The windows updates take a lot of space. As now 7k passed the windows updates are beeing paused for the moment, as the hash codes started to vary.
Even if it is just a proof of concept implementation, I now added a WSUS server for windows support and integrated a special bintra client for it. So each and every update for at least windows 10 (german and english) is for now included in the database. As the first import did make a big… Continue reading Now with windows support
For the wide range of CentOS compatible setups with dnf and rpm as buzzwords, we now have CentOS support for such a client added. First setup a link to the download repository: If the command config-manager is not known you have to install some dnf plugins first and try again: With that new repo added… Continue reading Now with CentOS support
With the new cluster of work horses the next step reaching 5000 entries was easy. Now lets see what the 10k number will feel like!
Even with a small cluster of servers and workstations we now have monitored 4000 entries of packages with hashes validated up to 20 times and more. The system seems somewhat stable so far, some minor runtime glitches where identified and for sure fixed. So feel free to jump on the binary transparency train.
You can get the RSS feed directly out of the database. And we do have an Atom variant too. Fresh entries to your doorstep.
All the apt insert and update events where received and handled. Only trust the things you have seen yourself. So we did run an intensive initial test. Just now a medium sized upgrade was handled by bintra and everything worked well. So this ProofOfConcept phase seems to succeed!
The first running initial prototype is ready. Installations of debian packages are now monitored and the hashes are upcounted for binary transparency. Next stop is the decision making if and when to give an alert back. And tons of polish for user automation.
Reading a book is always inspiring. This time (again) it was Cory Doctorow which took me the initial start of this proof-of-concept realization of binary transparency. We will see in future how that project will develop. The more systems check and therefore contribute the better.