|
|
Log in / Subscribe / Register

DeVault: Announcing the Hare programming language

DeVault: Announcing the Hare programming language

Posted May 2, 2022 9:26 UTC (Mon) by FSMaxB (subscriber, #106415)
In reply to: DeVault: Announcing the Hare programming language by pabs
Parent article: DeVault: Announcing the Hare programming language

> I think Bootstrappable Builds is one of the most important projects that exists in FLOSS days, alongside Reproducible Builds. You shouldn't have to trust binaries to be able to use a language.

To me it is a question of priorities. I would rather have a language be easy to bootstrap then hard, and rust for example would definitely benefit from easier bootstrapping. But then again, it would benefit from a lot of things and and all of these require effort that can not be invested in other things.

Reproducible builds are much more important than easy bootstrapping in my opinion, because that way you need less trust because you can infer trust in one step of the bootstrap chain from the one before without having to do the entire bootstrap chain from scratch. And with reproducible builds, it only takes one person going through the full bootstrap chain to notice if something fishy is going on in a binary release.

Also note that nobody can ever review all the code that they're using, so a reliance on trusting other people is always required. Running a bootstrap yourself can help you only marginally with that.


to post comments

DeVault: Announcing the Hare programming language

Posted May 3, 2022 2:56 UTC (Tue) by pabs (subscriber, #43278) [Link]

A quote from the Bootstrappable Builds IRC channel:

<vagrantc> reproducible builds doesn't mean much without bootstrappability ...
<vagrantc> and bootstrapping is a lot stronger with reproducible builds...

The CREV folks are working on socially scalable cryptographically verifiable code review:

https://github.com/crev-dev/


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds