[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Please test gzip -9n - related to dpkg with multiarch support

Guillem Jover <guillem@debian.org> writes:

> Let's assume compressor (gzip/bzip2/xz/etc) version M gets uploaded to
> sid generating a reproducible output across all current architectures.
> Time passes, compressor version N (and even O and P and Q etc) gets
> uploaded, which starts producing new ouput (on each of those versions).
> A new architecture gets added to Debian, and because previous compressor
> versions are not in the archive anymore, all packages built with them
> have different checksums than the new ones. This means *all* those
> packages have to be binNMUed across *all* the architectures, or the
> porters need to hunt down every specific compressor version used to
> build those packages to be able to reproduce the build on their arch.
> This seems highly suboptimal and “future-unproof”...

Yes, agreed.  I think this is a rather compelling argument against relying
on reproducibility of compressor output.

Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Reply to: