Hi Ignas and Suhail, Thanks for your comments!
As you may have guessed, the reason for my question was that I encountered a non-reproducible Docker image build. And as both of you point out, the packages entering into the images must be reproducible. That's something I had actually checked for my specific case. I was looking for other possible causes. In the meantime, I found the explanation for my case: the packages in my image are reproducible, but the profile composed from them is not, due to a non-deterministic step in profile generation. For the details: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=73295 Cheers, Konrad.