HTTPS on freebsd.org, git, reproducible builds

[William A. Mahaffey III]

On 09/19/15 08:21, Polytropon wrote:
> On Sat, 19 Sep 2015 15:50:23 +0300, Slawa Olhovchenkov wrote:
>> On Sat, Sep 19, 2015 at 12:10:36AM +0200, Dag-Erling Smorgrav wrote:
>>
>>> Slawa Olhovchenkov <slw at zxy.spb.ru> writes:
>>>> freebsd-update builds is inreproducible by the freebsd-update-server bug[s].
>>> freebsd-update will most likely be gone in 11.
>> What is planed for replacement?
> As far as I could understand, pkg will deal with the components
> comprising the OS in the same manner as it does for the ports
> collection. So the kernel, the userland, the sources and so on
> will "become packages" for pkg to install or upgrade. This is
> a similar approach to common package management on Linux, except
> that Linux (as a term to summarize all the many distributions)
> doesn't have an OS ("the base OS") per se.
>
> You can already see this kind of development: The documentation
> has become a package, and the package manager itself is a
> package (separated from the OS, which only contains a bootstrap
> loader for the real program). Finally, the installation process
> could become a task of "pkg install", instead of "tar xf". And
> a unification of the infrastructures could lead to additional
> benefits (only _one_ system for both components - OS and ports).


Agreed (& I *love* it) on all counts, but still binaries being 
downloaded & installed, a potential trust problem vis-a-vis some of the 
earlier posts & still potentially irreproducible ....


-- 

	William A. Mahaffey III

  ----------------------------------------------------------------------

	"The M1 Garand is without doubt the finest implement of war
	 ever devised by man."
                            -- Gen. George S. Patton Jr.