X-Original-To: alpine-devel@lists.alpinelinux.org Delivered-To: alpine-devel@mail.alpinelinux.org Received: from mail-yh0-f51.google.com (mail-yh0-f51.google.com [209.85.213.51]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mail.alpinelinux.org (Postfix) with ESMTPS id B770EDC0110 for ; Wed, 7 Jan 2015 22:14:59 +0000 (UTC) Received: by mail-yh0-f51.google.com with SMTP id a41so1079614yho.10 for ; Wed, 07 Jan 2015 14:14:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:subject:message-id:mime-version:content-type :content-transfer-encoding; bh=d8LxBzpWb8SC9lCFDkBjzvVYv6OvcJEcGMnjmd36AqE=; b=NM9lRKgRcT6p2fD+o3DEFYgnrOm80YMEyPkuIbH4u1DflaXtaVYAJHx5v6XCGoL5dW GQ7LXhJ9Qk9WIwHJ4+jEcU9SK4PC2no+Njrfc8zW3aYwaJb9eZrf1Oh4PMQPD+uOoWyf TIk2ODVK+YGjNEG3Pjw2AHLIjFO9dL8XO2MqtmqVMSUqjGYpqz1VBrdaVm7nfrxco/Xg 7dSYRq6FUPz1GW8udKAZnS5Xa/xVTXFTFb1ot9vf/wOcU+XliuOUQ8aHtKkILIAIDBF7 WtlZG04zHEhdarUDuBsU2n5xsrlN/c6x9Ks9y5G45Y1U+uMritaz2i22K9rHazpIfk+k vsWQ== X-Received: by 10.170.187.210 with SMTP id d201mr4468344yke.88.1420668898783; Wed, 07 Jan 2015 14:14:58 -0800 (PST) Received: from twinpeaks.my.domain (71-80-162-119.static.lsan.ca.charter.com. [71.80.162.119]) by mx.google.com with ESMTPSA id e68sm1943521yhb.26.2015.01.07.14.14.58 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 07 Jan 2015 14:14:58 -0800 (PST) Date: Wed, 7 Jan 2015 14:14:55 -0800 From: Orion To: "alpine-devel@lists.alpinelinux.org" Subject: [alpine-devel] Gitian - Building Trust into Aports Message-ID: <20150107141455.1314e7bd@twinpeaks.my.domain> X-Mailer: Claws Mail 3.11.0 (GTK+ 2.24.23; x86_64-alpine-linux-musl) X-Mailinglist: alpine-devel Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit I saw a talk about gitian recently and think that Alpine should implement a reproducable, deterministic, and cryptographically hardened packages/ports. Supposedly bitcoin & Debian development have already started doing this. I hope you all think so as well :D . # Resources * [ 31c3 Talk ]( https://www.youtube.com/watch?v=5pAen7beYNc ) * [ Main Site ]( https://gitian.org/ ) * [ Github ]( https://github.com/devrandom/gitian-builder ) # Topics of Discussion * General thoughts. * Do you think it is worth while? * Is this feasible? * How long do you think it would take to do this? systmkor --- Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org Help: alpine-devel+help@lists.alpinelinux.org ---