The new PostgreSQL 17 make dist

Re:The new PostgreSQL 17 make dist by cduzz on Tuesday August 13, 2024 @11:03AM (#41236179)

Wouldn't you want to have certificates and other crypto data as an input to a reproducible build harness?

  # build initial images
  # add semi-static inputs (mostly static config data, crypto data, signed inputs)
  # add final watermarks

So each step can be verified

[ Parent | on HN ]

Re:The new PostgreSQL 17 make dist by bluGill on Tuesday August 13, 2024 @01:05PM (#41237243)

That final watermark is not verifiable and so you can inject something else.

[ Parent | on HN ]