News for hackers. Stuff that matters.

A comment on Debian for Mobile. Parent comment

Re:Debian for Mobile by danieldk on Tuesday July 27, 2021 @06:41AM (#27970851)
Debian packaging has a nice feature too in that you can check the source used to build it, and any of the packages will be reproducible. So if you don't trust any of the Builds on the Mobian repository, you can actually check them all yourself.

There are still quite some packages that are not reproducible:

https://tests.reproducible-builds.org/debian/reproducible.ht...

If you look at the list, including some core packages such as gcc and Perl.

[ Parent | on HN ]
Re:Debian for Mobile by goodpoint on Tuesday July 27, 2021 @07:38AM (#27971217)
All packages in Debian are peer reviewed by Debian Developers and the package/build/upload process is transparent.

Reproducible builds are an additional safety net and you can easily check what differs between builds.

[ Parent | on HN ]
Re:Debian for Mobile by danieldk on Tuesday July 27, 2021 @09:31AM (#27972183)
You are setting up a strawman [1]. I reacted to the grandparent who stated:

Debian packaging has a nice feature too in that you can check the source used to build it, and any of the packages will be reproducible.

Which is demonstrably false, as the link in my comment shows.

[1] I never said that packages are not peer-reviewed.

[ Parent | on HN ]