Re: Reproducible builds of ports

Simon Wright <[email protected]>
Newsgroups gmane.os.freebsd.devel.ports
Message-ID <[email protected]>

On 2025-11-10 17:29, cen wrote:
> Hi
> 
> On 10/11/2025 03:21, Simon Wright wrote:
>> Unless I'm missing something, wouldn't using poudriere with the same 
>> make.conf as the package builders and default options from the same 
>> git build give *functionally* identical packages?
> 
> The goal is bit-for-bit reproducibility, "functionally" is not enough.
Ah! You mentioned the "build environment" being close to upstream build 
environment. I thought this referred to the bit-for-bit package 
criterion you had mentioned earlier and superceded it. My mistake. Good 
luck!

Simon.
OpenPGP_0x3E276F607A844457.asc (application/pgp-keys, 2.4 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=S2zc
-----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc (application/pgp-signature, 665 B)
-----BEGIN PGP SIGNATURE-----

wsD5BAABCAAjFiEE5UAuvHys2iLKrKH5PidvYHqERFcFAmkSCMMFAwAAAAAACgkQPidvYHqERFeQ
1Av8Cz8RTo0ScZQEfRx47uKYBzVHFS8fqqx2DqZi27S5jJ1FalNXO4bQTha1xlas3pCyzA0hGrkP
M8CVZTcDHNXTOf/ZYXickL0o3k0gJEaCrdXgI+OD+VFFad1OOrT6f8K1MX7DEYQFBGAnjgwz7AyW
YdQ8kJI2D/6805SDElrjEdjUF7yrLsWYesozop/jhQYdUh799h70LOQ8pj7um/8y9dMI+gEGuolL
7ct9KGAxDG01c60M84xXi+p41alsI0LItY2hupZxIQsSKOmXYzO2Ni0dEkuvVlXMmPjzbD2xsADc
1d8pyfdD5LaRq6t/R/G9vNy8dIYXwzgxkcWptKRI7uHvWAD2ooMuJYbYcACmDuz4u4dfJsu7VXCt
gWVLBq5+aZGq37mVdpGvrobo1eFij88pC8N27T09GX/J51TjKpM4JegwSljxKw8pGYHu0GjpArT2
CWY9ao2J+1spl0l8ZXBD6/aqXyELA8vNGBs6MTzq4nEK0sIyWzjFbtkjSHSW
=D55Q
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.