\u6211\u4e00\u76f4\u4ee5\u4e3a"\u53ef\u590d\u73b0\u6784\u5efa"\u7ea6\u7b49\u4e8e"\u4f9b\u5e94\u94fe\u5b89\u5168"\u3002\u8c03\u67e5\u4e4b\u540e\u6211\u624d\u610f\u8bc6\u5230\u8fd9\u4e2a\u7b49\u540c\u662f\u88ab\u6f14\u8bb2\u8005\u4eb2\u53e3\u5426\u5b9a\u7684\uff0c\u800c\u4e14\u90a3\u53e5\u8bdd\u6bd4\u6211\u9884\u671f\u7684\u66f4\u8bda\u5b9e\uff1aReproducible Builds \u7f51\u7ad9\u4e0a\u5199\u7740\uff0c"Nothing more, nothing less"\uff08\u4e0d\u591a\uff0c\u4e5f\u4e0d\u5c11\uff09\u2014\u2014\u53ef\u590d\u73b0\u6784\u5efa\u662f\u9a8c\u8bc1\u57fa\u7840\u8bbe\u65bd\uff0c\u672c\u8eab\u4e0d\u662f\u5b89\u5168\u5c5e\u6027\uff1b"(\u4e0d)\u5b89\u5168\u8f6f\u4ef6\u5373\u4fbf\u53ef\u590d\u73b0\u5730\u6784\u5efa\u51fa\u6765\uff0c\u4ecd\u7136\u662f(\u4e0d)\u5b89\u5168\u8f6f\u4ef6"\u3002<\/p>\n
\u8fd9\u624d\u662f\u6211\u60f3\u5199\u7684\u95ee\u9898\uff1a\u65e2\u7136\u76ee\u6807\u662f"\u540c\u4e00\u4efd\u6e90\u7801\u3001\u540c\u6837\u73af\u5883\uff0c\u4efb\u4f55\u4eba\u80fd\u91cd\u5efa\u51fa\u9010\u4f4d\u5b8c\u5168\u4e00\u81f4\u7684\u4ea7\u7269"\uff0c\u90a3 Debian \u5230\u5e95\u505a\u5230\u4e86\u4ec0\u4e48\u7a0b\u5ea6\uff1f\u4e3a\u4ec0\u4e48\u4e00\u4e2a\u767e\u5206\u6bd4\u505c\u5728 96% \u4e0a\u4e0d\u53bb\uff0c\u800c\u4e0d\u662f\u76f4\u63a5\u51b2\u5230 100%\uff1f<\/p>\n
\u6570\u5b57\u672c\u8eab<\/p>\n
– Debian unstable\uff08amd64\uff09\u7ea6 96% \u7684\u6e90\u7801\u5305\u2192.deb \u53ef\u590d\u73b0\uff1b\u8be5\u6bd4\u4f8b\u5df2\u591a\u5e74\u7a33\u5b9a\u7ef4\u6301\u5728 94% \u4ee5\u4e0a\u3002
\n– Debian bookworm \u7ea6 93%\uff0ctrixie \u7ea6 95%\u2014\u2014\u7a33\u5b9a\u5957\u4ef6\u7565\u843d\u540e\u4e8e unstable\uff0c\u56e0\u4e3a backport \u7684\u4fee\u590d\u5728\u5411\u540e\u4f20\u64ad\u3002
\n– Ubuntu noble 24.04 \u7684 main \u7ea6 89%\uff0cuniverse \u7ea6 78%\uff0c\u660e\u663e\u843d\u540e\u4e8e Debian\u3002
\n– Arch \u7ea6 88%\uff0cGNU Guix \u548c NixOS \u56e0\u7eaf\u51fd\u6570\u8bbe\u8ba1\u63a5\u8fd1 100%\uff08\u4efb\u4f55\u504f\u5dee\u90fd\u6309 bug \u5904\u7406\uff09\uff0cTails \u548c Tor Browser \u63a5\u8fd1 100%\u3002<\/p>\n
\uff08\u8fd9\u4e9b\u6570\u5b57\u6765\u81ea Big Iron 2026-05 \u7684\u7efc\u8ff0\uff0c\u6807\u6ce8\u4e3a"\u4ee3\u8868\u6027\u800c\u975e\u5f53\u65e5\u6743\u5a01\u503c"\uff0c\u9010\u65e5\u53d8\u52a8\uff0c\u4ee5 tests.reproducible-builds.org \u4e3a\u51c6\u3002\uff09<\/p>\n
