[Git][reproducible-builds/reproducible-website][master] Push some changes to to the tools page.
Chris Lamb (@lamby)
gitlab at salsa.debian.org
Mon Jul 13 17:13:23 UTC 2026
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
3e3154f2 by Chris Lamb at 2026-07-13T10:13:10-07:00
Push some changes to to the tools page.
- - - - -
1 changed file:
- tools.md
Changes:
=====================================
tools.md
=====================================
@@ -12,10 +12,10 @@ order: 30
- [Tools to compare build artifacts and/or detect nondeterminism](#tools-to-compare-build-artifacts-andor-detect-nondeterminism)
- [Tools to make builds reproducible (by removing nondeterminism)](#tools-to-make-builds-reproducible-by-removing-nondeterminism)
- [Tools for rebuilding](#tools-for-rebuilding)
- - [orchestrators](#orchestrators)
- - [rebuilder-backends](#rebuilder-backends)
- - [clients/frontends](#clientsfrontends)
-- [verifiers?](#verifiers)
+ - [Orchestrators](#orchestrators)
+ - [Rebuilder backends](#rebuilder-backends)
+ - [Clients/frontends](#clientsfrontends)
+- [Verifiers](#verifiers)
- [Misc](#misc)
## Tools to compare build artifacts and/or detect nondeterminism
@@ -291,12 +291,12 @@ or `dnf-plugin-in-toto` to validate reproducible status.
- Rebuild Logs forming a transparency log of reproduction attempts.
- GitHub Actions workflows to automate everything.
-<a href="https://github.com/obfusk/rbtlog" class="btn btn-outline-primary btn-sm">Git</a>
-<a href="https://github.com/obfusk/rbtlog/issues" class="btn btn-outline-primary btn-sm">Issues</a>
-<a href="https://github.com/obfusk/rbtlog/pulls" class="btn btn-outline-primary btn-sm">Merge requests</a>
-<a href="https://codeberg.org/IzzyOnDroid/rbtlog" class="btn btn-outline-primary btn-sm">IzzyOnDroid rebuilder</a>
+<a href="https://codeberg.org/IzzyOnDroid/rbtlog" class="btn btn-outline-primary btn-sm">Git</a>
+<a href="https://codeberg.org/IzzyOnDroid/rbtlog/issues" class="btn btn-outline-primary btn-sm">Issues</a>
+<a href="https://codeberg.org/IzzyOnDroid/rbtlog/pulls" class="btn btn-outline-primary btn-sm">Merge requests</a>
+<a href="https://shields.rbtlog.dev/" class="btn btn-outline-primary btn-sm">rbtlog shields and rebuilders</a>
-### rebuilder-backends
+### Rebuilder backends
#### Arch Linux repro
@@ -316,7 +316,7 @@ with the package generated during the verification build.
<a href="https://github.com/archlinux/devtools/blob/master/src/makerepropkg.in" class="btn btn-outline-primary btn-sm">Script</a>
-#### Debian debrebuild.pl
+#### Debian `debrebuild.pl`
Given a buildinfo file from a Debian package, generate instructions for
attempting to reproduce the binary packages built from the associated source
@@ -356,7 +356,7 @@ information.
<a href="https://github.com/fepitre/rpmreproduce/issues" class="btn btn-outline-primary btn-sm">Issues</a>
<a href="https://github.com/fepitre/rpmreproduce/pulls" class="btn btn-outline-primary btn-sm">Merge requests</a>
-#### orb: check opam package reproducibility
+#### *orb*: check opam package reproducibility
This tool can check if an opam package build is reproducible.
It has two subcommands: build and rebuild.
@@ -374,7 +374,7 @@ binaries are identical.
<a href="https://github.com/robur-coop/orb/pulls" class="btn btn-outline-primary btn-sm">Merge requests</a>
-### clients/frontends
+### Clients/frontends
#### Rebuilderd Website
@@ -388,7 +388,7 @@ rebuilderd's API to fetch the current status of reproducibility.
<a href="https://gitlab.archlinux.org/archlinux/rebuilderd-website/-/merge_requests" class="btn btn-outline-primary btn-sm">Merge requests</a>
<a href="https://archlinux.org/packages/extra/any/rebuilderd-website/" class="btn btn-outline-primary btn-sm">Arch Linux package</a>
-#### ismyarchverifiedyet
+#### *ismyarchverifiedyet*
Experimental python script to query results from rebuilderd instances and
compares it to your local arch system.
@@ -400,9 +400,9 @@ compares it to your local arch system.
#### Arch Repro Status
A CLI tool for querying the reproducibility status of the Arch Linux packages
-using data from a rebuilderd instance such as reproducible.archlinux.org. It can
-show the reproducibility status of packages that belong to an individual package
-maintainer and currently installed packages on the system.
+using data from a rebuilderd instance such as [reproducible.archlinux.org](reproducible.archlinux.org).
+It can show the reproducibility status of packages that belong to an individual
+package maintainer and currently installed packages on the system.
<a href="https://gitlab.archlinux.org/archlinux/arch-repro-status" class="btn btn-outline-primary btn-sm">Git</a>
<a href="https://gitlab.archlinux.org/archlinux/arch-repro-status/-/issues" class="btn btn-outline-primary btn-sm">Issues</a>
@@ -421,9 +421,12 @@ checksums and build status. Produced binaries can be downloaded and executed.
<a href="https://github.com/robur-coop/builder-web/issues" class="btn btn-outline-primary btn-sm">Issues</a>
<a href="https://github.com/robur-coop/builder-web/pulls" class="btn btn-outline-primary btn-sm">Merge requests</a>
+## Verifiers
-## verifiers?
+<!--
(I wonder how we can contrast a more thorough attestation verification vs regular client/frontends)
+-->
+
- <https://github.com/tweag/trustix>
- <https://github.com/in-toto/apt-transport-in-toto>
- <https://github.com/fepitre/dnf-plugin-in-toto>
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/3e3154f2c6f851b5e14ea7a0b739340fa56f76ac
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/3e3154f2c6f851b5e14ea7a0b739340fa56f76ac
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20260713/5827405e/attachment.htm>
More information about the rb-commits
mailing list