Group: Software/FSDG distributions/Security

From LibrePlanet
Jump to: navigation, search
(Self hosted distributions: Add warning about the list of reproducible distros)
(Self hosted distributions: fix references syntax and typos)
Line 13: Line 13:
 
| ?
 
| ?
 
|
 
|
* Not mentioned in the list of project supporting reproducible builds<ref name=repdocucible-projects-list>The official lists of projects supporting reproducible is at https://reproducible-builds.org/projects/ . Note that not all theses projects are FSDG compliant and that some might even contain nonfree software and other really problematic issues.</ref>.
+
* Not mentioned in the list of project supporting reproducible builds<ref name="reproducible-projects-list"> The official lists of projects supporting reproducible is at https://reproducible-builds.org/projects/ . Note that not all theses projects are FSDG compliant and that some might even contain nonfree software and other really problematic issues. </ref>.
 
|-
 
|-
 
! Dynebolic
 
! Dynebolic
 
| ?
 
| ?
 
|
 
|
* Not mentioned in the list of project supporting reproducible builds<ref name=repdocucible-projects-list/>.
+
* Not mentioned in the list of project supporting reproducible builds<ref name=reproducible-projects-list/>.
 
|-
 
|-
 
! Guix
 
! Guix
Line 25: Line 25:
 
* Encourage any users to use the Guix challenge command to check the reproducibility of builds, and builds are supposed to be reproducible for all users (independently of the specific CPU, username, etc)
 
* Encourage any users to use the Guix challenge command to check the reproducibility of builds, and builds are supposed to be reproducible for all users (independently of the specific CPU, username, etc)
 
* Goes beyond reproducible builds and has efforts to make Guix bootstrapable
 
* Goes beyond reproducible builds and has efforts to make Guix bootstrapable
* Mentioned in the list of project supporting reproducible builds<ref name=repdocucible-projects-list>https://reproducible-builds.org/projects/</ref>.
+
* Mentioned in the list of project supporting reproducible builds<ref name="reproducible-projects-list"/>.
 
|-
 
|-
 
! Hyperbola
 
! Hyperbola
 
| ?
 
| ?
 
|
 
|
* Not mentioned in the list of project supporting reproducible builds<ref name=repdocucible-projects-list>https://reproducible-builds.org/projects/</ref> but Arch Linux is mentioned there so maybe it's easier to add reproducible builds to Hyperbola.
+
* Not mentioned in the list of project supporting reproducible builds<ref name="reproducible-projects-list"/> but Arch Linux is mentioned there so maybe it's easier to add reproducible builds to Hyperbola.
 
|-
 
|-
 
! Parabola
 
! Parabola
 
| ?
 
| ?
 
|
 
|
* Not mentioned in the list of project supporting reproducible builds<ref name=repdocucible-projects-list>https://reproducible-builds.org/projects/</ref> but Arch Linux is mentioned there, and for x86_64 some of the stock Arch Linux are reused. So at least part of Parabola is reproducible.
+
* Not mentioned in the list of project supporting reproducible builds<ref name="reproducible-projects-list"/> but Arch Linux is mentioned there, and for x86_64 some of the stock Arch Linux are reused. So at least part of Parabola is reproducible.
 
|-
 
|-
 
! PureOS
 
! PureOS
 
| ?
 
| ?
 
|
 
|
* Not mentioned in the list of project supporting reproducible builds<ref name=repdocucible-projects-list/>.
+
* Not mentioned in the list of project supporting reproducible builds<ref name="reproducible-projects-list"/>.
 
|-
 
|-
 
! Trisquel
 
! Trisquel
 
| ?
 
| ?
 
|
 
|
* Not mentioned in the list of project supporting reproducible builds<ref name=repdocucible-projects-list/>.
+
* Not mentioned in the list of project supporting reproducible builds<ref name="reproducible-projects-list"/>.
 
|-
 
|-
 
! Ututo S
 
! Ututo S
 
| ?
 
| ?
 
|
 
|
* Not mentioned in the list of project supporting reproducible builds<ref name=repdocucible-projects-list/>.
+
* Not mentioned in the list of project supporting reproducible builds<ref name="reproducible-projects-list"/>.
 
|-
 
|-
 
|}
 
|}

Revision as of 20:41, 13 November 2021

Introduction

This page tracks the progress of FSDG distributions with regard to reproducible builds and associated topics like bootstrapable builds.

Self hosted distributions

Distribution Reproducible builds officially supported Comments
Dragora ?
  • Not mentioned in the list of project supporting reproducible builds[1].
Dynebolic ?
  • Not mentioned in the list of project supporting reproducible builds[1].
Guix Yes
  • Encourage any users to use the Guix challenge command to check the reproducibility of builds, and builds are supposed to be reproducible for all users (independently of the specific CPU, username, etc)
  • Goes beyond reproducible builds and has efforts to make Guix bootstrapable
  • Mentioned in the list of project supporting reproducible builds[1].
Hyperbola ?
  • Not mentioned in the list of project supporting reproducible builds[1] but Arch Linux is mentioned there so maybe it's easier to add reproducible builds to Hyperbola.
Parabola ?
  • Not mentioned in the list of project supporting reproducible builds[1] but Arch Linux is mentioned there, and for x86_64 some of the stock Arch Linux are reused. So at least part of Parabola is reproducible.
PureOS ?
  • Not mentioned in the list of project supporting reproducible builds[1].
Trisquel ?
  • Not mentioned in the list of project supporting reproducible builds[1].
Ututo S ?
  • Not mentioned in the list of project supporting reproducible builds[1].

Small distributions

Distribution Reproducible builds officially supported Comments
LibreCMC ?
  • Not mentioned in the list of project supporting reproducible builds[2] but OpenWRT is mentioned, so it might be easier to add reproducible builds to LibreCMC.
ProteanOS ?
  • Not mentioned in the list of project supporting reproducible builds[2].
Replicant not yet
  • Not using the Android prebuilt toolchain is the first priority, then we probably need to find how to activate reproducible builds when building releases.
  • Not mentioned in the list of project supporting reproducible builds[2].
  1. 1.01.11.21.31.41.51.61.7 The official lists of projects supporting reproducible is at https://reproducible-builds.org/projects/ . Note that not all theses projects are FSDG compliant and that some might even contain nonfree software and other really problematic issues.
  2. 2.02.12.2 Cite error: Invalid <ref> tag; no text was provided for refs named repdocucible-projects-list