Closing the Supply Chain Security Loop with Rust & Pyrsia
summary
Pyrsia is implemented in Rust and runs a peer-to-peer artifact network with an immutable ledger and a BFT consensus library, using Rust P2P libraries rather than IPFS. It builds as much as possible from source, exposes a mirror that looks like a central repo for CI/CD (Maven/Gradle, Docker, Jenkins), and verifies builds across authorized nodes run by companies (JFrog, Docker, Oracle among others). Rust community size and crate counts are cited (≈2.2M devs, ~85k packages) as rationale for the choice.
AI-written summary · about
chapters (10)
- 0:00Introduction and setup
- 1:48Why Rust for Pyrsia
- 4:14Speaker introductions
- 6:42Rust language overview
- 13:06Rust ecosystem benefits
- 17:44Rust Foundation mission
- 20:31Security focus in Rust
- 22:15Introducing Pyrsia project
- 25:05Pyrsia governance model
- 28:35Q&A
related talks
26mand Pyrsia: Securing the Software Supply Chain
17mTrusted Open Source Artifacts on the Blockchain: A Hands-on Introduction to Pyrsia
51mA Community Approach to OSS Distribution
20mSecurity Initiatives in Community Driven Projects: Looking Ahead with Python and Rust
30mSupply Chain Security for OpenSource Projects
22mRust as a Foundation for a Safe and Sustainable Future
26mShipping Python Extensions in Rust Two Million Times a Day
28mRust for Pythonistas