[rb-general] SPDX in .BUILDINFO?

[Holger Levsen]

Hi Santiago,

On Tue, Feb 06, 2018 at 01:13:26PM -0500, Santiago Torres wrote:
> I spoke with Kate from the SPDX project (CCd, many of youmay probably
> know her already) about the state of the SPDX[1][2] project and how it's
> trying to aggregate information regarding the build results.
> 
> I was thinking that SPDX could be probably used to homogenize the
> .BUILDINFO files in a cross-distro standard. To me it feels that,
> although probably distros package their stuff differently, there's
> enough overlap to do a community effort on finding a common standard. Is
> anyone up for discussion regarding this? :)

while I agree in theory, I'm not so sure (how) this will work in
practive, given we already have very different .buildinfo file formats -
and contents. (eg as you know the archlinux .buildinfo files dont
contain the hashes of the generated binaries...)

also, from my very limited understanding of SPDX files, those aim to
specify copyright, authors and such things, which to me seems a very
different task to accomplish than what we aim to document with
.buildinfo files. I'm not sure thhat merging those two goals is a good
way of reaching them both, but maybe that's not what you are proposing.


-- 
cheers,
	Holger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20180215/853316da/attachment.sig>