• 0 Posts
  • 29 Comments
Joined 2 years ago
cake
Cake day: May 20th, 2024

help-circle

  • I don’t think it’s a question of willingness to understand, but one of disagreement about the seriousness of the problem. Not to mention the implict idea that a “verified boot” is the only way to get that result. E.g. it’s very easy to get to a “safe factory state” without that kind of locking, for example with an immutable boot loader, as is typically present in many ARM SoCs (Allwinner, Rockchip, …). In that case you can revert to a safe state by downloading a known good OS image (using a trusted machine) and installing that image using only the immutable bootloader.









  • monnier@lemmy.catoEmacs@lemmy.mlELPA mirrors?
    link
    fedilink
    arrow-up
    4
    ·
    3 months ago

    I don’t know of any mirrors that are “official”, but I do know some people maintain mirrors via rsync (rsync service on elpa.gnu.org was added specifically in response to such requests, IIRC to maintain a mirror on the other side of China’s firewall). As for validation, (Non)GNU ELPA signs all the packages and the archive-contents file (with a key distributed alongside Emacs), so it should “just work”.