Skip to content
GitLab
Projects
Groups
Topics
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Register
Sign in
Toggle navigation
Menu
Reproducible Builds
reproducible-website
Compare revisions
b4d2fee23c688210404c73e9d431f91f578e269c...a1b9aedacd5679d38c76d30c82093cb27cb7f4fd
Commits (4)
Drop fullstop.
· 60347ac8
Chris Lamb
authored
Jun 29, 2021
60347ac8
Reduce the amount of bolded text.
· e9f44eae
Chris Lamb
authored
Jun 29, 2021
e9f44eae
Use ellipsis.
· 326bacd5
Chris Lamb
authored
Jun 29, 2021
326bacd5
Update link and logo to Google Open Source Security Team.
· a1b9aeda
Chris Lamb
authored
Jun 29, 2021
a1b9aeda
Hide whitespace changes
Inline
Side-by-side
_data/sponsors.yml
View file @
a1b9aeda
platinum
:
-
name
:
Google Open Source
Office
url
:
https://
opensource
.google.com/
-
name
:
Google Open Source
Security Team
url
:
https://
security
.google
blog
.com/
logo
:
google-open-source.png
gold
:
[]
silver
:
...
...
assets/images/sponsors/google-open-source.png
View replaced file @
b4d2fee2
View file @
a1b9aeda
10.8 KB
|
W:
|
H:
22.8 KB
|
W:
|
H:
2-up
Swipe
Onion skin
index.md
View file @
a1b9aeda
...
...
@@ -48,8 +48,8 @@ are essentially invisible to its original authors and users alike.
The motivation behind the
**Reproducible Builds**
project is therefore to allow
verification that no vulnerabilities or backdoors have been introduced during
this compilation process. By promising
**
identical results
**
are always
generated from a given source, this allows
**
multiple third parties
**
to come
this compilation process. By promising identical results are always
generated from a given source, this allows multiple third parties to come
to a consensus on a "correct" result, highlighting any deviations as suspect
and worthy of scrutiny.
...
...
@@ -63,17 +63,17 @@ already, or will soon, provide reproducible builds.
## How?
First, the
**build system needs to be made entirely deterministic
**
:
First, the
**build system
**
needs to be made entirely deterministic:
transforming a given source must always create the same result. For example,
the current date and time must not be recorded and output always has to be
written in the same order.
Second, the set of tools used to perform the build and more generally the
**build environment**
should either be
**
recorded or pre-defined
**
.
**build environment**
should either be recorded or pre-defined.
Third, users should be given a way to recreate a close enough build
environment, perform the build process, and
**
validate that the output matches
the original build
**
.
environment, perform the build process, and
**validate
**
that the output matches
the original build.
Learn more about
[
how to make your software build reproducibly…
](
{{
"/docs"
| relative_url }})
...
...
@@ -89,7 +89,7 @@ Learn more about [how to make your software build reproducibly…]({{ "/docs" |
{% endfor %}
</ul>
(
[
See all reports
](
{{
"/news/"
| relative_url }}))
(
[
See all reports
…
](
{{
"/news/"
| relative_url }}))
## Recent news
...
...
@@ -102,7 +102,7 @@ Learn more about [how to make your software build reproducibly…]({{ "/docs" |
{% endfor %}
</ul>
(
[
See all
](
{{
"/news/"
| relative_url }})
.
)
(
[
See all
…
](
{{
"/news/"
| relative_url }}))
{% assign sponsors = site.data.sponsors.platinum | sort: 'name' %}
...
...