jzerebecki

On a smaller internet connection or offline the development experience can be severely degraded. This has a big impact on hackathons or other events where multiple people want to get the same content. Workarounds over USB sticks are less usable than an automated way can be. A content addressable transport that can work on a local network without internet would be better. There is a downside of local content addressable transports compared to protocols like HTTPS that AFAIK has no finished solution yet: Participants in the network can see what you request. If one wants to use such a transport by default this needs to be solved, otherwise it will remain an option that will only be used on networks where this downside is deemed acceptable. Find, ask around for more and summarize possible solutions.

https://gitlab.com/JanZerebecki/transparency-log-watcher Trillian is used for Reproducible Source, Build and Certificate Transparency. So it could be used to log the input to OBS and the build results and make zypper check it before installing an rpm. But currently clients wouldn't detect if the log shows them a different version than anyone else. See if there is a way so this can be detected.

Project Description

Look into things that make security/code reviews of rust code easier and play with cargo-crev.