Post

The problem is that garnix is one big binary cache vs a lot of small private ones like in cachix, so adding new binary substitutors is not granular

Is your concern that you don't want to share your private builds with the world?

More so that I don't trust each and every one building their stuff on garnix, so I would NEVER add it as a binary substitutor to my computer. It might be okay for running tests but building stuff I would wanna distribute, no

The model is very different than cachix. cachix gives the owner the key, so they can upload anything, and you have to trust them. With garnix users don't get to upload directly - only things that garnix itself built are uploaded.

I've been thinking about it, and yeah, if garnix ignores flake config's extra substitutors it seems pretty safe