Hacker News Reader

Comment by uep | Hacker News Reader

The distros do maintain a reference back to the source. Debian makes it trivial to download the source code for packages and to build it yourself.

  apt source htop
  apt build-dep htop
  cd htop-2.0.2
  dpkg-buildpackage -us -uc -nc

View on HN

I should mention that reproducible builds are really about making bit-for-bit identical builds. There are reasons this is difficult, including individual projects inserting timestamps at the time that they build, or compile-time randomness, sort order of files in the filesystem based on the current locale, etc.

Reply on news.ycombinator.com