Hi Holger, thanks for your answers and the background you establish. I'll look into discussing this with Guillem.
On Fri, Jun 27, 2025 at 02:43:48PM +0000, Holger Levsen wrote: > re: hat definition has violated some of our design: > > eg I really think the checksum of the installed dependencies should > be listed in the .buildinfo files (even though I understand why this > is not that easy and thus I've for now given up on wanting this.) I have a use case for this. Would it be possible to extend the buildinfo format specification such that checksums could be optionally included? A builder could consume a .buildinfo file generated by dpkg-genbuildinfo and augment it with checksums given precise knowledge of the build environment. This is asking less than having dpkg-genbuildinfo produce those checksums and only about allowing their inclusion. Do you have something in mind how that would look? An example maybe? Helmut
