Reproducible Builds aims to make it easier to check the source code of free and open source software. You can follow the project at:

➡️ @reproducible_builds

The project's website is at reproducible-builds.org

Reproducible Builds promotes tools and practices to help verify that open source code has not been altered before its distribution.

#ReproducibleBuilds #FOSS #OSS #FLOSS #Libre #FreeSoftware #OpenSource #Dev #Security #InfoSec #ComputerSecurity #Computing #Programming

Check out this extensive and in-depth interview with @janneke_gnu with his thoughts on @reproducible_builds, 'Bootstrappable' Builds, GNU Mes and GNU @GuixHpc... 🤝🔷👍
reproducible-builds.org/news/2

Well, finally abandoned the ... had an issue where the pinephone was not charging and removed it to test without it... and I realized it liked it better that way.

The hardware keyboard and the extra battery capacity was nice, but it was just too bulky and I used it less as a result.

Most applications I used with worked better in portrait mode, and found myself locking it in portrait mode... but the keyboard was obviously optimized for landscape mode.

@fsf @conservancy @fsfe @nixos @NGIZero @reproducible_builds The progress of integrating this into @GuixHPC mainline can be monitored here:

issues.guix.gnu.org/55227

Its status has been bumped to IMPORTANT.

Show thread

So, keys.openpgp.org can resist “certificate flooding”, but it does not distribute user IDs, and thus GnuPG refuses to import keys from there:
dkg.fifthhorseman.net/blog/ope

At the same time, sks-keyservers.net is dead and pgp.mit.edu doesn’t reply (or maybe it sometimes does?).

Is there a usable #OpenPGP keyserver left? What do people recommend?

@reproducible_builds @civodul

I also did a quick estimate of some "core" packages in though a better list should probably be created and I have not yet looked into what the causes might be:

lists.reproducible-builds.org/

Show thread

Happy to say my Lite 2 successfully recovered from my spontaneous urge to clean it.

For a relatively small and affordable USB keyboard, it has treated me well over the years!

It has the Control key where it belongs, dip switches to put the alt keys in their place, and a couple USB ports.

Cleaning it was mostly harmless, other than dropping a few keys under my desk and putting the space key back in upside down at first.

The detritus of several years is now composting.

Episode 44: Celebrating a Decade of Guix fossandcrafts.org/episodes/44-

Guix turns ten! We celebrate... by highlighting ten great things about Guix!
Hear all about functional package management, time-traveling operating systems, and why "Composable DSLs" are great!

I've been focused the past few weeks on targeting some core package sets for in , and wrote up a summary of the status:

lists.reproducible-builds.org/

It's a long, long , but it seems almost within sight! Maybe. I hope.

@reproducible_builds @debian

Today it's been 10 years since the first #GNU #Guix commit! 🎂

Some of the 600+ people who made it possible wrote their story:

👉 guix.gnu.org/en/blog/2022/10-y

🎉 🥳 👏 #FreeSoftware #Guix10Years

Still feel pretty new to ...

Recently got a follow request which is in a limbo state:

"Even though your account is not locked, the floss.social staff thought you might want to review follow requests from these accounts manually."

Awaiting my approval or rejection...

Is this because it is flagged as an antisocial account and/or server and/or bot... the account in question doesn't look terribly interesting, but it feels somewhat strange to block unknown parties.

New prevention?

Recently tested debian-installer on the rock64-rk3328 and rockpro64-rk3399 boards:

bugs.debian.org/1009014
bugs.debian.org/1009670

rock64 only needed one update to get the installer to work over HDMI:

salsa.debian.org/kernel-team/l

Thanks to some initial work from the community, also submitted a patch to u-boot to enable SCSI on the rockpro64:

lists.denx.de/pipermail/u-boot

Which is included in both and u-boot packages!

@debian
@PINE64

Decentralization is not the goal. The goal is information and communication services that respect human agency.

Open source is not the goal, the goal is building a commons of software that is free to study, inspect, and improve.

I feel like, as implementors, as people who spend our lives in the digital crawlspaces focused on the details; its easy to lose sight of the why behind the how. I think important to periodically step back and refocus on why we are doing things the way we are doing. What is the desired world state?

Ursula K. Le Guin on "technology" 

"Technology is the active human interface with the material world.

But the word is consistently misused to mean only the enormously complex and specialised technologies of the past few decades, supported by massive exploitation both of natural and human resources.

This is not an acceptable use of the word. "Technology" and "hi tech" are not synonymous, and a technology that isn't "hi," isn't necessarily "low" in any meaningful sense.

We have been so desensitized by a hundred and fifty years of ceaselessly expanding technical prowess that we think nothing less complex and showy than a computer or a jet bomber deserves to be called "technology " at all. As if linen were the same thing as flax — as if paper, ink, wheels, knives, clocks, chairs, aspirin pills, were natural objects, born with us like our teeth and fingers -- as if steel saucepans with copper bottoms and fleece vests spun from recycled glass grew on trees, and we just picked them when they were ripe..."

ursulakleguinarchive.com/Note-

Our Policy Fellow, Bradley M. Kuhn, writes about how #copyleft (like the #GPL) is the best strategy we have to acheive ethical software that enables users to advance other important social justice causes: sfconservancy.org/blog/2022/ma

Compilers are often written in the language they are compiling. This creates a chicken-and-egg problem that leads users and distributors to rely on opaque, pre-built binaries of those compilers that they use to build newer versions of the compiler.

bootstrappable.org/

Show older
FLOSS.social

For people who care about, support, or build Free, Libre, and Open Source Software (FLOSS).