[rb-general] Q. Should a tool that implements SOURCE_DATE_EPOCH abort if it can't ensure reproducibility?

Dan Kegel dank at kegel.com
Sat Jun 24 01:39:08 CEST 2017


While trying to get a patch implementing reproducible builds upstream to fpm,
I had this review comment from the maintainer:

"If a user is asking for deterministic builds, and the system cannot
produce it, we should abort and error."

(e.g. on a system which ships with non-deterministic ar and tar, and
the user forgot to run
'brew install binutils' or 'port install gnu-tar' or whatever to make
gar and gtar available.)

I looked at https://reproducible-builds.org/specs/source-date-epoch/
but it doesn't
seem to answer this question.  I guess it could go either way; is
SOURCE_DATE_EPOCH
a best-effort flag, or a must-deliver kind of flag?

Can I get a clarification on the spec from the group?

Thanks,
Dan


More information about the rb-general mailing list