rebuilderd

Independent verification of binary packages - reproducible builds (by kpcyrd)

Rebuilderd Alternatives

Similar projects and alternatives to rebuilderd

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better rebuilderd alternative or higher similarity.

rebuilderd reviews and mentions

Posts with mentions or reviews of rebuilderd. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-01-20.
  • Towards a Reproducible F-Droid
    3 projects | news.ycombinator.com | 20 Jan 2023
    Arch Linux is heavily invested into it:

    - https://reproducible.archlinux.org/ - Attempts to reproduce the distributed binary packages from source using reproducible builds tooling. This already works for a big chunk of packages.

    - https://github.com/archlinux/archlinux-repro - This is a wrapper for Arch Linux build tooling that creates a build environment in a container that has the same packages installed as the original build environment back then. Software is expected to build reproducible in this environment and many ecosystems already do by default (Rust for example, to name one).

    - https://github.com/kpcyrd/rebuilderd - This monitors the packages in Arch Linux, runs archlinux-repro on all of them and hosts the results. There are other projects supported but Arch Linux works best at the moment, and archlinux-repro offers the best integration I'm currently aware of.

    There are surprisingly few people interested in running this stack on their own for verification purpose though.

  • Paranoia About Everything
    2 projects | /r/opensource | 11 Feb 2022
    Independent rebuilders can mitigate this to some degree, unless you can compromise all of them in some way. Some are listed on https://rebuilderd.com/, this is based on reproducible builds and only works for reproducible packages/software though.
  • Debian's rebuilds going up in Purdue's rebuilderd instance!
    1 project | /r/debian | 1 Dec 2021
    As many of you may know, one of Debian's most pressing issues for a long time has been working towards bit-for-bit reproducibility of its binary packages. Part of this initiative led to the Reproducible Builds project, in which other projects have joined with the goal of having reproducible builds of their instances. Until now, Debian's reproducibility was theoretical, as there was no proper rebuilding tool to verify its binary package reproducibility empirically. Recently, Arch Linux (and specifically one of its Trusted Users, who goes by 'kpcyrd' online, who in addition maintains packages for Debian and Alpine) produced an independent tool for verifying the reproducibility of binary packages called rebuilderd and has had its own instance running for quite some time. Apparently, collaboration between Arch Linux and Debian (and probably many other programmers and projects) lead to Debian's own instance of rebuilderd hosted by the Purdue University. You can see at Debian's reproducibility progress at:
  • rebuilderd 0.9.0: reproducible builds verification system used by Arch Linux
    1 project | /r/netsec | 25 Dec 2020
    5 projects | /r/rust | 24 Dec 2020
  • rebuilderd 0.9.0 has been released
    1 project | /r/reproduciblebuilds | 24 Dec 2020
  • A note from our sponsor - SaaSHub
    www.saashub.com | 25 Apr 2024
    SaaSHub helps you find the best software and product alternatives Learn more →

Stats

Basic rebuilderd repo stats
6
344
5.3
6 months ago

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com