[rb-general] reproducible anything
Bernhard M. Wiedemann
bernhardout at lsmod.de
Fri Sep 28 14:04:15 CEST 2018
-----BEGIN PGP SIGNED MESSAGE-----
We recently discussed about how to have different flavours of tar
produce the same output (somewhat hard)
There are also two other issues related to reproducible builds that so
far did not get much attention.
It is because those seem to be not much about building, but more about
producing any output.
It is only once we try to build reproducible system images,
we have to fix such issues
When we build+compare noarch packages (arch "all" in Debian)
we discover such
tools producing png images that vary pixels only by a bit between i586
and x86_64. But then we can also find bad bugs there:
Both together mean that any tool that produces any output that somehow
ends up in our images or noarch-packages, needs to do so in a more
reproducible way than I previously thought.
=> reproducible anything
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
More information about the rb-general