Trixie 13.3 images should be reproducible again

[Roland Clobus]

Hello lists,

On 22/11/2025 14:55, Roland Clobus wrote:
> On 19/11/2025 22:50, Simon Josefsson wrote on debian-live:
>> Any pointers to scripts that reproduce them?  If not, did anyone analyze
>> what the difference is?
> 
> I just did an analysis of the standard image.
> 
> The differences are:
> * /boot/grub/splash.png, /isolinux/splash.png -> The official image 
> contains the text 'Debian 13', whereas the locally built image contains 
> 'Debian'. I'll need to adjust the rebuilder script to use the same boot 
> image as in the official image. I'll probably manage to do so before the 
> 13.3 point release.
> * /firmware/dep11/firmware-intel-sound.patterns, firmware/dep11/ 
> firmware-sof-signed.patterns -> Small differences in the pattern files. 
> Most probably something of the kernel from the host leaks into the 
> generated images. More investigation required.
> * Due to the slightly different sizes of the files above, the output of 
> 'isoinfo' shows a lot of differences, but they will become identical 
> after the 4 files above have been made reproducible.

The issues have been handled [1]. The next point release (planned for 
2026-01-10) should be reproducible again.
Many thanks to josch, who helped me to set up a build environment based 
on unshare [2]. That means that the live images can be built now without 
requiring root (or sudo) and without requiring 'dev' for the directory 
in which the image will be built.

With kind regards,
Roland Clobus

[1] https://salsa.debian.org/live-team/live-build/-/merge_requests/450
[2] https://salsa.debian.org/live-team/live-build/-/merge_requests/420

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20251130/3c0e6e12/attachment.sig>