<story><title>Identifying Software</title><url>https://guix.gnu.org/en/blog/2024/identifying-software/</url></story><parent_chain></parent_chain><comment><author>Zambyte</author><text>I have felt spoiled by GNU Guix honestly. It has documentation that is comparable to Gentoo or Arch, power over your system that generally matches Gentoo (though a system-wide equivalent of USE flags is not yet available, individual packages can be configured), the ease of maintenance of a system like Fedora Silverblue, and one of the most approachable communities I have ever dealt with. I highly recommend playing around with it :)</text></comment>
<story><title>Identifying Software</title><url>https://guix.gnu.org/en/blog/2024/identifying-software/</url></story><parent_chain></parent_chain><comment><author>datadrivenangel</author><text>&amp;quot;we believe binary artifacts should instead be treated as the result of a computational process; it is that process that needs to be fully captured to support independent verification of the source&amp;#x2F;binary correspondence. &amp;quot;&lt;p&gt;So binary artifacts should verifiably come from source code, which can be accomplished by signing it with a signing mechanism specified in the source code?</text></comment>