Flatpak builds are not reproducible and why that's a practical problem
6 minutes read.
Published: 2022-05-09
Table of contents
Update 2022-05-10
BUT...
Introduction
The flatpak tools
The flatpak manifest
Problem 1: where should I get the runtime from?
Solution
Problem 2: what version is it?
Solution
Problem 3: reproducibility
Solution
Conclusions
Update 2022-05-10
I've just talked to a flatpak contributor, who gave me more information on the topic.
Flatpaks technically are reproducible! All the metadata needed to reproduce the build is present inside the built pack...
Read more at ranfdev.com