[Git][reproducible-builds/reproducible-website][master] posts: reprodible-mes: Update to make more clear claims regarding DDC.

Vagrant Cascadian gitlab at salsa.debian.org
Sun Dec 22 02:11:58 UTC 2019



Vagrant Cascadian pushed to branch master at Reproducible Builds / reproducible-website


Commits:
bb7bfca0 by Vagrant Cascadian at 2019-12-22T02:08:47Z
posts: reprodible-mes: Update to make more clear claims regarding DDC.

- - - - -


1 changed file:

- _posts/2019-12-XX-reproducible-bootstrap-of-mes-c-compiler.md


Changes:

=====================================
_posts/2019-12-XX-reproducible-bootstrap-of-mes-c-compiler.md
=====================================
@@ -1,6 +1,6 @@
 ---
 layout: post
-title:  "reproducible bootstrap of MES C compiler"
+title:  "reproducible bootstrap of Mes C compiler"
 date:   2019-12-XX 00:00:00
 categories: org
 draft: true
@@ -9,25 +9,33 @@ draft: true
 During the [Reproducible Builds Summit in Marrakesh](https://reproducible-builds.org/events/Marrakesh2019/),
 three distros ([GNU Guix](https://guix.gnu.org), [Nix](https://nixos.org)
 and [Debian](https://debian.org)) were able to produce a bit-for-bit
-identical binary when building [GNU MES](https://www.gnu.org/software/mes/), 
-despite using three different major versions of GCC to build the initial MES
-compiler, which was then used to build the bit-for-bit identical MES binary.
+identical binary when building [GNU Mes](https://www.gnu.org/software/mes/), 
+despite using three different major versions of GCC to build the initial Mes
+compiler, which was then used to build the bit-for-bit identical Mes binary.
+Since the summit, additional work resulted in a bit-for-bit indentical
+Mes binary using tcc.
 
 At a previous Reproducible Builds Summit people implemented a 
 [proof of concept build of TinyCC](https://github.com/bmwiedemann/ddcpoc), 
-though notably GNU MES is used by GNU Guix to bootstrap a complete software
-distribution from a minimal set of binary seeds, so this achievement
-demonstrates the viability to use 
+using multiple different compiler implementations, though notably GNU
+Mes is used by
+[GNU Guix to bootstrap](https://guix.gnu.org/blog/2019/guix-reduces-bootstrap-seed-by-50/) 
+a complete software distribution from a minimal set of binary seeds.
+
+These accomplishments are early steps towards demonstrating the
+viability to use
 [Diverse Double-Compiling](https://dwheeler.com/trusting-trust/dissertation/html/wheeler-trusting-trust-ddc.html)
-techniques in the real world as a counter to Trusting Trust attacks.
+techniques in the real world to counter
+[Trusting Trust attacks](https://archive.org/details/reflections-on-trusting-trust).
+
+Future plans include attempting to bootstrap Mes with an even more
+diverse set of compilers such as Clang and Microsoft's C compiler,
+aiming for a proper real-world demonstration of Diverse
+Double-Compiling.
 
-The MES binary produced as a result of this work is available in GNU
+The Mes binary produced as a result of this work is available in GNU
 Guix as the mes-rb5 package, and in the Debian i386 mes 0.21-3 version
 as the "mes-boot0-static" binary.
 
-Future plans include attempting to bootstrap MES with additional
-compilers, such as TinyCC and Clang, for a more rigorous and proper
-demonstration of Diverse Double-Compiling.
-
 And the moment you've all been waiting for:
 sha256sum 9e0bcb1633c58e7bc415f6ea27cee7951d6b0658e13cdc147e992b31a14625fb



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/bb7bfca03cfdfd9f4a4db472a99d3d01bf124afa

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/bb7bfca03cfdfd9f4a4db472a99d3d01bf124afa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20191222/395e00c9/attachment.htm>


More information about the rb-commits mailing list