> But an operating system consists of thousands of independently changeable components, any of which can stop being available at any time. You'd have to vendor all your dependencies for your builds to truly be reproducible.

Er, yeah, that's why NixOS, like many distros, keeps public archives of packages and their source (see the discussion at https://news.ycombinator.com/item?id=36261492 )