How reproducible is NixOS?

Bitwise reproducibility is recognized as a promising way to increase trust in the distribution phase of binary artifact and hence increase trust in the software supply chain. But how reproducible is Nixpkgs? We know that the NixOS ISO image is very close to be perfectly reproducible thanks to reproducible.nixos.org, but there doesn't exist any monitoring of Nixpkgs as a whole. In this talk I'll present the findings of a project that evaluated the reproducibility of Nixpkgs as a whole by mass rebuilding packages from revisions between 2017 and 2023 and comparing the results with the NixOS cache.

See for reference: https://luj.fr/blog/is-nixos-truly-reproducible.html