It's Not Just Timestamps: A Study on Docker Reproducibility

AN
Ali Nemati
Feb 2326 sec read11 views

A study on Docker reproducibility found that only 56% of GitHub repositories with Dockerfiles produce buildable images, and just 2.7% are bitwise reproducible without infrastructure configurations. The research highlights that developer choices like uncleaned caches and floating versions are major causes of non-reproducibility beyond timestamps and metadata, emphasizing the need for stricter Dockerfile guidelines to improve container integrity.

Read the full article at arXiv cs.CR (Cryptography & Security)


Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

11
Comments
AN
Ali NematiWritten by Ali
View all posts

Related Articles

It's Not Just Timestamps: A Study on Docker Reproducibility | OSLLM.ai