Post Syndicated from original https://lwn.net/Articles/930650/
The Guix project (“a transactional
“) has announced
package manager and an advanced distribution of the GNU system
a milestone toward its goal of bootstrapping an entire distribution from
source:
If you run guix pull today, you get a package graph of more than
22,000 nodes rooted in a 357-byte program—something that had never
been achieved, to our knowledge, since the birth of Unix.
This is an interesting exercise, but should also be a defense against
“trusting trust” attacks.
(Thanks to Ludovic Courtès and Andy Tai).