[tor-bugs] #22769 [Core Tor/Tor]: Investigate the reproducibility of Rust binaries
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Jun 29 19:30:15 UTC 2017
#22769: Investigate the reproducibility of Rust binaries
------------------------------+----------------------------
Reporter: isis | Owner:
Type: task | Status: new
Priority: Medium | Milestone:
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords: rust, SponsorZ
Actual Points: | Parent ID:
Points: 3 | Reviewer:
Sponsor: SponsorZ |
------------------------------+----------------------------
If we are going to start writing more Tor things in Rust, it would be nice
to understand the reproducibility of binaries created with rustc. I
suspect the Tor Browser Team would also be interested in having these
results, since parts of Firefox are now written in Rust, and soon (ESR
58?) it will no longer be optional to use them.
'''Note: this ticket is ''not'' about the reproducibility of rustc
iteself.''' That is an extremely deep rabbit hole (trust me, I have a
rustc chained back to the OCaml days). Someday we may need to explore
that, but that time is not now.
My approach for this task would be probably be to create a Docker instance
which builds some trivial Rust program, and then run the Docker instance
on different machines and compare the hashes of the binaries (then
optionally investigate the differences using whatever tools like running
strings and moving up to Ida or whatever).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22769>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list