Here's a little thing that may not be obvious to many people....
When you install an open-source app from Google Play or the Apple app store, there is no guarantee that what you install actually matches the public code.
@fdroidorg are doing a great service. They independently build the public source code for apps from scratch, review for common issues, and publish their builds. Thanks to "reproducible builds" it's possible to verify they do not tamper with the code.
Nixos-unstable’s ISO_minimal.x86_64-Linux is 100% reproducible - https://discourse.nixos.org/t/nixos-unstable-s-iso-minimal-x86-64-linux-is-100-reproducible/13723
QUnit proudly joins ♻️ Reproducible Builds.
Today, the first release minted from our deterministic build process – QUnit 2.14. It was largely made possible by Rollup, with a couple of tweaks to ensure dist files use a date based only on information in the Git repository.
The SOURCE_DATE_EPOCH standard by @reproducible_builds made things easy to explain and document. No need to come up with our novel way! #standards #qunit #rollup #reproduciblebuilds
Our next "office hours" meeting for asking any questions about Reproducible Builds will be held on January 7th at 6pm UTC - see https://lists.reproducible-builds.org/pipermail/rb-general/2020-December/002100.html for more info. 👍
Missing an email address results in an unreproducible package. 🤷 (found by ) https://bugs.debian.org/972147
This generated config file accidentally includes the process ID of the build process instead of a literal dollar sign (due to '$$' over '\$') https://bugs.debian.org/972336 (found by )
Thank you to ARDC for sponsoring the @reproducible_builds project 💠
https://reproducible-builds.org/news/2020/09/25/ardc-sponsors-the-reproducible-builds-project/ #hamradio #ardc #ampr
An introduction to the @cip_project, one of the @reproducible_builds' supporter projects, as interviewed by 🔷 https://reproducible-builds.org/news/2020/10/21/supporter-spotlight-cip-project/
Join us at 1800 UTC for our second @reproducible_builds IRC meeting https://reproducible-builds.org/news/2020/10/26/reproducible-irc-meeting-2/
Jifeng Xuan will be giving an online talk on the locating the causes of unreproducible builds at 13h00 CET tomorrow (Tuesday 24th) 👍 https://lists.reproducible-builds.org/pipermail/rb-general/2020-November/002077.html
set of software development practices that create an independently-verifiable path from source code to the binary code used by computers.
Account monitored by @raboof
Fosstodon is an English speaking Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.