Bug#1105019: sbuild: source.changes includes binary build info
Holger Levsen <[email protected]>
| Newsgroups | gmane.linux.debian.devel.dpkg.bugs |
|---|---|
| Message-ID | <aCMooTVqU2OQm9Ug__25220.2103425347$1747134925$gmane$org@layer-acht.org> |
hi Guillem, On Tue, May 13, 2025 at 12:02:54PM +0200, Guillem Jover wrote: > > can't we change this requirement? .buildinfo files for _source.changes > > don't make sense, so we shouldn't create nor distribute them. > (I think we have discussed this in the past. :) indeed! :) > If someone uses dpkg-buildpackage, then build dependencies need to be > satisfied (even for source-only builds), where code gets executed from > the package itself (clean targets etc), so this is also a build that > generates an upload represented in a .changes file. point taken. (not sure whether I previously that it this way, thus I'd rather say so now.) > Those can also > affect source package generation, so I still think it does make sense > that they generate a .buildinfo file. I also think reproducible source > packages are an important thing that we already have (at least tooling > wise), which I'd rather not regress support on. actually we don't have reproducible source packages and last time we looked (which argueingly is 10 years ago) it didnt seem feasible *and* we didn't see a compelling reason to have them either. why do you think they are important? -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C ⠈⠳⣄ its crazy that civilization is ending in like 20-30 years and were just here working jobs. (@RobDenBleyker)
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmgjKJ0ACgkQCRq4Vgaa qhxgIA//bfE/vqZ+2Vx6460ErYAiB3ebYBNxf79J9wGMtPliJD40nTcwKBj/+avJ PKdsWk4/J3257EI5RQYKzo0xUGEk0Vupv7hvd60ngNJn0GTiohJGlpj6x68JiQj/ hnS82XuGYpXyP2f8YIYUsMVm6o9bV31uW1RiucSJSeJGfXSoE8oK/ojxobj2Kv7k /6evDy/UjLsix0PDQBfw7ol7GUmyc7EjxraDDdBqnKbrs5AVlkrC73aJtS7RBniR Il4D81Lhh2+iAhDasJ8Pj0lu4QakayY7Y32AUPidBmLTUegwr/L1nFrNZfyuEK/Z zQhL39FGdCBcmhTL4UF9Qqipzb1TboCSgCvaBXbYonzrxvPM1tX2eIK7JprFo8US JMhMHgIvvTfUKTmudkNa3T41h69bdqSFxCcrDImewbkJhnd22GP5miluK8vgyyPq hHVlQUFuCPnR1FXzgqj0rr+hhKK6uNSpv1FfDO5qQj+obmTZ1glQQtxtp03evRqr 5oVvsh2AmmKZgmcLUGlMovf55f9wSoEAzTckeFKU+joBZ4cjbYIIiovDvgNqTfsg rb/Mbeyks9cz/KnrjAVTcjieJ57qkQ8QpB+Z7urdxCoB7Bx9s8LhrQpPS2V4Ex3U ImK9ZUvJTHmB5u34ZP6NHqhlOWTChfHEhLH892zN6/dgIuR+dzM= =k0bN -----END PGP SIGNATURE-----