NixOS has proposed a method for protecting against the insertion of backdoors, such as those in XZ.
A repeatable builds mode has been proposed for inclusion in the nixpkgs package repository used in the NixOS distribution, allowing the identification of cases where backdoors have been injected into the code, reminiscent of the incident with the XZ project. The presented protection method enables the detection of modifications in the release source code archives that are absent in the code repositories. The essence of the method is that the source code of the new version of the application is built twice […]
