On Sun, Jun 02, 2019 at 10:09:50AM -0400, Luke Shumaker wrote:
> The guarantee I was trying to make is that the sources in the source
> tarball match what is used to build the package, and can be used to
> build the package. Many packages from AUR do something silly like
>
> pkgver() { date +'%Y%m%d'; }I would argue that the version of the package is ephemereal -- we shouldn't have to make guarantees that, and also shouldn't rely on the fact that a subsequent build of the package produces the same version number. Although I do agree that putting the build date into the pkgver is silly... Best, Andreas -- ------------------------------------------------------------------------------ my GPG Public Key: https://files.grapentin.org/.gpg/public.key ------------------------------------------------------------------------------
signature.asc
Description: PGP signature
_______________________________________________ Dev mailing list [email protected] https://lists.parabola.nu/mailman/listinfo/dev
