From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from simark.ca by simark.ca with LMTP id 63DeMJJbIWct4R4AWB0awg (envelope-from ) for ; Tue, 29 Oct 2024 18:02:58 -0400 Authentication-Results: simark.ca; dkim=pass (1024-bit key; secure) header.d=sourceware.org header.i=@sourceware.org header.a=rsa-sha256 header.s=default header.b=fB9SXMSU; dkim-atps=neutral Received: by simark.ca (Postfix, from userid 112) id A27821E590; Tue, 29 Oct 2024 18:02:58 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on simark.ca X-Spam-Level: X-Spam-Status: No, score=-6.8 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL, RCVD_IN_VALIDITY_SAFE,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS autolearn=ham autolearn_force=no version=4.0.0 Received: from server2.sourceware.org (server2.sourceware.org [8.43.85.97]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by simark.ca (Postfix) with ESMTPS id 1332D1E37A for ; Tue, 29 Oct 2024 18:02:57 -0400 (EDT) Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 7B5E83857B9E for ; Tue, 29 Oct 2024 22:02:56 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 7B5E83857B9E DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1730239376; bh=dVSeV8oBh0/XtT5Sa+sFwdmH37iOr167DIpqX0dMM58=; h=Date:To:Subject:Cc:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe:From:Reply-To:From; b=fB9SXMSURYK2bJjbeluHK1IQz4En35MMKL0KN+Eko9BAGvCy0cNtzmAOozKnFnauZ GP9z/QawYjEzH+Yebjmg6lqJ8drNnOhCAs2xysvI+oI9aKhyq1teWAVtCp1VVSsKL1 FvltwQw8vJpZ72qqcT5fVQZ4ldC+Z1/Oqv1ZyDb8= Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTP id 1A37E3858C98 for ; Tue, 29 Oct 2024 22:02:09 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 1A37E3858C98 ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 1A37E3858C98 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1730239331; cv=none; b=DB4jbUPoib+cYUe757FW1L6HcPMBoJ2FT8LQwiXQtIKaisgKU+rvBRW7uy7nwXVIQnQDTCCqa7dNKQP872KrZ9I0abf5qYS2mgcC6Gx94odIb7RpTWqbsqB7KVLeFFug2nrdpqXFia98oAyHZFgsjUI0CuxnKM6sHr9MgUzE5k0= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1730239331; c=relaxed/simple; bh=eaaV7ZG8IgscmAuUcviQYuRqlHrlKGwcVTCvBbHbQ58=; h=DKIM-Signature:Message-ID:Date:MIME-Version:From:To:Subject; b=S7nKuO0IJ3AZqeCurYUWujvNj1jPjsHBpFlLbIDCvYVC+uG/Q5dNFUasUalVzIHsrmsAnLhUUpNoAt2NYLtNgZJrki9Ok9G5FO9iGZ6XRJm6s86dmoJzeLlxtM3BIKOThATCuA2Jp9kcy0pjFeq8hN46Nual33m9K0/vJbRKDKo= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from mail-qt1-f197.google.com (mail-qt1-f197.google.com [209.85.160.197]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-665-mecrqfz_OKC7QE3pSDS-aA-1; Tue, 29 Oct 2024 18:02:07 -0400 X-MC-Unique: