buildinfo files are now available from launchpad

[Dimitri John Ledkov]

https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/bootstrap/+build/27033154

now under binary changes file, also has a buildinfo file url. This
file can be used to aid in reproducible builds.

There are tools to parse that file, and for example create chroot with
all the matching build-dependencies. When paired with point-in-time
ubuntu archive mirror
https://discourse.canonical.com/t/announcing-snapshot-ubuntu-com/1725
one can fairly reliably recreate build environments of any package
(circa like one year ago and counting).

Separately cpc team has written a tool to fetch those files
https://github.com/canonical/ubuntu-package-buildinfo - for example we
don't set consistent build time stamp; kernel user / hostname; or
store the public ephemeral key cert anywhere. But hopefully as we fix
things it will become useful.

At the very least, this buildinfo file should answer exact toolchain
packages and versions used in a more structured way than parsing build
logs.

For example these buildinfo files, might be useful to livepatch
tooling we have when populating toolchain PPAs.

-- 
Dimitri

Sent from Ubuntu Pro
https://ubuntu.com/pro