Debian and reproducible-builds.org incoherence?
David A. Wheeler
dwheeler at dwheeler.com
Thu Apr 13 15:07:31 UTC 2023
> On Apr 12, 2023, at 11:46 AM, Chris Lamb <chris at reproducible-builds.org> wrote:
>> https://tracker.debian.org/pkg/fbreader indicates reproducibility
> This is, unfortunately, a little misleading. To clarify, this
> statement only means that *tests.reproducible-builds.org* believes
> that the fbreader source package is reproducible — it doesn't promise
> that the binary packages on the official Debian mirrors are
> bit-for-bit identical with anything.
> This is, of course, not ideal. Still, this is what folks on this list
> are getting at when they say they "want to make Debian 'really'
Any progress on that front? What can be done to change things so that the
packages people normally *use* are reproducible?
I think it'd be better to have package build process insert tools like
strip-nondeterminism, and then have *actual* packages reproducible, than
be strongly confident in the packages no one uses.
--- David A. Wheeler
More information about the rb-general