GitHub user chrisdutz added a comment to the discussion: [DISCUSS] Move towards more reproducible builds?
I guess in next steps we might even do an experiment, wehre I create a RC (which we will not be releasing) but we could try to get reproducible builds configured and documented. Ideally a RM creates a RC using this Dockerfile and stages that ... then ideally others could download the source archive and run the Dockerfile on their machines ... if the produced binaries match the ones staged, then this could be used as an additional checkbox in the release vote email template ... we could also probably have something in place to have PMC members co-sign the release artifacts if the test is successful (Might be good to have with all the legislation changes in europe and the US). GitHub link: https://github.com/apache/plc4x/discussions/991#discussioncomment-6325422 ---- This is an automatically sent email for dev@plc4x.apache.org. To unsubscribe, please send an email to: dev-unsubscr...@plc4x.apache.org
