> That also means that unless you build a project on two identical hosts then it is unlikely you will get the same SBOMs.
I don't understand why the author thinks this is such an insurmountable issue.
Reproducible builds are possible with a little care: large parts of Debian are built reproducible. There are tools from https://reproducible-builds.org/
Bazel and similar build systems support reproducible builds, and thus identical SBOMs.
I think the car issue is caused by rise of emissions controls. Efficiency and emissions control have been improved by computerizing the car - thats what puts car maintenance out of reach. Its hard for the average person to understand/fix things that we cannot see or touch.
I think (on linux, at least), its better to implement this as a nss- module (/etc/nsswitch.conf). You can do things like lookup a hashtable, automatically update databases, etc without having to rewrite system config files.
Also this does not protect you from programs that perform their own dns lookups, and ignore /etc/hosts and /etc/resolv.conf entirely!
I don't understand why the author thinks this is such an insurmountable issue.
Reproducible builds are possible with a little care: large parts of Debian are built reproducible. There are tools from https://reproducible-builds.org/
Bazel and similar build systems support reproducible builds, and thus identical SBOMs.