[rb-general] [Jose.Miguel at microsoft.com: Setting up a MS-hosted rebuilder with in-toto metadata]

[Holger Levsen]

Hi,

On Thu, Aug 22, 2019 at 12:16:03PM -0400, Santiago Torres Arias wrote:
> I'm taking the library to forward this to the broader community and
> answering as much questions as I can :)

thanks for sharing this , Santiago!

> ----- Forwarded message from Jose Miguel Parrella <Jose.Miguel at microsoft.com> -----
> 
> Date: Mon, 19 Aug 2019 23:00:31 +0000
> From: Jose Miguel Parrella <Jose.Miguel at microsoft.com>
> To: "santiago at nyu.edu" <santiago at nyu.edu>
> CC: "chris at chris-lamb.co.uk" <chris at chris-lamb.co.uk>, Matt Bearup <mbearup at microsoft.com>
> Subject: Setting up a MS-hosted rebuilder with in-toto metadata
> 
> We're interested in setting up an Azure-hosted rebuilder for Debian packages, 
> and publishing in-toto metadata of our rebuilds for public consumption.

thats fantastic news!

[...]
> I have some questions:
>   *   What is the governance of the rebuilders? Is this a project part of Debian CI or is this something else? Are the rebuilders part of the DSA infrastructure?

we (Debian) currently don't have any official rebuilders, nor inofficial
ones integrated into the Debian infrastructure. We really want to get
there though and very much welcome collaboration on this! 


-- 
cheers,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20190831/145b538c/attachment.sig>