Reproducible Builds in Fedora
summary
Fedora reports reproducible builds for about 90% of packages after a year of fixes and a post‑processing tool called adeterminism that strips timestamps and metadata from archives and Python .pyc files, plus per‑package fixes and diff output from diffoscope. A continuous service rebuilderd is deployed to rebuild packages and surface mismatches, a staged policy aims for 99% reproducibility in Fedora 43, and sample runs show ~85% fully identical binaries plus ~6% differing only by source metadata.
AI-written summary · about
chapters (7)
- 0:00Reproducible builds intro
- 3:09Why builds matter
- 7:04Fixing build issues
- 12:29Recent improvements in adeterminism
- 17:01RebuilderD and Fedora
- 22:53Wider reproducibility uses
- 25:46Future plans & Q&A
related talks
47mReproducible builds
56mReproducible Builds, the first ten years
42mBinary Reproducible Builds with Docker
23mReproducible Environments for Reproducible Results
18mReproducible Builds with Bazel
42mSecurity and Productivity Pick Two with Reproducible Builds
28mBuilding reproducible Python applications for secured environments
21mReproducible Builds and sstate over CDN - Update on AGL's Infra and CIAT