Re: Arch Linux minimal container userland 100% reproducible - now what?

2024-03-28 Thread John Gilmore
John Gilmore wrote: > It seems to me that the next step in making the Arch release ISOs > reproducible is to have the Arch release engineering team create a > source-code release ISO that matches each binary release ISO. Then you > (or anyone) could test the reproducibility of the release by

Re: Verifying reproducibility of Java builds from Maven Central

2024-03-28 Thread Arnout Engelen
On Thu, Mar 28, 2024, at 16:41, Railean, Alexander via rb-general wrote: > I am trying to understand how someone can independently verify the > reproducibility of Java projects on Maven Central. Having explored the > repositories on Maven Central, I could not find examples where the >

Verifying reproducibility of Java builds from Maven Central

2024-03-28 Thread Railean, Alexander via rb-general
Hi everybody, I am trying to understand how someone can independently verify the reproducibility of Java projects on Maven Central. Having explored the repositories on Maven Central, I could not find examples where the "buildinfo" file was present. The archives of this mailing list

Re: Arch Linux minimal container userland 100% reproducible - now what?

2024-03-28 Thread kpcyrd
On 3/26/24 5:03 PM, Michael Schierl via rb-general wrote: So we can expect many year/month pairs embedded in manpages that got unnoticed since mostly the build happens in the same month? Or have they been manually vetted? The results on reproducible.archlinux.org don't aim to guarantee the