Commit bc4dd1d9 authored by Holger Levsen's avatar Holger Levsen
Browse files

reproducible Debian rebuilder 'thing': further milestones

parent 08b0c032
Loading
Loading
Loading
Loading
+5 −1
Original line number Diff line number Diff line
@@ -64,10 +64,14 @@ See link:https://jenkins.debian.net/userContent/about.html["about jenkins.debian
=== Debian rebuilder 'thing'

* prototype only dealing with bullseye and amd64 (and arch all packages)
** first step: download a .buildinfo file and sbuild it
*** second step: put result in db
*** third step: have some scheduler job and a rebuilder job picking up tasks
*** fourth step: have a smarter scheduler
*** fifth step: export results as json and html
** the goal is to create json export to integrate in tracker.d.o and/or packages.d.o
** another goal (implied in the one above) is create Debian's POV on the 'practical' reproducibility status of the packages distributed via ftp.d.o. - so far tests.r-b.o/debian/ only shows the 'theoretical' reproducibility of Debian packages.
** we'll leave out the problem of 'trust' here quite entirely. that's why it's called a Debian rebuilder 'thing', to explore technical feasibility, ductaping our way ahead, keeping our motto 'to allow anyone to independently verify...' in mind.
** patch debrebuild? or rather, ship local copy, rb-debrebuild
* run jenkins job on pb7 (=buildinfos.d.n), which triggers builds on osuosl173 and stores the results on pb7
** keep data in postgresql|sqlite on pb7
** export data as .json via https