On 2020-08-10, Garlic Gambit wrote: > Are the Debian install and live iso images deterministically reproducible?
Unfortunately no. There has been some work in that direction, and it would be a good thing to improve further! Tails (which is based on Debian packages, largely) has demonstrated this sort of thing is possible with their .iso images. There's also the disconnect of reproducibly building an .iso out of packages that themselves aren't reproducible, though I still see value in it; the work can be done in parallel with fixing the individual packages. It can also clarify a set of packages to prioritize fixing; ones that are used in an installer or live image form interesting package sets, though at the moment some key packages aren't reproducible (e.g. linux's documentation packages). live well, vagrant
signature.asc
Description: PGP signature
_______________________________________________ Reproducible-builds mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/reproducible-builds