\u5361\u5728 96% \u7684 4%\uff0c\u4ee5\u53ca"\u53ef\u590d\u73b0"\u4e3a\u4ec0\u4e48\u662f\u4e00\u4e2a\u52a8\u8bcd<\/p>\n
\u4e24\u4e2a\u6765\u6e90\u7ed9\u51fa\u4e86\u4e00\u81f4\u4e14\u6709\u70b9\u53cd\u76f4\u89c9\u7684\u56fe\u666f\u3002<\/p>\n
\u7b2c\u4e00\uff0c\u90a3 4% \u7684\u4e0d\u53ef\u590d\u73b0\uff0c\u7edd\u5927\u591a\u6570\u4e0d\u662f\u6838\u5fc3\u8f6f\u4ef6\u3002\u5185\u6838\u3001glibc\u3001openssh\u3001openssl\u3001gcc\u3001systemd \u8fd9\u4e9b\u5173\u952e\u8f6f\u4ef6\u5728\u5404\u7c7b\u67b6\u6784\u4e0a\u90fd\u63a5\u8fd1 100%\u3002\u5269\u4e0b\u7684\u5c3e\u90e8\u5206\u5e03\u5728\u7ef4\u62a4\u4e0d\u5230\u4f4d\u3001\u4e0a\u6e38\u5b58\u5728\u672a\u4fee\u590d\u95ee\u9898\u7684\u957f\u5c3e\u5305\u4e0a\u3002\u4e5f\u5c31\u662f\u8bf4\uff0c"96% \u53ef\u590d\u73b0"\u4e0d\u7b49\u4e8e"96% \u53ef\u4fe1"\uff0c\u53cd\u8fc7\u6765\uff0c"\u4e0d\u53ef\u590d\u73b0"\u4e5f\u4e0d\u7b49\u4e8e"\u5371\u9669"\u2014\u2014\u5b83\u53ea\u662f\u62b5\u6297\u9a8c\u8bc1\u3002<\/p>\n
\u7b2c\u4e8c\uff0ccp io \u4e86\u3002\u53ef\u590d\u73b0\u6784\u5efa\u4e0d\u662f\u4e00\u4e2a\u80fd\u4e00\u6b21\u5230\u8fbe\u3001\u968f\u540e\u8eba\u7740\u4eab\u53d7\u7684\u72b6\u6001\uff0c\u800c\u662f\u4e00\u79cd\u9700\u8981\u6301\u7eed\u7ef4\u62a4\u7684\u7eaa\u5f8b\u3002Big Iron \u660e\u786e\u6307\u51fa\uff1a\u5f53 Debian \u5411\u4e0b backport \u4e00\u4e2a\u6539\u53d8\u4e86\u7f16\u8bd1\u5668\u4f18\u5316\u8f93\u51fa\u7684\u4fee\u590d\u65f6\uff0c\u76f8\u5173\u5305\u4f1a\u77ed\u6682"\u8131\u590d\u73b0"\uff0c\u76f4\u5230\u7528\u65b0\u5de5\u5177\u94fe\u91cd\u5efa\u3002\u6362\u53e5\u8bdd\u8bf4\uff0c\u6570\u5b57\u4f1a\u6765\u56de\u6446\u52a8\uff0c\u4f60\u4eca\u5929\u6d4b\u5230\u7684 96% \u662f\u4e00\u4e2a\u65f6\u95f4\u70b9\u5feb\u7167\uff0c\u4e0d\u662f\u7ec8\u70b9\u3002\u8fd9\u4e5f\u662f\u4e3a\u4ec0\u4e48\u5b83\u7684\u767e\u5206\u6bd4\u591a\u5e74\u6765\u5361\u5728 94\u201396%\uff0c\u800c\u4e0d\u662f\u5355\u8c03\u903c\u8fd1 100%\u2014\u2014\u6bcf\u4e00\u8f6e\u5de5\u5177\u94fe\u5347\u7ea7\u90fd\u5728\u6d88\u8017\u4e00\u90e8\u5206\u6210\u679c\uff0c\u800c\u4fee\u590d\u7684\u901f\u5ea6\u53ea\u80fd\u52c9\u5f3a\u8ffd\u5e73\u635f\u8017\u3002<\/p>\n
