An LWN report on a FOSSY talk puts the Guix bootstrap seed at 256 bytes

Sources: primary, discussion
Summary: Jake Edge's report, dated 2026-08-17 and surfaced on Hacker News 2026-08-28, covers Timothy Sample's talk at the Free and Open Source Software Yearly conference. It states the Guix seed is now about 256 bytes, a program called hex0, where the original stopping point was a 250MB statically linked blob, and that a statically linked Guile is still used, which Sample calls cheating. It cites a paper, "Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation", in which researchers backdoored the strip program on NixOS and thereby nearly every binary built on the system, invisibly to source-code analysis.
Why it matters: The threat bootstrappable builds addresses is now demonstrated rather than hypothetical, and the cost of addressing it is measured in build chains that take days.
Follow-up: Track whether mrustc, which the report states can now build Rust 1.90, is integrated into Guix, where the Rust bootstrap currently starts at 1.54 or 1.56.