307 lines
12 KiB
HTML
307 lines
12 KiB
HTML
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<!DOCTYPE html>
|
|||
|
|
|
|||
|
|
<html lang="en">
|
|||
|
|
<head>
|
|||
|
|
<meta charset="utf-8">
|
|||
|
|
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
|||
|
|
<meta name="description" content="">
|
|||
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|||
|
|
|
|||
|
|
<title>FOSSY 2025 | Presentation: Never Mind the Checkboxes, Here's Reproducible Builds!</title>
|
|||
|
|
|
|||
|
|
<meta property="og:type" content="website" />
|
|||
|
|
|
|||
|
|
<link rel="icon" href="../../../static/build/img/favicon.ico" />
|
|||
|
|
|
|||
|
|
<!-- Cards -->
|
|||
|
|
<meta property="og:title" content="FOSSY 2025 | Presentation: Never Mind the Checkboxes, Here's Reproducible Builds!">
|
|||
|
|
<meta property="og:description" content="" />
|
|||
|
|
<meta property="og:url" content="https://2025.fossy.us/schedule/presentation/327/">
|
|||
|
|
<meta name="twitter:site" content="@conservancy">
|
|||
|
|
<meta name="twitter:image:alt" content="FOSSY 2025 | Presentation: Never Mind the Checkboxes, Here's Reproducible Builds!" />
|
|||
|
|
<meta name="twitter:card" content="summary">
|
|||
|
|
<meta name="twitter:image" content="https://2025.fossy.us/static/build/img/conservancy_logo_tall_mono.png" />
|
|||
|
|
<meta property="og:image" content="https://2025.fossy.us/static/build/img/conservancy_logo_tall_mono.png" />
|
|||
|
|
<meta property="og:image:width" content="400" />
|
|||
|
|
<meta property="og:image:height" content="400" />
|
|||
|
|
|
|||
|
|
|
|||
|
|
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css">
|
|||
|
|
<link rel='stylesheet' href='https://cdn.jsdelivr.net/npm/hack-font@3.3.0/build/web/hack.css'>
|
|||
|
|
<link rel="stylesheet" href="https://unpkg.com/tachyons@4.12.0/css/tachyons.min.css">
|
|||
|
|
<link href="../../../static/build/scss/app.css" rel="stylesheet" type="text/css" />
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<script type="text/javascript">
|
|||
|
|
var CONF_TZ = "US/Pacific";
|
|||
|
|
</script>
|
|||
|
|
</head>
|
|||
|
|
<body class="">
|
|||
|
|
|
|||
|
|
<header class="bg-washed-yellow pa2"><div class="container"><strong>Archived:</strong> This is an archive from the 2025 conference. See <a href="https://fossy.us/">fossy.us</a> for the latest event.</div></header><header class="clearfix d-print-none">
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<nav class="navbar navbar-expand-lg navbar-dark" style="background: rgb(19,119,82); background: linear-gradient(124deg, rgba(19,119,82,1) 0%, rgba(19,106,119,1) 100%); margin-bottom: 1rem">
|
|||
|
|
<div class="container">
|
|||
|
|
<h2 class="sans-serif f2 f1-ns b lh-solid tracked-tight mv0 mr3">
|
|||
|
|
<a class="washed-yellow hover-washed-yellow" href="../../../index.html" style="text-decoration: none">
|
|||
|
|
FOSSY 2025
|
|||
|
|
</a>
|
|||
|
|
</h2>
|
|||
|
|
|
|||
|
|
<button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarText" aria-controls="navbarText" aria-expanded="false" aria-label="Toggle navigation">
|
|||
|
|
<span class="navbar-toggler-icon"></span>
|
|||
|
|
</button>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="collapse navbar-collapse" id="navbarText">
|
|||
|
|
<ul class="navbar-nav mr-auto">
|
|||
|
|
|
|||
|
|
<li class="nav-item dropdown">
|
|||
|
|
|
|||
|
|
<a class="nav-link dropdown-toggle" href="index.html#" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
|
|||
|
|
About
|
|||
|
|
</a>
|
|||
|
|
<div class="dropdown-menu">
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../about/index.html">About FOSSY</a>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</li>
|
|||
|
|
|
|||
|
|
<li class="nav-item dropdown">
|
|||
|
|
|
|||
|
|
<a class="nav-link dropdown-toggle" href="index.html#" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
|
|||
|
|
Attend
|
|||
|
|
</a>
|
|||
|
|
<div class="dropdown-menu">
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../attend/tickets/index.html">Tickets</a>
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../travel/index.html">Travel and Lodging</a>
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../attend/volunteer.html">Volunteer</a>
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../attend/code-of-conduct.html">Code of Conduct</a>
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../attend/health-and-safety/index.html">Health and Safety</a>
