Re: Three bytes in a zip file

2024-04-08 Thread Chris Lamb
Larry Doolittle wrote:

> Yes.  The -X isn't needed, sometimes, and then when you least expect it, it 
> is.
> Classic reproducible-builds gotcha.
>
>> I'm happy to update this document myself if need be. :)
>
> Go for it.

Finally got around to doing this. Many thanks. :)


Best wishes,

-- 
  o
⬋   ⬊  Chris Lamb
   o o reproducible-builds.org 
⬊   ⬋
  o


Re: Two questions about build-path reproducibility in Debian

2024-04-08 Thread Holger Levsen
On Tue, Mar 12, 2024 at 08:45:03AM -0700, Vagrant Cascadian wrote:
> >> Note: I confused myself when writing this; in fact Salsa-CI reprotest 
> >> _does_
> >> continue to test build-path variance, at least until we decide otherwise.
> > this is in fact a bug and should be fixed with the next reprotest release.
> That is not a reprotest bug, but an infrastructure issue for the
> debian-specific salsa-ci configuration. Reprotest is not a
> debian-specific tool.

agreed.
 
> Reprotest should continue to vary build paths by default; reprotest
> historically and currently defaults to enabling all variations and
> making an exception does not seem worth the opinionated change of
> behavior. By design, reprotest is easy to configure which variations to
> enable and disable as needed.

agreed for the upstream release. for reprotest in Debian I'm still
not so sure. (and for reprotest running as part of salsaci I do think
the default should be not to vary path.)


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

"The two hardest problems in computer science are: (i) people, (ii), convincing
computer scientists that the hardest problem in computer science is people, and,
(iii) off by one errors." - Jeffrey P. Bigham


signature.asc
Description: PGP signature