On Wed, Oct 23, 2019 at 09:49:11AM -0400, Theodore Y. Ts'o wrote: > > > That seems excessively pessimistic. What about Git makes you think > > > it's impossible to create a reproducible source package? > > > > Has it been done? Given this point has been raised several times > > before if it hasn't been done by now I think it's reasonable to assume > > it's difficult, and thinking that it's so is not excessively > > pessimistic. > > Generating a reproducible source package given a particuar git commit > is trivial. All you have to do is use "git archive". For example: If you want bit-by-bit reproducible .tar.gz this assumes that git archive is reproducible (and that gzip -9n is reproducible). -- WBR, wRAR
Attachment:
signature.asc
Description: PGP signature