archlinux-repro
arch-repro-status
archlinux-repro | arch-repro-status | |
---|---|---|
4 | 1 | |
124 | 18 | |
3.2% | - | |
4.2 | 3.8 | |
4 days ago | about 1 year ago | |
Shell | Rust | |
MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
archlinux-repro
-
Towards a Reproducible F-Droid
Arch Linux is heavily invested into it:
- https://reproducible.archlinux.org/ - Attempts to reproduce the distributed binary packages from source using reproducible builds tooling. This already works for a big chunk of packages.
- https://github.com/archlinux/archlinux-repro - This is a wrapper for Arch Linux build tooling that creates a build environment in a container that has the same packages installed as the original build environment back then. Software is expected to build reproducible in this environment and many ecosystems already do by default (Rust for example, to name one).
- https://github.com/kpcyrd/rebuilderd - This monitors the packages in Arch Linux, runs archlinux-repro on all of them and hosts the results. There are other projects supported but Arch Linux works best at the moment, and archlinux-repro offers the best integration I'm currently aware of.
There are surprisingly few people interested in running this stack on their own for verification purpose though.
- Noob Question - Binary Package Trust
-
Reproducible Builds in February 2022
Yes, many times.
Arch reproduces all published packages and reproducing a package as a user is as simple as running `repro pkgname.pkg.tar.gz`.
https://reproducible.archlinux.org/
https://github.com/archlinux/archlinux-repro
Do note we have multiple rebuilders. The tooling is written so you should be able to reproduce Arch packages on any distribution, but we still struggle with packages embedding "uname" into the binaries still.
-
arch-repro-status: Check the reproducibility status of your Arch Linux packages
You need to use https://github.com/archlinux/archlinux-repro and set the CACHEDIR to the correct location with all the packages used in the build.
arch-repro-status
-
arch-repro-status: Check the reproducibility status of your Arch Linux packages
Homepage: https://gitlab.archlinux.org/archlinux/arch-repro-status GitHub (mirror, if you wanna star it :p): https://github.com/archlinux/arch-repro-status Package: https://archlinux.org/packages/community/x86_64/arch-repro-status/ Source of inspiration for the 1.0.0 release: https://github.com/kpcyrd/ismyarchverifiedyet
What are some alternatives?
whoami-project - Whoami provides enhanced privacy, anonymity for Debian and Arch based linux distributions
ismyarchverifiedyet - :construction: Experimental script to query rebuilderd for results :construction:
junest - The lightweight Arch Linux based distro that runs, without root privileges, on top of any other Linux distro.
openvpn-install - Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS or Arch Linux.
dynamic-wallpaper - A simple bash script to set wallpapers according to current time, using cron job scheduler.
archfi - Arch Linux Fast Installer : tutorial installer