Packages / Fedora 44 / Unspecified / build-reproducibility-srpm-macros

[Source: rust-add-determinism]

Package: build-reproducibility-srpm-macros (0.7.3-2.fc44)

Configuration to integrate add-determinism in package builds

Configuration to integrate add-determinism in package builds. This package is intended to be pulled in by redhat-rpm-config.

Other Packages Related to build-reproducibility-srpm-macros:

  • dep: [add-determinism] (= 0.7.3-2.fc44)

    RPM buildroot helper to strip nondeterministic bits in files

  • dep: [linkdupes] (= 0.7.3-2.fc44)

    RPM buildroot helper to hardlink identical files

  • dep: selinux-policy-any

    Package not available

Download build-reproducibility-srpm-macros

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch13 KiB1.2 KiBlist of filesDownload

Package file paths (1)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/rpm/macros.d/macros.build-reproducibility

Field source: Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 44 in the browserBuild an image that includes build-reproducibility-srpm-macros

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.7.3-2.fc4444 / updatesnoarchFedora 44 · updates · x86_6413 KiB1.2 KiBPackages/b/build-reproducibility-srpm-macros-0.7.3-2.fc44.noarch.rpm
0.7.3-2.fc4444 / updatesnoarchFedora 44 · updates · aarch6413 KiB1.2 KiBPackages/b/build-reproducibility-srpm-macros-0.7.3-2.fc44.noarch.rpm
0.7.3-1.fc4444 / everythingnoarchFedora 44 · Everything · x86_6413 KiB1.2 KiBPackages/b/build-reproducibility-srpm-macros-0.7.3-1.fc44.noarch.rpm
0.7.3-1.fc4444 / everythingnoarchFedora 44 · Everything · aarch6413 KiB1.2 KiBPackages/b/build-reproducibility-srpm-macros-0.7.3-1.fc44.noarch.rpm

Field source: Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

0.7.3-2.fc44 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: e35bf8326fc1b77a3774b36133972debc4c29e67641c1572044f3484aada1842

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'e35bf8326fc1b77a3774b36133972debc4c29e67641c1572044f3484aada1842' 'build-reproducibility-srpm-macros-0.7.3-2.fc44.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419

0.7.3-2.fc44 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: e35bf8326fc1b77a3774b36133972debc4c29e67641c1572044f3484aada1842

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'e35bf8326fc1b77a3774b36133972debc4c29e67641c1572044f3484aada1842' 'build-reproducibility-srpm-macros-0.7.3-2.fc44.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 updates aarch64 revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b

0.7.3-1.fc44 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: febf89860aea724c39d23efb0776f4f3ab589f712344c4a8158101a2ae2321ab

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'febf89860aea724c39d23efb0776f4f3ab589f712344c4a8158101a2ae2321ab' 'build-reproducibility-srpm-macros-0.7.3-1.fc44.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 Everything x86_64 revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991

0.7.3-1.fc44 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: febf89860aea724c39d23efb0776f4f3ab589f712344c4a8158101a2ae2321ab

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'febf89860aea724c39d23efb0776f4f3ab589f712344c4a8158101a2ae2321ab' 'build-reproducibility-srpm-macros-0.7.3-1.fc44.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee, Fedora 44 Everything x86_64 revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991, Fedora 44 updates aarch64 revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b, Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Fedora 44 Everything aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    236514c32119ab3c85b81fbb9e5e9d92b07aeba0d19d64c9b4fc9117a1863769
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-44-primary
    SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 44 Everything x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    1300b99ac5d04b5561ad901320c8bd59ed1553f4971c3ce2ca48c40242c66676
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-44-primary
    SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 44 updates aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    2ec0ba92e556309075d8efe3c3301b36bb7ecd47c4e17566f0192c9c5436ed5f
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-44-primary
    SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 44 updates x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    a69a0ab020457a7af2515066b7caccb3950bcf9dc7bedb52b1850098d9857ae1
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-44-primary
    SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified