-
Are there plans to provide instructions to verify that the binary downloads on the website correspond with the source code for that release?
-
### Using a supported version?
- [X] I have searched searched open and closed issues for duplicates.
- [X] I am using Signal-Desktop as provided by the Signal team, not a 3rd-party package.
###…
-
https://trac.torproject.org/projects/tor/wiki/doc/TorBrowser/Hacking#BuildingOfficialTorBrowserReleaseBinaries
https://tails.boum.org/blueprint/reproducible_builds/
https://rbm.torproject.org/
-
Reported by: **[Be-ing](https://github.com/Be-ing)**
Date: 2017-12-31T16:55:27Z
Status: New
Importance: Wishlist
Launchpad Issue: [lp1740695](https://bugs.launchpad.net/bugs/1740695)
---
We distribu…
-
Users should be able to get the exact same binary as what we publish if they use identical tooling. For this we need to make sure we don't insert timestamps or similar.
-
I see that orbit is moving to Circle CI automatically publishing release artifacts. Are builds reproducible, or is there any other way to establish trust with these builds?
ghost updated
7 years ago
-
I am trying to package RethinkDB in NixOS. To achieve reproducible builds, NixOS disallows network access. Thus, I would like to provide the build dependencies myself.
But when I remove, for exampl…
-
-
We should make sure that builds are reproducible. For now we output the checksums of the .deb files in [the Travis build log](https://api.travis-ci.org/v3/job/756232975/log.txt) but there should be an…
-
Long term we want reproducible builds.
I spent today looking at OpenEmbedded and while the developers claim it's not very opinionated, it kind of is. As far as I see it really needs to be **the** b…