luj.fr
Garden

Digital Garden

A collection of interconnected notes, ideas, and evergreen knowledge — growing and evolving over time.

42Notes
13 talks10 research7 steering6 people4 blog2 notes
Research20260702T000000==public

Understanding Build Reproducibility in the F-Droid Ecosystem

Abstract The security of open source applications benefits considerably from the possibility of rebuilding their source and verifying the output. F-Droid, a...

1 min read
Research20260530T000000==public

NICE: A Framework for Declarative and Machine-Checkable Vulnerability Reproduction

Abstract Reproducing software vulnerabilities is fundamental to security researchers, open-source maintainers, and educators. Yet, vulnerabilities remain hard...

1 min read
Research20260522T000000==public

A Decade of Software Reproducibility in the Nix Package Ecosystem

Abstract We report a large-scale empirical study of two aspects of software reproducibility — rebuildability and bitwise reproducibility — in the Nix package...

1 min read
Steering Committee20260421T105106==public

Steering Committee Report - Apr 21 2026

Announcement of the Bootstrap team I am relieved that we have finally announced the bootstrap team, after a long stretch during which the task was making...

3 min read
Talks20260413T000000==public

Lila: Decentralized Build Reproducibility Monitoring

Presentation of our Lila paper in the Data and Tool Showcase track of MSR 2026 in Rio de Janeiro, where it received the MSR 2026 FOSS Impact Award.

1 min read
Steering Committee20260401T225935==public

Steering Committee Report - Apr 1st 2026

On me not writing more of those notes It was my ambition to write some informal reports of the Steering Committee action more often, because I think it's...

7 min read
People20260401T185646==public

Christina Sørensen

Alias cafkafk. Member of the NixOS Steering Committee in 2026.

1 min read
People20260401T185548==public

Ilya Katsnelson

Alias K900. Member of the NixOS Steering Committee in 2026.

1 min read
People20260401T185440==public

Thomas Bereknyei

Alias tomberek. Member of the NixOS Steering Committee in 2025 and 2026.

1 min read
People20260401T184429==public

Robert Hensing

Member of the NixOS Steering Committee in 2025 and 2026.

1 min read
People20260401T184310==public

Philip Taron

Member of the NixOS Steering Committee in 2026.

1 min read
Research20260401T000000==public

AI Agents Decline Free Beer 🍺 but Have a Big Heart ❤️

Abstract We present the first-ever empirical study of AI agents offered free money with no strings attached. Eleven agents were given a $5 credit card and...

1 min read
Talks20260306T000000==public

Steering the Future of NixOS: Governance, Growth, and Community

Joint session of the NixOS Foundation and the Steering Committee at Planet Nix 2026 in Pasadena (co-located with SCaLE 23x), together with Ron Efroni Rotman,...

1 min read
Talks20260131T000000==public

LILA: decentralized reproducible-builds verification for the NixOS ecosystem

Lightning talk with Arnout Engelen in the Nix and NixOS devroom, presenting Lila, our decentralized system for monitoring build reproducibility across the...

1 min read
Steering Committee20260130T141252==public

(Updated) Proposal to rebuild the moderation team

This contains a rework of my initial proposal to rebuild the moderation team, informed by the comments and remarks of the other members of the Steering...

1 min read
Research20260128T000000==public

Lila: Decentralized Build Reproducibility Monitoring for the Functional Package Management Model

Abstract Ensuring the integrity of software build artifacts is an increasingly important concern for modern software engineering, driven by increasingly...

1 min read
Research20260119T000000==public

Docker Does Not Guarantee Reproducibility

Abstract The reproducibility of software environments is a critical concern in modern software engineering, with ramifications ranging from the effectiveness...

1 min read
Steering Committee20251205T111549==public

Steering Committee Report - Dec 5 2025

This part of the report have been written before the Steering Committee meeting on Dec 4: You may have noticed that I have not published a SC report in the...

2 min read
Steering Committee20251204T132510==public

(Initial) Proposal to rebuild the moderation team

I designed this after discussions with K900, Philip and other members of the community. My main driver for writing this proposal is that I don't think the SC...

3 min read
Steering Committee20251116T165359==public

Steering Committee Report - Nov 16 2025

Frustrations This second week was filled with a mix of frustration and hope. Frustration because of course when I decided to run for SC I was ready to dive...

4 min read
Notes20251109T181549==public

NixOS Steering Committee

Governance body of the NixOS community. Created by the NixOS Constitutional Assembly after community crisis. Contains 7 elected members.

