Some folks are actively working on a solution for "safe" ARM builders for PPAs. It involves rebooting the hardware after each build with a fixed image that can't be compromised.
Some folks are actively working on a solution for "safe" ARM builders for PPAs. It involves rebooting the hardware after each build with a fixed image that can't be compromised.