Blog46.6K views4,235 votes0 replies2,937 following
Verifying Debian Binaries Match Source: A Practical Guide to Reproducible Builds
Debian's reproducible builds let you verify that installed binaries match published source code. This guide explains how it works, shows a hands-on verification using diffoscope and SOURCE_DATE_EPOCH, and covers the remaining limitations.