Group: Software/FSDG distributions/Security
From LibrePlanet
(→Releases and signatures: Add LibreCMC and mention signature types) |
(→Releases and signatures: Add Dynebolic) |
||
Line 12: | Line 12: | ||
| {{no|Checksums only}}<ref>https://mirror.fsf.org/dragora/v3/iso/beta1/</ref> | | {{no|Checksums only}}<ref>https://mirror.fsf.org/dragora/v3/iso/beta1/</ref> | ||
|- | |- | ||
− | ! Dynebolic | + | ! Dynebolic 3.0-beta |
− | | | + | | {{no|Broken: signed broken checksums (md5)}}<ref>https://files.dyne.org/dynebolic/</ref> |
|- | |- | ||
! Guix 1.4.0 | ! Guix 1.4.0 |
Revision as of 12:13, 22 February 2023
Contents
Introduction
This page tracks the progress of FSDG distributions with regard to reproducible builds, bootstrapable builds and other similar security features.
Releases and signatures
Distribution | Signed installers |
---|---|
Dragora 3.0-beta1 | Checksums only[1] |
Dynebolic 3.0-beta | Broken: signed broken checksums (md5)[2] |
Guix 1.4.0 | Yes, signed images[3] |
Guix "latest" | No[4] |
Hyperbola v0.4.2 | Yes, signed images[5] |
LibreCMC | Yes, signed checksums[6] |
Parabola | Yes[7] |
ProteanOS | ? |
PureOS 10 (byzantium) | Checksums only[8] |
Replicant 6.0 0004 | Yes, signed images[9] |
Trisquel 10.0.1 | Yes, signed images[10] |
Ututo S | ? |
Repdoducible builds and bootstrapable builds
Self hosted distributions
Distribution | Reproducible builds officially supported[11] | Comments |
---|---|---|
Dragora | ? |
|
Dynebolic | ? |
|
Guix | Yes |
|
Hyperbola | ? |
|
Parabola | ? |
|
PureOS | ? |
|
Trisquel | ? |
|
Ututo S | ? |
|
Small distributions
Distribution | Reproducible builds officially supported[11] | Comments |
---|---|---|
LibreCMC | ? |
|
ProteanOS | ? |
|
Replicant | not yet |
|
- ↑ https://mirror.fsf.org/dragora/v3/iso/beta1/
- ↑ https://files.dyne.org/dynebolic/
- ↑ https://guix.gnu.org/en/download/
- ↑ https://guix.gnu.org/en/download/latest/
- ↑ https://wiki.hyperbola.info/doku.php?id=en:manual:verify_live_images
- ↑ signed checksums: https://librecmc.org/librecmc/downloads/snapshots/v1.5.12/targets/ath79/generic/
- ↑ https://wiki.parabola.nu/Get_Parabola
- ↑ https://downloads.puri.sm/byzantium/gnome/2022-06-02/
- ↑ https://ftp.osuosl.org/pub/replicant/images/replicant-6.0/0004/images/
- ↑ https://cdimage.trisquel.info/trisquel-images/
- ↑ 11.011.1 If reproducible builds officially supported, we should be able to open bugs about non reproducible packages and/or send patches to fix them. If it is not supported we could try to send patches to enable reproducible builds and/or help the distribution supporting it instead.
- ↑ 12.0012.0112.0212.0312.0412.0512.0612.0712.0812.0912.10 The official lists of projects supporting reproducible is at https://reproducible-builds.org/projects/ . Note that not all theses projects are FSDG compliant and that some might even contain nonfree software and other really problematic issues.
- ↑ https://wiki.parabola.nu/Reproducible_Builds