AI BriefingArch Linux Releases Bit-for-Bit Reproducible Docker Images
Key point
Arch Linux has released reproducible Docker images under the new `repro` tag.
Details
Arch Linux has released a bit-for-bit reproducible Docker image under the new repro tag on Docker Hub. It reuses the same rootFS build system used for the WSL image, ensuring that repeated builds produce the same digest.
To achieve reproducibility, the pacman keyring was removed from the image. As a result, pacman cannot be used right away, and the keyring must be regenerated inside the container with pacman-key --init && pacman-key --populate archlinux. In Distrobox, the same command can be placed in --pre-init-hooks.
Reproducibility was verified through digest equality across builds and comparison with diffoci. On the Docker image side, the following adjustments were applied.
- Set
SOURCE_DATE_EPOCHand reflect it in theorg.opencontainers.image.createdLABEL - Remove
var/cache/ldconfig/aux-cacheto eliminate non-determinism - Normalize timestamps in
docker build/podman buildusing--source-date-epochand--rewrite-timestamp
Related reproducible build documentation and changes have also been published on the Arch Linux GitLab.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.
Related
Arch Linux now provides bit-for-bit reproducible Docker imagesDocker Sandboxes - Disposable Isolated Environments for AI Agents