Including build metadata in packages

Holger Levsen holger at layer-acht.org
Sun Feb 20 01:49:42 GMT 2022


On Sun, Feb 13, 2022 at 02:13:10PM -0800, Vagrant Cascadian wrote:
> Curious to hear your thoughts!

I'd just like to comment with three rather general comments:

a.) thanks for bringing this up here, Vagrant.
b.) solving this seems to be a requirement for getting the build-essential
    package set reproducible in Debian.(!)
c.) solving this could include solving the distributing Debian .buildinfo files
    problem(s) - some of which are collected here: https://wiki.debian.org/ReproducibleBuilds#Big_outstanding_issues

IOW, this could become a *major* step towards reproducible Debian!


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

The devel is in the details.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20220220/7adc97a6/attachment.sig>


More information about the Reproducible-builds mailing list