Blog on performing a secure 3rd party Temurin jdk-21+ reproducible verification build

[andrew-m-leonard]

Performing a 3rd party Temurin verification reproducible build

Decide on a descriptive title for your new blog post and reference it in the title of this issue. The pull request to address this issue will have a 'Slugify-ed' version of the blog post title as the directory in https://github.com/adoptium/adoptium.net/tree/main/content/blog. See the instructions at https://github.com/adoptium/adoptium.net/tree/main/content#adding-content for details.

Determine what content theme this blog post relates to
With the addition of Adoptium DevKit's for the Temurin jdk-21+ Linux platforms, it is now possible to perform an independent secure reproducible build from source. This provides a highly secure validation to the integrity and security of the officially published Temurin binaries, and the supply chain used to build them.

This blog describes why these 3rd party reproducible builds are important, and documents how anyone can perform such a verification build.

As per #1956, there are several themes that a new post can relate to, and this also determines which tags to use for the post.

Gather supporting images and media
Find helpful supporting material to make your new blog post more interesting to read.

Set a target publish date
Each new blog post should have a target publish date that is represented in the Adoptium Content Streams calendar. The date can be revised as needed, this just helps the marketing committee plan better.