Reproducible Buster and beyond

Speakers: Holger Levsen Chris Lamb

Track: Security

Type: Long talk (45 minutes)

The goal of this talk is to give the whole Debian community an update on the state of Reproducible Builds in Debian and in the whole free software world.

It’s been 5 years since Reproducible Builds were first introduced to the Debian community at large at DebConf13 in Vaumarcus and much progress has been achieved since. In this talk we will present some milestones we have reached since then, show where our current blockers are and give an outlook on what we consider still achievable until the Buster freeze.

While it is true that we have been quite succesful in promoting Reproducible Builds, both the concept as well as actual patches in a great number of projects, too many people are misled by our “93% of Debian packages are reproducible (in theory)” statistics and other things.

So, to sum up, Buster is not frozen yet and so we are still working on making Buster as reproducible in practice as possible. And we want to go even further in future! To achieve this we want and need to take all of Debian with us on this journey.