mecrqfz_OKC7QE3pSDS-aA-1 Received: by mail-qt1-f197.google.com with SMTP id d75a77b69052e-4609594e306so9134181cf.0 for ; Tue, 29 Oct 2024 15:02:07 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1730239327; x=1730844127; h=content-transfer-encoding:cc:subject:to:organization:autocrypt:from :content-language:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=dVSeV8oBh0/XtT5Sa+sFwdmH37iOr167DIpqX0dMM58=; b=lw5eIdSkl+HlSXSF1EVx8CfsobBuHSTVHgw6KIrixNgH7I7Qdo02A9LLrYqAcU6gGR irUs8hOYqTcDHyrMoTqsOVcSjRvAZoiGpTMAM41nPacCSxfDPipqM2KDx4htWks1UV+d dFa1MaUtmYHiWfi9vqqiKiRTuT1U0ytZ/urYyTzQNWzpxuVFEJic0DZ9YKiQK6Z8P8Xg mJ9SV2nNwFu0Aam/b+VS6eNpXs38fBFEqYnFfWwzTi0+oYBAe3ABJJ8AkEhPODiHpeTu D2zSS9FohjcdCZoEj1l90qcj5Y25K7TwkkCgkafgt+BPjrFDKr3rV814zc8xuZgXgGlq /0og== X-Forwarded-Encrypted: i=1; AJvYcCXUbFofTDZ9Y+VfdOX61dAXyr0tk1yjP2ILcRFaZfnAGkCCXgk9fk5TP9rG8vZ8CptUPNQ=@sourceware.org X-Gm-Message-State: AOJu0YwacDQZHYj9Il82NfKHQd+YWiEqOitoL565q1epqUTurJWUp9S/ M3HeOsqZzud31W6B19WnfCQLz7w4Y3DYv0L08lZihS/Ptjh4g9gXmbKukYq4LpafHKLkR/OEcQM ALu+wdCoZYysWGG8le8xYo1/AqgzuEQAiMfVOE22mgejFlWxG X-Received: by 2002:ac8:5f08:0:b0:461:2536:f226 with SMTP id d75a77b69052e-4616842fcc2mr60038111cf.12.1730239327159; Tue, 29 Oct 2024 15:02:07 -0700 (PDT) X-Google-Smtp-Source: AGHT+IHuALpTiCpw3Y4KCRe9g6vNMjBbYNlFHQZVMbaXzQ3ZvJa4pHNJXAJJj61HYXdh9XjFu59ChA== X-Received: by 2002:ac8:5f08:0:b0:461:2536:f226 with SMTP id d75a77b69052e-4616842fcc2mr60037511cf.12.1730239326647; Tue, 29 Oct 2024 15:02:06 -0700 (PDT) Received: from [192.168.0.241] ([198.48.244.52]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-461323768d6sm48504961cf.71.2024.10.29.15.02.05 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 29 Oct 2024 15:02:05 -0700 (PDT) Message-ID: <9ee5b9e1-3f84-4d9e-8249-7a4bf8080bb0@redhat.com> Date: Tue, 29 Oct 2024 18:02:03 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Autocrypt: addr=carlos@redhat.com; keydata= xsFNBFef5BoBEACvJ15QMMZh4stKHbz0rs78XsOdxuug37dumTx6ngrDCwZ61k7nHQ+uxLuo QvLSc6YJGBEfiNFbs1hvhRFNR7xJbzRYmin7kJZZ/06fH2cgTkQhN0mRBP8KsKKT+7SvvBL7 85ZfAhArWf5m5Tl0CktZ8yoG8g9dM4SgdvdSdzZUaWBVHc6TjdAb9YEQ1/jpyfHsQp+PWLuQ ZI8nZUm+I3IBDLkbbuJVQklKzpT1b8yxVSsHCyIPFRqDDUjPL5G4WnUVy529OzfrciBvHdxG sYYDV8FX7fv6V/S3eL6qmZbObivIbLD2NbeDqw6vNpr+aehEwgwNbMVuVfH1PVHJV8Qkgxg4 PqPgQC7GbIhxxYroGbLJCQ41j25M+oqCO/XW/FUu/9x0vY5w0RsZFhlmSP5lBDcaiy3SUgp3 MSTePGuxpPlLVMePxKvabSS7EErLKlrAEmDgnUYYdPqGCefA+5N9Rn2JPfP7SoQEp2pHhEyM 6Xg9x7TJ+JNuDowQCgwussmeDt2ZUeMl3s1f6/XePfTd3l8c8Yn5Fc8reRa28dFANU6oXiZf 7/h3iQXPg81BsLMJK3aA/nyajRrNxL8dHIx7BjKX0/gxpOozlUHZHl73KhAvrBRaqLrr2tIP LkKrf3d7wdz4llg4NAGIU4ERdTTne1QAwS6x2tNa9GO9tXGPawARAQABzSpDYXJsb3MgTydE