[pabs3]

These three aren't enough, you also need to take care of not storing build timestamps, hostnames, timezones, sorting and more:

https://reproducible-builds.org/docs/

[chriswarbo]

Some of that is mentioned, e.g.

> Build steps that use system time to generate timestamps.

> Builds that change behavior based on currently set environment variables but don’t commit environment variable configurations.