From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jookia <166291@gmail.com> Subject: Re: Bootstrap binaries Date: Sun, 28 Feb 2016 21:51:35 +1100 Message-ID: <20160228105135.GB3949@novena-choice-citizen.lan> References: <20160208204350.GA29053@thebird.nl> <1456268422.2159.23.camel@ghic.org> <8737sj7znl.fsf@dustycloud.org> <20160224000234.GA21278@jasmine> <20160224111651.06b2c8e2@debian-netbook> <20160224093658.GA28873@novena-choice-citizen.lan> <878u284pxq.fsf_-_@gnu.org> <87wppsedu2.fsf@dustycloud.org> <87oab3ys9j.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49629) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from <166291@gmail.com>) id 1aZyxK-00079J-Cs for guix-devel@gnu.org; Sun, 28 Feb 2016 05:52:07 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from <166291@gmail.com>) id 1aZyxJ-0004Qm-Mi for guix-devel@gnu.org; Sun, 28 Feb 2016 05:52:06 -0500 Content-Disposition: inline In-Reply-To: <87oab3ys9j.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Ludovic =?iso-8859-1?Q?Court=E8s?= Cc: guix-devel On Sat, Feb 27, 2016 at 12:19:04AM +0100, Ludovic Courtès wrote: > I prefer to change those binaries as rarely as possible. Intuitively > (and unscientifically), it gives more confidence to keep using the same > old binaries wrt. Ken Thompson attacks. I'm not sure about that, if we could establish the binaries could be reproducibly built using the current bootstrap binaries it sounds like it could be fine. Having reproducible bootstrap binaries seems like something incredibly useful especially for packagers that for whatever reason want to verify that the binaries can be built with Guix before signing them. > Ludo’. Jookia.