Re: Reproducible tarballs

Simon Josefsson via Bug reports for the GNU Internet utilities <[email protected]> Mon, 20 May 2024 09:47:30 +0200

Newsgroups	gmane.comp.gnu.inetutils.bugs
Message-ID	<[email protected]>

Collin Funk <[email protected]> writes:

> Hi Simon,
>
> On 5/12/24 3:56 AM, Simon Josefsson via Bug reports for the GNU Internet utilities wrote:
>> I have committed the attached patches giving us reproducible tarballs.
>> 
>> The particular logic to verify this continously is in the
>> 000-reproducibility pipeline job, code here:
>
> Cool!
>
> A bit late but I see you are also maintainer for the Debian Gnulib
> package. I thought your ideas there seemed really interesting, using a
> distributed git bundle for building packages.
>
> I didn't want to add extra noise to that discussion since I have no
> packaging experience. The best I can do there is try to not modify
> 'gnulib-tool --version' sources so that you don't have to update your
> patches. No promises there but I will do my best. :)

Heh, no worries: further modifications enables us the excercise that
patching implementation which may be useful on its own.  Now that the
idea is implemented, tweaking it shouldn't be that hard.

/Simon

signature.asc (application/pgp-signature, 255 B)