an invention by bmwiedemann
I have spent a lot of time making packages reproducible, but we also want to be able to trust our VM images.