ohai.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A cozy, fast and secure Mastodon server where everyone is welcome. Run by the folks at ohai.is.

Administered by:

Server stats:

1.8K
active users

#debian

150 posts100 participants4 posts today

🌘 關於二進位發布重建 – Simon Josefsson 的部落格
➤ 探討軟體重現性的極限與未來方向
blog.josefsson.org/2025/03/31/
Simon Josefsson 分享了他重建 Debian 和 Ubuntu 封包 (前 50 名熱門封包) 的實驗,並與 Reproduce.Debian.net 專案進行比較。Reproduce.Debian.net 旨在完全重現官方發布的封包,但使用與原始建立時相同的建構輸入。Josefsson 認為,為了確保真正的可信賴,不僅需要可重現的重建,更需要「冪等重建」(Idempotent Rebuild),即從最初的源碼完全重建整個發布版本,而不依賴任何初始的二進位 Blob。他提出了一個迭代的重建過程,目標是達到一個穩定的狀態,即後續重建不再產生任何差異。此過程可能面臨的挑戰包括嵌入式時間戳和非確定性輸出,甚至可能發現 Debian 主系統已經無法完全重建。他還建議使用 Guix
#開源 #Debian #可重現性 #軟體供應鏈

blog.josefsson.orgOn Binary Distribution Rebuilds – Simon Josefsson's blog

On August 4 in 2010 i have set up a new mailserver that i called mail-2.

It was a #debian lenny and i followed the howto from workaround.org/ which i would still today recommend.

Over the time this has been upgraded and it did actually work reasonable well.

Tonight it finally got upgraded to bookwurm and therefore has seen 8 distribution upgrades.

Thank you a lot #debian and thank you a lot #ISPmail for your howto.

This howto is btw still being updated today.

Open source rocks

Debian’s LaTeX packages are great. They’re easy to install and work well in the majority of cases. But they can be outdated. Some recent CTAN packages aren’t available in the #Debian packages, especially if you’ve not upgraded your system in a while. By being careful, it’s possible to replace your Debian-installed LaTeX packages with a vanilla TeX Live installation. This post describes the steps involved in migrating to a bright, shiny, up-to-date #TeXLaTeX distribution.

peateasea.de/replacing-debian-

P.T.C. · Replacing Debian LaTeX packages with vanilla TeX LiveDebian’s LaTeX packages are great. They’re easy to install and work well in the majority of cases. But they can be outdated. Some recent CTAN packages aren’t available in the Debian packages, especially if you’ve not upgraded your system in a while. By being careful, it’s possible to replace your Debian-installed LaTeX packages with a vanilla TeX Live installation. This post describes the steps involved in migrating to a bright, shiny, up-to-date LaTeX distribution.
Replied in thread

@leeloo

re: software that breaks when you upgrade: if I update a #Debian system, it only gets security patches, so no breakage there. If I upgrade from one release to the next there might be some breakage; new versions not understanding the old config or systems replacements. Debian is very conscious about this: not only it takes many months of freeze, but also doesn't release until all bugs found have been fixed or known workarounds are documented. The release notes are usually quite thorough

Hey les #geeks et #geekettes , sur mon laptop j’utilise #khal comme calendrier. Tout fonctionne bien mais les liens (genre dans le lieu des événements) ne sont pas cliquables. C’est comment chez vous?
J’ai testé avec Foot et Alacritty… J’ai aussi testé avec la version 10.5 et 11.3.

Merci d’avance. Le repouet protège vos orteils des coins de meubles.
#help #debian

Debian mirror มีบทบาทสำคัญในโครงสร้างพื้นฐานด้านความปลอดภัยทางไซเบอร์ของประเทศ โดยเก็บแพ็คเกจในประเทศ ช่วยรักษาอำนาจอธิปไตยทางเทคโนโลยีและลดการพึ่งพาที่เก็บข้อมูลของต่างประเทศระหว่างความตึงเครียดทางภูมิรัฐศาสตร์หรือความขัดข้องของอินเทอร์เน็ต โซลูชันเชิงพาณิชย์เช่น Amazon S3 ไม่สามารถให้การรับประกันความปลอดภัยหรือความยืดหยุ่นทางภูมิรัฐศาสตร์ในระดับนี้ได้

Debian mirrors play a critical role in national cybersecurity infrastructure. By providing local packages, they help maintain technological sovereignty and reduce dependency on foreign-controlled repositories during geopolitical tensions or internet disruptions. Commercial solutions like Amazon S3 fundamentally cannot provide this level of security assurance or geopolitical resilience.

Continued thread

This is undoubtedly the most promising Post-Quantum TLS deployment situation I have seen for #Tor since we started discussing it more actively in the team. Very exciting!

I hope that OpenSSL 3.5, when released, will make it into #Debian Trixie. That would make deployment of this so much more snappy and easy for the Tor network to upgrade, but that may be dreaming. The timelines here look quite difficult for that to happen, but let's hope.