It should be possible to reproduce, byte for byte, every build of every package in Debian.
Status
We have a tentative specification for a new control file .buildinfo that records the build environment.
We have an experimental toolchain that creates .buildinfo files and allows to create a good amount of source packages to be reproducible.
We have a addendum to sbuild that can rebuild a package after recreating the recorded enviroment.
We have a continuous integration platform that build and immediately rebuild packages. This can detect problems related to timestamps, file ordering, CPU usage, and (pseudo-)randomness.
We are examining packages and sorting out common problems.
Many patches have already submitted. Most of them are awaiting for Jessie to be released.
Drivers
- Lunar
- h01ger