3 ms·
- it's a great way to be sure binaries aren't backdoored or built from unofficial sources - in general if you want to do additional development on a piece of s
by 0x0 5y ago
- it's a great way to be sure binaries aren't backdoored or built from unofficial sources
- in general if you want to do additional development on a piece of software, it's useful to validate that your build environment is set up correctly and can reproduce bit-exact binaries, before doing additional development
- it helps prevent silent environment-specific build dependencies creeping in, aka "works on my machine"
- calvinmorrison 5y agoThe last point is exceedingly useful. If you build lots of in-house packages you may have forgotten what depends on what and when you go to say 'clean room' upgrade to a newer version of X, Y and Z don't work or X must be built first. Of course these simpler things are handled by proper dependencies but if you always build on a box designated "we built packages here" those lines can blur. Doing from scratch reproducable build enforces getting those things right from the start.