[reproducible-website] 01/01: berlin2016: usescases formatting
Holger Levsen
holger at layer-acht.org
Fri Mar 17 19:33:49 UTC 2017
This is an automated email from the git hooks/post-receive script.
holger pushed a commit to branch master
in repository reproducible-website.
commit 1b8a50e280e32a455d593f29e115cd1866dbc488
Author: Holger Levsen <holger at layer-acht.org>
Date: Fri Mar 17 20:33:45 2017 +0100
berlin2016: usescases formatting
Signed-off-by: Holger Levsen <holger at layer-acht.org>
---
_events/berlin2016/agenda.md | 1 +
_events/berlin2016/usecases.md | 19 ++++++++++---------
2 files changed, 11 insertions(+), 9 deletions(-)
diff --git a/_events/berlin2016/agenda.md b/_events/berlin2016/agenda.md
index c1c4a0d..3a4579c 100644
--- a/_events/berlin2016/agenda.md
+++ b/_events/berlin2016/agenda.md
@@ -96,6 +96,7 @@ Day 2
- **[Documentation II]({{ "/events/berlin2016/documentationII/" | prepend: site.baseurl }})**
- **[Defining Reproducible Builds definition II]({{ "/events/berlin2016/reproduciblebuildsdefinitionII/" | prepend: site.baseurl }})**
- **[Bootstrapping I]({{ "/events/berlin2016/bootstrapping/" | prepend: site.baseurl }})**
+ - **[Use cases]({{ "/events/berlin2016/usecases/" | prepend: site.baseurl }})**
- **Reproducible builds use cases https://pad.riseup.net/p/reproduciblebuildsII-usecases**
- **Reproducible builds and License/GPL compliance https://pad.riseup.net/p/rb-gpl-compliance-20161214**
diff --git a/_events/berlin2016/usecases.md b/_events/berlin2016/usecases.md
index a292958..4a71fb8 100644
--- a/_events/berlin2016/usecases.md
+++ b/_events/berlin2016/usecases.md
@@ -1,12 +1,12 @@
---
layout: event_detail
-title: usecases
+title: Use cases
event: berlin2016
order: 220
permalink: /events/berlin2016/usecases/
---
-old list: https://reproducible-builds.org/docs/buy-in/
+old list: [https://reproducible-builds.org/docs/buy-in/](https://reproducible-builds.org/docs/buy-in/)
philosophical: doing the right thing (tm) - similar to having ingredients lists on sold food
@@ -18,22 +18,23 @@ security = legal enforcement backdoors
increased development speed by limiting number of rebuilds of dependent packages => lower cost
Build systems can be significantly faster to rebuild software if the build is reproducible. It improves caching and reuse of artifacts. Tests don't need to be rerun if the binary hasn't changed.
- Submitted: https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000192.html
+ Submitted: [https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000192.html](https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000192.html)
increased development speed by less QA work before release = because you can verify that large parts did not change
=> better security by reduced exposure time to 0day exploits
- Submitted: https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000187.html
+ Submitted: [https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000187.html](https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000187.html)
prove that cross-compompiling generates same result as native compiling and then speed up build on slow architectures (e.g. x86_64 is faster than arm) = in the long run spending more time on core instead of on toolchain
- Submitted: https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000192.html
+ Submitted: [https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000192.html](https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000192.html)
QA and code quality = detecting issues of failing builds under rare circumstances (timing/races, number of cores, locales)
- Submitted: https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000185.html
+ Submitted: [https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000185.html](https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000185.html)
+
bandwidth savings = faster updates with binary-delta-packages (e.g. xdelta / drpm)
save bandwidth: torbrowser build locally and remotely and then just compare the checksum
use less storage = save money / hardware to operate
- Submitted: https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000187.html
+ Submitted: [https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000187.html](https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000187.html)
quality = r-b implies being able to rebuild in an automated way (which is not a given in some places), so can help business-continuity and also security when it makes it easier/possible to add security patches
@@ -46,7 +47,7 @@ easier to rebuild binaries from source = more developers/happyness
easier refactoring of build-system = identical output means all good
easier refactoring of any tool run during the build (scripts, compilers, code generators, etc.)
- Submitted: https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000190.html
+ Submitted: [https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000190.html](https://lists.reproducible-builds.org/pipermail/rb-general/2016-December/000190.html)
improved/increased trust in binaries delivered by third parties
+also helps licensing information when buildinfo describes original build env and other parties are able to reproduce identical binaries from source
@@ -65,6 +66,6 @@ Ensure your developers are using the real, official toolchain and libraries
For mobile development, developers are often downloading the toolchains and libraries via sources that are difficult or impossible to verify.
Find developers who are using unofficial or bad versions of tools and/or libraries. This also isolates the release process from all of the problems and risks associated with the developers' own machines.
- cl: I think this is sufficiently documented in https://reproducible-builds.org/docs/buy-in/ with the 'Resisting Attacks' section on Xcode Ghost.
+ cl: I think this is sufficiently documented in [https://reproducible-builds.org/docs/buy-in/](https://reproducible-builds.org/docs/buy-in/) with the 'Resisting Attacks' section on Xcode Ghost.
<img style="margin-top: 10px; vertical-align: top;" src="{{ "/images/berlin2016/usecases_01.jpg" | prepend: site.baseurl }}" alt="Usecases Post-It notes" />
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/reproducible-website.git
More information about the Reproducible-commits
mailing list