[Git][reproducible-builds/reproducible-website][master] 2019-12-XX: Add news entry for reproducible mes bootstrap.

[Vagrant Cascadian]

Vagrant Cascadian pushed to branch master at Reproducible Builds / reproducible-website


Commits:
97969c1e by Vagrant Cascadian at 2019-12-09T14:10:52Z
2019-12-XX: Add news entry for reproducible mes bootstrap.

- - - - -


1 changed file:

- + _posts/2019-12-XX-reproducible-bootstrap-of-mes-c-compiler.md


Changes:

=====================================
_posts/2019-12-XX-reproducible-bootstrap-of-mes-c-compiler.md
=====================================
@@ -0,0 +1,27 @@
+---
+layout: post
+title:  "reproducible bootstrap of MES C compiler"
+date:   2019-12-XX 00:00:00
+categories: org
+draft: true
+---
+
+During the [Reproducible Builds Summit in Marrakesh](https://reproducible-builds.org/events/Marrakesh2019/),
+three distros ([GNU Guix](https://guix.gnu.org), [Nix](https://nixos.org)
+and [Debian](https://debian.org)) were able to produce a bit-for-bit
+identical binary when building [GNU MES](https://www.gnu.org/software/mes/), 
+despite using different versions of GCC to build the initial MES
+compiler, which was then used to build the bit-for-bit identical MES binary.
+
+GNU MES is used by GNU Guix to bootstrap a complete software
+distribution from a minimal set of binary seeds, so this achievement
+demonstrates the viability to use Diverse Double Compilation
+techniques in the real world as a counter to Trusting Trust attacks.
+
+The MES binary produced as a result of this work is available in GNU
+Guix as the mes-rb5 package, and in the Debian mes 0.21-3 version as
+the "mes-boot0-static" binary.
+
+Future work includes attempting to bootstrap MES with additional
+compilers, such as TinyCC and Clang, as a more pure demonstration of
+Diverse Double Compilation.



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/97969c1e3b846ec31cf36df0480594d2c1d39f4f

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/97969c1e3b846ec31cf36df0480594d2c1d39f4f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20191209/d4176377/attachment.htm>