development environments, builds, to cloud deployments, and showcases Antithesis's Nix-based "command set" framework as a replacement for messy scripts.
The May 2026 Reproducible Builds report highlights a major Debian policy change requiring all packages to be reproducible for inclusion in the 'forky' release, along with news about a 2026 summit in Gothenburg, a new rebuilderd version, and other project updates.
The article discusses a new feature in GNU Guix's `time-machine` and `pull` commands that allows for one-line deployment of software from channels while addressing security concerns associated with downloading and executing untrusted code.
Arch Linux released a bit-for-bit reproducible Docker image under a new "repro" tag, requiring users to regenerate pacman keys before package management.
A tutorial demonstrating four ways to set up development shells using Nix, including interactive one-offs, config files, and hermetic Nix Flakes, using GoCV and OpenCV as an example.