Bit-for-bit reproducible builds with Dockerfile

At FOSDEM last month, I talked about the current status of bit-for-bit reproducible builds with Dockerfile: Presentation slides at FOSDEM 2023 (PDF)What are reproducible builds?Reproducible builds is a practice to guarantee that identical binaries can be built from its source by anybody at anytime. Slide 2Reproducible builds are helpful for security assessment of binary releases. If binary release

[miya-jan]

buildkit を使ったビット単位で再現可能な Docker イメージビルド方法。SOURCE_DATE_EPOCH でタイムスタンプを、repro-get でパッケージバージョンを再現可能にしている。