Comments (7)
Thanks for your feedback. I thought about that and stated in the first sentence how I do interpret reproducible builds for the project:
Reproducible builds for configuration management frameworks (like the DebOps project) could be interpreted as being able to produce two identical VM or container images by stripping out all non-deterministic/changing peaces.
So I donβt think that it is not applicable. Let me explain that a bit more. At work, I use DebOps to build a ownCloud appliance and I am working towards fully automated builds of this VM appliance with DebOps. So I am actually building an image which is later shipped to customers. I think it would be interesting to build this VM or container images reproducible so that no one needs to trust my build environment. This way, multiple employees or customers could rebuild the image and can be certain that the image corresponds to the specification and CM code. Refer to Security challenges for the Qubes build process.
But at the same time I realize that it will require a lot of work and am not proposing to do that right now. Also because this is probably a not very common usage of the project.
Plus this is currently a future criterion which is SUGGESTED so we donβt lose anything here in terms of getting the badge.
from debops-tools.
Status: 59% https://bestpractices.coreinfrastructure.org/projects/237
I intent to finish the setup in the next 24 hours.
The project MUST have a publicly available archive for reports and responses for later searching. (URL required)
@drybjed Just curious. Have you setup github-backup to backup repos and issues? I have played with github-backup and contributed a bit but have not set it up yet.
from debops-tools.
@ypid I haven't set up github-backup
yet, but it might be a good task for the bot. I'll set that up and let you know.
from debops-tools.
@ypid BTW, token generation in debops.pki
could be switched to SHA256 so that we don't have the issue with broken cryptographic algorithms.
from debops-tools.
I haven't set up github-backup yet, but it might be a good task for the bot. I'll set that up and let you know.
Nice. Thanks.
BTW, token generation in debops.pki could be switched to SHA256
π Now that there is a incentive π You are encouraged to do that. Choosing MD5 because it is faster was not a very strong argument in the first place.
from debops-tools.
Seems we are at a solid base of 71% (I have tried to not overestimate it and some criteria still need to be verified).
@drybjed Want to check the Analysis and Future sections which I did go thought right now? I would add the badge to this repo when you are OK with it.
from debops-tools.
Looks good. I like it when you implied that configuration management would require STOPPING TIME ITSELF to be reproductible. :-) However, after checking the criteria:
This criterion does not apply if no building occurs (e.g., scripting languages where the source code is used directly instead of being compiled).
I don't believe that DebOps itself builds any binaries. There were some cases where Debian packages were built by DebOps, but each one is isolated and it depends on the package maintainer to ensure reproductible build. I would mark this entry as N/A
.
from debops-tools.
Related Issues (20)
- Check code signatures
- Move `debops.keyring` Python module into this repo
- Refactor Python modules
- Signed PyPI releases
- debops-update: fails when ansible_managed contains variables
- Document subcommands
- Please enlighten me how to workaround this particular failure I noted HOT 12
- MS Windows Support? HOT 5
- Update http://debops.org/ to https://debops.org/ in repo description HOT 1
- README randomly lists 1 out of 3 dependencies
- provide a commented example config of how to use template_src HOT 1
- debops-padlock unusable with encfs > 1.9 HOT 6
- Raspbian detected as Debian HOT 4
- debops-update has no --dry-run argument HOT 2
- Debops inserts faulty Ansible ppa sources into sources.list HOT 1
- ERROR! Unexpected Exception: invalid syntax (profile_tasks.py, line 68)
- Broken Link for "Getting Started Guide" HOT 3
- wrong pathes for lookup_plugins in ansible.cfg HOT 5
- quoting directories with spaces in ansible.cfg breaks with 2.7 HOT 6
- Bootstrap: Variables from group_vars/all/bootstrap.yml not getting picked up HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from debops-tools.