[Bug 284428] pkgbase packages are not reproducible due to archive timestamps
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 28 Feb 2025 16:11:15 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=284428
Ed Maste <emaste@freebsd.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|pkgbase@FreeBSD.org |emaste@freebsd.org
Status|Open |In Progress
--- Comment #3 from Ed Maste <emaste@freebsd.org> ---
commit 8a3537aaf7c19f7331fcc160ab42e36fc79e408a
Author: Ed Maste <emaste@FreeBSD.org>
Date: Thu Feb 27 08:17:11 2025 -0500
Makefile.inc1: Make package timestamps reproducible by default
Set package archive timestamps based on most recent source commit
timestamp (approach suggested by bapt).
I'd like to include git metadata in a file included in src tarballs, so
that the build is reproducible (including the hash shown in uname etc.)
outside of a git checkout. There are still details to be sorted out to
do that, so this is an interim step to improve reproducibility.
Reviewed by: bapt
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D49165
--
You are receiving this mail because:
You are the assignee for the bug.