You'll never beat the source.
IIUC Reproducible Builds guarantees that source is turned into an artifact in a consistent and unchanging way. So as long as the source doesn't change neither will the build.
IIUC Reproducible Builds guarantees that source is turned into an artifact in a consistent and unchanging way. So as long as the source doesn't change neither will the build.
If you're saying "reproducible builds are reproducible", then that is obviously true, but the question is what is the benefit?
Some people claim that the benefit is that there will be less incentive to threaten developers with violence, and I'm saying that's nonsense. If you cut through the nonsense, there are some modest claims that are true, but doing reproducible builds properly is very complicated and the benefit is negligible.
I don't think I should have to explain this. It has nothing directly to do with violence against developers, that's taking many leaps.
It simply gives you what you expect, which is kinda the basis of safety and security.
It is literally the very first claim on the front page of https://reproducible-builds.org.
Perhaps my rambling on Development vs Distribution is relevant to the discussion? https://nixpulvis.com/ramblings/2021-02-02-signing-and-notar...