[Reproducible-commits] [presentations] 03/03: editedit
Chris Lamb
chris at chris-lamb.co.uk
Thu Jul 7 14:43:31 UTC 2016
This is an automated email from the git hooks/post-receive script.
lamby pushed a commit to branch master
in repository presentations.
commit 1c3d83a8065b7a0a488d22d8806d43d18cae8382
Author: Chris Lamb <lamby at debian.org>
Date: Thu Jul 7 16:43:00 2016 +0200
editedit
---
2016-07-07-DebConf16/index.html | 66 +++++++++++++----------------------------
1 file changed, 21 insertions(+), 45 deletions(-)
diff --git a/2016-07-07-DebConf16/index.html b/2016-07-07-DebConf16/index.html
index 139a226..777729e 100644
--- a/2016-07-07-DebConf16/index.html
+++ b/2016-07-07-DebConf16/index.html
@@ -148,22 +148,14 @@
</ul>
</section>
- <!--
- Whilst anyone can inspect the source code of free software for malicious
- flaws, most Linux distributions provide binary (or "compiled") packages
- to end users.
-
- The motivation behind "reproducible" builds is to allow verification that
- no flaws have been introduced during this compilation process by
- promising identical binary packages are always generated from a given
- source.
- -->
+ <section data-background="images/install.jpg" data-background-size="80%" data-background-color="black">
+ </section>
<section data-background="images/install2.jpg" data-background-size="80%" data-background-color="black">
<ul>
<li>Ensure compilation always produces the same result</li>
<li>Multiple parties compare results</li>
- <li>Attacker needs to infect everybody simultaneously</li>
+ <li>Attacker needs to infect/blackmail everybody simultaneously</li>
<li>Bit-for-bit identical</li>
</ul>
</section>
@@ -178,20 +170,6 @@
<section>
<ul>
- <li>Timestamps</li>
- <li>Timezones & locale-specific content</li>
- <li>Non-deterministic file ordering</li>
- <li>Users, groups, <code>umask</code>, environment variables</li>
- <li>Random behaviour (eg. hash ordering)</li>
- <li>Build paths</li>
- <li>Locale-specific ordering</li>
- <li>Non-determistic data (eg. uninitialised memory)</li>
- <li>Deliberate randomness (crypto keys)</li>
- </ul>
- </section>
-
- <section>
- <ul>
<li>Detect corrupted build environments</li>
<li>Unsafe/unreliable/privacy-leaking behaviours</li>
<li>General non-deterministic behaviour</li>
@@ -222,13 +200,13 @@
<section>
<dl>
<dt><code>#138409</code></dt>
- <dd>dpkg-dev: please add support for .buildinfo files</dd>
+ <dd>dpkg-dev: please add support for <code>.buildinfo</code> files</dd>
<dt><code>#787980</code></dt>
- <dd>dpkg: please normalize file permissions when creating control.tar</dd>
+ <dd>dpkg: please normalize file permissions when creating <code>control.tar</code></dd>
<dt><code>#802241</code></dt>
- <dd>dpkg: please store the hash of the installed .deb and allow to query it</dd>
+ <dd>dpkg: please store the hash of the installed <code>.deb</code> and allow to query it</dd>
</dl>
</section>
@@ -238,26 +216,28 @@
<li>Build environment recording (<code>.buildinfo</code>)</li>
<li>
1800+ patches: <code>dpkg</code>, <code>debhelper</code>, <code>sbuild</code>, …
- <ul>
- <li>
- gcc (<code>__DATE__</code> & <code>__TIME__</code>)
- <br><a href="https://gcc.gnu.org/ml/gcc-patches/2015-06/msg02210.html">https://gcc.gnu.org/ml/gcc-patches/2015-06/msg02210.html</a>
- </li>
- </ul>
</li>
<li>
- Tools:
- <ul>
- <li><code>diffoscope</code> (formerly <code>debbindiff</code>)</li>
- <li><code>disorderfs</code></li>
- <li><code>reprotest</code></li>
- <li><code>strip-nondeterminism</code></li>
- </ul>
+ GCC (<code>__DATE__</code> & <code>__TIME__</code>)
+ <br><a href="https://gcc.gnu.org/ml/gcc-patches/2015-06/msg02210.html">https://gcc.gnu.org/ml/gcc-patches/2015-06/msg02210.html</a>
</li>
</ul>
</section>
<section>
+ <ul>
+ <li><code>diffoscope</code> (formerly <code>debbindiff</code>)</li>
+ <li><code>disorderfs</code></li>
+ <li><code>reprotest</code></li>
+ <li><code>strip-nondeterminism</code></li>
+ </ul>
+ </section>
+
+ <section data-background="images/diffoscope.png">
+
+ </section>
+
+ <section>
<h4><code>SOURCE_DATE_EPOCH</code></h4>
<ul>
@@ -274,10 +254,6 @@
</p>
</section>
- <section data-background="images/diffoscope.png">
-
- </section>
-
<section>
<h3>tests.reproducible-builds.org</h3>
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/presentations.git
More information about the Reproducible-commits
mailing list