torturedllama

joined 1 year ago
[–] torturedllama@lemmy.nz 2 points 1 year ago

Unfortunately given how hard reproducible builds are they aren't done much, and aren't talked about much. A vicious cycle. A nice short video would indeed be helpful for understand and awareness.

[–] torturedllama@lemmy.nz 4 points 1 year ago (2 children)

Yeah that site is pretty good. There's a lot of information though. I think a good starting point is maybe this page: https://reproducible-builds.org/docs/env-variations/

[–] torturedllama@lemmy.nz 10 points 1 year ago (4 children)

An important point to add for someone who hasn't heard of reproducible builds before: The key difference to a normal build process is that it is 100% deterministic i.e. it produces exactly the same output every time.

You might think that most built processes would be like this by default, however this is not the case. Compilers and linkers usually have some non-deterministic values that they put in the final binary such as timestamps. For a build to be deterministic these sources of variation must be disabled or mocked to be a repeatable value (i.e. not based on the actual compile time).

[–] torturedllama@lemmy.nz 10 points 1 year ago (1 children)

It seems like it's alive again. You saved it OP!

[–] torturedllama@lemmy.nz 1 points 1 year ago (1 children)

Memes of the past!? Isn't this meme like 4 years old. I feel old now