b25lbGwgKFdvcmspIDxjYXJsb3NAcmVkaGF0LmNvbT7CwZUEEwEIAD8CGwMGCwkIBwMCBhUI AgkKCwQWAgMBAh4BAheAFiEEcnNUKzmWLfeymZMUFnkrTqJTQPgFAmagDwgFCRDhXm4ACgkQ FnkrTqJTQPgLlw/+JD7l4tj8l8hAMUlszrlIT6IhKSODzjrGO+6d9Y6T9vyE2kk4Xbn+kdJf uBl+wj2+U15MsQe9Z4RwowIB3YHHXgj53M2OjqOAY/sRWXZVDfmVj03hqW8D7zFxjc0SZ9cI TI0MwrDWc+Fr3naXeo7HhgjUmULfPndxb8NHVV4Ds2DTkZoUMwB8l3dboD+nKi5GbfVBf3Q5 cBw0CPkxPl0hxD9sr5IMgWIKVLtvztMIXv2xWAavqk8pQjk0zCYd46GcA8d9pZuac24e9NbM ZzTxu6cP0sKhub1JFIadyBHtJnEV/8Auc8nXJ63QY3h0QVCJYV35gQeejEdMD94in2XTkxk0 A/xCp32bmSZv5flsmdAIv5LK4jTKLvzd6BSy/v7qlpgQ7sNaxQ/JRd+8YuBIiUVIp/kgGezD qtGZSpvPCFuG3LxsdvAu7JAzBY3sfBd2lSGOeHX/JK0nQ6s97j4HlSuXIabSOdsCI5UGSOq5 thbIqfK3ewUSUB0yGvWf7EyuZugtCZOaFGpvcT3ix9/sP1fTRlJl+bNjMcO8GwedDoy85oeg yLCEV9gejCr+NijLfPYtb1s8o0hYu13uBojFyBv+bkUI5hTQaVLacq7VglA/QLOy/3mtM2v5 4OEotiNXbKypHFKnoks/MFpP4xdwxGX5jU4MgFg80aPFGr0oZVXOwU0EV5/kGgEQAKvTJke+ QSjATmz11ALKle/SSEpUwL5QOpt3xomEATcYAamww0HADfGTKdUR+aWgOK3vqu6Sicr1zbuZ jHCs2GaIgRoqh1HKVgCmaJYjizvidHluqrox6qqc9PG0bWb0f5xGQw+X2z+bEinzv4qaep1G 1OuYgvG49OpHTgZMiJq9ncHCxkD2VEJKgMywGJ4Agdl+NWVn0T7w6J+/5QmBIE8hh4NzpYfr xzWCJ9iZ3skG4zBGB4YEacc3+oeEoybc10h6tqhQNrtIiSRJH+SUJvOiNH8oMXPLAjfFVy3d 4BOgyxJhE0UhmQIQHMJxCBw81fQD10d0dcru0rAIEldEpt2UXqOr0rOALDievMF/2BKQiOA7 PbMC3/dwuNHDlClQzdjil8O7UsIgf3IMFaIbQoUEvjlgf5cm9a94gWABcfI1xadAq9vcIB5v +9fM71xDgdELnZThTd8LByrG99ExVMcG2PZYXJllVDQDZqYA1PjD9e0yHq5whJi3BrZgwDaL 5vYZEb1EMyH+BQLO3Zw/Caj8W6mooGHgNveRQ1g9FYn3NUp7UvS22Zt/KW4pCpbgkQZefxup KO6QVNwwggV44cTQ37z5onGbNPD8+2k2mmC0OEtGBkj+VH39tRk+uLOcuXlGNSVk3xOyxni0 Nk9M0GvTvPKoah9gkvL/+AofN/31ABEBAAHCwXwEGAEIACYCGwwWIQRyc1QrOZYt97KZkxQW eStOolNA+AUCZqAPEAUJEOFedgAKCRAWeStOolNA+D38D/9WnZY9fUmPhZVwpDnhIXvlXgqX cspZJEBWNS5ArFn8CLcje7z9hzX3+86lqkEeohTmlgtTg4ctZzM+XKyWSiqHCRCR+FX5SKaa 1VveBtwvjTSVmtV1m0rNHEvUZ5x47A8NadWqYi6uOQ22FhEqUOiwJ7EHzk4w9W3gT1913XT1 vmkCn6FtQcrQvJT7pP+oA0YIVs8ADayJcqWHM+Ez7L2fpfAzBDhIS7dq2MYU8LQOQAsx1y7H 6njp5dN/OI/aN/RL6XeX1Kxl4Xe+hc+tq457fLAUnmaevUldvKThuj+5/Cd4DW25MxaqinfY m/U6pBQ4ZwQPGWA0f+GKiJcLosSRXxIuEdZAl82ht+KgT3zhV/BvQRmrD6wX3ywPkJap8h4K ibwz3r6NbHKdCX22ok58oE8NAWtmTRTKXDhh8oWOKdIYjX6jJzdb/F8rPNoEY3UiYbaNTxt5 TE9VD+yWilYO796HMXjXenCOlghy3HFmZbsQ4N+FlG6LQD7cnwm56kcrJk1IlnQXOSOd2BA2 qNbM1Ohry3B+1F4Oaee+ZKH2C5y7Kx0y3m1b5X7Wpx76H5BeUAp6dQi6nNYeqM9PglZIMvSe O4uRThl5mMDx8MXQz6M9qQ5anYwre+/TudTfCzcTpgXod1wEqi2ErJ5jNgh18DRlSQ3tbDvG O0FatDMfJw== Organization: Red Hat To: gcc developers , glibc developers , gdb developers , binutils developers , Overseers mailing list Subject: Core Toolchain Infrastructure - October 2024 update Cc: cti-tac@lists.linuxfoundation.org X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Language: