On Wed, 9 Mar 2022 07:58:51 GMT, Thomas Stuefe <stu...@openjdk.org> wrote:
>> Ioi Lam has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Fixed zero build > > Hi Ioi, > > some questions, comments inline. > > Like David in the comments, I am also a bit vague on the usefulness, but I > may not know the whole story. Is it to enable repackagers like Debian to > check the "reproducable" tickbox on their OpenJDK package? Or is there a > practical need for this? > > Thanks, Thomas > @tstuefe Without commenting on Ioi's actual implementation, let me explain a > bit on the importance of this fix. > > Reproducible builds is not just a "checkbox", any more than "does not crash > on startup" is a checkbox. It is an important security tool. See e.g. > https://reproducible-builds.org/ for more information. > Hi @magicus, thanks for explaining, and for the link. That one was a good explanation. I had no idea, but I'm convinced now. Cheers, Thomas ------------- PR: https://git.openjdk.java.net/jdk/pull/7748
