Arch Linux now has a bit-for-bit reproducible Docker image
Posted by speckx 5 hours ago
Comments
Comment by juliusceasar 1 hour ago
So why is this important?
Comment by redrix 15 minutes ago
I use Arch btw.
Comment by panny 3 hours ago
>This is due to one important caveat: to ensure reproducibility,
the pacman keys have to be stripped from the image, meaning that pacman
is not usable out of the box in this image.
>Users will need to (re)generate the pacman keyring (by running `pacman-key --init && pacman-key --populate archlinux`) before being able to update the system and install packages via pacman.
Interestingly, this approach is how archlinuxarm has been distributed all along. https://archlinuxarm.org/platforms/armv8/generic