Secure sharing between untrusted users in a transparent source/binary deployment model

The Nix software deployment system is based on the paradigm of transparent source/binary deployment: distributors deploy descriptors that build components from source, while client machines can transparently optimise such source builds by downloading pre-built binaries from remote repositories. This model combines the simplicity and flexibility of source deployment with the efficiency of binary deployment. A desirable property is sharing of components: if multiple users install from the same source descriptors, ideally only one remotely built binary should be installed. The problem is that users must trust that remotely downloaded binaries were built from the sources they are claimed to have been built from, while users in general do not have a trust relation with each other or with the same remote repositories. This paper presents three models that enable sharing: the extensional model that requires that all users on a system have the same remote trust relations, the intensional mo...

• Type: Conference
• Year: 2005
• Where: KBSE
• Authors: Eelco Dolstra
• Keywords: KBSE 2005, Remote Repositories, Software Deployment, Software Engineering, Source Deployment