[rb-general] Reproducing tarballs under various toolchains

[Eric Myhre]

Golang's standard library has a tar implementation (and probably it's not alone in languages with libraries?).  But it has no direct build with a CLI, so I suppose such libraries don't count for the purposes of this discussion (?).


-------- Original Message --------
From: Holger Levsen <holger at layer-acht.org>
Sent: September 19, 2018 12:57:59 PM GMT+02:00
To: rb-general at lists.reproducible-builds.org
Subject: Re: [rb-general] Reproducing tarballs under various toolchains

Hi Daniel,

thanks for bringing this up here!

On Tue, Sep 18, 2018 at 11:40:37PM +0000, Daniel Shahaf wrote:
> So I suppose what I'm saying is:
> 
> One, it would be nice to be able to reproduce a tarball without having
> to use exactly the same toolchain.  (If I had to market this I would
> say, "There's more to reproducibility than being deterministic.")
> 
> Two, GNU tar and BSD tar have an instance of xkcd.com/927/ in the names
> of their option flags.  It's hard to patch upstream tarball rolling
> scripts to be reproducible when that would make them unportable.

what would be your proposed solution?

are there other tar implementations than those two?


-- 
cheers,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20180919/78130bfc/attachment.html>