可重现构建

可重现构建英語:)也被称为确定性编译英語:),这是一个编译软件的过程,能够确保生成的二进制代码(也就是机器码)可以重现。使用确定性编译编译的源代码将始终输出相同的二进制文件。[1][2]

可重现构建的标志

可重现构建可以作为信任鏈的一部分,[1]这是因为源代码可以签名,这样就可以证明二进制文件是从受信任的源代码编译的。

参考文献

  1. . reproducible-builds.org. [2016-08-22]. (原始内容存档于2016-05-20). Reproducible builds are a set of software development practices which create a verifiable path from human readable source code to the binary code used by computers....build system needs to be made entirely deterministic: transforming a given source must always create the same result.
  2. Ratliff, Emily. . www.securityweek.com. SecurityWeek. 2016-04-04 [2016-08-22]. (原始内容存档于2016-09-20).
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.