Verification Builds and Snapshots For Debian

[Lucas Nussbaum]

Hi,

On 19/09/23 at 13:52 -0700, Vagrant Cascadian wrote:
> * Looking forward and backwards at snapshots
> 
> I do think that a more complete snapshot approach is probably better
> than package-specific snapshots, and it might be worth doing
> forward-looking snapshots of ftp.debian.org (and security.debian.org and
> incoming.debian.org), in addition to trying to fill out all the missing
> past snapshots to be able to attempt verification builds of older
> packages, such as all of bookworm.
> 
> Snapshotting the archive(s) multiple times per day, today, tomorrow, and
> going forward will at least enable doing verification rebuilds of
> packages starting from this point, with less immediate overhead than
> trying to replicate the entire functionality or more complete history of
> snapshot.debian.org.
> 
> I wonder if having multiple snapshot.debian.org implementations might
> actually be a desireable thing, as it is so essential to the ability to
> do long-term reproducible builds verification builds, and having
> additional independent snapshots could provide redundancy and the
> ability to repair breakages if one of the services fails in some way.

What is the state of efforts regarding alternate snapshot.d.o
implementations?

Has someone explored an implementation backed by S3-compatible storage,
which would easily allow hosting it in a cloud?

Lucas