1 min read
Steering Committee20251109T181446==public

Steering Committee Report - Nov 10 2025

One week has passed since I started my 1 year mandate in the NixOS Steering Committee. My most essential concern for this mandate is being able to restore the...

4 min read
Research20251001T000000==public

How NixOS could have detected the XZ supply-chain attack for the benefit of all thanks to reproducible-builds

Abstract In March 2024, a backdoor was discovered in xz, a compression software widely used across Linux distributions. This work analyzes the backdoor's...

1 min read
Blog20250929T000000==public

My hopes and plans for the NixOS community

About me I'm excited to share that I'm running for a seat on the NixOS Steering Committee. Before diving into my motivations, I'd like to take a moment to...

11 min read
People20250906T174239==public

John Ericson

Developer in the Nix core team. NixOS Steering Committee member in 2025 and 2026.

1 min read
Talks20250906T000000==public

Steering Committee & Foundation Board Panel

Joint panel of the Nix Steering Committee and the NixOS Foundation board at NixCon 2025 in Rapperswil-Jona, on the state and future of the project's governance.

1 min read
Talks20250905T000000==public

Supply Chain Security Panel Discussion

Panel discussion on software supply chain security in the Nix ecosystem, at NixCon 2025 in Rapperswil-Jona, together with John Ericson, Arian van Putten and...

1 min read
Blog20250521T000000==public

Artiflakery, an easy way to distribute static Nix flake artifacts

The problem of slides distribution... As a PhD student, I often do presentations. A lot of presentations. In 2024 alone, I gave about 15 talks in different...

3 min read
Talks20250429T000000==public

Does Functional Package Management Enable Reproducible Builds at Scale? Yes.

Presentation of our MSR 2025 paper on large-scale build reproducibility in the Nix ecosystem, in Ottawa, where it received the ACM SIGSOFT Distinguished Paper...

1 min read
Blog20250320T000000==public

How NixOS and reproducible builds could have detected the xz backdoor for the benefit of all

Introduction In March 2024, a backdoor was discovered in xz, a (de)-compression software that is regularly used at the core of Linux distributions to unpack...

35 min read
Talks20250201T000000==public

How reproducible is NixOS?

How reproducible is NixOS? In this talk at FOSDEM 2025, I present the results of our large-scale study of bitwise reproducibility in the NixOS distribution,...

1 min read
Blog20250127T000000==public

Is NixOS truly reproducible?

Build reproducibility is often considered as a de facto feature provided by functional package managers like Nix. Although the functional package manager model...

8 min read
Research20250101T000000==public

Does Functional Package Management Enable Reproducible Builds at Scale? Yes.

Abstract Reproducible Builds (R-B) guarantee that rebuilding a software package from source leads to bitwise identical artifacts. R-B is a promising approach...

1 min read
Talks20240925T000000==public

Portable software bills of materials with Nix and systemd portable services

A talk about leveraging Nix and systemd portable services to create portable software bills of materials, presented at All Systems Go 2024.

1 min read
Research20240419T020000==public

Increasing trust in the open source supply chain with reproducible builds and functional package management

Abstract Functional package managers (FPMs) and reproducible builds (R-B) are technologies and methodologies that are conceptually very different from the...

1 min read
Research20240419T010000==public

Reproducibility of Build Environments through Space and Time

Abstract Modern software engineering builds up on the composability of software components, that rely on more and more direct and transitive dependencies to...

1 min read
Talks20240419T000000==public

Reproducibility of Build Environments through Space and Time

Presentation of our ICSE-NIER'24 paper on how functional package managers provide the tooling to make build environments reproducible in space and time, with a...

1 min read
Talks20240204T150000==public

Public calendars aggregation using Linkal

A talk about public calendar aggregation using Linkal, presented at FOSDEM 2024.

1 min read
Talks20240204T140000==public

Debug your stage-1 systemd with GDB and the NixOS test framework

A talk about debugging stage-1 systemd using GDB and the NixOS test framework, presented at FOSDEM 2024.

1 min read
Talks20240204T130000==public

Automatic boot assessment with boot counting

A talk about automatic boot assessment using boot counting in NixOS, presented at FOSDEM 2024.

1 min read
Talks20240204T120000==public

Clevis/Tang: unattended boot of an encrypted NixOS system

A talk about using Clevis and Tang for unattended boot of encrypted NixOS systems, presented at FOSDEM 2024.

1 min read
Notes00000000T000000==public

Home

PhD student at the Polytechnic Institute of Paris researching software supply chain security. Former theoretical CS student at École Normale Supérieure. NixOS...

1 min read