Buildinfo in the Debian archive, updates

Ximin Luo infinity0 at
Mon Nov 14 23:28:00 UTC 2016

Chris Lamb:
> Ximin Luo wrote:
>> This minimal solution still depends on 3rd-party services being available to
>> host the files. A much better solution is for the FTP archive to *also* store
>> the signed buildinfo files, somewhere safe that can be recovered when needed.
> Totally ACK. Just to be clear, I was never proposing buildinfo.d.n be the
> canonical source or location of .buildinfo files. Apologies if I gave that
> impression. :)

Oh, not at all, what I said was meant to be a general point, and more along the lines of "Debian archive should do this as well". I understand b.d.n is not making special claims. :)


GPG: ed25519/56034877E1F87C35
GPG: rsa4096/1318EFAC5FBBDBCE

More information about the Reproducible-builds mailing list