https://reproducible.alioth.debian.org/presentations/2015-08-13-CCCamp15.pdf https://reproducible.alioth.debian.org/presentations/2015-08... has some tips on wh

https://reproducible.alioth.debian.org/presentations/2015-08-13-CCCamp15.pdf https://reproducible.alioth.debian.org/presentations/2015-08... has some tips on what you can do to ensure your own FOSS packages have reproducible builds, e.g.: * avoid storing build-timestamps (maybe use timestamp of last commit instead) * avoid storing build numbers * LC_ALL=C sort the sets of things where order is undefined/unimportant, e.g. file lists going into tar or hash keys * try building, then changing something in the environment, building again and diffing (with diffoscope)