[rb-general] [Bug-apl] [Reproducible builds] add support for SOURCE_DATE_EPOCH

[Juergen Sauermann]

Hi Santiago,

I have adopted the environment variable approach, which is now
contained in *SVN 1026*. (and therefore also in the next GNU APL release).

I took the freedom to change your patch from:

+    BUILD_DATE=`date -u "%F %R:%S %Z" --date=@$SOURDCE_DATE_EPOCH`

to:

+ BUILD_DATE=`date -u "+%F %R:%S %Z" --date=$SOURCE_DATE_EPOCH`

Best Regards,
/// Jürgen Sauermann


On 12/05/2017 06:50 PM, Santiago Torres-Arias wrote:
> Hi, thanks for getting back to me!
>
> I think a ./configure option could be an alternative. I'll CC the rest
> of the reproducible-builds ML in case they want to jump in and call me
> out :)
>
> And yes, I think this has come up for other projects too, hence the
> proposal of the S_D_E environment variable (for both setting a build
> date and to indicate that this build should be reproducible).
>
> Thanks again!
> -Santiago.
>
> On Tue, Dec 05, 2017 at 11:27:07AM +0100, Juergen Sauermann wrote:
>> Hi Santiago,
>>
>> I will look into this. Would it be acceptable to have a ./configure option
>> that
>> prevents the setting of the build date (so the build date would be roughly
>> the
>> time when the GNU APL sources were checked in rather than the time when
>> GNU APL was ./configure'd)?
>>
>> I suppose this issue will come up for other projects as well, so maybe a
>> common solution would be worthwhile to be investigated.
>>
>> Best Regards,
>> Jürgen Sauermann
>> GNU APL
>>
>>
>> On 12/04/2017 11:53 PM, Santiago Torres-Arias wrote:
>>> Hi,
>>>
>>> I'm a member of the Arch Linux Security team working on the reproducible
>>> builds initiative. Right now, apl compiles almost reproducibly, with the
>>> only caveat of embedding some time-based information into a header file.
>>> It would be nice if this could be overriden with an environment variable
>>> (or stripped out whatsoever).
>>>
>>> I'm attaching a patch on how I believe this could be achieved.
>>>
>>> Thanks!
>>> -Santiago.