jargon

Platform & DevOps·Packaging: containers and images

you build the same commit twice on different machines and get byte-identical output, timestamps and all.

Reproducible build

Also calleddeterministic build, bit-for-bit reproducibility

A build whose output depends only on its declared inputs, so anyone can rebuild it and verify they got the same artefact. Ordinary builds are not reproducible by default — timestamps, file ordering, embedded paths and unpinned dependencies all leak in. It matters because it is the only way to check that a published artefact really is what the source says it is, which is the whole basis of supply-chain provenance.

Commonly confused with