[Git][reproducible-builds/reproducible-website][master] hamburg2023: Add notes about Arch huddle

[Holger Levsen (@holger)]

Holger Levsen pushed to branch master at Reproducible Builds / reproducible-website


Commits:
11bfa2f9 by Orhun Parmaksız at 2023-11-06T17:10:22+01:00
hamburg2023: Add notes about Arch huddle

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


1 changed file:

- _events/hamburg2023/arch-huddle.md


Changes:

=====================================
_events/hamburg2023/arch-huddle.md
=====================================
@@ -5,5 +5,28 @@ event: hamburg2023
 order: 307
 permalink: /events/hamburg2023/arch-huddle/
 ---
+# Making Arch Linux Debug Packages Reproducible
 
+This should be handled in three different steps. There are questions remaining to be answered before proceeding with the integration.
 
+## `debuginfod`
+
+- Is `debuginfod` secure?
+  - i.e. Is there authentication between `gdb` and `debuginfod`?
+
+⚠️ It is theoretically possible to perform code execution through debug symbols.
+
+## Mirrors
+
+- Right now the debug packages live in a single server. We should start distributing them through mirrors and potentially have them in our archives as well.
+  - There is a question about storage since debug packages might take a good amount of disk space.
+  - "We shouldn't let the limitations of mirrors affect our design choices".
+
+## Integration
+
+Here are the tools that needs integration:
+
+- [rebuilderd](https://github.com/kpcyrd/rebuilderd)
+- [devtools](https://gitlab.archlinux.org/archlinux/devtools)
+- [repro](https://github.com/archlinux/archlinux-repro)
+  - We need to check hashes etc.



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/11bfa2f94e4c2e625b0393ac131bd1cafba39e1a

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/11bfa2f94e4c2e625b0393ac131bd1cafba39e1a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20231106/973b35cd/attachment.htm>