[rb-general] reproducible anything

[Bernhard M. Wiedemann]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

We recently discussed about how to have different flavours of tar
produce the same output (somewhat hard)

There are also two other issues related to reproducible builds that so
far did not get much attention.
It is because those seem to be not much about building, but more about
producing any output.

1.
It is only once we try to build reproducible system images,
we have to fix such issues
https://gitlab.com/graphviz/graphviz/merge_requests/1290/diffs

2.
When we build+compare noarch packages (arch "all" in Debian)
we discover such
https://bugzilla.opensuse.org/show_bug.cgi?id=1110149
tools producing png images that vary pixels only by a bit between i586
and x86_64. But then we can also find bad bugs there:
https://github.com/mhulden/foma/pull/78
https://bugzilla.opensuse.org/show_bug.cgi?id=1109541


Both together mean that any tool that produces any output that somehow
ends up in our images or noarch-packages, needs to do so in a more
reproducible way than I previously thought.

=> reproducible anything

Ciao
Bernhard M.
-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQRk4KvQEtfG32NHprVJNgs7HfuhZAUCW64YuQAKCRBJNgs7Hfuh
ZKslAKDLciKDgPcWk2UnarPUpLi2FPRb8wCfVSZ7lKREN72vtEv/52PSftKV3Xk=
=u9BP
-----END PGP SIGNATURE-----