+1 on reproducible tarballs. I've been spending way too much time to achieve this for 'make dist' tarballs of a couple of projects (libtasn1, libidn2, inetutils, ...). It is not a simple matter. Modification time of files is used by 'make' for dependency rebuild ordering and may also end up as timestamps inside files.
"Diederik de Haas" <[email protected]> writes: > On Thu Aug 31, 2017 at 10:57 AM CEST, Chris Lamb wrote: >>> mk-origtargz: create reproducible tarballs and --mtime option >> >> Adding a Reproducible Builds usertag and pinging the ML -- I hadn't >> spotted this wishlist bug before. > > How about adding f.e. ``--sort name`` to the tar invocation? Here is one resource to read for more hints: https://www.gnu.org/software/tar/manual/html_node/Reproducibility.html /Simon
signature.asc
Description: PGP signature
