Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 May 2016 22:27:39 +0200
From:      Baptiste Daroussin <bapt@FreeBSD.org>
To:        Alexey Dokuchaev <danfe@FreeBSD.org>
Cc:        Ed Maste <emaste@FreeBSD.org>, ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   Re: svn commit: r415078 - in head: . Mk
Message-ID:  <20160513202739.GG49383@ivaldir.etoilebsd.net>
In-Reply-To: <20160513201919.GA48945@FreeBSD.org>
References:  <201605121820.u4CIKROJ004026@repo.freebsd.org> <20160513160151.GA30219@FreeBSD.org> <20160513182837.GF49383@ivaldir.etoilebsd.net> <20160513201919.GA48945@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--bpVaumkpfGNUagdU
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, May 13, 2016 at 08:19:19PM +0000, Alexey Dokuchaev wrote:
> On Fri, May 13, 2016 at 08:28:37PM +0200, Baptiste Daroussin wrote:
> > On Fri, May 13, 2016 at 04:01:51PM +0000, Alexey Dokuchaev wrote:
> > > On Thu, May 12, 2016 at 06:20:27PM +0000, Ed Maste wrote:
> > > > New Revision: 415078
> > > > URL: https://svnweb.freebsd.org/changeset/ports/415078
> > > >=20
> > > > Log:
> > > >   Record TIMESTAMP in make makesum
> > > >  =20
> > > >   This is intended to support development and prototyping for ports
> > > >   reproducible build efforts which require some concept of a "last
> > > >   updated" time. It is being committed now so that timestamp entries
> > > >   will be populated "for free" as port distfiles updates happen.
> > >=20
> > > Why does it have to be part of distinfo rather than obtained from key=
words
> > > or "svn info distinfo | grep ..."?  (The latter might seem like it co=
uld
> > > slow things down a bit, but 1) it's unclear if it would make a signif=
icant
> > > difference without actual tests, and 2) polluting distinfo looks wors=
e, to
> > > me at least.)
> >=20
> > First the svn keyword date will be updated too often (each cosmetic cha=
nge
> > in a makefile) resulting in making reproducible builds less efficient.
> >=20
> > Second the ports tree is available in plenty of forms where the keywords
> > are not expanded: git, hg etc. breaking as such the reproducible builds=
[.]
>=20
> (*sigh* I knew that I shouldn't have brought keywords into the argument.)
>=20
> Anyway, why this information can't be fetched from the metadata?  Why does
> it have to be tied to distinfo?  What about patch files, sed(1) calls in
> the Makefile, etc.?  Is there a place we can read more about this whole
> reproducible builds thing?
>=20
https://reproducible-builds.org/
https://fosdem.org/2016/schedule/event/reproducible_ecosystem/
https://fosdem.org/2016/schedule/event/reproducible_freebsd_packages/

and more

We do not want to bump the dates too often, and the least often solution th=
at
has been found is to update it when main distfiles are changed. (as for some
ports we need to ensure that packaged files are not older than the sources
otherwise they can break things at runtime... don't ask :))

the goal is to use this timestamp when packaging to set the timestamp of the
files (which is one of the things makes the checksum of the package change =
even
the content hasn't changed.)

Bapt

--bpVaumkpfGNUagdU
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=sUhr
-----END PGP SIGNATURE-----

--bpVaumkpfGNUagdU--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160513202739.GG49383>