Debian and reproducible-builds.org incoherence?

[David A. Wheeler]

> On Apr 12, 2023, at 11:46 AM, Chris Lamb <chris at reproducible-builds.org> wrote:
> 
>> https://tracker.debian.org/pkg/fbreader indicates reproducibility
>> OK.
> 
> This is, unfortunately, a little misleading. To clarify, this
> statement only means that *tests.reproducible-builds.org* believes
> that the fbreader source package is reproducible — it doesn't promise
> that the binary packages on the official Debian mirrors are
> bit-for-bit identical with anything.
> 
> This is, of course, not ideal. Still, this is what folks on this list
> are getting at when they say they "want to make Debian 'really'
> reproducible".

Any progress on that front? What can be done to change things so that the
packages people normally *use* are reproducible?

I think it'd be better to have package build process insert tools like
strip-nondeterminism, and then have *actual* packages reproducible, than
be strongly confident in the packages no one uses.

--- David A. Wheeler