Archlinux base packages are now reproducible (fosstodon.org)

submitted 7 months ago by twiked@sh.itjust.works to c/archlinux@lemmy.ml

2 comments fedilink hide all child comments

in last week's email to the reproducible-builds email list1 about reproducible Arch Linux I mentioned there's only one unreproducible package left in docker.io/library/archlinux.

Due to amazing work by dvzrv and Foxboron this package is now also reproducible!

INFO arch_repro_status > All packages are reproducible!

INFO arch_repro_status > Your system is 100.00% reproducible.

To try for yourself use:

podman run --rm -t archlinux sh -c 'pacman -Suy arch-repro-status 
--noconfirm && arch-repro-status'

top 2 comments

sorted by: hot top controversial new old

[-] frozen@lemmy.frozeninferno.xyz 15 points 7 months ago

This is dope, but I've been curious, what benefits are there to this? I know reproducibility can improve security by proving that the distro is delivering the packages they say they are, but is there anything else?

[-] Rustmilian@lemmy.world 20 points 7 months ago

It also helps a bit with debugging because it reduces discrepancies by ensuring that the output of a build is consistently the same when compiled from the same source code and tools, regardless of the machine or environment.

this post was submitted on 20 Mar 2024

66 points (100.0% liked)

Arch Linux

7733 readers

1 users here now

The beloved lightweight distro

founded 4 years ago

MODERATORS

k_o_t@lemmy.ml