Debian must ship reproducible packages
Summary
Discussion on the requirement for Debian to distribute reproducible packages to ensure build consistency and security.
Similar Articles
Reproducible Builds in May 2026
The May 2026 Reproducible Builds report highlights a major Debian policy change requiring all packages to be reproducible for inclusion in the 'forky' release, along with news about a 2026 summit in Gothenburg, a new rebuilderd version, and other project updates.
Arch Linux now has a bit-for-bit reproducible Docker image
Arch Linux released a bit-for-bit reproducible Docker image under a new "repro" tag, requiring users to regenerate pacman keys before package management.
Stamp It! All Programs Must Report Their Version
The article advocates for mandatory version stamping in all software programs to improve incident response, using the i3 window manager's version reporting system as a case study, and covers implementation details with Go and NixOS.
Debian SE Linux and PinTheft
The article reports on the PinTheft Linux exploit and tests its behavior on Debian with SELinux, finding that a strict SELinux configuration blocks the exploit.
Making Debian or Fedora persistent live images
A technical blog post explaining how to create persistent live USB images for Debian, Fedora, and Ubuntu by injecting ext4 partitions and using OverlayFS, noting the lack of standardization between distributions. It covers kernel parameters, partition labels, and a hacky byte-swap trick to modify ISO boot parameters without rebuilding the image.