[prev in list] [next in list] [prev in thread] [next in thread] 

List:       secure-desktops
Subject:    Re: [Secure Desktops] Where to find subgraph os Debian package source code?
From:       Joanna Rutkowska <joanna () invisiblethingslab ! com>
Date:       2016-05-18 11:03:56
Message-ID: 20160518110355.GH16382 () work-mutt
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Tue, May 17, 2016 at 05:19:11PM +0000, David McKinney wrote:
> On Tue, May 17, 2016 at 12:23:01PM +0000, Patrick Schleizer wrote:
> > Is subgraph os fully Open Source yet?
> > 
> > Apparently subgraph os already has Debian packages? But where can I find it?
> > 
> > /etc/apt/sources.list:
> > deb https://devrepo.subgraph.com/subgraph aaron main
> > 
> > apt-get download subgraph-tor-config
> > 
> > Looked into into debian/control. Found:
> > 
> > "Description: Tor configuration package for Subgraph OS."
> > 
> > And put this into google, which usually should find it if it was on
> > github or so anywhere.
> >
> 
> Looks like you found it on your own (ie: everything is in the package
> itself and can be gotten by decomposing the control information and
> package contents). All our packages are downloadable from our repo, etc.
> 
> We still have a lot to do in terms of properly packaging stuff. Some of this is 
> trivial, such as putting config packages and metapackages onto Github. But it is 
> also trivial to inspect the source code for these as they consist of plaintext. 
> And some of it is non-trivial, such as golang packaging and kernel source 
> packaging. We're working on it, it will appear as we complete it.
> 

Hi David,

BTW, could you share any of the approaches you guys are implementing to improve
build security/trustworthiness of the Subgraph packages/images?

Cheers,
joanna.
-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJXPEwbAAoJEDOT2L8N3GcYw+wP/3Ctv1XhFVG0Y4lDHiBrhwrL
LDCQX52PsAFej0l8BbcR2BzP9/njz0R0ozdVKNr/XC7G8xnm89piMdu8g+jxE/DO
pL8ZfWk90HPd9gfSxBAt2TTTOIb6In9AvjEdXEB1bNnBVIyJnTnk+ts//p2K6sVq
aiL8QjeTKiQ1Yd4CYHDepsfnSyTGbhjRu2roD74gwTsRheXtFR/Lg8h3n3ang3rW
+Ku3N8vNOzIYRNjgVBEmgQOVZv7PD8kNYil0Y8mI6ElTQ3cPrmB/bGJyLYUcOVZy
6SlY5JVIfvdlw1MH8jv0BX0NIIttS9yNYyn5+TOjwq7cXZdSUlAmNaRV0Rvm/4Hs
HeIxzVD7bi44m+hrmurRJPso37058xyLPj6AEzhEztHtHgHNwJi7CPQx3c6rxWE/
N2p6ZXftoJAhPL2S7vJ/9JODWgwU0RNZR5z7OCpT+hdxSg0GCctnaH5RDVZTUw+x
MG/1wT+wUG9TuvTa2PZW4Kn4lz9A/nSX1cw2opNkY/u2DCFi34S+ZrFtNfKr0D9k
SNmhEXnS8OcT0yn5wogzER6BpbWJlgcMcYGh0rbwNBd3FNWZ0qPPiM6xXIfkQhCN
HJE+IerSSjGJLe0gFj5U/Nhsn99DqhEhtpDXoE/1eepC/KZ4e6+Tm1u4Qh/X5EbV
bkI5FYmc58DPLtF2e/tC
=BsT9
-----END PGP SIGNATURE-----

_______________________________________________
Desktops mailing list
Desktops@secure-os.org
https://secure-os.org/cgi-bin/mailman/listinfo/desktops

[prev in list] [next in list] [prev in thread] [next in thread]