Mapping the Big Picture - Mapping projects infra

  • Projects practicing reproducibility
    • Arch Linux
    • Distrust Toolchain
    • Buildroot
    • Coreboot
    • GNU Guix
    • NixOS
    • Warpforge
    • ElectroBSD
    • OpenWRT
    • Fedora Linux
    • openSUSE
    • F-Droid
    • Java jar Archives
    • Debian
    • TOR
    • TAILS
    • so toolchain
    • Apache Maven
    • Qubes OS
    • Scala+sbt
  • What projects/platforms/libraries do we want/need to be reproducible?
    • Maven (artifacts without sources)
    • NPM
    • Rust crates
    • PyPI
    • Docker Directory Timestamps
    • ElectroBSD, FreeBSD Ports/Packages
    • Binutils
    • Qt
    • Python sphinx
    • ar (static .a libraries)
    • Gradle
    • DPkg database
    • PureOS/Mobian
    • R-B in Ubuntu
    • Compilers for embedded systems
      • Aurix (Infineon)
      • ARM/KEIL
      • GCC (its own build and the binaries it builds)
      • Python 3.9
      • Filesystems
      • Clojure
        • Build Tools
        • Lein
      • Flatpack
      • Docker Images
  • Missing RB infrastructure we need to create
    • The N commandments of reproducible builds
    • Alpine pkg archive
    • Recordin Diversity
    • Debian debuginfod.debian.net should also provide sources (stripped paths seems to be part of the problem)
    • Rebuild infra for custom projects
    • Standard for build location like we have for SOURCE_DATE_EPOCH for time
    • Debian Snapshot server
    • PyPI Repository
    • Firmware hashes
    • Cross target reproducibility
    • Guix QA testing reproducibility
    • Shared tooling for reporting
    • Sharing + reporting on build results
    • Comparing reproducibility stats Guix packages with other projects
    • Crowd sourced reproducibility status information
    • Diffoscope but I can install it (fewer deps)
    • Merkle tree of upstream source releases
    • Reproducible vs PGO
    • Build infrastructure for ElectroBSD
    • Standard BUILDINFO file format
    • GCC 4.7.4 bootstrapped on more arches for bootstrappable builds

https://salsa.debian.org/reproducible-builds/reproducible-website/-/merge_requests/105

Follow us on Twitter @ReproBuilds, Mastodon @reproducible_builds@fosstodon.org & Reddit and please consider making a donation. • Content licensed under CC BY-SA 4.0, style licensed under MIT. Templates and styles based on the Tor Styleguide. Logos and trademarks belong to their respective owners. • Patches for this website welcome via our Git repository (instructions) or via our mailing list. • Full contact info