Top all-time · #4506
Morten Linderud
Personal blog · linderud.dev/blog · on HN as Foxboronsystemssecurity
Morten Linderud's personal blog at linderud.dev covers systems and security. Since 2019, 17 different Hacker News readers have linked it 40 times, most often “NixOS is not reproducible”. It is still writing: the last post was on 2026-08-01, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link Morten Linderud's posts on packaging LXD for Arch Linux and on whether NixOS builds are truly reproducible, topics that come up in homelab and reproducible-build discussions.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Meandring through cyberspace
Most-linked posts?
- NixOS is not reproducible6 people · 6 mentions · first linked 2024-04-02
- Self-hosting DNS for no fun, but a little profit4 people · 4 mentions · first linked 2025-11-18
- Store SSH keys inside the TPM: SSH-tpm-agent3 people · 3 mentions · first linked 2023-10-04
- Packaging LXD for Arch Linux2 people · 4 mentions · first linked 2020-04-27
- Reproducible Arch Linux Packages2 people · 3 mentions · first linked 2019-11-11
- Pam Bypass: when null(is not)ok2 people · 3 mentions · first linked 2020-11-24
- Store Age Identities Inside the TPM: age-plugin-tpm2 people · 2 mentions · first linked 2023-07-17
- Personal Infrastructure Setup 20262 people · 2 mentions · first linked 2026-01-19
- Coredumpctl, delve and debug packages for Go2 people · 2 mentions · first linked 2022-11-19
- Monitoring the kernel.org Transparency Log for a year2 people · 2 mentions · first linked 2022-04-16
What Hacker News says?
I'm currently involved in an effort to rip out docker swarm at work because its overlay networks are shockingly unreliable. LXD looks interesting but https://linderud.dev/blog/packaging-lxd-for-arch-linux/ convinced me that it's another Canonical NIH special and probably best avoided (in particular, "only distributed for Ubuntu via snaps" means "forces auto-updates" which means "not going in my environment"). Need t…
Comment linking /blog/packaging-lxd-for-arch-linux/
on “Kubernetes is deprecating Docker runtime support”Submitted NixOS is not reproducible as a story · 112 points
HN discussionI did write a bit about my experience packaging LXD for Arch Linux a while back. I got a ping from a Debian dev telling me the Debian dev working on LXD enjoyed the article, and has been trying to pick up on the work again. The linked wiki page is the outdated one. https://linderud.dev/blog/packaging-lxd-for-arch-linux/
Comment linking /blog/packaging-lxd-for-arch-linux/
on “LXD – next generation system container manager release 4.3”Submitted Stream to Chromecast with resolved, vlc and bash as a story · 82 points
HN discussionI never got around to submitting my blog to HN. But if people are curious about some technical details of the underlying problems of reproducing Arch Linux packages I wrote something a few months ago. https://linderud.dev/blog/reproducible-arch-linux-packages/ EDIT: I did self-discover I did submit the article when I wrote it. Just forgot. Oh well :)
Comment linking /blog/reproducible-arch-linux-packages/
on “Running an independent Arch Linux rebuilder”Submitted Packaging LXD for Arch Linux as a story · 53 points
HN discussionThat's rather the tail wagging the dog, isn't it? Besides, it kinda rules out most of the options; almost nobody packages it naively, probably because their build/vendoring/packaging process is insane (see https://linderud.dev/blog/packaging-lxd-for-arch-linux/ ).
Comment linking /blog/packaging-lxd-for-arch-linux/
on “RaspberryPi 4 home lab with LXD cluster”Submitted Mkinitcpio v31 and UEFI Stubs as a story · 42 points
HN discussionI’m picking this nit: > When is a build reproducible? > “A build is reproducible if given the same source code, build environment and build instructions, any party can recreate bit-by-bit identical copies of all specified artifacts.” > Neither Nix or NixOS gives you these guarantees. This really makes me question whether all of the quirkiness of Nix is worth it if it can’t actually “pay off” with true reproducibilit…
Comment linking /blog/nixos-is-not-reproducible/
on “Rebuilding my homelab: Suffering as a service”Submitted Monitoring the kernel.org Transparency Log for a year as a story · 38 points
HN discussionJust writing to agree, since you are getting pushback. @Foxboron wrote a compelling if clickbaity post a few months back to poke at the bit-for-bit interpretation of what reproducibility means in nixland: https://linderud.dev/blog/nixos-is-not-reproducible/ It didn't get much traction here ( https://news.ycombinator.com/from?site=linderud.dev ) but there was more lively discussion on lobsters: https://lobste.rs/s/jp…
Comment linking /blog/nixos-is-not-reproducible/
on “Towards Idempotent Rebuilds?”Submitted NixOS Is Not Reproducible as a story · 17 points
HN discussionSubmitted Self-hosting DNS for no fun, but a little profit as a story · 15 points
HN discussionSubmitted NixOS Is Not Reproducible as a story · 15 points
HN discussionSubmitted Streaming the Steam Deck to OBS as a story · 7 points
HN discussionSubmitted Self-hosting DNS for no fun, but a little profit as a story · 6 points
HN discussionSubmitted NixOS Is Not Reproducible as a story · 6 points
HN discussionSubmitted Self-hosting DNS for no fun, but a little profit as a story · 3 points
HN discussionSubmitted Easter hack: Terraform-provider-openwrt as a story · 3 points
HN discussionSubmitted Coredumpctl, delve and debug packages for Go as a story · 3 points
HN discussionSubmitted Pam Bypass: when null(is not)ok as a story · 3 points
HN discussionSubmitted Monitoring the kernel.org Transparency Log for a year as a story · 3 points
HN discussionSubmitted Reproducible Arch Linux Packages as a story · 3 points
HN discussionSubmitted Personal Infrastructure Setup 2026 as a story · 2 points
HN discussionSubmitted Self-hosting DNS for no fun, but a little profit as a story · 2 points
HN discussionSubmitted SSH CA with device and identity attestation: SSH-tpm-ca-authority as a story · 2 points
HN discussionSubmitted Store SSH keys inside the TPM: SSH-tpm-agent as a story · 2 points
HN discussionSubmitted Pam bypass: when nullok is not OK as a story · 2 points
HN discussionSubmitted Pam Bypass: when null(is not)ok as a story · 2 points
HN discussionSubmitted Improving the Secure Boot user experience as a story · 2 points
HN discussion
