How could we accelerate *deployment* of verified reproducible builds?

kpcyrd kpcyrd at rxv.cc
Sat Jan 30 13:16:18 UTC 2021


On Sat, Jan 30, 2021 at 12:22:55PM +0000, Holger Levsen wrote:
> On Fri, Jan 29, 2021 at 05:39:01PM -0500, David A. Wheeler wrote:
> > What would be especially helpful for accelerating deployment of verified reproducible builds in a few key places? E.g., what tools, infrastructure, people paid to do XYZ?
>  
> first, having verified reproducible builds! then, we can deploy them.

We already do, https://reproducible.archlinux.org/ verified 85.9% of the
actual packages we distribute to users and there are smaller,
independent instances too[1], or are we missing something here?

[1]: https://wiki.archlinux.org/index.php/Package_rebuilders


More information about the rb-general mailing list