Jeroen Dekkers:
> > PPS: If we start bikeshedding on every patch, there's not even the
> > slightest chance we will get to the point where build reproducibility is
> > actually a Debian feature. We need to trust maintainers to do the right
> > things.
>
> I definitely don't want to bikeshed about
Jeroen Dekkers:
> At Mon, 22 Sep 2014 22:57:55 +0200,
> Jérémy Bobbio wrote:
> > But, sincerely, I believe the right move for upstream would be to get
> > rid of the embedded timestamp entirely. Embedding a Git commit id would
> > make much more sense (and mabye its date) than embedding the time of
(Removed the bug from the CC as this is a more general discussion)
At Mon, 22 Sep 2014 22:57:55 +0200,
Jérémy Bobbio wrote:
> But, sincerely, I believe the right move for upstream would be to get
> rid of the embedded timestamp entirely. Embedding a Git commit id would
> make much more sense (and
At Mon, 22 Sep 2014 15:15:50 -0400,
Daniel Kahn Gillmor wrote:
>
> On 09/21/2014 04:58 PM, Dominic Hargreaves wrote:
> > On Sun, Sep 21, 2014 at 10:45:14PM +0200, Jérémy Bobbio wrote:
> >> As part of the “reproducible builds” effort [1], it was detected that
> >> libgpg-error could not be built re
Jeroen Dekkers:
> Jérémy actually already wrote a patch for dpkg-buildpackage to export
> DEB_BUILD_TIMESTAMP:
>
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=75
>
> But if we want to push these things upstream, wouldn't it be better to
> remove the DEB_ prefix from the name of the envi
On 09/21/2014 04:58 PM, Dominic Hargreaves wrote:
> On Sun, Sep 21, 2014 at 10:45:14PM +0200, Jérémy Bobbio wrote:
>> As part of the “reproducible builds” effort [1], it was detected that
>> libgpg-error could not be built reproducibly.
>>
>> The build process capture the time of the build. This pi
Another option is building with faketime. I've had good luck with a couple of
C builds using faketime to freeze time entirely during the whole make process.
But I think the reproducible work in Debian so far has avoided using faketime.
signature.asc
Description: OpenPGP digital signature
On Sun, Sep 21, 2014 at 10:45:14PM +0200, Jérémy Bobbio wrote:
> As part of the “reproducible builds” effort [1], it was detected that
> libgpg-error could not be built reproducibly.
>
> The build process capture the time of the build. This piece of
> information is not really helpful to anyone an
