[rb-general] Core Debian reproducibility: how close?
Bernhard M. Wiedemann
bernhardout at lsmod.de
Tue Oct 23 23:19:56 CEST 2018
-----BEGIN PGP SIGNED MESSAGE-----
On 23/10/2018 14.51, David A. Wheeler wrote:
> How close is the core of Debian to being reproducibly built? By
> core I mean the packages that you always have to install no matter
Coincidentally, I just answered a similar question for openSUSE:
Of 107 core devel pkgs, 4 are very bad
Of 2444 DVD pkgs, 49 are very bad
120 more have reproducibility issues that can be auto-filtered.
Not all of them are strictly required/core, but things like Firefox,
Thunderbird, libreoffice would be good to get fixed some day, too.
Usually, around 95% of packages can be built with bit-identical results.
As detailed in https://www.suse.com/c/?p=42014 I also compared
official builds with local ones and already found several bugs with
it, so reproducibility is not just theoretical.
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
More information about the rb-general