[rb-general] Status of Reproducible Builds on NetBSD

[Holger Levsen]

Hi Pierre,

thanks for your interesting answer!

On Fri, Oct 20, 2017 at 01:44:23AM +0200, Pierre Pronchery wrote:
> > What's the status on indiviual packages or ports (as you call them, iirc)?
> 
> Our packages come from the pkgsrc project, which is also managed by the
> NetBSD Foundation. There is no knob there at the moment to force the
> generation of reproducible packages, however a significant part of the
> underlying work has been done (handling CFLAGS and LDFLAGS across every
> package based on C/C++).
 
do you think such a knob could be made and if so, how?

> > And more general: does NetBSD distribute binary builds? (Of what?)
> 
> We do generate and provide binary builds, for both the base system and for
> packages.
> 
> The official binaries for the base system are generally fine for everyone. I
> haven't used them in a long time myself, because I wanted PIE (for full
> ASLR) and REPRO. This is one of the reasons I started the EdgeBSD project,
> which is primarily about working on NetBSD with Git instead of CVS
> (https://www.edgebsd.org/).

ic

> About packages now, I would say that many users still prefer to build their
> own. My opinion is that the default options are not really suitable for
> desktop use (no CUPS support for Gtk+ by default for instance) nor for
> servers (SSL/TLS disabled by default in random places). I keep trying to
> push for changes in this direction when I find the time and energy.

cool & good luck! :)


-- 
cheers,
	Holger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20171020/f60985dc/attachment.sig>