Reproducing packages in the archive

[Daniel Shahaf]

Do we have tooling that reproduces a specific package given its
.buildinfo file?

That is: if I run dpkg-buildpackage and post the .deb and .buildinfo
somewhere, do we have a script that takes the .buildinfo as input and
reproduces the .deb?

Once ftp-master publishes .buildinfo files, it would be useful to run
such a tool on packages in the archive, either as they are uploaded, or
periodically on the whole archive.  That'd be reproducibility "in the
field", not just in the jenkins lab environment. :-)

Naturally, packages that aren't reproducible on jenkins might not be
reproducible 'in the field' ("might", since we might disable some
variations in the 'in the field' testing), but packages that _are_
reproducible on jenkins should be reproducible 'in the field' as well.

Cheers,

Daniel
(who got the idea from Bernhard's remark about 'osc build' at the meeting)