Re: Reproducible builds of ports
Simon Wright <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.ports |
|---|---|
| Message-ID | <[email protected]> |
On 2025-11-10 17:29, cen wrote: > Hi > > On 10/11/2025 03:21, Simon Wright wrote: >> Unless I'm missing something, wouldn't using poudriere with the same >> make.conf as the package builders and default options from the same >> git build give *functionally* identical packages? > > The goal is bit-for-bit reproducibility, "functionally" is not enough. Ah! You mentioned the "build environment" being close to upstream build environment. I thought this referred to the bit-for-bit package criterion you had mentioned earlier and superceded it. My mistake. Good luck! Simon.
OpenPGP_0x3E276F607A844457.asc
(application/pgp-keys, 2.4 KB)
-----BEGIN PGP PUBLIC KEY BLOCK----- xsDNBGi1W5wBDAC9xnqQWSS96rO5m1UuwNOvdX4CDbw96+Uxy9pltOlWQQ4ZWOny 5lgvKef3YS79ftlX9t2720E6EvlzeQOMnU0zcUOlfUwwa2fZT23eHRB3ZyPrVuWg NYCa8uZ04zZRLCx03Ng8pUgpCi0B8shFmFOmIz4hOoVyTSbqR8FHR7Yhj4YSLCW9 8m4/bHKZz/40aCVYa/UibOOeySkB0XnjAqrf14rlc8Vy2blw0IFSOA7kiGL/mBFJ s2ed6Y9yuXbWrU/VsG8L8ahoHfkmnU3dcBVe4bkDp5hAKzIl0Sqn006y5r7nqrrc GNv3y20oQDZoKXm/EQSCe8zEpgaMssYi4cm6NUk/3p2JRKV1b6toyJ98X5g37VFC jpor4SLAVTsFdjlWfV1jLUrxKDFyLyFXv2/1rvPXTN3zTlJGVxX3pjrfhD9zkjBv tcaU3vrJm7Jo08K1TsfCCb+sAhEXVibVXjM9g0seE8b4ccRpJrWOl4pR0D1NqK3d mViwFLp/iOfgQj0AEQEAAc0jU2ltb24gV3JpZ2h0IDxzaW1vbi53cmlnaHRAZ214 Lm5ldD7CwQ0EEwEIADcWIQTlQC68fKzaIsqsofk+J29geoREVwUCaLVbngUJAeEz gAIbAwQLCQgHBRUICQoLBRYCAwEAAAoJED4nb2B6hERXUK4L/i0qsL+tW0xUL+uG S68TsC3o0V5NqnO/3xOezImbGwefMim1neI7x6N1hUwoRsz9bdNh9AWCvN5ohRLT FpvEk+0Ud3a4pemQptP+85d7ZclVPIZCJbGI9w25eNHCa6Kurcsjq0OoEF1mgjK5 a+IECTPihiN9WVmi6TVKulF6MEHGIe6N65tmp08un9W3kMZJ1igKwBwpxQO2id68 4p0sKamChNTtC+MzYeccE8W8Pyw8MUMcyqPOFcsh0NI3RPGIM69yiJqp1uIFNNMQ R2Le5OL3uU1YOuFJk+PV+y7JiLJXfhfPdivBNefDGKrlc43aunibSFXMtFTPqEZ/ 8p9//wXyALszsLlIdsYPRYd0vWVlFBNhUGE6WOFxzsHhYSBydQWEAuPNrDm7KWGw hWS5Hh7PjCn2oWcRijz/W+YodDHd8H5+nII3AjGLyotIAgyX9spdA4cBIr6AtOXY