Re: Reproducible builds of ports

Hi

On 10/11/2025 03:21, Simon Wright wrote:
> Unless I'm missing something, wouldn't using poudriere with the same 
> make.conf as the package builders and default options from the same 
> git build give *functionally* identical packages?

The goal is bit-for-bit reproducibility, "functionally" is not enough.

> I don't have a need for identical packages but I find it useful and 
> elegant to check the git build level being used by the package 
> builders, checkout the same build then build my few packages and 
> dependencies locally. That way I get my options included in my 
> packages where necessary but the rest of the packages are unaffected. 
> Doing this for the whole tree with default options throughout should 
> get the OP what he needs. Yes? Or have I misunderstood what is needed?

Right, I think my current issue is how I rebuild packages. They are sent 
into a queue for rebuild in alphanumeric or random-ish order, which 
means that when I check

out the ports tree for each one (using the same jail), the tree can jump 
back and forth in commit history.

I did have an epiphany last night that if I actually grouped packages by 
port tree commit and build them in commit timestamp order,

I would essentially be tracking what the upstream CI does and only 
progress forward.


Best regards