Loading…
May 10-12, 2023
Vancouver, British Columbia, Canada + Virtual
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2023 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Pacific Daylight Time (UTC/GMT -8). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Back To Schedule
Thursday, May 11 • 2:55pm - 3:35pm
Demystifying Unreproducible Builds: What, Why, and How? - Rahul Rajesh Bajaj, Red Hat

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.
Large software distributions generally have thousands of packages. These programs rely on one another to prevent code duplication and complete tasks effectively. The interdependence between such packages creates a software supply chain. However, recent supply chain attacks such as SolarWinds and Mimecast have raised serious concerns about the integrity of the software supply chain. Any software project is prone to supply chain attacks in this modern software era. In this talk, we will explore how the reproducible builds initiative can be used to overcome supply chain attacks. A software project is said to have a reproducible build process if, given the same source code, build instructions, and build environment the build process generates a bit-by-bit identical build artifact. In this talk, we will try to understand the reasons for builds to be reproducible and possible solutions for the same. Lastly, we shall discuss measures that might help organizations to achieve a better rate of reproducibility.
Speakers
avatar for Rahul Bajaj

Rahul Bajaj

Site Reliability Engineer, Red Hat
Rahul is an open-source software enthusiast. He is currently pursuing his MSc. Computer Science degree at Queen's University where his research reloves around supply chain attacks and reproducible builds projects. His experience as a Site Reliability Engineer at Red Hat has enabled... Read More →

Thursday May 11, 2023 2:55pm - 3:35pm PDT
121 (Level 1)
  SupplyChainSecurityCon, Countering Build Threats