th2vTKnT6Rd6zn0+j1c7hBrBmvBkXTedkOpTE7XVl4ETa0MNkc7AzQRotVueAQwA 0slePhZIDGeAVhuau/Ou8tByqFVodn6uCewCm0aBUqUU5Q5YHTUK9aaWjn+JCv3D lN0/qhENJ4SeoLV1vDAVFEKrMW0ED9bbNyX2GiGOvS2GfFcrBrsbv+pDvh8+mfe3 P5EGM5uIWIY79sDxW3of0QpvSdXhN+EaRWC8lwpGC+VFnlr0Ao8zypeDwkNp/NsA 2vAqJQWJkDvB2g6PyjjZF3h5ioMaqm79zrWnJPdzsjQLMwLb03LwrkweVhC/TM70 W1bIA1EyJfWkIB5LAILdzsNSbwlM9D7185vwP3y8QKJ4AbUjQRQkpE+6d6w+oDRh TWFFkpUdL/bwI3UkVZ2yBpAUJJ1AN3sSyV7mKDPCHvLTHsQnSuLq9alHIR1ed8SN 03QjWJVvD45BFbjPzrE4zZyfsL4yA644GjDAMRNUh5k+a6uzOFP+C8ipP61+iA+V pWxbn5rWk7Aq07HjuqIcV9yP+GkPwxlfzHznXliL51HGww5a4Nwp8CB3OgpPedWl ABEBAAHCwPwEGAEIACYWIQTlQC68fKzaIsqsofk+J29geoREVwUCaLVbnwUJAeEz gAIbDAAKCRA+J29geoREV78nDACS/fnbRC6RJr8E2+CmTlBelcSFwGWr2ppaKBqB rL6i4Yo8QZPpAFo4zV8r6F9FaVp8353rsL/InmDUbr+wZgMwLp7hV6xtmeMXagqd qaYQTq/WH+OcIkOpXpKoiXFS3iqbWPZJTJFzVSmgjPTW7i2+oSUiCyo1QdxibCUT CcYGt6M/eHrfmDt0zCe4QbbJBy/5MSh3QhT4SuiNi3Xn2Pix9OE6fGn0JbB4fi1+ RG2Y2lefwEJj30UoZFZbyY5zBQG5dmVEVQMqV030/bT0mErP3U1EtGO1qDABT3c3 Py6NjvPK3YOrCKe5iAgzZJfu/5YXkLccprXybWCS/6/b2kHRXO8S0XDHVI+wSXUD vi4VP4Yjywd8fMurxTabK/vbNEZcYgMYP8ApaH1zxKQsQyGv98+tZ0YEPtzDlme1 gwZpMfUdOfTBwCrjNyh8zYOEweo14cMpS7jYt0MW3fdhT4VuzWbOiKVAuE+Etg1I gncBFSi/oRtENuYjo3CUQV/E63A= =S2zc -----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc
(application/pgp-signature, 665 B)
-----BEGIN PGP SIGNATURE----- wsD5BAABCAAjFiEE5UAuvHys2iLKrKH5PidvYHqERFcFAmkSCMMFAwAAAAAACgkQPidvYHqERFeQ 1Av8Cz8RTo0ScZQEfRx47uKYBzVHFS8fqqx2DqZi27S5jJ1FalNXO4bQTha1xlas3pCyzA0hGrkP M8CVZTcDHNXTOf/ZYXickL0o3k0gJEaCrdXgI+OD+VFFad1OOrT6f8K1MX7DEYQFBGAnjgwz7AyW YdQ8kJI2D/6805SDElrjEdjUF7yrLsWYesozop/jhQYdUh799h70LOQ8pj7um/8y9dMI+gEGuolL 7ct9KGAxDG01c60M84xXi+p41alsI0LItY2hupZxIQsSKOmXYzO2Ni0dEkuvVlXMmPjzbD2xsADc 1d8pyfdD5LaRq6t/R/G9vNy8dIYXwzgxkcWptKRI7uHvWAD2ooMuJYbYcACmDuz4u4dfJsu7VXCt gWVLBq5+aZGq37mVdpGvrobo1eFij88pC8N27T09GX/J51TjKpM4JegwSljxKw8pGYHu0GjpArT2 CWY9ao2J+1spl0l8ZXBD6/aqXyELA8vNGBs6MTzq4nEK0sIyWzjFbtkjSHSW =D55Q -----END PGP SIGNATURE-----