[rb-general] Reproducing tarballs under various toolchains

Holger Levsen holger at layer-acht.org
Wed Sep 19 12:57:59 CEST 2018


Hi Daniel,

thanks for bringing this up here!

On Tue, Sep 18, 2018 at 11:40:37PM +0000, Daniel Shahaf wrote:
> So I suppose what I'm saying is:
> 
> One, it would be nice to be able to reproduce a tarball without having
> to use exactly the same toolchain.  (If I had to market this I would
> say, "There's more to reproducibility than being deterministic.")
> 
> Two, GNU tar and BSD tar have an instance of xkcd.com/927/ in the names
> of their option flags.  It's hard to patch upstream tarball rolling
> scripts to be reproducible when that would make them unportable.

what would be your proposed solution?

are there other tar implementations than those two?


-- 
cheers,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20180919/950815e4/attachment.sig>


More information about the rb-general mailing list