It's to clear to me exactly what is needed here but I think

 - provide a .source_buildinfo giving versions of stuff
 - provide a method to repro
 - test case
 - fix if it isn't reproducible

I think this is a blocker for deployment.

Ian.

control: unblock 932558 by 932802

The thing that is blocking for deployment is including the
_source.buildinfo, which we are tracking with a GitLab issue.
Actually verifying reproducibility is not blocking.

Final Notice.

You are among the beneficiaries of 2024/2025 grant for all scam victims and relatives reconfirm your email if active for more details

Thank You.

Regards
Mr. Rowland Cole
( Financial Crimes Enforcement Network)

retitle -1 test suite should check tag2upload output is reproducible
severity -1 minor

We think both the git objects, and the .dsc, are probably
reproducible, but we're not sure.

Also it would nice if some external non-Debian service was auditing
out output.