{"id":169487,"date":"2026-04-20T23:12:41","date_gmt":"2026-04-20T21:12:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-arch-linux-obespechena-vosproizvodimaya-sborka-obrazov-kontejnerov"},"modified":"2026-04-20T23:12:41","modified_gmt":"2026-04-20T21:12:41","slug":"v-arch-linux-obespechena-vosproizvodimaya-sborka-obrazov-kontejnerov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-arch-linux-obespechena-vosproizvodimaya-sborka-obrazov-kontejnerov","title":{"rendered":"Arch Linux provides reproducible builds of container images.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The Arch Linux distribution provides reproducible container image builds, ensuring that the binaries included in the image are compiled from the provided source code and contain no hidden modifications. Reproducible Arch Linux images are hosted on Docker Hub under the tag repro. Anyone can build a bit-for-bit identical container image from the source code that matches the prebuilt images released by the project and verify that the distribution's build infrastructure, compiler, and build tools are not compromised. <\/p>\n
When creating reproducible builds, details such as exact dependency matches, the use of immutable build tool compositions and versions, identical sets of options and default settings, preservation of the order of file assembly (applying the same sorting methods), and disabling the compiler from adding non-deterministic metadata like random values, file path references, and build date and time data are taken into account. Build reproducibility can also be affected by toolchain bugs and race conditions. <\/p>\n
Reproducible images are provided separately, as they do not include keys for the pacman package manager to ensure full reproducibility. If you need to update or install packages via pacman in these images, you must run the command to recreate the keyring (\"pacman-key --init && pacman-key --populate archlinux\"). To verify the identity of your own build against the image distributed through Docker Hub, you can compare the hashes returned by the command \"podman inspect --format '{{.Digest}}' \", or use the diffoci tool. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"