Rebuild of core packages using the toolchain at 2014-09-19 and pbuilder. This will only detect variations due to timestamps, file ordering, and arbitrary randomness.

Report sent on the reproducible-builds mailing list

Statistics

pass

52

30%

not using dh

94

55%

failing

18

10%

unbuildable

8

5%

total

172

100%

Which core packages?

UDD query to get a list of core packages (172 as of 2014-09-19):

SELECT DISTINCT source
  FROM packages
 WHERE release = 'sid'
   AND section != 'debian-installer'
   AND (   essential = 'yes'
        OR build_essential = 'yes'
        OR priority IN ('required', 'important', 'standard')
       )
 ORDER BY source;

Pass

Not using `dh`

Without dh, it means that dh_fixmtimes is not going to get called, so the timestamps in data.tar will differ.

Using cdbs instead:

Failing

Unbuildable