Bug#1105019: sbuild: source.changes includes binary build info

Holger Levsen <[email protected]>
Newsgroups gmane.linux.debian.devel.dpkg.bugs
Message-ID <aCMooTVqU2OQm9Ug__25220.2103425347$1747134925$gmane$org@layer-acht.org>
hi Guillem,

On Tue, May 13, 2025 at 12:02:54PM +0200, Guillem Jover wrote:
> > can't we change this requirement? .buildinfo files for _source.changes
> > don't make sense, so we shouldn't create nor distribute them.
> (I think we have discussed this in the past. :)

indeed! :)
 
> If someone uses dpkg-buildpackage, then build dependencies need to be
> satisfied (even for source-only builds), where code gets executed from
> the package itself (clean targets etc), so this is also a build that
> generates an upload represented in a .changes file.

point taken. (not sure whether I previously that it this way, thus I'd rather
say so now.)

> Those can also
> affect source package generation, so I still think it does make sense
> that they generate a .buildinfo file. I also think reproducible source
> packages are an important thing that we already have (at least tooling
> wise), which I'd rather not regress support on.

actually we don't have reproducible source packages and last time we looked
(which argueingly is 10 years ago) it didnt seem feasible *and* we didn't
see a compelling reason to have them either.

why do you think they are important?


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

its crazy that civilization is ending in like 20-30 years and were just here
working jobs. (@RobDenBleyker)
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=k0bN
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.