Irregular status update about reproducible live-build ISO images

[Vagrant Cascadian]

On 2023-07-04, David A. Wheeler wrote:
>> On Jul 2, 2023, at 11:37 AM, Roland Clobus <rclobus at rclobus.nl> wrote:
>> here is the 18th update of the status for reproducible live-build ISO images [1].
>> 
>> Single line summary: Live images are looking good, and the number of (passed) automated tests is growing
>> 
>> Reproducible status:
>> * All major desktops build reproducibly with bullseye, bookworm, trixie and sid
>
> Spectacular work!
>
> How close are things to having the *released* versions of the
> Debian live images & (main) packages reproducible?
> I can't tell if this means "it's possible to create reproducible builds" or
> "the packages people are using are the reproducible builds".
> Sorry if this is obvious to everyone else.

My understanding is the live images themselves are bit-for-bit
reproducible, with the inputs being the actual .deb packages from the
debian archive. The individual .deb packages might not neccesarily be
independently reproducible when built from source.

This is similar to what Tails has historically achieved and continues to
be used as part of the release process for Tails, if I understand
correctly...

Showing how reproducible various package sets looks fairly good for most
desktops and tails (which is a live image that is mostly gnome based):

  https://tests.reproducible-builds.org/debian/trixie/amd64/index_pkg_sets.html

Looks to be about 92% to 95% reproducible at the moment...


Would be interesting to get various live image package sets up there
too!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20230704/ca5cab24/attachment.sig>