Why is not everything reproducible yet?

Bernhard M. Wiedemann bernhardout at lsmod.de
Wed Dec 20 08:42:53 UTC 2023


Sometimes people wonder:
Why is not everything reproducible yet?

And the general reason is that there are other interests that result in 
added non-determinism.
I collected some with examples



Performance (PGO, benchmarking, -march=native, parallelism/races)
  https://build.opensuse.org/request/show/1130552
  https://github.com/bmwiedemann/theunreproduciblepackage/tree/master/pgo


Simplicity (e.g. using random UUIDs instead of hashed inputs)
  https://github.com/ipxe/ipxe/pull/1082


Security (Signatures):
  https://bugzilla.opensuse.org/show_bug.cgi?id=1217690
  https://bugzilla.opensuse.org/show_bug.cgi?id=1208478
  https://bugzilla.opensuse.org/show_bug.cgi?id=1081723


Traceability of provenance (date+user+hostname):
 
https://github.com/bmwiedemann/theunreproduciblepackage/tree/master/timestamp


repeatable builds:
  https://github.com/rpm-software-management/rpm/issues/2343


Portability:
  https://github.com/ipxe/ipxe/pull/1082#issuecomment-1862899660
  - see also the code-monster we need to support SOURCE_DATE_EPOCH with 
sh on *NIX


Ciao
Bernhard M.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20231220/b0b4e1e8/attachment.sig>


More information about the rb-general mailing list