[Git][reproducible-builds/reproducible-website][master] posts: reprodible-mes: Update to make more clear claims regarding DDC.
Vagrant Cascadian
gitlab at salsa.debian.org
Sun Dec 22 02:11:58 UTC 2019
Vagrant Cascadian pushed to branch master at Reproducible Builds / reproducible-website
Commits:
bb7bfca0 by Vagrant Cascadian at 2019-12-22T02:08:47Z
posts: reprodible-mes: Update to make more clear claims regarding DDC.
- - - - -
1 changed file:
- _posts/2019-12-XX-reproducible-bootstrap-of-mes-c-compiler.md
Changes:
=====================================
_posts/2019-12-XX-reproducible-bootstrap-of-mes-c-compiler.md
=====================================
@@ -1,6 +1,6 @@
---
layout: post
-title: "reproducible bootstrap of MES C compiler"
+title: "reproducible bootstrap of Mes C compiler"
date: 2019-12-XX 00:00:00
categories: org
draft: true
@@ -9,25 +9,33 @@ draft: true
During the [Reproducible Builds Summit in Marrakesh](https://reproducible-builds.org/events/Marrakesh2019/),
three distros ([GNU Guix](https://guix.gnu.org), [Nix](https://nixos.org)
and [Debian](https://debian.org)) were able to produce a bit-for-bit
-identical binary when building [GNU MES](https://www.gnu.org/software/mes/),
-despite using three different major versions of GCC to build the initial MES
-compiler, which was then used to build the bit-for-bit identical MES binary.
+identical binary when building [GNU Mes](https://www.gnu.org/software/mes/),
+despite using three different major versions of GCC to build the initial Mes
+compiler, which was then used to build the bit-for-bit identical Mes binary.
+Since the summit, additional work resulted in a bit-for-bit indentical
+Mes binary using tcc.
At a previous Reproducible Builds Summit people implemented a
[proof of concept build of TinyCC](https://github.com/bmwiedemann/ddcpoc),
-though notably GNU MES is used by GNU Guix to bootstrap a complete software
-distribution from a minimal set of binary seeds, so this achievement
-demonstrates the viability to use
+using multiple different compiler implementations, though notably GNU
+Mes is used by
+[GNU Guix to bootstrap](https://guix.gnu.org/blog/2019/guix-reduces-bootstrap-seed-by-50/)
+a complete software distribution from a minimal set of binary seeds.
+
+These accomplishments are early steps towards demonstrating the
+viability to use
[Diverse Double-Compiling](https://dwheeler.com/trusting-trust/dissertation/html/wheeler-trusting-trust-ddc.html)
-techniques in the real world as a counter to Trusting Trust attacks.
+techniques in the real world to counter
+[Trusting Trust attacks](https://archive.org/details/reflections-on-trusting-trust).
+
+Future plans include attempting to bootstrap Mes with an even more
+diverse set of compilers such as Clang and Microsoft's C compiler,
+aiming for a proper real-world demonstration of Diverse
+Double-Compiling.
-The MES binary produced as a result of this work is available in GNU
+The Mes binary produced as a result of this work is available in GNU
Guix as the mes-rb5 package, and in the Debian i386 mes 0.21-3 version
as the "mes-boot0-static" binary.
-Future plans include attempting to bootstrap MES with additional
-compilers, such as TinyCC and Clang, for a more rigorous and proper
-demonstration of Diverse Double-Compiling.
-
And the moment you've all been waiting for:
sha256sum 9e0bcb1633c58e7bc415f6ea27cee7951d6b0658e13cdc147e992b31a14625fb
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/bb7bfca03cfdfd9f4a4db472a99d3d01bf124afa
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/bb7bfca03cfdfd9f4a4db472a99d3d01bf124afa
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20191222/395e00c9/attachment.htm>
More information about the rb-commits
mailing list