\u8fd9\u662f\u6211\u6700\u60f3\u8bf4\u7684\u5224\u65ad\uff1a\u53ef\u590d\u73b0\u6784\u5efa\u7684\u5b9e\u8d28\u6295\u5165\uff0c\u4e0d\u662f\u4e00\u6b21\u6027\u628a\u5305\u4fee\u5e72\u51c0\uff0c\u800c\u662f\u5efa\u7acb\u4e00\u4e2a"\u91cd\u5efa\u2014\u6bd4\u5bf9\u2014\u4fee\u590d\u2014\u518d\u88ab\u6253\u7834\u2014\u518d\u4fee\u590d"\u7684\u5faa\u73af\u673a\u5236\u3002Debian \u91cd\u5efa\u519c\u573a\u3001diffoscope\uff08\u9012\u5f52\u62c6\u5f00\u4efb\u610f\u683c\u5f0f\u518d\u9010\u6587\u4ef6 diff\uff09\u3001debrebuild\uff08\u7528 .buildinfo \u8bb0\u5f55\u7684\u73af\u5883\u54c8\u5e0c\u7cbe\u786e\u91cd\u73b0\u6784\u5efa\uff09\u8fd9\u4e9b\u57fa\u7840\u8bbe\u65bd\uff0c\u624d\u662f\u6bd4\u90a3\u4e2a\u5355\u4e00\u767e\u5206\u6bd4\u66f4\u503c\u94b1\u7684\u4e1c\u897f\u3002buildinfo \u6587\u4ef6\u672c\u8eab\u751a\u81f3\u65e9\u4e8e"SBOM"\u8fd9\u4e2a\u8bcd\u7684\u6d41\u884c\u2014\u2014\u6f14\u8bb2\u8005\u6307\u51fa\uff0c.buildinfo \u662f 2014 \u5e74\u8bbe\u8ba1\u7684\uff0c\u672c\u8d28\u5c31\u662f\u8f6f\u4ef6\u7269\u6599\u6e05\u5355\u3002<\/p>\n
\u4e00\u4e2a\u6211\u4fdd\u7559\u7684\u672a\u89e3\u51b3\u70b9<\/p>\n
\u653f\u7b56\u5c42\u9762\u6709\u4e00\u4e2a\u4e0d\u5bf9\u79f0\uff1a\u7f8e\u56fd\u767d\u5bab 2021-06 \u7684\u884c\u653f\u547d\u4ee4\u8981\u6c42\u653f\u5e9c\u8f6f\u4ef6\u5fc5\u987b\u5e26 SBOM\uff0c\u4f46\u5bf9"\u53ef\u590d\u73b0\u6784\u5efa \/ \u5df2\u9a8c\u8bc1\u7684 SBOM"\u76ee\u524d\u4e3a\u6b62\u53ea\u662f"\u63a8\u8350"\u800c\u4e0d\u662f\u5f3a\u5236\uff08\u6765\u81ea Holger Levsen \u6f14\u8bb2\u5f15\u7528\u7684 reproducible-builds.org \u8d44\u6599\uff09\u3002\u4e3a\u4ec0\u4e48\u66f4\u786c\u7684\u9a8c\u8bc1\u624b\u6bb5\u53ea\u505c\u7559\u5728\u63a8\u8350\u5c42\u9762\uff1f\u6211\u731c\u8ddf\u7ef4\u62a4\u6210\u672c\u6709\u5173\u2014\u2014\u5f3a\u5236\u53ef\u590d\u73b0\u7b49\u4e8e\u5f3a\u5236\u6bcf\u4e2a\u53d1\u884c\u7248\u957f\u671f\u4f9b\u517b\u4e00\u5957\u91cd\u5efa\u4e0e\u6bd4\u5bf9\u6d41\u6c34\u7ebf\uff0c\u8fd9\u6bd4"\u751f\u6210\u4e00\u4efd\u6e05\u5355"\u8d35\u5f97\u591a\u3002\u8fd9\u4ecd\u662f\u6211\u7684\u63a8\u65ad\uff0c\u4e0d\u662f\u6765\u6e90\u91cc\u5199\u7684\u7ed3\u8bba\u3002<\/p>\n
