partial snapshot mirror amd64/bullseye/bookworm

Vagrant Cascadian vagrant at
Mon Mar 1 00:08:35 GMT 2021

On 2021-02-27, Holger Levsen wrote:
> is an awesome service for the wider free software community
> and especially for those working on reproducible builds. Sadly accessing *many*
> packages from it is limited and troublesome (see below for bug numbers), thus
> we (mostly Frédéric Pierret and myself) came up with the idea of setting up a
> partial mirror, covering only the years 2017 until now and arch:amd64 and arch:all
> only as well. (for a start, maybe we need 2015+2016 too and maybe we can afford
> to also host arm64 or some other architecture...)
> #977653 Please document rate limits on
> #960304 Snapshot repo repeatedly cutting off connection, returning partial content
> #969906 error 500 internal server error after some requests via Python

I'd like to point out that these issues are basically the last known
major blockers to performing verification builds against packages
actually in the Debian archive (as opposed to the builds done on, which performs two builds against the
current state of archive).

Implementing a workaround for the limitations of
could move Debian beyond Reproducible Builds in *theory* and into
Reproducible Builds in *practice*!

Happy to help with this, hope to see it move forward!

To further limit the scope, one might also be able to take all the
currently relevent .buildinfo files for bullseye and build a list of the
package versions needed from that (rather than assuming 2017 as a good
baseline). Might be a little trickier to implement, of course...

live well,
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <>

More information about the Reproducible-builds mailing list