On 10/08/2022 19.47, cagsm wrote:
i think even (open)suse has some reproducible builds project if i am not mistaken.
Yes, we have https://en.opensuse.org/openSUSE:Reproducible_Builds with tools and I keep continuous rebuild tests running and publish monthly status updates on this ML. reproducible builds help to establish trust in that binaries were really made from a given source. However, for a distribution that only ships sources to users, you don't need reproducible-builds, because there are no binaries to trust. NB: A related topic is bootstrappable builds http://bootstrappable.org/ You might want to look into stage0 and GNU Mes there. Ciao Bernhard M. -- openSUSE Developer and Sysadmin SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nürnberg Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman (HRB 36809, AG Nürnberg)