A talk about the security benefits and challenges of reproducible builds. It includes a real world comparison of the Debian and Fedora build systems and a discussion on the value based on the effort. Listeners should come away with knowledge of what reproducible builds are and opinions on if they are worth the effort.

30 minutes plus QA discussion. First presented at the NCSU Secure Software Supply Chain Community Day