Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reproducible builds: time-based generated code #452

Closed
natemcmaster opened this issue Oct 31, 2017 · 1 comment
Closed

Reproducible builds: time-based generated code #452

natemcmaster opened this issue Oct 31, 2017 · 1 comment
Labels

Comments

@natemcmaster
Copy link
Contributor

https://wiki.debian.org/ReproducibleBuilds/Howto
https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal

Recommended solutions in order of preference:

  • Support SOURCE_DATE_EPOCH or omit the timestamp entirely by default, so that other projects using this build tool don't also need to do the below.
  • Prevent the timestamp from being written entirely in the build products.
  • Tell the tools to use the timestamp of “0” if the timestamp is not used.
  • Tell the tools to use the timestamp of the last debian/changelog entry.
  • Strip timestamps at the end of the build process.
  • Replace timestamps at the end of the build process.

Example:
We generate AssemblyFileVersion from the current timestamp. This makes build non-reproducible because each build changes the binary output.

@Eilon
Copy link
Member

Eilon commented Mar 13, 2018

From triage: Justification: not important enough. We currently don’t care about deterministic build output.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants