git2orig — Debian Git to Orig Tarball Checker

Checks if the orig tarball generated from the Vcs-Git repository matches the orig tarball in the archive. This ensures that the upstream source can be reproduced from the Git repository.

How It Works

For each Debian Source Control (.dsc) file, git2orig:

1. Clones the Git repository specified in the Vcs-Git field.
2. Identifies the commit corresponding to the package version.
3. Downloads the source package specified by the .dsc URL.
4. Attempts to generate the orig tarball using:
   • pristine-tar checkout (if pristine-tar branch exists)
   • gbp export-orig
   • git-deborig
5. Compares the generated tarball(s) with the one from the archive (bit-by-bit and normalized).

Results

A per-maintainer/team dashboard is available on the Debian Maintainer Dashboard.

Statistics are also available.