Re: Reproducible builds of ports

Thanks for everything.

And...
It seems that checking whether the same package has been reproduced or if any differences have been included can be easily added to poudriere.
In a hook script that runs upon the completion of packaging a pkg, it seems possible to quickly extract data to verify content matches by executing commands like the example shown in pkg-query.

pkg query -F newsomepkg-0.0.pkg '%Fp %Fs'

The problem here is where to get this old data for comparison.
If poudriere kept an old package, would a package with the same name and version as the one targeted for building have been kept as well?

In my environment, I have not yet completed the setup to use poudriere, so I cannot actually verify it by running it :)

Regards.