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../attend/terms-and-conditions/index.html">Terms and Conditions</a>
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="https://sfconservancy.org/privacy-policy/">Privacy policy</a>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</li>
|
|||
|
|
|
|||
|
|
<li class="nav-item dropdown">
|
|||
|
|
|
|||
|
|
<a class="nav-link dropdown-toggle" href="index.html#" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
|
|||
|
|
Program
|
|||
|
|
</a>
|
|||
|
|
<div class="dropdown-menu">
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../index.html">Schedule</a>
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../pages/tracks/index.html">Tracks</a>
|
|||
|
|
|
|||
|
|
<a class="dropdown-item " href="../../../call-for-proposals/index.html">Proposals</a>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
</li>
|
|||
|
|
|
|||
|
|
<li class="nav-item ">
|
|||
|
|
|
|||
|
|
<a class="nav-link" href="../../../sponsorship/index.html">
|
|||
|
|
Sponsorship
|
|||
|
|
</a>
|
|||
|
|
|
|||
|
|
</li>
|
|||
|
|
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</nav>
|
|||
|
|
|
|||
|
|
</header>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<main role="main" class="container">
|
|||
|
|
<div class="row">
|
|||
|
|
<div class="col page-header">
|
|||
|
|
<h1 class="page-title">Never Mind the Checkboxes, Here's Reproducible Builds!</h1>
|
|||
|
|
<p class="lead">
|
|||
|
|
|
|||
|
|
338 | <span class="presentation-time" data-starttime="2025-08-02T10:45:00" data-endtime="2025-08-02T11:30:00">Sat 02 Aug 10:45 a.m.–11:30 a.m.</span>
|
|||
|
|
|
|||
|
|
</p>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="row">
|
|||
|
|
<div class="col-md-12">
|
|||
|
|
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<div class="row presentation-details">
|
|||
|
|
<div class="col-md-3">
|
|||
|
|
<h2 class="mt-4">Presented by</h4>
|
|||
|
|
<ul class="list-unstyled">
|
|||
|
|
|
|||
|
|
<li class="mb-4 pb-2">
|
|||
|
|
|
|||
|
|
<img src="https://secure.gravatar.com/avatar/f3de796d6473451dfc362d3e5e0a250b?s=120&d=mp" alt="Vagrant Cascadian" class="rounded-circle img-fluid">
|
|||
|
|
<p>
|
|||
|
|
<strong><a href="../../../speaker/profile/511/index.html">Vagrant Cascadian</a></strong><br />
|
|||
|
|
|
|||
|
|
<i class="bi-mastodon"></i> <a href="https://vagrantc/@https://floss.social/">@https://floss.social/@vagrantc</a>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<i class="bi-globe2"></i> <a href="https://www.aikidev.net">https://www.aikidev.net</a>
|
|||
|
|
|
|||
|
|
</p>
|
|||
|
|
<div class="bio"><p>Vagrant strives to make Reproducible Builds a best practices reality for everyone. Vagrant discovered free software late last millenia and has been contributing to free software since the beginning of this millenia. A long-time Debian Developer and contributor to Guix, tinkering with ARM and RISC-V systems. At Portland's Free Geek, Vagrant dove into life as a free software developer, rebuilding electronic waste with FOSS, modifying or developing new software as needed. That led to exciting work helping coordinate LTSP development shared between several different operating systems. That sense of open collaboration has been a life-long habit. Vagrant contrasts spending too much time on computers with bicycle commuting, aikido and a DIY solar hobby.</p></div>
|
|||
|
|
</p>
|
|||
|
|
</li>
|
|||
|
|
|
|||
|
|
<li class="mb-4 pb-2">
|
|||
|
|
|
|||
|
|
<img src="https://secure.gravatar.com/avatar/f722f7ee1d7565b37aec4a588f584459?s=120&d=mp" alt="Chris Lamb" class="rounded-circle img-fluid">
|
|||
|
|
<p>
|
|||
|
|
<strong><a href="../../../speaker/profile/523/index.html">Chris Lamb</a></strong><br />
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<i class="bi-globe2"></i> <a href="https://chris-lamb.co.uk/">https://chris-lamb.co.uk/</a>
|
|||
|
|
|
|||
|
|
</p>
|
|||
|
|
<div class="bio"><p>Chris has been an official Debian Developer since 2008 and is a core team member of the Reproducible Builds project. He is a former 'DPL' of the Debian project as well as a member of Board of Directors for the Open Source Initiative (OSI). A recent immigrant to the United States, Chris is the author of dozens of small free-software projects and a contributor to 100s of others, but in his spare time he is an avid classical musician, calligrapher and is slowly working towards a sommelier certification.</p></div>
|
|||
|
|
</p>
|
|||
|
|
