https://reproducible-builds.org shows a tremendous work that's being done in an attempt to make the systems we run more transparent. Here is a chart showing the transparency of Debian unstable. They started tracking these stats in 2014 where first packages got reproduced from source.
🟩 these packages were successfully reproduced
🟧 these packages are marked FTBR - failed to build reproducibly
🟥 these packages are marked FTBFS - failed to build from source
So people assume, running linux is kind of all audited and transparent, yet there is packages that are hard to build from source. How is that even possible? How many of these packages are FTBFS in a minimal installation? Or are FTBR/FTBFS only fringe games I never installed?
When building a wallet, do any 🟥/🟧 packages touch the build process? Can I claim a wallet can be built reproducibly if both the provider and myself build it on a software stack that contains opaque binary blobs?
