[Git][reproducible-builds/reproducible-website][master] news: reproducible bootstrap of mes: links and further details. gimme the sha!

[Vagrant Cascadian]

Vagrant Cascadian pushed to branch master at Reproducible Builds / reproducible-website


Commits:
7944f30d by Vagrant Cascadian at 2019-12-09T15:58:36Z
news: reproducible bootstrap of mes: links and further details. gimme the sha!

- - - - -


1 changed file:

- _posts/2019-12-XX-reproducible-bootstrap-of-mes-c-compiler.md


Changes:

=====================================
_posts/2019-12-XX-reproducible-bootstrap-of-mes-c-compiler.md
=====================================
@@ -10,18 +10,24 @@ During the [Reproducible Builds Summit in Marrakesh](https://reproducible-builds
 three distros ([GNU Guix](https://guix.gnu.org), [Nix](https://nixos.org)
 and [Debian](https://debian.org)) were able to produce a bit-for-bit
 identical binary when building [GNU MES](https://www.gnu.org/software/mes/), 
-despite using different versions of GCC to build the initial MES
+despite using three different major versions of GCC to build the initial MES
 compiler, which was then used to build the bit-for-bit identical MES binary.
 
-GNU MES is used by GNU Guix to bootstrap a complete software
+At a previous Reproducible Builds Summit people implemented a 
+[proof of concept build of TinyCC](https://github.com/bmwiedemann/ddcpoc), 
+though notably GNU MES is used by GNU Guix to bootstrap a complete software
 distribution from a minimal set of binary seeds, so this achievement
-demonstrates the viability to use Diverse Double Compilation
+demonstrates the viability to use 
+[Diverse Double-Compiling](https://dwheeler.com/trusting-trust/dissertation/html/wheeler-trusting-trust-ddc.html)
 techniques in the real world as a counter to Trusting Trust attacks.
 
 The MES binary produced as a result of this work is available in GNU
-Guix as the mes-rb5 package, and in the Debian mes 0.21-3 version as
-the "mes-boot0-static" binary.
+Guix as the mes-rb5 package, and in the Debian i386 mes 0.21-3 version
+as the "mes-boot0-static" binary.
 
-Future work includes attempting to bootstrap MES with additional
-compilers, such as TinyCC and Clang, as a more pure demonstration of
-Diverse Double Compilation.
+Future plans include attempting to bootstrap MES with additional
+compilers, such as TinyCC and Clang, for a more rigorous and proper
+demonstration of Diverse Double-Compiling.
+
+And the moment you've all been waiting for:
+sha256sum 9e0bcb1633c58e7bc415f6ea27cee7951d6b0658e13cdc147e992b31a14625fb



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/7944f30d7bc12c2f7f8e03ffb5c80f95a1e655f5

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/7944f30d7bc12c2f7f8e03ffb5c80f95a1e655f5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20191209/2659d899/attachment.htm>