From nobody Wed Dec 14 03:05:19 2022
X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4NX0bj4HyKz4kZXw
	for <freebsd-ports@mlmmj.nyi.freebsd.org>; Wed, 14 Dec 2022 03:05:21 +0000 (UTC)
	(envelope-from marquis@roble.com)
Received: from mx5.roble.com (mx5.roble.com [209.237.23.5])
	(using TLSv1.3 with cipher TLS_CHACHA20_POLY1305_SHA256 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA512
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "mx5.roble.com", Issuer "mx5.roble.com" (not verified))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4NX0bj2MzGz4KNJ
	for <freebsd-ports@freebsd.org>; Wed, 14 Dec 2022 03:05:21 +0000 (UTC)
	(envelope-from marquis@roble.com)
Authentication-Results: mx1.freebsd.org;
	none
Received: from roble.com (roble.com [209.237.23.50])
	by mx5.roble.com (Postfix) with ESMTP id 5AFCA14BA6;
	Tue, 13 Dec 2022 19:05:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=roble.com;
	s=rs060402; t=1670987119;
	bh=lQwK1SaeTZAVOYKF1uThzeQW16s36/IvaNIYBwt4XR4=;
	h=Date:From:To:cc:Subject:In-Reply-To:References;
	b=WkVQL70oIpqqYvwW6m/ZOaonTpT4V9KoE1px5TMXV3bYr+K9oiJavXOVUed9K6vSU
	 4WRajOum7DVpsb0qEirH2BtWRQsrWkUwhY+5QJYS2zwGhcYFu0FxoWTU2N0G5ss3TV
	 3CakwEFAst5PPyGhC47FsYr3YBRz5e3CWaKqYDRE=
Date: Tue, 13 Dec 2022 19:05:19 -0800 (PST)
From: Roger Marquis <marquis@roble.com>
To: Xin LI <delphij@gmail.com>
cc: freebsd-ports@freebsd.org
Subject: Re: lang/rust is super slow to buildZ
In-Reply-To: <CAGMYy3vBKnroT4OJpsYGOckAf79AMXiARmCkNDuDgt2jEfmZ6A@mail.gmail.com>
Message-ID: <p076oop5-1n5o-4p15-q7q2-s1n9r1sq2575@mx.roble.com>
References: <EDE0639D-04CE-44C6-922D-159F45576296@patmaddox.com> <c2c55e9a-3af7-19b9-a9f4-060cd4e1f584@bluerosetech.com> <CAGMYy3shq_Jdgd7-GppOJsGKup=RpUk-p+=OBbOs5107b1aWhw@mail.gmail.com> <39n96570-44r2-opnp-512n-po85597n6qn6@mx.roble.com>
 <CAGMYy3vBKnroT4OJpsYGOckAf79AMXiARmCkNDuDgt2jEfmZ6A@mail.gmail.com>
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-ports
List-Help: <mailto:ports+help@freebsd.org>
List-Post: <mailto:ports@freebsd.org>
List-Subscribe: <mailto:ports+subscribe@freebsd.org>
List-Unsubscribe: <mailto:ports+unsubscribe@freebsd.org>
Sender: owner-freebsd-ports@freebsd.org
X-BeenThere: freebsd-ports@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII; format=flowed
X-Rspamd-Queue-Id: 4NX0bj2MzGz4KNJ
X-Spamd-Bar: ----
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:17403, ipnet:209.237.0.0/18, country:US]
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-ThisMailContainsUnwantedMimeParts: N

On Tue, 13 Dec 2022, Xin LI wrote:
> Using prebuilt binaries is not necessarily compromising security when done
> right.  I think to ensure safety of these prebuilt binaries, we need to
> invest in e.g. making package builds reproducible (so an independent third
> party can audit and validate that the binaries are actually built from the
> source that they claimed to be when they want), ensure that the builders
> are safe, and sign the packages on the builders.

Reproducable builds, a packaged base and paid staff to maintain the
vuxml db (and perhaps support for containerd and wakeonlan) would go a
_long_ way towards getting FreeBSD back onto the short list of popular
server operating systems.  Alas, none of these seems to be a priority
for the Board.

Roger Marquis