On Sun, May 24, 2026 at 05:03:05PM -0700, Vagrant Cascadian wrote: > I do not think it is reasonable for reproduce.debian.net to run the > original running kernel version (E.g. running a security vulnerable > kernel) in the build environment just to get reproducible builds...
I very much agree! :)
(I also applaud your other findings in that mail I'm replying too. They are
just not as 'simple' as this one. As if anything here would be simple.)
--
cheers,
Holger
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
⠈⠳⣄
AI is for our brains what cars are for our legs. (Tomáš Peltan)
signature.asc
Description: PGP signature
_______________________________________________ Reproducible-builds mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/reproducible-builds
