Bug#926242: jenkins.debian.org: Please test reproducibility status of Debian Installer images

[Chris Lamb]

Package: jenkins.debian.org
Severity: wishlist
X-Debbugs-CC: debian-boot at lists.debian.org

Hi,

(CC'ing the Installer Team as they likely have input.)

In a number of commits and bugs (#920631, #920676, etc. etc.) I've
managed to make the Debian Installer images reproducible, at least on
the architectures and environment variations I have easy access to.

However, it would be great if we had some continuous testing of this,
with the usual bells-and-whistles of running/publishing diffoscope
reports, etc.

Due to the d-i testing release cycle it would be great to find any
regressions so they can get merged in time for whatever the next
alpha/beta is particularly as we (completely correctly!) get more
conservative with any changes respect to the upcoming release of
"buster."

Whilst I think of it, there is also the separate issue of ensuring we
generate a .buildinfo (or .buildinfo-like) build attestation document so
that others can reproduce the build at a later date and further ensure
this is published or otherwise available somewhere for official
releases… but I was hoping it would become more obvious what we needed
(without guessing) once we have testing.

Mattia, is this something you could proof-of-concept…?


Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org 🍥 chris-lamb.co.uk
       `-