Re: Reproducible tarballs

[Simon Josefsson]

Collin Funk <collin.funk1@gmail.com> writes:

> Hi Simon,
>
> On 5/12/24 3:56 AM, Simon Josefsson via Bug reports for the GNU Internet 
> utilities wrote:
>> I have committed the attached patches giving us reproducible tarballs.
>> 
>> The particular logic to verify this continously is in the
>> 000-reproducibility pipeline job, code here:
>
> Cool!
>
> A bit late but I see you are also maintainer for the Debian Gnulib
> package. I thought your ideas there seemed really interesting, using a
> distributed git bundle for building packages.
>
> I didn't want to add extra noise to that discussion since I have no
> packaging experience. The best I can do there is try to not modify
> 'gnulib-tool --version' sources so that you don't have to update your
> patches. No promises there but I will do my best. :)

Heh, no worries: further modifications enables us the excercise that
patching implementation which may be useful on its own.  Now that the
idea is implemented, tweaking it shouldn't be that hard.

/Simon

signature.asc
Description: PGP signature