2 ms·
You'll never beat the source. IIUC Reproducible Builds guarantees that source is turned into an artifact in a consistent and unchanging way. So as long as the
by nixpulvis 5y ago
You'll never beat the source.
IIUC Reproducible Builds guarantees that source is turned into an artifact in a consistent and unchanging way. So as long as the source doesn't change neither will the build.
- taviso 5y agoI don't really understand what you're saying. If you're saying "reproducible builds are reproducible", then that is obviously true, but the question is what is the benefit? Some people claim that the benefit is that there will be less incentive to threaten developers with violence, and I'm saying that's nonsense. If you cut through the nonsense, there are some modest claims that are true, but doing reproducible builds properly is very complicated and the benefit is negligible.
- nixpulvis 5y ago> ... the question is what is the benefit? I don't think I should have to explain this. It has nothing directly to do with violence against developers, that's taking many leaps. It simply gives you what you expect, which is kinda the basis of safety and security.
- taviso 5y ago> It has nothing directly to do with violence against developers, that's taking many leaps. It is literally the very first claim on the front page of https://reproducible-builds.org https://reproducible-builds.org.
- nixpulvis 5y agoThat's just a bunch of marketing hype. I'm trying to stay focused closer to the matters at hand. Perhaps my rambling on Development vs Distribution is relevant to the discussion? https://nixpulvis.com/ramblings/2021-02-02-signing-and-notarizing#4-development-vs-distribution https://nixpulvis.com/ramblings/2021-02-02-signing-and-notar...