</li>
|
|||
|
|
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
<div class="col-md-9 presentation-abstract">
|
|||
|
|
<h2 class="mt-4">Abstract</h4>
|
|||
|
|
|
|||
|
|
<div class="abstract pb-4"><p><p>There are numerous policy compliance and regulatory processes being developed that target software development... but do they solve actual problems? Does it improve the quality of software? Do Software Bill of Materials (SBOMs) actually give you the information necessary to verify how a given software artifact was built? What is the goal of all these compliance checklists anyways... or more importantly, what <em>should</em> the goals be? If a software object is signed, who should be trusted to sign it, and can they be trusted ... forever?</p>
|
|||
|
|
<p>Could you imagine a world with many bureaucratic compliance checks being replaced with verifiable processes performed by arbitrary third parties?</p>
|
|||
|
|
<p>Let me introduce you to Reproducible Builds, a set of best practices which allow you to verify that software artifacts were built from the source code, allowing auditing for license compliance, providing security benefits, and remove the need to trust arbitrary software vendors.</p></p></div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<h2 class="mt-4">Videos</h4>
|
|||
|
|
|
|||
|
|
<iframe width="560" height="315" src="https://www.youtube.com/embed/IA2IM8cuqRk" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
|
|||
|
|
|
|||
|
|
|
|||
|
|
<p style="margin-top: 1rem">Available sources:</p>
|
|||
|
|
<ul>
|
|||
|
|
|
|||
|
|
<li><a href="https://youtu.be/IA2IM8cuqRk" rel="nofollow">https://youtu.be/IA2IM8cuqRk</a></li>
|
|||
|
|
|
|||
|
|
</ul>
|
|||
|
|
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
<script src="https://code.jquery.com/jquery-3.5.1.min.js" integrity="sha256-9/aliU8dGd2tb6OSsuzixeV4y/faTqgFtohetphbbj0=" crossorigin="anonymous"></script>
|
|||
|
|
<script src="../../../static/build/js/app.js" type="text/javascript"></script>
|
|||
|
|
<script src="../../../static/build/js/jquery.formset.js"></script>
|
|||
|
|
<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q" crossorigin="anonymous"></script>
|
|||
|
|
<script src="../../../static/build/bootstrap/js/bootstrap.bundle.min.js"></script>
|
|||
|
|
|
|||
|
|
<!--no-analytics-->
|
|||
|
|
|
|||
|
|
|
|||
|
|
<script src="../../../static/build/js/luxon.min.js"></script>
|
|||
|
|
<script src="../../../static/build/js/schedule.js" type="text/javascript"></script>
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
</main>
|
|||
|
|
|
|||
|
|
<footer class="footer mt-4 d-print-none">
|
|||
|
|
<div class="container py-4">
|
|||
|
|
<!-- <div class="row">
|
|||
|
|
<div class="col-md-12 pb-12 text-center" style="margin-top: 0px;margin-bottom: 0px;border-bottom-style: solid;border-bottom-width: 0px;padding-bottom: 20px;">Wifi: FOSSY <i>(see Registration for older wifi)</i><br/>PIN: outreachy1000</div>
|
|||
|
|
</div> -->
|
|||
|
|
<div class="row">
|
|||
|
|
<div class="col-md-4 pb-4">
|
|||
|
|
<strong>FOSSY 2025</strong> <br>
|
|||
|
|
July 31st – August 3rd 2025 <br>
|
|||
|
|
Portland, OR<br>
|
|||
|
|
Timezone: PDT - UTC-7 <br>
|
|||
|
|
<a href="mailto:conference@sfconservancy.org" alt="Email"><i class="bi-envelope-fill"></i></a>
|
|||
|
|
<a href="https://x.com/conservancy" alt="Twitter"><i class="bi-twitter-x"></i></a>
|
|||
|
|
<a href="https://social.sfconservancy.org/conservancy" alt="Mastodon"><i class="bi-mastodon"></i></a>
|
|||
|
|
<a href="https://www.facebook.com/SoftwareFreedomConservancy/" alt="Facebook"><i class="bi-facebook"></i></a>
|
|||
|
|
<a href="https://www.youtube.com/@softwarefreedomconservancy8558/videos" alt="YouTube"><i class="bi-youtube"></i></a>
|
|||
|
|
</div>
|
|||
|
|
<div class="col-md-4 pb-4 text-center">
|
|||
|
|
<p class="text-secondary">Brought to you by</p>
|
|||
|
|
<a href="https://sfconservancy.org"><img src="../../../static/build/img/conservancy_logo.svg" alt="Software Freedom Conservancy logo" class="footer-image"></a>
|
|||
|
|
</div>
|
|||
|
|
<div class="col-md-4 pb-4 text-right">
|
|||
|
|
<small>
|
|||
|
|
<a href="index.html#">Back to top</a><br>
|
|||
|
|
© 2025 <a href="https://sfconservancy.org/">Software Freedom Conservancy</a><br>
|
|||
|
|
<a href="../../../credits/index.html">Credits</a>
|
|||
|
|
</small>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</footer>
|
|||
|
|
|
|||
|
|
</body>
|
|||
|
|
</html>
|