Dev1 Galaxy Forum / Interest in reproducible builds of Devuan? Devuan is 46% reproducibe!

Re: Interest in reproducible builds of Devuan? Devuan is 46% reproducibe!

dummy@example.com (vortex) — Fri, 21 Jul 2023 06:00:33 +0000

Hi jas,

Thanks for posting. This is interesting work!

Further to golinux's post, there is

https://git.devuan.org/devuan/documenta … nvironment

which claims

The jenkins build pipeline uses git-buildpackage, pbuilder and cowbuilder. This ensures more flexible and reproducible builds in a cleaner environment than other build approaches.

Given the results of your work, likely there is something in the jenkins build pipeline that is losing reproducibility (or the claim is mistaken/out-of-date)?

What would really help are if Devuan published *.buildinfo files for their builds, has this been considered?

Best approach for this request would be to raise issue on Devuan gitea instance. Maybe initially on

https://git.devuan.org/devuan/documentation

to question/correct the statement quoted above?

Re: Interest in reproducible builds of Devuan? Devuan is 46% reproducibe!

dummy@example.com (golinux) — Thu, 20 Jul 2023 16:27:13 +0000

@jas . . . Packaging is way above my paygrade but perhaps this would help sort your confusion about how Devuan packages are built?

https://git.devuan.org/devuan/documenta … aintainers
https://jenkins.devuan.dev/job/devuan-package-builder/

Re: Interest in reproducible builds of Devuan? Devuan is 46% reproducibe!

dummy@example.com (Morty) — Thu, 20 Jul 2023 15:59:25 +0000

I would love a fully reproducible Devuan. Some people dont consider installing devuan because dont know or trust the devuan packagers/devs. Being fully reproducible would help with this issue.

Interest in reproducible builds of Devuan? Devuan is 46% reproducibe!

dummy@example.com (jas) — Sun, 30 Apr 2023 16:04:55 +0000

I have a project that rebuilds all Devuan packages (i.e., those added/modified compared to Debian), and generate statistics here:

https://gitlab.com/debdistutils/reproduce/devuan

Is there interest in reproducible builds of the Devuan-specific packages like this? Help and feedback is most welcome! There are many things that can be improved, but at least it manages to build some packages reproducible which is a first step.

What would really help are if Devuan published *.buildinfo files for their builds, has this been considered?

/SImon