Bootstrappable builds: how and why
Summary
Bootstrappable builds aim to construct an entire Linux user space from a tiny seed, reducing reliance on pre-built artifacts and increasing trust in the software supply chain. The article contrasts bootstrappable builds with reproducible builds, highlights projects like Guix, Nix, live-bootstrap, and Germ, and discusses security concepts such as the Trusting Trust vulnerability, Diverse Double Compiling, and related tooling.