3930
Comment: add a disclaimer
|
3982
reword
|
Deletions are marked like this. | Additions are marked like this. |
Line 17: | Line 17: |
Reproducible builds in Debian are still at the experimental stage. While we are making very good progress, it is a ''stretch'' to say that Debian is reproducible or even partially reproducible at this time. | Reproducible builds in Debian are still at the experimental stage. While we are making very good progress, it is a ''stretch'' to say that Debian is reproducible or even partially reproducible until the needed changes are integrated in the main distribution. |
It should be possible to reproduce, byte for byte, every build of every package in Debian.
Status
We have a tentative specification for a new control file .buildinfo that records the build environment.
We have an experimental toolchain that creates .buildinfo files and allows to create a good amount of source packages to be reproducible.
We have a addendum to sbuild that can rebuild a package after recreating the recorded enviroment.
We have a continuous integration platform that build and immediately rebuild packages. This can detect problems related to timestamps, file ordering, CPU usage, and (pseudo-)randomness.
We are examining packages and sorting out common problems.
Many patches have already submitted. Most of them are awaiting for Jessie to be released.
Reproducible builds in Debian are still at the experimental stage. While we are making very good progress, it is a stretch to say that Debian is reproducible or even partially reproducible until the needed changes are integrated in the main distribution.
Next / coming soon
- we need buildds to publish .buildinfo files
- we need dak to drop binary .debs
- and then, "magically", Debian will start to become reproducible... package by package by upload by upload...
Drivers
- Lunar
- h01ger