#debian-forky — Public Fediverse posts

Debian 14 Forky is mandating bit-for-bit identical builds to stop supply chain attacks. Discover how this shifts trust from servers to auditable source code.

More details here: https://ostechnix.com/debian-linux-reproducible-builds/

#Debian14 #DebianForky #ReproducibleBuilds #Security #Linux #Packages #SupplyChainSecurity

Debian 14 will only contain reproducible packages.

#Debian #DebianLinux #DebianForky #Linux #Computers #Laptops #TechNews #TechUpdates

https://officialaptivi.wordpress.com/2026/05/10/debian-14-will-only-contain-reproducible-packages/

Debian 14 will only contain reproducible packages

Reproducible builds are a set of rules that apply to software development, including applications and libraries, to create a verifiable path from the source code to the binary code. It allows you to build the library or the application bit-for-bit. Reproducible builds tend to have great features, including, but not limited to:

• Security and trust: Allows third-parties to make sure that the software hasn’t been altered or tampered with.
• Transparency in development: Makes sure that developers’ code always works the same way.
• Resilience against attacks: Allows third-parties to verify the developers’ software to prevent your projects from being compromised.

Half way through the development cycle of the upcoming Debian release expected in 2027, Debian 14 Forky, the Debian release team has made a decision regarding the reproducible builds effort. Over the years with the Reproducible Builds effort that makes sure that packages get built consistently bit-for-bit, the Debian release team has decided that reproducible builds must be satisfied for the Debian packages to be approved.

A new mandate for Debian 14 Forky states that the reproducible packages, which are packages that build consistently and with confidence bit-for-bit, must be shipped. The migration software will reject the package addition or update if said package no longer becomes reproducible.

The Debian release team has also provided a link that allows you to check the package reproducibility status for the upcoming version of Debian via https://reproduce.debian.net/.

Via: Phoronix

Heads up if you're running #Debian #Forky (a.k.a. Debian Testing) and you have a lot of RAM. The new user-space OOM manager systemd-oomd doesn't treat kernel cache memory as available when calculating memory usage. That means it decides you're running out of RAM when you actually aren't and kills processes when it shouldn't.
Ref: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1118191
You might want to uninstall it until this is fixed, or mask systemd-oomd.{service,socket} and reboot to disable it.
#DebianForky #Linux #systemd

#Debian 15 will be named "#Duke" in 2029, it will be the version after Debian 13 "#Trixie" this year (2025) and Debian 14 "#Forky" (2027) | (#DebianTrixie / #DebianForky / #DebianDuke / #Linux / #OperatingSystem) https://debian.org/