Fwiw it's a bit sad that repro builds even need discussing; imo deterministic repro builds should be about as exotic as a working "ls".
You could re-design those platforms so that it made sense, but at that point, why not redesign them to make sideloading easier and just use your own binaries... You have to build things anyway to get the benefit of reproducible builds!
-
-
No you don't, you can have reproducible hashes signed by independent entities.
-
Exactly. *someone* has to build, but you don’t. Granted, you could just verify binary hashes—build reproducibility isn’t needed to show that your binary matches that built-and-verified by $thirdparty.
- 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
