Re: Please test gzip -9n - related to dpkg with multiarch support
Guillem Jover <guillem@debian.org> writes:
> Let's assume compressor (gzip/bzip2/xz/etc) version M gets uploaded to
> sid generating a reproducible output across all current architectures.
> Time passes, compressor version N (and even O and P and Q etc) gets
> uploaded, which starts producing new ouput (on each of those versions).
> A new architecture gets added to Debian, and because previous compressor
> versions are not in the archive anymore, all packages built with them
> have different checksums than the new ones. This means *all* those
> packages have to be binNMUed across *all* the architectures, or the
> porters need to hunt down every specific compressor version used to
> build those packages to be able to reproduce the build on their arch.
> This seems highly suboptimal and “future-unproof”...
Yes, agreed. I think this is a rather compelling argument against relying
on reproducibility of compressor output.
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: