dream of the day: all #Debian packages built using [something like] #Gitian http://gitian.org/
Francesco OpenCode likes this.
Jakukyo Friel shared this.
While I figure out the mechanics of #Gitian I wonder how to verify the claim that "A group of builders is much more trustworthy than just one." It makes sense, but is not *always* true, or is it?
It is true if your builds are done on separate systems by different people. It doesn't make any sense if everybody just uses the same build farm because then you can't test the relationship between source and binary.
Thank you, that makes sense. So the claim is better expressed by "Trustworthiness can result from comparing builds done by different people on different systems."