Are there any efforts underway for apt to do reproducible installs?

I am trying to build bit-by-bit identical OCI images and it feels like I am doing a lot of hacks and workarounds to get things working

and in reality it should be apt that needs to evolve and support reproducible installs.

Running apt in "reproducible mode" could automatically:

1. Switch to snapshots repo according to SOURCE_DATE_EPOCH

2. Disable logging and caching or at least clean after

3. Use SOURCE_DATE_EPOCH on all installed files (either natively or automatically using libfaketime)

4. ???

5. Profit!


Just throwing ideas out there but the current situation when I need half of my Dockerfile to be scripts forcing apt to play nicely is not ideal.

Reply via email to