Honest question: is NixOS really doing reproducible builds, where you get byte-identical binaries when rebuilding from source?
I only found this issue on the Tor tracker, and apparently NixOS does not produce reproducible builds in the same way as intended by Debian: https://trac.torproject.org/projects/tor/ticket/12520