Whalebuilder is a tool for building Debian packages in a minimal environment. It is inspired by pbuilder, but uses Docker to manage the build environment.
Whalebuilder builds packages:
- with only
build-essentialand the package's build dependencies installed;
- as a non-priviledged user;
- with networking disabled, to ensure that the build process does not inadvertently rely on any external resources; and
- without any daemons running
In addition, Whalebuilder will print a warning if it detects that the build has made any changes to the filesystem outside of the build directory.