and Pyrsia: Securing the Software Supply Chain
summary
Project Pyrsia offers an open, peer-to-peer binary distribution network written in Rust that integrates with Docker as a Docker registry mirror so docker pull and docker build continue to work. Demo runs two local Pyrsia nodes on macOS, shows a 9s docker hub pull then a much faster peer-to-peer fetch, and proves resilience when upstream is unavailable. Planned features include a provenance ledger/blockchain for attesting origins and a reproducible-build consensus among randomly chosen builder nodes; project launched Oct 2021 with ~27 contributors and ~38 GitHub stars.
AI-written summary · about
chapters (5)
related talks
29mClosing the Supply Chain Security Loop with Rust & Pyrsia
17mTrusted Open Source Artifacts on the Blockchain: A Hands-on Introduction to Pyrsia
51mA Community Approach to OSS Distribution
10mHacking the OSS Supply Chain
42mCDF Project Maintainers' Panel
20mSecurity Initiatives in Community Driven Projects: Looking Ahead with Python and Rust
30mSupply Chain Security for OpenSource Projects
21m#7 Open Source Forum 2019 Dan Lorenc