Debian must ship reproducible packages
Summary
Discussion on the requirement for Debian to distribute reproducible packages to ensure build consistency and security.
Similar Articles
What's missing to have reproducible builds on PyPI
The article explores missing elements in Python packaging specifications for achieving reproducible builds, which would improve supply chain security by enabling independent verification of distributions.
Reproducible Builds in May 2026
The May 2026 Reproducible Builds report highlights a major Debian policy change requiring all packages to be reproducible for inclusion in the 'forky' release, along with news about a 2026 summit in Gothenburg, a new rebuilderd version, and other project updates.
Arch Linux now has a bit-for-bit reproducible Docker image
Arch Linux released a bit-for-bit reproducible Docker image under a new "repro" tag, requiring users to regenerate pacman keys before package management.
Debian and the sirens
A former Debian developer reflects on Debian's decision to allow LLM use in development, expressing concerns that it may lead to increased complexity and dependency on proprietary software.
Bootstrappable Builds: How and Why
The article covers a presentation at the FOSSY conference explaining bootstrappable builds, which enable building entire systems from minimal trusted sources to enhance software security and reproducibility.