Explore the state of reproducible builds in Arch Linux in this 45-minute conference talk from Arch Conf 2020. Delve into the importance of reproducible builds for ensuring a strong connection between upstream source code and compiled binary artifacts distributed by Linux distributions. Learn about the progress made in Arch Linux to bring reproducible builds to users and developers. Discover current tooling that allows users to reproduce packages, rebuilder software for package verification, and ongoing challenges in this area. Gain insights into topics such as supply chain security, gaming, pacman, Arch Arts, building profiles, CI systems, distributed packages, and more. Understand how to contribute to reproducible builds and explore future implications for security updates, packaging guidelines, and quality assurance in Arch Linux.
Overview
Syllabus
Introduction
About me
Agenda
Supply Chain
Gaming
Pacman
Reproducible Builds
Arch Arts
Arch summits
Arch producer builds
Building profile
User tooling
Arch Extra Pro
CI System
Rebuilder
Distributed packages
Reproducible packages
Unproducible packages
Things can change
Private keys generation
Append path
Package patches
Patch integrity checks
How to contribute
Contact
Questions
How realistic is a 100
Security implications
Python hash seed
Patching upstream
diffiscope crashes
End game for reproducible builds
Security updates
Packaging guidelines
Internal dashboard
QA
Taught by
media.ccc.de
