Source: rust-rebuilderd Section: net Build-Depends: debhelper-compat (= 13), dh-sequence-cargo, help2man, libdebhelper-perl Build-Depends-Arch: cargo:native, rustc:native, libstd-rust-dev, librust-actix-web-4+default-dev (>= 4.1.0), librust-chrono-0.4+default-dev (>= 0.4.19), librust-chrono-0.4+serde-dev (>= 0.4.19), librust-clap-4+default-dev, librust-clap-4+derive-dev, librust-clap-4+env-dev, librust-data-encoding-2+default-dev, librust-diesel-2+chrono-dev, librust-diesel-2+default-dev, librust-diesel-2+i-implement-a-third-party-backend-and-opt-into-breaking-changes-dev, librust-diesel-2+r2d2-dev, librust-diesel-2+returning-clauses-for-sqlite-3-35-dev, librust-diesel-2+sqlite-dev, librust-diesel-migrations-2+default-dev, librust-diesel-migrations-2+sqlite-dev, librust-dirs-next-2+default-dev, librust-dotenvy-0.15+default-dev, librust-env-logger-0.11+default-dev, librust-in-toto-0.4+default-dev, librust-log-0.4+default-dev (>= 0.4.17), librust-pem-3+default-dev, librust-rand-0.10+default-dev, librust-rebuilderd-common-0.26+default-dev, librust-rebuilderd-common-0.26+default-dev (<< 0.26.1), librust-rebuilderd-common-0.26+diesel-dev, librust-rebuilderd-common-0.26+diesel-dev (<< 0.26.1), librust-serde-1+default-dev (>= 1.0.137), librust-serde-1+derive-dev (>= 1.0.137), librust-serde-json-1+default-dev (>= 1.0.81), librust-tokio-1+default-dev (>= 1.44.2), librust-toml-0.9+default-dev, librust-zstd-0.13+default-dev (>= 0.13.3) Maintainer: Debian Rust Maintainers Uploaders: kpcyrd , Holger Levsen Standards-Version: 4.7.3 Vcs-Git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/rebuilderd] Vcs-Browser: https://salsa.debian.org/rust-team/debcargo-conf/tree/master/src/rebuilderd Homepage: https://github.com/kpcyrd/rebuilderd X-Cargo-Crate: rebuilderd X-Cargo-Crate-Version: 0.26.0 Package: librust-rebuilderd-dev Architecture: any Multi-Arch: same Depends: ${misc:Depends}, librust-actix-web-4+default-dev (>= 4.1.0), librust-chrono-0.4+default-dev (>= 0.4.19), librust-chrono-0.4+serde-dev (>= 0.4.19), librust-clap-4+default-dev, librust-clap-4+derive-dev, librust-clap-4+env-dev, librust-data-encoding-2+default-dev, librust-diesel-2+chrono-dev, librust-diesel-2+default-dev, librust-diesel-2+i-implement-a-third-party-backend-and-opt-into-breaking-changes-dev, librust-diesel-2+r2d2-dev, librust-diesel-2+returning-clauses-for-sqlite-3-35-dev, librust-diesel-2+sqlite-dev, librust-diesel-migrations-2+default-dev, librust-diesel-migrations-2+sqlite-dev, librust-dirs-next-2+default-dev, librust-dotenvy-0.15+default-dev, librust-env-logger-0.11+default-dev, librust-in-toto-0.4+default-dev, librust-log-0.4+default-dev (>= 0.4.17), librust-pem-3+default-dev, librust-rand-0.10+default-dev, librust-rebuilderd-common-0.26+default-dev, librust-rebuilderd-common-0.26+default-dev (<< 0.26.1), librust-rebuilderd-common-0.26+diesel-dev, librust-rebuilderd-common-0.26+diesel-dev (<< 0.26.1), librust-serde-1+default-dev (>= 1.0.137), librust-serde-1+derive-dev (>= 1.0.137), librust-serde-json-1+default-dev (>= 1.0.81), librust-tokio-1+default-dev (>= 1.44.2), librust-toml-0.9+default-dev, librust-zstd-0.13+default-dev (>= 0.13.3) Provides: librust-rebuilderd+default-dev (= ${binary:Version}), librust-rebuilderd-0-dev (= ${binary:Version}), librust-rebuilderd-0+default-dev (= ${binary:Version}), librust-rebuilderd-0.26-dev (= ${binary:Version}), librust-rebuilderd-0.26+default-dev (= ${binary:Version}), librust-rebuilderd-0.26.0-dev (= ${binary:Version}), librust-rebuilderd-0.26.0+default-dev (= ${binary:Version}) Description: Rebuilderd - independent build verification daemon - Rust source code Source code for Debianized Rust crate "rebuilderd" Package: rebuilderd Architecture: any Section: net Depends: ${misc:Depends}, ${shlibs:Depends}, ${cargo:Depends} Recommends: ${cargo:Recommends} Suggests: ${cargo:Suggests} Provides: ${cargo:Provides} Built-Using: ${cargo:Built-Using} Static-Built-Using: ${cargo:Static-Built-Using} Description: Monitor and reproduce binary packages from source - Reproducible Builds Monitors the package repository of a Linux distribution and uses rebuilder backends such as debrebuild and archlinux-repro to verify that binary packages can be reproduced from their corresponding source code. . The system tracks the verification status of rebuilt packages and can optionally generate detailed difference reports using diffoscope to allow for troubleshooting. Due to the early stage of this technology, rebuild failures are more commonly caused by non-deterministic build processes than by supply chain compromises. However, if multiple independent rebuilders you trust report successful bit-by-bit reproduction for 100% of the packages you use, you can be confident that during the build process the binaries have not been tampered with and faithfully correspond to the specified source code. . Users are encouraged to operate their own rebuilders whenever possible. The repro-threshold tool allows you to require that a package must be successfully reproduced by multiple trusted rebuilderd instances before it is considered verified and safe to install.