Skip to content
Commits on Source (2)
......@@ -374,7 +374,7 @@ ensure a stable file order when creating the source archive. Once applied,
</div>
<div class="eight columns">
<p>
Having installation and live systems which can be built reproducibly would also be great. There is an <code>analyze_image</code> bash script that creates sha512 hashes of all files included within an image, access rights, symlinks, partition table, bootloader and more. Doing this with two images that should match and comparing the reports the script creates can help to identify sources of non-determinism in images.
Having installation and live systems which can be built reproducibly would also be great. In Debian, <a href=https://bugs.debian.org/900918">#900918</a> is being used to track the progress of reproducible installation images. There is an <code><a href="https://github.com/adrelanos/Whonix/blob/master/help-steps/analyze_image">analyze_image</a></code> Bash script that creates sha512 hashes of all files included within an image, access rights, symlinks, partition table, bootloader and more. Doing this with two images that should match and comparing the reports the script creates can help to identify sources of non-determinism in images. It does not have iso support yet. The author (Patrick Schleizer) is interested to generalize the script for more generic, Debian use cases
</p>
</div>
</div>
......@@ -388,7 +388,6 @@ ensure a stable file order when creating the source archive. Once applied,
<li><a href="https://wiki.debian.org/ReproducibleBuilds/ReproducibleInstalls">Reproducible installs</a></li>
<li><a href="http://lists.alioth.debian.org/pipermail/reproducible-builds/Week-of-Mon-20131209/000009.html">Announcing Whonix's First Implementation of Verifiable Builds</a></li>
<li><a href="https://www.whonix.org/wiki/Verifiable_Builds">Whonix Verifiable Builds</a></li>
<li><a href="https://github.com/adrelanos/Whonix/blob/master/help-steps/analyze_image">analyze_image bash script</a>: Does not have iso support yet. The author (Patrick Schleizer) is interested to generalize the script for more generic, Debian use cases.</li>
<li><a href="https://tails.boum.org/blueprint/reproducible_builds/">Tails reproducible builds blueprint</a></li>
<li><a href="https://github.com/lamby/debootstrap/commits/pu/source-date-epoch">reproducible debootstrap</a></li>
</ul>
......