[Reproducible-builds] anything a packager can do for their packages?

Daniel Kahn Gillmor dkg at fifthhorseman.net
Wed Sep 3 15:53:58 UTC 2014


On 09/03/2014 11:28 AM, Andrew Ayer wrote:
> On Mon, 01 Sep 2014 23:02:43 -0400
> Daniel Kahn Gillmor <dkg at fifthhorseman.net> wrote:
> 
>> as an interested packager, but not one of the awesome people working
>> actively on improving debian toolchains, i wanted to know if there was
>> anything specific i could do as a packager now to ensure that my
>> package can be reproducibly built.
> 
> I think the most effective thing a packager could do right now is to
> make sure that their package is being built using modern debhelper
> style (i.e. a single call to dh in debian/rules). Once our various dh_
> commands are written and integrated into the standard debhelper
> sequence, I think they will make many packages build reproducibly
> without the maintainer needing to do anything.

Thanks, Andrew, this is a good point.  I've added it to the wiki page.

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20140903/a58ceecc/attachment.sig>


More information about the Reproducible-builds mailing list