guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Publishing an Official Statement on Self-Hosted Compilers


From: Ludovic Courtès
Subject: Re: Publishing an Official Statement on Self-Hosted Compilers
Date: Thu, 12 May 2016 12:05:36 +0200
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)

Hi!

Alex Griffin <address@hidden> skribis:

> I've put my initial notes in a git repository
> [here](https://gitlab.com/ajgrf/bootstrapping-compilers/blob/master/notes.org).
> They are in a very rough state, but mostly everything is there in some
> form. If anyone has any thoughts please let me know! 

I like it.  :-)

I think the bit about the “trusting trust” attack should go under “The
Problem”.  Specifically, I would suggest expounding on the software
freedom bit (the fact that users must be provided with the Corresponding
Source), and the reproducibility bit (allow people to build from source
and to ensure the binaries correspond to the source), and then on
security (“trusting trust”.)

WDYT?

We should then discuss it with the repro-builds folks, and probably
contact a bunch of compiler writers to get initial feedback.

Thanks,
Ludo’.

PS: I would suggest wrapping lines in notes.org, which would make it
    easier to read IMO, and also facilitate patch handling.



reply via email to

[Prev in Thread] Current Thread [Next in Thread]