Hermetic Builds - Learning Roadmap | Nemorize

✅ Fundamentals of Hermetic Builds

• ✅ What is Hermeticity?
  • ⚪ Definition and Core Concept
  • ✅ The 'Works on My Machine' Problem
  • ⚪ Benefits and Trade-offs
• ✅ Common Non-Hermetic Patterns
  • ⚪ Network Dependencies
  • ⚪ Timestamp and Clock Dependencies
  • ⚪ Global System State
  • ⚪ Undeclared File System Dependencies

✅ Inputs, Outputs, and Dependencies

• ⚪ Declaring All Inputs
  • ⚪ Source Files and Dependencies
  • ⚪ Build Tools and Compilers
  • ⚪ Pinning Dependencies
• ⚪ Content-Addressable Storage
  • ⚪ Hash Functions and Integrity
  • ⚪ Build Cache Mechanics

✅ Reproducibility vs Determinism

• ⚪ What is Reproducibility?
  • ⚪ Bit-for-Bit Reproducibility
  • ⚪ Security Implications
• ✅ Determinism in Build Systems
  • ⚪ Non-Deterministic Sources
  • ⚪ Fixing Non-Determinism

✅ Hermetic Build Tools Ecosystem

• ✅ Bazel Mental Model
  • ✅ BUILD Files and Targets
  • ✅ Sandboxed Execution
  • ⚪ Remote Build Execution
• ✅ Nix Mental Model
  • ✅ Derivations and Nix Store
  • ✅ Nix Language Basics
  • ✅ When to Choose Nix vs Bazel

✅ Hermetic Builds in Production

• ✅ Hermetic CI/CD Pipelines
  • ⚪ Containerized Build Environments
  • ⚪ Caching Strategies in CI
• ✅ Why Docker Alone Isn't Hermetic
  • ⚪ Docker's Hidden Dependencies
  • ⚪ Making Docker Builds Hermetic

⚪ Advanced Hermetic Patterns

• ⚪ Handling Generated Code
  • ⚪ Codegen as Build Inputs
  • ⚪ Schema Evolution
• ⚪ Cross-Platform Hermeticity
  • ⚪ Platform-Specific Toolchains
  • ⚪ Cross-Compilation