[Trisquel-devel] Reproducible build of Trisquel 11? Comparison with Ubuntu 22.04?

[Denis 'GNUtoo' Carikli]

Hi,

On Thu, 15 Dec 2022 09:40:28 -0600
Luis Guzman <ark at switnet.org> wrote:
> 
> > Together with a
> > reproducible build status page, a diff like that would be useful
> > for me.
> 
> You can check current status build at jenkins.trisquel.org
Is there a plan to have Trisquel added to the list of distros which
are involved reproducible builds[1]?

I'm also working on documenting the FSDG compliant distributions, and
if Trisquel is added to that list, I could then mention that it does
support reproducible builds[2].

The Trisquel rootfs created with debuerreotype also look reproducible,
though I've only tested under Parabola by by creating Trisquel etiona
rootfs so far[3][4].

PS: For the record, supporting reproducible builds doesn't mean that
    things are perfect. As far as I know it only means that the
    distribution tracks reproducibility, and that non-reproducible
    packages are bugs, and probably that there is some effort to keep
    the distribution mostly reproducible or to make it reproducible.

References:
-----------
[1]https://reproducible-builds.org/who/projects/
[2]https://libreplanet.org/wiki/Group:Software/FSDG_distributions/Security
[3]I've used Etiona at first as it supports both i686 and x86_64 and
   that I also want to test bootstrapping Trisquel for different
   architectures at some point, and so that's easier to do with etiona.
[4]I'm currently experimenting with the creation of docker images to
   understand how to best provide FSDG compliant docker images. I'm
   interested in it because docker is widely used, and so if we have
   docker images that we can use, we'd be able to cover some use cases
   that weren't covered before by FSDG distros.

Denis.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://listas.trisquel.info/pipermail/trisquel-devel/attachments/20230301/4ca8ac62/attachment.sig>