2 Likes
Nice post!
I feel like the paragraph about cargoHash is a bit light though, the real reason why we need it, is because we download the source code of the dependencies from crates.io and so we need a fixed-output derivation to be able to access the network. But as the name says, a fixed-output derivation needs to have a fixed output and needs to specify the hash of that output (which is what forces the network access to be pure), and that is what cargoHash here provides.
2 Likes