Hacker News Reader

Being able to rebuild critical infrastructure from source, and know that you'll be able to reliably deploy it, is a _huge_ win for security.

In that case, you might be interested in bosh: http://bosh.io/docs/problems.html (the tool that enables the workflow jacques_chester was describing). It embraces the idea of reliably building from source for the exact reasons you've mentioned.

I'm confused now, earlier you recommended patches over rebuilding continuously from source, but this seems like the opposite?

What does "packages" mean here? Sorry.

I'm guessing they meant to write "patches".

My guess is that "packages" is shorthand for "binary packages", as opposed to being able to redeploy from source.

Nod.