On Sun, Jan 04, 2026 at 12:27:50PM +0100, Paul Gevers wrote: >... > No. We need checks on uploaded source packages and installed binary package, > not on what lives on salsa. E.g. soonish we'll start checking > reproducibility in the form of rebuilding what's in the archive. salsa will > never be able to do that before the upload actually happened and the > buildd's have built the package. >...
It is in theory possible to build the packages on the buildds before the upload actually happened. A lofty idea of mine is that we should replace wanna-build with moving the buildds into the git hosting runner infrastructure. If this ever happens, we could test the candidate binaries for the archive there. > Paul cu Adrian
