- make the build system reproducable, so that every build is exactly the same binary, no matter who runs it. that's "easy". But you don't know why you get that exact binary
- make the build system verifiable, or the resulting binary verifiable so that you know exactly why you get that binary. This is hard.
Comments
deterministic doesnt really mean trust per se to me. it means reliable.
if you dont know what you're getting every time its hard to be any reliable.
of course, if you're reliable, its more trustable.
Repeatable, "reliable" only in the sense that you can rely on the outcome.
here's the difference:
- make the build system reproducable, so that every build is exactly the same binary, no matter who runs it. that's "easy". But you don't know why you get that exact binary
- make the build system verifiable, or the resulting binary verifiable so that you know exactly why you get that binary. This is hard.
The first one is repeatable, reliable.
The second one is trustworthy, verifiable.