News for hackers. Stuff that matters.

A comment on The Sad Saga of Purism and the Librem 5. Parent comment

Re:The Sad Saga of Purism and the Librem 5 by awinter-py on Sunday October 27, 2019 @01:20PM (#21371027)
You can release reproducible signed builds that the user can verify. You can be open source without allowing users to upload new blobs.

You can still accept PRs and stuff.

[ Parent | on HN ]
Re:The Sad Saga of Purism and the Librem 5 by lperkins2 on Tuesday October 29, 2019 @01:01PM (#21389409)
This is what caused me to totally dump nvidia. Their new cards require signed drivers to enable boosting behaviour, and they are unwilling to build and sign the nouveau driver. It's not like it's hard to set up a buildbot...
[ Parent | on HN ]
Re:The Sad Saga of Purism and the Librem 5 by lstodd on Sunday October 27, 2019 @02:28PM (#21371527)
I wonder if you'd have to recertify after each pr merge
[ Parent | on HN ]
Re:The Sad Saga of Purism and the Librem 5 by toast0 on Sunday October 27, 2019 @04:52PM (#21372317)
You would need to certify each signed release. Most likely, you wouldn't make a signed release for each PR, because of the time and expense involved, until you got to the point were changed were few and far between.
[ Parent | on HN ]
Re:The Sad Saga of Purism and the Librem 5 by amenod on Sunday October 27, 2019 @05:35PM (#21372572)
No, just before actually releasing it. Nobody cares about the code as long as it is not running on the devices.
[ Parent | on HN ]