commit: 8a45ab19fa9704b1c46009cc0bbc78d1ce085857 parent 19a09d211514ccfad050b6247fce8ed8535bc781 Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me> Date: Thu, 29 Sep 2022 22:24:14 +0200 notes/bootstrapping: New pageDiffstat:
| A | notes/bootstrapping.shtml | 47 | +++++++++++++++++++++++++++++++++++++++++++++++ |
1 file changed, 47 insertions(+), 0 deletions(-)diff --git a/notes/bootstrapping.shtml b/notes/bootstrapping.shtml@@ -0,0 +1,47 @@ +<!DOCTYPE html> +<html xmlns="http://www.w3.org/1999/xhtml"> + <head> +<!--#include file="/templates/head.shtml" --> + <title>Bootstrapping — lanodan’s cyber-home</title> + </head> + <body> +<!--#include file="/templates/en/nav.shtml" --> + <main> + <h1>Bootstrapping</h1> + <ul> + <li><a href="https://bootstrappable.org/">Bootstrappable Builds</a></li> + <li><a href="https://niconiconi.neocities.org/posts/ken-thompson-really-did-launch-his-trusting-trust-trojan-attack-in-real-life/">Ken Thompson Really Did Launch His "Trusting Trust" Trojan Attack in Real Life</a></li> + <li><a href="https://manishearth.github.io/blog/2016/12/02/reflections-on-rusting-trust/">Reflections on Rusting Trust</a>: Proof of Concept, backdooring The One True Rust Compiler</li> + </ul> + + <h2>Tools</h2> + <ul> + <li><a href="https://hacktivis.me/projects/deblob">deblob</a>: Remove binary executable files (including bytecode)</li> + </ul> + + <h2>Problematic software</h2> + + <h3>Erlang</h3> + <p>Documented as originally implemented in prolog, now version n requires binaries version n-1 or n to build. No alternative compiler known so far.</p> + + <h3>Rust</h3> + <p> + There is <a href="https://github.com/thepowersgang/mrustc">mrustc</a> but it's quite unstable and so far GuixSD seems to be the only distro using it. + Getting to stable also involves compiling the intermediary versions. + Rustc also vendors several other projects like LLVM and rust crates (enjoy non-installable libraries), similarly to other rust software. + </p> + + <h3>Free-Pascal Compiler</h3> + <p><a href="https://bootstrapping.miraheze.org/wiki/Aesop">Aesop</a> seems to still be at the vaporware stage, no code is available.</p> + + <h3>QEMU 7+</h3> + <p>Their meson setup hardcodes the use of pre-built firmware like BIOSes and VGA Option ROMs.</p> + + <h2>Historically problematic</h2> + + <h3>Firefox >=68 <=78</h3> + <p>Firefox would bundle python2 and refuse to build if removed. See <a href="https://salsa.debian.org/mozilla-team/firefox/-/commits/esr78/master/obj-x86_64-pc-linux-gnu/_virtualenvs/init/bin">Debian firefox-esr source history</a> + </main> +<!--#include file="/templates/en/footer.shtml" --> + </body> +</html>