Debian Release Team: Debian Must Now Ship Reproducible Packages
With half-way through the Debian 14 "Forky" development cycle, the Debian release team is out with an update this weekend and some big news.
The Debian release team has decided the time has come to announce that Debian must ship reproducible packages. Debian has made much progress the past few years via the Reproducible Builds effort for ensuring independent users can reproduce the same package builds / binaries bit-for-bit. Independently-verifiable path from source to binary has become increasingly important for security concerns and validating the authenticity of packages.
Moving forward, Debian must ship reproducible packages and thus Debian 14.0 will be the first major release coming up via this new mandate. As of yesterday, Debian's migration software will now block the migration of new packages that can't be reproduced or existing packages that regress reproducibility.
Another exciting bit from the Debian release team is that as of two weeks ago they have officially added LoongArch 64-bit "Loong64" to the archive. Not too surprising as last year plans for Debian 14 with LoongArch64 support were announced while now it's coming to fruition for this interesting Chinese-based CPU ISA. I'll have to try out Debian testing soon on the Loongson 3B6000 review platform.
These bits from the Debian release team were shared today on the devel-announce list.
The Debian release team has decided the time has come to announce that Debian must ship reproducible packages. Debian has made much progress the past few years via the Reproducible Builds effort for ensuring independent users can reproduce the same package builds / binaries bit-for-bit. Independently-verifiable path from source to binary has become increasingly important for security concerns and validating the authenticity of packages.
Moving forward, Debian must ship reproducible packages and thus Debian 14.0 will be the first major release coming up via this new mandate. As of yesterday, Debian's migration software will now block the migration of new packages that can't be reproduced or existing packages that regress reproducibility.
Another exciting bit from the Debian release team is that as of two weeks ago they have officially added LoongArch 64-bit "Loong64" to the archive. Not too surprising as last year plans for Debian 14 with LoongArch64 support were announced while now it's coming to fruition for this interesting Chinese-based CPU ISA. I'll have to try out Debian testing soon on the Loongson 3B6000 review platform.
These bits from the Debian release team were shared today on the devel-announce list.