en-US Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: gdb@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Gdb mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Carlos O'Donell via Gdb Reply-To: Carlos O'Donell Errors-To: gdb-bounces~public-inbox=simark.ca@sourceware.org Sender: "Gdb" Core Toolchain Infrastructure - October 2024 update The Core Toolchain Infrastructure (CTI) Project’s mission is to support the GNU Toolchain community with secure infrastructure and state of the art services required to support the community’s development efforts to be a trusted foundation in a secure supply chain. We want to keep the GNU Toolchain development community updated with the latest information on the CTI project and how it can support the GNU Toolchain. Since 2022 [1][2] the CTI project has been working to carry out a detailed enumeration of the services required by the projects and how those services may be provided in a secure and robust fashion. We have completed a detailed service enumeration for the GNU Toolchain: https://cti.coretoolchain.dev/projects/enum.html In 2024 we published updated project documentation: https://cti.coretoolchain.dev Also in 2024 we've looked at the details of the services we provide, why we provide them, and how we might provide them with with increased security and robustness, including putting together a statement of work with the Linux Foundation Core IT team (who provides similar services to the Linux Kernel) [3]. The CTI Technical Advisory Committee (TAC) is made up of members of the development community of the projects, and is working on behalf of the GNU Toolchain to improve security and robustness of the infrastructure used by the community. The CTI TAC meets monthly and the meetings are open for anyone to attend. There is still a lot of work ahead of us to find a way forward to state of the art sustainable secure and robust services for the GNU Toolchain projects. Recent discussions on the glibc mailing list make it clear that we need to expand and discuss more about our "why" along with the "what" and "how" of these changes. We will be sending out one of these updates every 3 months to all the projects to keep you updated on our progress and discussions with the GNU Toolchain projects and the wider Sincerely, Core Toolchain Infrastructure Technical Advisory Committee [1] https://inbox.sourceware.org/overseers/ef140a6b-c72d-bd63-b94c-bceeb365b32a@redhat.com/ [2] https://inbox.sourceware.org/overseers/2513b668-9ebd-9e78-7263-dc24f4a9558a@redhat.com/ [3] https://inbox.sourceware.org/libc-alpha/eb0d5e7b-0280-4c5a-aff6-3418a4210a39@redhat.com/