16/11/2024 –, A001
For more than ten years the Reproducible Builds project has worked towards reproducible builds of many projects and for ten years now we have build Debian packages twice, with maximal variations applied, to see if they can be build reproducible still.
Since about a month we’ve also been rebuilding trying to exactly match the builds being distributed via ftp.d.o - this talk will describe the setup and the lessons learned so far, and why the results currently are what they are (spoiler: less <30% reproducible) and what we can do to fix that.
Holger Levsen has been a Debian user since almost 30 years and an official Debian member since 2007. In the years since 2001 he has been contributing to Debian in many areas, probably most notably with the DebConf (video) team, piuparts.debian.org and Reproducible Builds, which has become his main focus in 2014. Since then he has set up automated reproducibility testing for Debian, Fedora, Arch Linux, FreeBSD, NetBSD and coreboot.