[prev in list] [next in list] [prev in thread] [next in thread] 

List:       secure-desktops
Subject:    [Secure Desktops] [qubes-devel] Deterministic builds for Qubes OS -- the shortcut?
From:       patrick-mailinglists () whonix ! org (Patrick Schleizer)
Date:       2015-12-25 14:25:50
Message-ID: 567D51EE.4090904 () whonix ! org
[Download RAW message or body]

sajolida:
> Holger Levsen:
>> And to get back to a.) in case you dont want to rebuild all of fedora / 
>> debian: then you "just" need a stable package binary repository, so that when 
>> you rebuild an iso after a month (or more time) updates (which were not 
>> available at the original creation date) are not included in image. Debian has 
>> snapsho.debian.org which archives every binary package ever released by 
>> Debian, I don't know hat Fedora has to offer here.
> 
> Just pointing to related efforts, we're working at Tails on a freezable
> APT repo that should be ready in April. The idea is to be able to import
> and freeze the precise list of packages that were used to build a given
> ISO image. For technical details, get in touch with intrigeri.

Interesting! Thank you, sajolida!

For Whonix, building from frozen sources has also been implemented. If
there are questions, please feel free to add me to the discussion.

Cheers,
Patrick



[prev in list] [next in list] [prev in thread] [next in thread]