Re:Deterministic, bit-identical and/or verifiable Linux builds
by equoid on Saturday July 12, 2014 @06:09AM
(#8024164)
Repeatable, "reliable" only in the sense that you can rely on the outcome.
Re:Deterministic, bit-identical and/or verifiable Linux builds
by zobzu on Saturday July 12, 2014 @06:42PM
(#8026002)
here's the difference:
- make the build system reproducable, so that every build is exactly the same binary, no matter who runs it. that's "easy". But you don't know why you get that exact binary
- make the build system verifiable, or the resulting binary verifiable so that you know exactly why you get that binary. This is hard.
The first one is repeatable, reliable.
The second one is trustworthy, verifiable.
if you dont know what you're getting every time its hard to be any reliable.
of course, if you're reliable, its more trustable.