Make the whole qubes-builder deterministic

[marmarek]

Reported by joanna on 11 Apr 2014 09:09 UTC
... to allow easy, independent comparison of rpms/ISOs build from the same sources on different machines and by different people.

In the future: allow rpm/iso signatures by ""M out of N" signers.

Migrated-From: https://wiki.qubes-os.org/ticket/816

[marmarek]

Comment by joanna on 11 Apr 2014 09:11 UTC
We need deterministic gcc, rpmbuld, and probably many other tools.

A great task for somebody from the community! :)

[marmarek]

Comment by marmarek on 17 Apr 2014 00:05 UTC
Some thoughts on similar idea from Debian project:
https://wiki.debian.org/ReproducibleBuilds

[marmarek]

Modified by joanna on 20 Apr 2014 17:12 UTC

[marmarek]

Comment by axon on 11 Aug 2014 09:05 UTC
Historical reference:
https://groups.google.com/d/topic/qubes-devel/D2Ca4Ef-dh4/discussion

[marmarek]

Useful link for Fedora work on reproducible builds:
https://github.com/kholia/ReproducibleBuilds
http://securityblog.redhat.com/2013/09/18/reproducible-builds-for-fedora/