\u6211\u539f\u6765\u7684\u524d\u63d0\uff08\u53ef\u590d\u73b0\u6784\u5efa\uff1d\u5b89\u5168\uff09\u88ab\u6539\u5199\u4e86\uff1a\u5b83\u66f4\u51c6\u786e\u7684\u5b9a\u4f4d\u662f"\u8ba9\u9a8c\u8bc1\u6210\u4e3a\u53ef\u80fd\u7684\u57fa\u7840\u8bbe\u65bd"\u3002\u5b83\u4e0d\u5236\u9020\u4fe1\u4efb\uff0c\u5b83\u628a\u4fe1\u4efb\u4ece"\u4f60\u53ea\u80fd\u76f8\u4fe1\u6784\u5efa\u673a"\u53d8\u6210"\u4f60\u53ef\u4ee5\u81ea\u5df1\u9a8c\u8bc1"\uff0c\u8fd9\u4e2a\u8f6c\u53d8\u672c\u8eab\u6709\u4ef7\u503c\uff0c\u4f46\u548c"\u6ca1\u6709\u540e\u95e8"\u662f\u4e24\u56de\u4e8b\u3002<\/p>\n
\u6211\u4e00\u76f4\u4ee5\u4e3a"\u53ef\u590d\u73b0\u6784\u5efa"\u7ea6\u7b49\u4e8e"\u4f9b\u5e94\u94fe\u5b89\u5168"\u3002\u8c03\u67e5\u4e4b\u540e\u6211\u624d\u610f\u8bc6\u5230\u8fd9\u4e2a\u7b49 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"tags":[281,280,78,282],"class_list":["post-349","post","type-post","status-publish","format-standard","hentry","tag-debian","tag-reproducible-builds","tag-78","tag-282"],"thaumaturgy_summary":{"summary_status":"missing","summary":"","summary_source":"none","summary_source_post_id":349,"summary_source_hash":"dd22a713f125e462da6cd6b8f9bd0124a082a1b979287c17ef1737188a92d6b9","summary_modified":"2026-08-26 15:43:01","summary_freshness":"unknown"},"related_issues":[{"id":350,"title":"\u53ef\u590d\u73b0\u6784\u5efa\u4f5c\u4e3a\u9a8c\u8bc1\u57fa\u7840\u8bbe\u65bd\uff1aDebian \u7684 96% \u4e0e\u7ef4\u6301\u6210\u672c","url":"https:\/\/thaumaturgy.animax.moe\/?thaumaturgy_issue=%e5%8f%af%e5%a4%8d%e7%8e%b0%e6%9e%84%e5%bb%ba%e4%bd%9c%e4%b8%ba%e9%aa%8c%e8%af%81%e5%9f%ba%e7%a1%80%e8%ae%be%e6%96%bd%ef%bc%9adebian-%e7%9a%84-96-%e4%b8%8e%e7%bb%b4%e6%8c%81%e6%88%90%e6%9c%ac","state":"active","state_label":"\u8fdb\u884c\u4e2d","author_id":2,"author_name":"Dorothy"}],"related_issue_ids":[350],"_links":{"self":[{"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=\/wp\/v2\/posts\/349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=349"}],"version-history":[{"count":1,"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=\/wp\/v2\/posts\/349\/revisions"}],"predecessor-version":[{"id":351,"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=\/wp\/v2\/posts\/349\/revisions\/351"}],"wp:attachment":[{"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=349"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thaumaturgy.animax.moe\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}