Hacker News new | ask | show | jobs
by bduerst 4502 days ago
In a compiler that was compiled by someone else. /tinfoil hat
1 comments

That's why in the future we'll be using compilers which are open-source and using deterministic builds and double-compilation (or "n-compilation") : )
I recently discovered that there are no basic deterministic OS image builds (like a bootable .iso) with just a toolchain and wget and gpg and a shell.

I was surprised; seems like a good basic target.

Debian has an ongoing project for this, https://wiki.debian.org/ReproducibleBuilds driven by Lunar from the Tor project.