On Tue, Jan 22, 2019 at 06:08:47PM -0500, David A. Wheeler wrote: > FYI, the "[email protected]" mailing list is having an active > discussion about doing reproducible builds for Apache Software Foundation > (ASF) projects under the topic "RE: Binary channels". You can see that here: > https://lists.apache.org/[email protected] > > Their legal group is concerned about binaries released by the ASF - > officially the ASF only releases source code, but in practice they release > binaries - and how do they know they're okay? One answer is to use > reproducible builds. I've been advocating for reproducible builds from the > ASF, and thought you'd like to know.
David, thanks a lot for sharing this pretty interesting story! I'm curious when (or if?) they actually release verifiable, reproducible builds! https://lists.apache.org/[email protected]:lte=1M:reproducible is a URL for those not finding the search form... -- tschüß, Holger ------------------------------------------------------------------------------- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
signature.asc
Description: PGP signature
_______________________________________________ [email protected] mailing list To change your subscription options, visit https://lists.reproducible-builds.org/listinfo/rb-general. To unsubscribe, send an email to [email protected].
