Linux workstation

Fedora 43 native package

build-reproducibility-srpm-macros

Configuration to integrate add-determinism in package builds

Packages / Fedora 43 / Unspecified / build-reproducibility-srpm-macros

[Source: rust-add-determinism]

Package: build-reproducibility-srpm-macros (0.6.0-3.fc43)

External Resources:

Homepage: [crates.io]

Similar packages:

  • [add-determinism]

    RPM buildroot helper to strip nondeterministic bits in files

Configuration to integrate add-determinism in package builds

Configuration to integrate add-determinism in package builds. This package is intended to be pulled in by redhat-rpm-config.

Other Packages Related to build-reproducibility-srpm-macros:

  • dep: [add-determinism] (= 0.6.0-3.fc43)

    RPM buildroot helper to strip nondeterministic bits in files

Download build-reproducibility-srpm-macros

ArchitecturePackage SizeInstalled SizeFiles
noarch12 KiB735 B[list of files]

Package file paths (1)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/rpm/macros.d/macros.build-reproducibility

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browserBuild an image that includes build-reproducibility-srpm-macros

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.6.0-3.fc4343 / updatesnoarchFedora 43 · updates · x86_6412 KiB735 BPackages/b/build-reproducibility-srpm-macros-0.6.0-3.fc43.noarch.rpm
0.6.0-3.fc4343 / updatesnoarchFedora 43 · updates · aarch6412 KiB735 BPackages/b/build-reproducibility-srpm-macros-0.6.0-3.fc43.noarch.rpm
0.6.0-2.fc4343 / everythingnoarchFedora 43 · Everything · x86_6412 KiB735 BPackages/b/build-reproducibility-srpm-macros-0.6.0-2.fc43.noarch.rpm
0.6.0-2.fc4343 / everythingnoarchFedora 43 · Everything · aarch6412 KiB735 BPackages/b/build-reproducibility-srpm-macros-0.6.0-2.fc43.noarch.rpm

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

0.6.0-3.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: bf3f93da0b463283c8a0c2952586c9b3c94150ae56907321a9c40c624533641c

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'bf3f93da0b463283c8a0c2952586c9b3c94150ae56907321a9c40c624533641c' 'build-reproducibility-srpm-macros-0.6.0-3.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

0.6.0-3.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: bf3f93da0b463283c8a0c2952586c9b3c94150ae56907321a9c40c624533641c

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'bf3f93da0b463283c8a0c2952586c9b3c94150ae56907321a9c40c624533641c' 'build-reproducibility-srpm-macros-0.6.0-3.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

0.6.0-2.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 563174aec7bee5916a2dac512e8f868f92ba11a3415eae877795ddba5af7c688

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '563174aec7bee5916a2dac512e8f868f92ba11a3415eae877795ddba5af7c688' 'build-reproducibility-srpm-macros-0.6.0-2.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

0.6.0-2.fc43 / noarchObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 563174aec7bee5916a2dac512e8f868f92ba11a3415eae877795ddba5af7c688

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '563174aec7bee5916a2dac512e8f868f92ba11a3415eae877795ddba5af7c688' 'build-reproducibility-srpm-macros-0.6.0-2.fc43.noarch.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2, Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2, Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac, Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Fedora 43 Everything aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 Everything x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 updates aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    0af1807dead0a1d28599a942743e244fe57da21cf6a935b3e4155f4a3f1070a1
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 updates x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    3ae5fecc3db8c7b4ce0cf54a8ea572ed4694e7e132e201c2f6ab6570259d1061
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

build-reproducibility-srpm-macros Package for Fedora 43 | OpenFactory