[rb-general] Reproducing tarballs under various toolchains
Holger Levsen
holger at layer-acht.org
Wed Sep 19 12:57:59 CEST 2018
Hi Daniel,
thanks for bringing this up here!
On Tue, Sep 18, 2018 at 11:40:37PM +0000, Daniel Shahaf wrote:
> So I suppose what I'm saying is:
>
> One, it would be nice to be able to reproduce a tarball without having
> to use exactly the same toolchain. (If I had to market this I would
> say, "There's more to reproducibility than being deterministic.")
>
> Two, GNU tar and BSD tar have an instance of xkcd.com/927/ in the names
> of their option flags. It's hard to patch upstream tarball rolling
> scripts to be reproducible when that would make them unportable.
what would be your proposed solution?
are there other tar implementations than those two?
--
cheers,
Holger
-------------------------------------------------------------------------------
holger@(debian|reproducible-builds|layer-acht).org
PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20180919/950815e4/attachment.sig>
More information about the rb-general
mailing list