What Debian doesn't ship, packaged as if it did. Current upstream releases, built from source for Debian stable, testing and unstable on amd64 and arm64, served from a signed APT archive.
Follow the installation instructions on pkg.haus, then run:
sudo apt install <package>The package pool is browsable at apt.pkg.haus. Added, updated and retired packages are listed at apt.pkg.haus/news, with an RSS feed. Download counts, measured at the edge, are published at apt.pkg.haus/stats.
Every published version's build record and the source package it was built from are at buildinfos.pkg.haus, so "built from source" is something you can check rather than something we assert. reproducible.pkg.haus makes that check for every package: it rebuilds each one from its own build record and publishes whether the bytes match.
- action-debian-build: the build action and per-suite builder images, native amd64 and arm64, with provenance and SBOMs. Also on the GitHub Marketplace.
- apt: the archive. Its ingest builds each enrolled package's newest release from source and publishes only what the archive lacks.
- buildinfos: the build records. What
each package was built from and with, published beside the source package it
was built from, which is what lets
debrebuildreproduce it. - packages: every package's Debian
packaging, one directory each. Merging a changelog entry builds the release
across both architectures and all three suites, tags it, and tells the archive.
It also holds
pkghaus-archive-keyring,
the signing key as a package, so key rotations arrive through
apt upgrade. Its fingerprint is in SECURITY.md. - reproducible: the verdicts.
Rebuilds every published package from its own build record with
debrebuild:GOODwhen the bytes match,BADwhen they differ,UNKWNwhen the rebuild could not be completed.
If you feel like buying us a coffee (or a beer?), donations are welcome:
BTC : bc1qq04jnuqqavpccfptmddqjkg7cuspy3new4sxq9
DOGE: DRBkryyau5CMxpBzVmrBAjK6dVdMZSBsuS
ETH : 0x2238A11856428b72E80D70Be8666729497059d95
LTC : MQwXsBrArLRHQzwQZAjJPNrxGS1uNDDKX6