Hello! ban...@openmailbox.org skribis:
> Yes we are interested in running our own substitute servers. We > currently host our project specific .deb repo. Or do you mean a full > mirror of hydra? >From a security viewpoint, the more independent builders there are, the better. So if Whonix and other organizations would run their own build farm and publish their own substitutes (presumably with Cuirass and ‘guix publish’), that would be great. With more and more of our packages being bit-reproducible, users could easily use ‘guix challenge’ to compare what each server is providing and detect anything suspicious. Ludo’.
