Reproducing packages in the archive

Johannes Schauer josch at debian.org
Wed Feb 1 12:38:02 UTC 2017


Hi,

Quoting Holger Levsen (2017-02-01 11:56:03)
> On Tue, Jan 31, 2017 at 07:35:35PM +0000, Daniel Shahaf wrote:
> > That is: if I run dpkg-buildpackage and post the .deb and .buildinfo
> > somewhere, do we have a script that takes the .buildinfo as input and
> > reproduces the .deb?
>  
> AIUI sbuild can do this.

sbuild in Stretch will have all the facilities that allow you to reproduce a
binary package from a .buildinfo file. You can specify custom repositories from
snapshot.d.n to get the right package versions, --add-depends to select the
exact package selection you need and even --binNMU-changelog to recreate the
exact same binNMU changelog entry for binNMU uploads.

What will be missing in Stretch will be a script that generates the right
command line for sbuild using a .buildinfo file.

Code exists but it is still unclear which direction the code will go. Whether
it will be a standalone tool driving sbuild and pbuilder or whether each will
incorporate the code such that .buildinfo files can be given directly to them.
Discussion about that can be found in Debian bug #774415.

Thanks!

cheers, josch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20170201/d17c87bd/attachment.sig>


More information about the Reproducible-builds mailing list