Reproducible Arch Linux?!

Reproducible builds enable anyone to reproduce bit by bit identical binary packages from a given source, so that anyone can verify that a given binary derived from the source it was said to be derived. There is more information about reproducible builds on the Debian wiki and on https://reproducible-builds.org. These pages explain in more depth why this is useful, what common issues exist and which workarounds and solutions are known.

Reproducible Arch Linux is an effort to apply this to Arch Linux. Thus Arch Linux packages are build twice, with a few variations added and then the resulting packages from the two builds are compared using diffoscope. Please note that this is still at an early stage. Also there are more variations expected to be seen in the wild. Missing bits for testing Arch Linux:

Missing bits for Arch Linux:

If you want to help out or discuss reproducible builds in Arch Linux, please join #archlinux-reproducible on freenode.

repositoryall source packages reproducible unreproducible failing to build in depwait state download problems blacklisted unknown state
core200 161 (80.5%) 16 (8.0%) 17 (8.5%) 0 5 (2.5%) 1 (.5%) 0
extra2192 1693 (77.2%) 306 (13.9%) 125 (5.7%) 1 (0%) 60 (2.7%) 3 (.1%) 0
multilib263 227 (86.3%) 13 (4.9%) 17 (6.4%) 0 6 (2.2%) 0 0
community5587 4339 (77.6%) 609 (10.9%) 509 (9.1%) 4 (0%) 120 (2.1%) 4 (0%) 0
all combined8242 6420 (77.8%) 944 (11.4%) 668 (8.1%) 5 (0%) 191 (2.3%) 8 (0%) 0

( recent builds, currently scheduled )

core stats extra stats multilib stats community stats

total Arch Linux stats

variationfirst buildsecond build
hostname profitbricks-build3-amd64 or profitbricks-build4-amd64the other one
domainname is not yet varied between rebuilds of Arch Linux.
env TZTZ="/usr/share/zoneinfo/Etc/GMT+12"TZ="/usr/share/zoneinfo/Etc/GMT-14"
env LANGnot setLANG="fr_CH.UTF-8"
env LC_ALLnot setLC_ALL="fr_CH.UTF-8"
the build pathis not yet varied between rebuilds of Arch Linux
env PATHis set to '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin' because that's what makechrootpkg is using
env USERjenkinsbuild 2
user/uidjenkins/103build2/1235
group/gidjenkins/105build2/1235
kernel version is varied between rebuilds of Arch Linux.
umask00220002
CPU type AMD Opteron 62xx class CPUsame for both builds
/bin/sh/bin/dash/bin/bash
year, month, dateprofitbricks-build3-amd64: today () or profitbricks-build4-amd64: 398 days in the future (2019-12-23)the other one
hour, minutehour and minute will probably vary between two builds...the future system actually runs 398 days, 6 hours and 23 minutes ahead...
Filesystemtmpfssame for both builds (currently, this could be varied using disorderfs)
everything else...is likely the same. There will be more variations in the wild.