File README of Package SLES-reproducible-builds
This package is meant to be installed to prevent installation of unreproducible packages for SLES Some packages are not listed here because builds can be verified under certain conditions: Botan: needs to be built before 2029-01-30 (SSL cert expires) ceph: needs to be built before year 2038 ( https://tracker.ceph.com/issues/68778 ) certmonger: needs to be built before year 2038 (bsc#1246417 SSL) cockpit: needs to be built before 2030-07-14 (bsc#1246435 SSL) colord: needs AVX2 on the build machine (bsc#1237156) #elixir: needs to be built on a 4-core VM emacs: needs to be built on SandyBridge or newer CPU (bsc#1239628) gcc15: needs to be built before year 2038 (bsc#1223169) glycin-loaders: needs to be built on a 4-core VM (bsc#1230879) guile: needs to be built on a VM with 2+ cores helm: needs to be built before year 2032 (SSL) java-21-openjdk: needs to be built on a 4-core VM (bsc#1221224) leancrypto: needs to be built before year 2034 (SSL) libsoup: needs to be built on a 4-core VM libsoup2: needs to be built on a 4-core VM liburing: needs to be built on a 4-core VM libvirt: needs to be built before 2030-03-17 mariadb: needs to be built before 2040-02-27 (SSL) +memcached: needs to be built before year 2038 (bsc#1246407) nodejs22: needs to be built before 2031-12-18 nodejs22: needs to be built on a new-ish CPU openssl-3: needs to be built before 2035-07-02 perl-IO-Socket-SSL: needs to be built before 2032-12-08 perl-Net-SSLeay: needs to be built before 2038-01-01 +python-aiohttp: needs to be built on a 4-core VM python-aioquic: needs to be built before 2028-07-07 (https://github.com/aiortc/aioquic/issues/557 ) python-asyncpg: needs to be built before 2032-01-04 (https://github.com/MagicStack/asyncpg/issues/997 ) python-execnet: needs to be built on a 4-core VM python-M2Crypto: needs to be built before 2034-09-14 (SSL) python-vcrpy: needs to be built on a 4-core VM python-websockets: needs to be built on a 4-core VM python-wxPython: needs to be built on a 4-core VM qca: needs to be built before 2030-12-31 qt6-declarative qt6-quick3d qt6-sensors qt6-virtualkeyboard: need to be built on a 4-core VM (bsc#1228131) systemd: needs to be built before 2037-12-31 (bsc#1226200) tbb: needs to be built on a 4-core VM xmlsec1: needs to be built before 2034-07-16 (SSL) Remaining issues for reproducible builds: ceph (bsc#1237212) clamav (bsc#1249404) erlang / elixir / rabbitmq-server (bsc#1245558) gstreamer-plugins-rs (bsc#1237097) +hawk2 (bsc#1230275) java-17-openjdk (various old issues) +librcc librcd (bsc#1249405) +llvm15 /17 (bsc#1199076 remaining issue in openmp/libomp) python313:nogil-base (bsc#1244680) +python-numpy (bsc#1245203) +rage-encryption (bsc#1244083) +suse-lifecycle (bsc#1249253) trento-wanda / trento-web (bsc#1242014) dpdk / fwupd-efi / grub2 / xen / kernel / kmps(crash,drbd,leancrypto,nvidia-open-driver-G06-signed) / s390-tools, systemd are PE-signed for secure boot ; causes an unavoidable diff and needs extra tooling to check containers and images (bsc#1247307, bsc#1245501, bsc#1246096 some variations in metadata) (+ marks packages where patches are known) Past issues with reproducible-builds that were fixed in the year 2025: abseil-cpp (bsc#1235867) bcc (bsc#1236871) binutils (bsc#1040589) ca-certificates-mozilla (bsc#1229003) crash (bsc#1230281) dpdk (bsc#1244130) efivar (bsc#1231368) elemental-toolkit emacs (bsc#1239628) gcc15 (bsc#1238491) groff (bsc#1236773) gsl (boo#1227364) gettext-runtime (bsc#1134568) java-21-openjdk (bsc#1213796) kernel-source:kernel-docs (bsc#1238303) kbd (bsc#1240348) kea (bsc#1246670) libcamera (bsc#1217690) libguestfs (bsc#1216986) libpinyin / ibus-libzhuyin (bsc#1180734) llvm19 (bsc#1199076) mage (boo#1047218) meson (boo#1237231) mozilla-nss (bsc#1081723) xmlgraphics-fop (bsc#1237094) openblas (bsc#1181083) ovmf (bsc#1244218) perl-HTTP-CookieJar (https://github.com/dagolden/HTTP-CookieJar/pull/16 ) procps (bsc#1246330) python313 (bsc#1239210) python313:doc (bsc#1243155) python-eventlet (boo#1102840) python-mysqlclient (bsc#1234334) python-rdflib:doc (bsc#1245096 bsc#1234335) python-zope.hookable (bsc#1234334) python-zope.i18nmessageid (bsc#1234334) qt6-tools (bsc#1243434) rsign2 (bsc#1245269 + bsc#1237231)
