Just uploaded my bachelor's thesis to GitHub!
In it, I detail how I created a bootstrap chain for @nixos_org which builds the whole system from a small hand-auditable binary seed.
Read the thesis: https://nzbr.github.io/nixos-full-source-bootstrap/thesis.pdf
Check out the code: https://github.com/nzbr/nixos-full-source-bootstrap
My post on the NixOS discourse: https://discourse.nixos.org/t/a-full-source-bootstrap-for-nixos/74801
@nzbr @nixos_org Very cool! I’ve been wondering about how to do this for ages.
Right now, I can boot #NetBSD from a USB stick, then install NetBSD on to a completely zeroed disk with only binaries generated from source from that USB stick. I do this in part because compiling is a good stress test of a system.
Now if I could build everything on the USB stick from a small, hand-auditable (for certain values of hand) bootstrap, that’d be awesome.
Excellent work! Reading it now :)
Arson Copperflame
Bitslingers-R-Us