FreeDink-data tries to make reproducible builds. Source tarball - See Makefile. - Reproducibility not really useful here (only generated files need to be reproducible) but still a good exercise. - The reproducible build instructions cannot be fixed / updated for a new environment since they are part of the release tarball. - However the tarball doesn't leak any metadata about the developer. Zip -nosrc release - See autobuild/freedink-data-woe.sh - This is generated from the source tarball hence needs to be reproducible. Build environment tracking - 1.08.20170409: tar debian/1.29b-1.1 gettext/msgfmt debian/0.19.8.1-2 gzip debian/1.6-5+b1 zip debian/1.0.6-2+b1 - 1.08.20170401: tar debian/1.29b-1.1 requires --sort=name (introduced in Stretch) gettext/msgfmt debian/0.19.8.1-2 pixz debian/1.0.6-2+b1 zip debian/1.0.6-2+b1