Arch Linux now has a bit-for-bit reproducible Docker image(lists.archlinux.org)

48 pointsby speckxvor 3 Monaten4 comments

lists.archlinux.org

Arch Linux now has a bit-for-bit reproducible Docker image

https://lists.archlinux.org/archives/list/[email protected]/thread/44PW52T547MACXFU5HZ5U7SIPAX3BAXS/

4 comments

pannyvor 3 Monaten

>This is due to one important caveat: to ensure reproducibility, the pacman keys have to be stripped from the image, meaning that pacman is not usable out of the box in this image.

>Users will need to (re)generate the pacman keyring (by running `pacman-key --init && pacman-key --populate archlinux`) before being able to update the system and install packages via pacman.

Interestingly, this approach is how archlinuxarm has been distributed all along. https://archlinuxarm.org/platforms/armv8/generic

ChrisArchitectvor 3 Monaten

Some later discussion: https://news.ycombinator.com/item?id=47871519

juliusceasarvor 3 Monaten

So why is this important?

redrixvor 3 Monaten

I use Arch btw.