1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
FreeDink-data tries to make reproducible builds.
Source tarball
- See Makefile.
- Reproducibility not really useful here (only generated files need to
be reproducible) but still a good exercise.
- The reproducible build instructions cannot be fixed / updated for a
new environment since they are part of the release tarball.
- However the tarball doesn't leak any metadata about the developer.
Zip -nosrc release
- See autobuild/freedink-data-woe.sh
- This is generated from the source tarball hence needs to be
reproducible.
Build environment tracking
- 1.08.20170409:
tar debian/1.29b-1.1
gettext/msgfmt debian/0.19.8.1-2
gzip debian/1.6-5+b1
zip debian/1.0.6-2+b1
- 1.08.20170401:
tar debian/1.29b-1.1 requires --sort=name (introduced in Stretch)
gettext/msgfmt debian/0.19.8.1-2
pixz debian/1.0.6-2+b1
zip debian/1.0.6-2+b1
|
