1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
|
Source: rust-rebuilderd
Section: net
Build-Depends: debhelper-compat (= 13),
dh-sequence-cargo,
help2man,
libdebhelper-perl
Build-Depends-Arch: cargo:native,
rustc:native,
libstd-rust-dev,
librust-actix-web-4+default-dev (>= 4.1.0),
librust-chrono-0.4+default-dev (>= 0.4.19),
librust-chrono-0.4+serde-dev (>= 0.4.19),
librust-clap-4+default-dev,
librust-clap-4+derive-dev,
librust-clap-4+env-dev,
librust-data-encoding-2+default-dev,
librust-diesel-2+chrono-dev,
librust-diesel-2+default-dev,
librust-diesel-2+i-implement-a-third-party-backend-and-opt-into-breaking-changes-dev,
librust-diesel-2+r2d2-dev,
librust-diesel-2+returning-clauses-for-sqlite-3-35-dev,
librust-diesel-2+sqlite-dev,
librust-diesel-migrations-2+default-dev,
librust-diesel-migrations-2+sqlite-dev,
librust-dirs-next-2+default-dev,
librust-dotenvy-0.15+default-dev,
librust-env-logger-0.11+default-dev,
librust-in-toto-0.4+default-dev,
librust-log-0.4+default-dev (>= 0.4.17),
librust-pem-3+default-dev,
librust-rand-0.10+default-dev,
librust-rebuilderd-common-0.26+default-dev,
librust-rebuilderd-common-0.26+default-dev (<< 0.26.1),
librust-rebuilderd-common-0.26+diesel-dev,
librust-rebuilderd-common-0.26+diesel-dev (<< 0.26.1),
librust-serde-1+default-dev (>= 1.0.137),
librust-serde-1+derive-dev (>= 1.0.137),
librust-serde-json-1+default-dev (>= 1.0.81),
librust-tokio-1+default-dev (>= 1.44.2),
librust-toml-0.9+default-dev,
librust-zstd-0.13+default-dev (>= 0.13.3)
Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Uploaders:
kpcyrd <git@rxv.cc>,
Holger Levsen <holger@debian.org>
Standards-Version: 4.7.3
Vcs-Git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/rebuilderd]
Vcs-Browser: https://salsa.debian.org/rust-team/debcargo-conf/tree/master/src/rebuilderd
Homepage: https://github.com/kpcyrd/rebuilderd
X-Cargo-Crate: rebuilderd
X-Cargo-Crate-Version: 0.26.0
Package: librust-rebuilderd-dev
Architecture: any
Multi-Arch: same
Depends:
${misc:Depends},
librust-actix-web-4+default-dev (>= 4.1.0),
librust-chrono-0.4+default-dev (>= 0.4.19),
librust-chrono-0.4+serde-dev (>= 0.4.19),
librust-clap-4+default-dev,
librust-clap-4+derive-dev,
librust-clap-4+env-dev,
librust-data-encoding-2+default-dev,
librust-diesel-2+chrono-dev,
librust-diesel-2+default-dev,
librust-diesel-2+i-implement-a-third-party-backend-and-opt-into-breaking-changes-dev,
librust-diesel-2+r2d2-dev,
librust-diesel-2+returning-clauses-for-sqlite-3-35-dev,
librust-diesel-2+sqlite-dev,
librust-diesel-migrations-2+default-dev,
librust-diesel-migrations-2+sqlite-dev,
librust-dirs-next-2+default-dev,
librust-dotenvy-0.15+default-dev,
librust-env-logger-0.11+default-dev,
librust-in-toto-0.4+default-dev,
librust-log-0.4+default-dev (>= 0.4.17),
librust-pem-3+default-dev,
librust-rand-0.10+default-dev,
librust-rebuilderd-common-0.26+default-dev,
librust-rebuilderd-common-0.26+default-dev (<< 0.26.1),
librust-rebuilderd-common-0.26+diesel-dev,
librust-rebuilderd-common-0.26+diesel-dev (<< 0.26.1),
librust-serde-1+default-dev (>= 1.0.137),
librust-serde-1+derive-dev (>= 1.0.137),
librust-serde-json-1+default-dev (>= 1.0.81),
librust-tokio-1+default-dev (>= 1.44.2),
librust-toml-0.9+default-dev,
librust-zstd-0.13+default-dev (>= 0.13.3)
Provides:
librust-rebuilderd+default-dev (= ${binary:Version}),
librust-rebuilderd-0-dev (= ${binary:Version}),
librust-rebuilderd-0+default-dev (= ${binary:Version}),
librust-rebuilderd-0.26-dev (= ${binary:Version}),
librust-rebuilderd-0.26+default-dev (= ${binary:Version}),
librust-rebuilderd-0.26.0-dev (= ${binary:Version}),
librust-rebuilderd-0.26.0+default-dev (= ${binary:Version})
Description: Rebuilderd - independent build verification daemon - Rust source code
Source code for Debianized Rust crate "rebuilderd"
Package: rebuilderd
Architecture: any
Section: net
Depends:
${misc:Depends},
${shlibs:Depends},
${cargo:Depends}
Recommends:
${cargo:Recommends}
Suggests:
${cargo:Suggests}
Provides:
${cargo:Provides}
Built-Using: ${cargo:Built-Using}
Static-Built-Using: ${cargo:Static-Built-Using}
Description: Monitor and reproduce binary packages from source - Reproducible Builds
Monitors the package repository of a Linux distribution and uses rebuilder
backends such as debrebuild and archlinux-repro to verify that binary
packages can be reproduced from their corresponding source code.
.
The system tracks the verification status of rebuilt packages and can
optionally generate detailed difference reports using diffoscope to allow for
troubleshooting. Due to the early stage of this technology, rebuild failures
are more commonly caused by non-deterministic build processes than by supply
chain compromises. However, if multiple independent rebuilders you trust report
successful bit-by-bit reproduction for 100% of the packages you use, you can be
confident that during the build process the binaries have not been tampered
with and faithfully correspond to the specified source code.
.
Users are encouraged to operate their own rebuilders whenever possible. The
repro-threshold tool allows you to require that a package must be successfully
reproduced by multiple trusted rebuilderd instances before it is considered
verified and safe to install.
|
