[Git][reproducible-builds/specs/source-date-epoch-spec][content] 10 commits: wording: Add 'that'

Sun Nov 1 06:17:04 UTC 2026


Bernhard M. Wiedemann pushed to branch content at Reproducible Builds / specs / source-date-epoch-spec


Commits:
58da5527 by Bernhard M. Wiedemann at 2026-09-23T19:37:25+02:00
wording: Add 'that'

I feel, that it is missing there. May be optional.

- - - - -
6ac766d7 by Bernhard M. Wiedemann at 2026-09-23T19:39:42+02:00
Make the text more exact

- - - - -
b8663f48 by Bernhard M. Wiedemann at 2026-11-01T06:09:46+00:00
Merge branch 'content2' into 'master'

Make the text more exact

See merge request reproducible-builds/specs/source-date-epoch-spec!10
- - - - -
b5b54360 by Bernhard M. Wiedemann at 2026-11-01T06:10:58+00:00
Merge branch 'wording2' into 'master'

wording: prevents against => protects against

See merge request reproducible-builds/specs/source-date-epoch-spec!11
- - - - -
0049d10e by Bernhard M. Wiedemann at 2026-11-01T06:12:35+00:00
Merge branch 'wording3' into 'master'

wording: Add 'that'

See merge request reproducible-builds/specs/source-date-epoch-spec!9
- - - - -
264b8bc3 by Bernhard M. Wiedemann at 2026-11-01T07:14:02+01:00
Change flaws to instructions

- - - - -
56a0835a by Robin Candau at 2026-11-01T07:14:02+01:00
Apply wording suggestion

- - - - -
55bcd820 by Bernhard M. Wiedemann at 2026-11-01T07:14:54+01:00
Adapt motivation section

We copied the current definition from the website,
capitalized R-B and
dropped some outdated sentences.

- - - - -
9c921866 by Robin Candau at 2026-11-01T07:14:57+01:00
Slight restructuring to make more readable

- - - - -
5b5c5587 by Robin Candau at 2026-11-01T07:15:17+01:00
General improvements of the advantages list

Co-authored-by: Holger Levsen <holger at layer-acht.org>
Co-authored-by: Bernhard M. Wiedemann <bwiedemann at suse.de>

- - - - -


1 changed file:

- source-date-epoch-spec.xml


Changes:

=====================================
source-date-epoch-spec.xml
=====================================
@@ -57,39 +57,45 @@
 <sect1>
 	<title>Motivation</title>
 	<para>
+		Reproducible Builds are a set of software development practices that
+		create an independently-verifiable path from source to binary code.
 		Whilst anyone can inspect the source code of free software for
-		malicious flaws, most distributions provide binary (or
-		"compiled") packages to end users. The motivation behind
-		"reproducible" builds is to allow verification that no flaws
-		have been introduced during this compilation process by
-		promising identical binary packages are always generated from a
+		malicious code, most distributions provide binary
+		packages to end users. The motivation behind
+		Reproducible Builds is to allow verification that no malicious changes
+		have been introduced during this build process by
+		promising that identical binary packages are always generated from a
 		given source.
 	</para>
 	<para>
-		This protects against the installation of backdoor-introducing
-		malware on developers' machines as an attacker would need to
-		simultaneously infect all the developers attempting to
-		reproduce the build. In addition, a reproducible build has
+		Reproducible Builds help to protect against the installation of
+		malware on users' machines.
+	</para>
+	<para>
+		In addition, Reproducible Builds have
 		other technical advantages:
 	</para>
 	<itemizedlist>
 	<listitem><para>
-		Requires the removal of any non-deterministic and/or unsafe
-		behaviour, eg. connecting to the internet to download
-		build-dependencies or reading from uninitialised memory
+		Aid debugging by removing of any non-deterministic
+		behaviour introduced by the build process
+	</para></listitem>
+	<listitem><para>
+		Detect corrupted or outdated build environments
 	</para></listitem>
 	<listitem><para>
-		Detects corrupted or outdated build environments
+		Provide validation of packages built on foreign
+		architectures when cross-compiling
 	</para></listitem>
 	<listitem><para>
-		Provides validation of packages built on foreign
-		architectures
+		Reduce time-to-detection of a build host compromise
 	</para></listitem>
 	<listitem><para>
-		Reduces time-to-detection of a build host compromise
+		Can show that proposed changes have no unintended impact on binaries
 	</para></listitem>
 	<listitem><para>
-		Can show that proposed changes have no impact on binaries
+		Other examples are available at <ulink
+			url="https://reproducible-builds.org/docs/why/">https://reproducible-builds.org/docs/why/</ulink>.
 	</para></listitem>
 	</itemizedlist>
 	<sect2>



View it on GitLab: https://salsa.debian.org/reproducible-builds/specs/source-date-epoch-spec/-/compare/8f23385242441fdb8491901304a215f3c8b12059...5b5c5587b5aedb5811c0ac43446a7c6c0737d995

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/specs/source-date-epoch-spec/-/compare/8f23385242441fdb8491901304a215f3c8b12059...5b5c5587b5aedb5811c0ac43446a7c6c0737d995
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20261101/a731bebc/attachment.htm>
