Post Syndicated from original https://lwn.net/Articles/838177/rss

GNU Guix, a functional package manager and associated free software
distribution, was introduced
eight years ago. The 1.2.0
release celebrates the anniversary. “A major highlight in this release is the ability to authenticate channels, which probably makes Guix one of the safest ways to deliver complete operating systems today. This was the missing link in our “software supply chain” and we’re glad it’s now fixed. The end result is that guix pull and related commands now cryptographically authenticate channel code that they fetch; you cannot, for instance, retrieve unauthorized commits to the official Guix repository.”