Hermetic Toolchain Creation with Local Remote Execution (LRE) & Nix
summary
Describes an implemented LRE workflow that uses Nix flakes to gather packages, materialize materialized Nix store paths, and feed identical strings into both a container builder and local Bazel RC fragments so Bazel sees absolute paths. Uses string flags (not Bazel file API) to configure toolchains, generates Bazel RC on repo checkout, and runs the same job in CI while publishing artifacts to a public remote cache. Demonstrated in NativeLink and reported to work end-to-end.
AI-written summary · about
related talks
41mFrom Bash to Nix
59mReproducable environments using nix
40mBut It Builds on My Machine!: Building Deterministic OCI Images With Nix
41mCloud Native Nix!
58mFunctional Infrastructure With Nix - Part 1 of 2
05mReproducible Build Environments with Nix
26mRemote Execution vs Local Execution
15mBuilding Developer-Friendly Spaces: Nix in a Nutshell