Hi Roland,
> here is a third update of the status for reproducible live-build ISO
> images [1].
Not much to add here except that this is great work, and thank you for
sharing it too.
One question actually — how might a third-party reproduce these
images? Or putting the same question in more technical terms — are you
generating some kind of .buildinfo file that contains (just for
example's sake) the value of SOURCE_DATE_EPOCH and any other relevant
inputs, as well as the resulting checksums?
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org 💠
⬊ ⬋
o
