Review of a secure software development process for glibc.

[Siddhesh Poyarekar]

On 2025-05-19 06:35, Mark Wielaard wrote:
> Yes, we have two servers at the Red Hat Community cage now (server2
> and server3) with another bigger one coming in Q3 when the Community
> cage will move to a different data center (we'll provide more details
> when we get a more definitive date). Plus a separate VM on another
> host for forge.sourceware.org. At OSUOSL we have
> snapshots.sourceware.org, the osuosl-arm64 and osuosl-arm64-2 buildbot
> workers and the sourceware-builder1.osuosl.org and
> sourceware-builder2.osuosl.org x86_64 container builders. And then we
> have the various riscv, powerpc, s390x, sparc servers run for us at
> various other institutions. See

This is essentially the sticking point as far as funding is concerned: 
all critical infrastructure (those 2, in future 3 machines) is hosted 
solely by Red Hat.  There has been growth in supplementary, non-critical 
infrastructure, but there's no actual funding in sight to grow and 
isolate critical services that currently has a single corporate funder.

Sid