[rb-general] Reproducible system images

Holger Levsen holger at layer-acht.org
Mon Jan 6 14:00:14 UTC 2020

hi & happy new year!

just commenting on three aspects here...

On Wed, Jan 01, 2020 at 11:57:05PM -0000, Chris Lamb wrote:
> [...] Whilst this was based on some work I did on debootstrap in 2015
> [1] speaking in early 2020 (happy New Year all, by the way) I wonder
> how much of this can or should be moved into upstream debootstrap
> itself.

as much as possible?

(and then I've started to wonder whether Debian can completly abandon
debootstrap and switch to mmdebstrap, which already produces bit by bit
identical results if SOURCE_DATE_EPOCH is set.)

> I mention this because in the time since I wrote the above, with the
> rest of the Tails team I spent quite a bit of effort ensuring their
> ISO images are reproducible and there are quite a few hacks that we do
> there that should be abstracted or otherwise upstreamed/centralised
> *somewhere*, although in many cases I'm not sure quite where they
> would fit.

d-i, *strap and debian-cd mostly?


       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20200106/791f1daf/attachment.sig>

More information about the rb-general mailing list