On Wed, Dec 14, 2022 at 11:00:49PM +, jerem...@pdp10.guru wrote:
> But for the people who do choose to trust binaries, reproducible builds
> is the only option you have to check if the source and the binaries
> correspond.
Yes, and in addition reproducible builds are also a way for people
Ah, typical: while trying to figure out where functionality like this
could fit into Debian, I learned that it already exists there.
The 'dpkg-depcheck' and 'dpkg-genbuilddeps' utilities (both included
in the 'devscripts' package) provide this kind of functionality in
Debian.
On Wed, 14 Dec 2022
