Bug#1147469: reproducible-builds: must not set 'nocheck' on only one build

[Holger Levsen]

On Mon, Sep 14, 2026 at 03:23:26AM +0200, Thorsten Glaser wrote:
> >just to be clear, are you talking about https://reproduce.debian.net/
> >or https://tests.reproducible-builds.org/debian/ ?
> … uhm. The one that tests for Debian… i.e. that shows up on DDPO.
> That would be the latter given the link from DDPO.

both are relevant for Debian, please read the text on https://reproduce.debian.net/
quoted here for your convinience:

reproduce.debian.net
Attempts to bit-for-bit identically rebuild each Debian binary package found in the distribution archive, using the .buildinfo file produced when the buildd originally built the package.

For each distributed package, rebuilderd calls debrebuild that calls debootsnap, mmdebstrap and finally sbuild to build that package within a user namespace.

    buildinfos.debian.net provides .buildinfo files for each distributed binary package. (see #763822, #929397)
    debootsnap uses snapshot.debian.org and metasnap.debian.net to retrieve the exact same version of each build dependency package (which was used for the "original build"). (see #1096129)
    The goal is to replicate the same build process that is used by Debian during package publication -- not to seek out additional sources of variance.
    Variance testing, used to find factors that can prevent packages from rebuilding reproducibly, will continue at https://tests.reproducible-builds.org/debian/reproducible.html.
    If you are wondering why we are doing this at all, then hopefully the Reproducible Builds website will explain why this is useful.
    reproduce.debian.net is currently testing all release architectures except s390x.
    Better navigation to experimental, unstable, forky, trixie, trixie-security, trixie-updates, trixie-proposed-updates, trixie-backports would be nice.


will reply to the rest of your mail hopefully later this afternoon,
got a busy morning now...


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

We can send billionaires to space but not kids to fully funded public schools.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/qa-jenkins-dev/attachments/20260914/1f8ba3a0/attachment-0001.sig>