X-Original-To: alpine-devel@lists.alpinelinux.org Delivered-To: alpine-devel@mail.alpinelinux.org Received: from mail-yk0-f182.google.com (mail-yk0-f182.google.com [209.85.160.182]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mail.alpinelinux.org (Postfix) with ESMTPS id 3B94CDC00DC for ; Mon, 12 Jan 2015 00:27:38 +0000 (UTC) Received: by mail-yk0-f182.google.com with SMTP id 131so8088555ykp.13 for ; Sun, 11 Jan 2015 16:27:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:subject:message-id:mime-version:content-type :content-transfer-encoding; bh=d8LxBzpWb8SC9lCFDkBjzvVYv6OvcJEcGMnjmd36AqE=; b=LMPdI+nXbU7l04ZMuLbMmhf/dfCqLTq17ohVMHoYG7ByiskewMFhxmtHDeUt5vH0yR 3kcbwDo/oy2zBXBj31x/6qTe8cZp3srgho+g1Yam6ipz4I/DORt5ZpoyAI1u5LkLDW3Q 6CqehU7EXEtnoSzil7VxL7Rs4MvQseCscOSI8Zqq07438HABXUTztf+ztC3Rpp2lJTm9 OvEKxrfm73n6g7K5D1bAPw7hSbNRKtmmLvyKh1LcmPYiPOjRMCMaXAO4tGA6fB5qWrE5 dWIZ53Id9grjWHMruLeBmhNjSD/d2p4uZ7ZYKwk3nbuTvUPLKMa/j+THXMVr1r5MIOVh KoHw== X-Received: by 10.236.14.3 with SMTP id c3mr20796177yhc.132.1421022457419; Sun, 11 Jan 2015 16:27:37 -0800 (PST) Received: from twinpeaks.my.domain ([74.82.134.59]) by mx.google.com with ESMTPSA id n69sm9501083yha.27.2015.01.11.16.27.36 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 11 Jan 2015 16:27:37 -0800 (PST) Date: Sun, 11 Jan 2015 16:27:33 -0800 From: Orion To: "alpine-devel@lists.alpinelinux.org" Subject: [alpine-devel] Gitian - Building Trust into Aports (resent) Message-ID: <20150111162733.1a7254a4@twinpeaks.my.domain> X-Mailer: Claws Mail 3.11.0 (GTK+ 2.24.23; x86_64-alpine-linux-musl) X-Mailinglist: alpine-devel Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit I saw a talk about gitian recently and think that Alpine should implement a reproducable, deterministic, and cryptographically hardened packages/ports. Supposedly bitcoin & Debian development have already started doing this. I hope you all think so as well :D . # Resources * [ 31c3 Talk ]( https://www.youtube.com/watch?v=5pAen7beYNc ) * [ Main Site ]( https://gitian.org/ ) * [ Github ]( https://github.com/devrandom/gitian-builder ) # Topics of Discussion * General thoughts. * Do you think it is worth while? * Is this feasible? * How long do you think it would take to do this? systmkor --- Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org Help: alpine-devel+help@lists.alpinelinux.org ---