AlmaLinux OS Foundation believes that making it
easy for community members to build packages and images is a fundamental part
of growing and ensuring a healthy enterprise Linux ecosystem. AlmaLinux is
fully open source and supported by a growing list of members helping to improve
each version. To that end, we started work long ago to make sure that our build
system is also transparent and open for use by any organization that is
interested in building a better Linux distribution.
They announced the first fruits
of their efforts, ALBS, The AlmaLinux Build System. The read-only access to our
build system is available at: https://build.almalinux.org/
It has been quite some time since they released
the source for the AlmaLinux Build System by releasing it under GPLv3 license: https://github.com/AlmaLinux/build-system.
However, code will only take you so far.
Since then, it has been bootstrapped,
deployed, used to build AlmaLinux OS 8.6 as well as AlmaLinux OS 9.0 for all
four platforms: x86_64, Arm aarch64, PowerPC ppc64le & s390x. This system
is also used to generate & publish errata and sign packages.
They are adding the next stage of
transparency for the build processes by releasing anonymous, read-only access
to our build system. This allows anyone to see what packages are being built
right now, when a particular package was built, when a package build fails, and
all the logs associated with the build process for each and every package.
Build system is available at build.almalinux.org.
The User Guide for the new version of the build system can be found on the
github site: https://github.com/AlmaLinux/build-system/wiki/AlmaLinux-Build-System-User-Guide
In addition to this initial read-only access,
we've begun building updates delivering fully functional OVAL files for use by
OpenSCAP as well as any other security software. The OVAL files have all the
errata information, as well as mitigation recommendations and support for
modules too.
Information on OVAL Streams and files can be
accessed in the wiki at https://wiki.almalinux.org/documentation/oval-streams.html.
Future Roadmap
By the end of July, they plan to:
- Introduce a robust RBAC system to
enable and grant access to maintainers and contributors from different
organizations to build packages
- Add SBOM support for builds by
integrating with CodeNotary ensuring package provenance and constitution is
well documents and transparent
In the future, they are looking into:
- Implement Organization/SIG
namespaces within the build system
- Add COPR
support
- Automate VM & container image
building & publishing
The AlmaLinux OS Foundation wants to make it
easy for people to build packages and images for the "Enterprise Linux"
ecosystem for any organization that is interested in doing so.
If you would like to participate - join us at
on the AlmaLinux Community Chat at https://chat.almalinux.org, the AlmaLinux
Community on Reddit
or catch us on Twitter.