>What about virtualization?

> 

>Maybe we could set-up some kind of cluster of remote and dedicated vm's as a unique build system. Could be a good workaround over security and integrity issues, 'cause we are using >a "single" build system.

That is the thing SuSE OBS does. The System which builds the package is a VM on a XEN Host, which is generated automatically from a defined Image, every time and for every package.

So it is clear, that the package is built on a clean system with the right OS and Patch level.