Hacker News new | ask | show | jobs
by dane-pgp 1714 days ago
As another data point for achievability:

"bookworm [the next Debian stable release] on amd64 is 95.6% reproducible right now! "

https://isdebianreproducibleyet.com/

1 comments

Sadly, they are not "real" numbers.

This is taken from the integration suite which Debian have been running for years. This represents checking out the code, and building twice. This is not distributed packages from Debian. This inflates the number a little bit.

Holger explains this in a thread a few years back. https://lists.debian.org/debian-devel/2019/03/msg00017.html

Actual numbers for bullseye currently look like this:

https://debian.notset.fr/rebuild/results/bullseye_full.amd64...

Why are 28.8% of Debian stable packages currently "pending"?

The stats on reproducible-builds.org say that "29595 packages (95.7%) successfully built reproducibly in bullseye/amd64."[0] which may not be accurate for the reasons given in the grandparent post, but I note that the situation seems to have improved significantly[1] since that mailing list thread.

[0] https://tests.reproducible-builds.org/debian/bullseye/index_...

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900837#17

>Why are 28.8% of Debian stable packages currently "pending"?

They are separate systems. The CI/CD and the rebuilder are not doing the same job essentially.

The 28.8% on pending might be because of slow rebuild times as the integration system has had more time building packages with significantly more CPU power behind it.

I guess the release date was as recent as 2021-07-23, and it's conceivable that such a rebuilding project being run only with spare CPU cycles might take months (or might only have started recently).

As an interesting data point, I see that the number of pending packages is now 21.2%. Let's hope that most of these remaining packages (and those being retried) turn out to be reproducible.

Such rebuilds systems are complicated and might not work 100% when you first start out. There can be multiple complete rebuilds done while removing edge-case bugs that either fails the building or introduces variance into the builds.