this post was submitted on 20 Mar 2024
66 points (100.0% liked)

Arch Linux

7733 readers
3 users here now

The beloved lightweight distro

founded 4 years ago
MODERATORS
[email protected]
66
Archlinux base packages are now reproducible (fosstodon.org)
submitted 7 months ago by [email protected] to c/[email protected]
2 comments fedilink hide all child comments
 

in last week's email to the reproducible-builds email list1 about reproducible Arch Linux I mentioned there's only one unreproducible package left in docker.io/library/archlinux.

Due to amazing work by dvzrv and Foxboron this package is now also reproducible!

INFO arch_repro_status > All packages are reproducible!

INFO arch_repro_status > Your system is 100.00% reproducible.

To try for yourself use:

podman run --rm -t archlinux sh -c 'pacman -Suy arch-repro-status 
--noconfirm && arch-repro-status'
top 2 comments
sorted by: hot top controversial new old
[โ€“] [email protected] 15 points 7 months ago (1 children)

This is dope, but I've been curious, what benefits are there to this? I know reproducibility can improve security by proving that the distro is delivering the packages they say they are, but is there anything else?

[โ€“] [email protected] 20 points 7 months ago

It also helps a bit with debugging because it reduces discrepancies by ensuring that the output of a build is consistently the same when compiled from the same source code and tools, regardless of the machine or environment.