[rb-general] Debian Buster will only be 54% reproducible (while we could be at >90%)

[Dimitri John Ledkov]

On Tue, 5 Mar 2019 at 13:34, Holger Levsen <holger at layer-acht.org> wrote:
>
> hi,
>
> disclaimer: this has not yet been verified by anyone other than myself,
> so I could very well be wrong. Reproducible builds are about enabling
> anyone to independently verify that... ;p
>
>
> == Reproducibility in theory ==
>
> According to https://tests.reproducible-builds.org/debian/buster/index_suite_amd64_stats.html
> we have 26476 source packages (92.8%) which can be built reproducibly in
> buster/amd64, out of 28523 source packages in total.
> (These 28523 source packages build 57448 binary packages.)
>
> But these tests are done without looking at the actual .deb files distributed
> from ftp.debian.org (and we always knew that and pointed it out:
> "93% reproducible _in our current test framework_".)
>

So I guess after we release buster, we should do a mass-source-nmu
no-change uploads to make the .deb reproducible as shipped in the
archive.

Is this thus then an effectively a maas bug-file request to
sourcefully rebuild packages?

-- 
Regards,

Dimitri.