Re: [gentoo-soc] Project Proposal : GenCC for "Gentoo Community Compiling"

[Antoine Pinsard]

Thanks for these precisions.

Binary repository seems to be a radical but good solution to get rid of
attack attempts (in both ways). However (though I'm sure you're aware of
that), compilation possibilities are much too numerous to consider
applying it. And that's Gentoo's reason of beeing. Well, I think.

After some more searching, it comes obvious that, while it would be a
very interesting project, I clearly don't have the skills to carry it
out. That's why I will let researchers do their job and find another
interesting project.

Nonetheless, I think I found a solution that would theoretically work:
using kind of a "Web of Trust" (as do OpenPGP).

On Mon, 2013-02-18 at 14:13 -0500, Rich Freeman wrote:
> I think the big question is - what does distributed compilation get us
> that a binary repository doesn't get us, or in what way is it easier?
> I can't really think of any advantages of the former over the latter.

I don't agree with you on that point. Though distributed compilation
doesn't seem to be applicable yet, I don't think a binary repository
will ever be applicable (for the reason I stated formerly).

Regards,

Antoine Pinsard