[rb-general] List of fully reproducible OSes?

[Richard Purdie]

On Tue, 2018-07-31 at 04:14 -0400, Jean-Philippe Ouellet wrote:
> Hi all,
> 
> Is there a maintained list somewhere of operating systems which (at
> least claim to) have achieved fully-reproducible release ISOs?
> 
> I'm aware of at least Tails and NetBSD. Presumably there are
> others...
> 
> I'm looking for mature efforts to study and compare approaches of
> build system structure, tooling, dependency management, etc.

The Yocto Project has put a lot of effort into checking our output is
reproducible and our 'smaller' core configurations are able to achieve
that and include iso image generation.

Now we have a basic core working we've been rolling that out into the
wider system. We are very aware we need to add regression testing and
improve but what we have is a good start and we certainly have a
systematic approach! :)

We're actually going to be starting to rely on the reproducibility even
more by adding "equivalence" checking upon our generated output,
allowing reuse of the same previously built artefact for multiple input
hashes. We can only consider this as our output binaries are
consistent.

Cheers,

Richard