From owner-svn-ports-all@freebsd.org Sat May 21 12:25:28 2016 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0927BB44CF2; Sat, 21 May 2016 12:25:28 +0000 (UTC) (envelope-from baptiste.daroussin@gmail.com) Received: from mail-lb0-x243.google.com (mail-lb0-x243.google.com [IPv6:2a00:1450:4010:c04::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 99D691FA3; Sat, 21 May 2016 12:25:27 +0000 (UTC) (envelope-from baptiste.daroussin@gmail.com) Received: by mail-lb0-x243.google.com with SMTP id t6so78032lbv.1; Sat, 21 May 2016 05:25:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=rMWr7iVYYrq8aZAF+uFjpznkfb9q3QkXQfB7nYtWeuA=; b=GfB8zcMddAX5T82cwo/pv1s+dqAYVHTKqzQ+XrrHOePfC7fQqBQfPwYujyzgg6m5md +fZlpD7fstmKQP+9/o/3EVjgZ9NquOcRSzqcH1989GgADxdycAhhEv1pSlNxx0MpNC2B VnooOWwo3MPP7sjRPUeTqAld1PkRlk+IAABf6Y7J1VP0d6/ibLy0A1VB6ixa6pYjhDy2 r6zD7T6ue6oOEGSRwZbpYOSCqL1gkLliJSkMED4hcz7loVIvi0m0JREyLTcoPqN/tEG5 uvGCgIGTeNNDrCq7vt9jvmHgSyzXecBf6bsnA/b/V9ZJyHP/FooZKoR5dOnMuoGBsCV/ t3FQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:sender:date:from:to:cc:subject:message-id :references:mime-version:content-disposition:in-reply-to:user-agent; bh=rMWr7iVYYrq8aZAF+uFjpznkfb9q3QkXQfB7nYtWeuA=; b=WRQc4IrWcu+YPJfOFfYfDoR3GjpWOI8Lr79oY7EAPiEquwkbVZhkrmcppDXUJkAuAx 3RLhTAlSrIiBSaEsPk8/cWqN91IOTxtUO36Lfd83tLd2NamOCYdcE+WNufgg9mznLppR 0gVnaSuO5ak4wdDRueo7t0rJmHP/uZ5TsbmyW2MLc+bHM86NWyyiLcX8VK0Wl4dMybmK u6P8cAwP7hH2vZ/jj4JGmIHbKTR7hmc1aa5PfQTkPLUl9Jf6pXyiEor+ziYKM/nWMBdF xcACyYZGKq0PMrDwC5fgifiDfE03jCHYBZ2P4bVjoPfUUBwY700zibsTlR9XnMnFTII+ GaXg== X-Gm-Message-State: AOPr4FXns26Vwr+K4lJQ12njNQqdt2PetJAUQdd3rGncdiwrVj7h/AJQgNHUZRGYGiSXUw== X-Received: by 10.112.219.195 with SMTP id pq3mr2851943lbc.33.1463833525760; Sat, 21 May 2016 05:25:25 -0700 (PDT) Received: from ivaldir.etoilebsd.net ([2001:41d0:8:db4c::1]) by smtp.gmail.com with ESMTPSA id m125sm4191023lfd.27.2016.05.21.05.25.24 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 21 May 2016 05:25:24 -0700 (PDT) Sender: Baptiste Daroussin Date: Sat, 21 May 2016 14:25:22 +0200 From: Baptiste Daroussin To: Alexey Dokuchaev Cc: marino@freebsd.org, Ed Maste , ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: Re: svn commit: r415078 - in head: . Mk Message-ID: <20160521122522.GJ21899@ivaldir.etoilebsd.net> References: <201605121820.u4CIKROJ004026@repo.freebsd.org> <20160513160151.GA30219@FreeBSD.org> <20160513182837.GF49383@ivaldir.etoilebsd.net> <20160513201919.GA48945@FreeBSD.org> <20160519122306.GA24015@FreeBSD.org> <20160521112728.GA624@FreeBSD.org> <364d3d9f-63ff-18c8-c730-a11c57dc0673@marino.st> <20160521114358.GC624@FreeBSD.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="BEa57a89OpeoUzGD" Content-Disposition: inline In-Reply-To: <20160521114358.GC624@FreeBSD.org> User-Agent: Mutt/1.6.1 (2016-04-27) X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 May 2016 12:25:28 -0000 --BEa57a89OpeoUzGD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, May 21, 2016 at 11:43:58AM +0000, Alexey Dokuchaev wrote: > On Sat, May 21, 2016 at 01:33:36PM +0200, John Marino wrote: > > On 5/21/2016 1:27 PM, Alexey Dokuchaev wrote: > > > On Thu, May 19, 2016 at 12:23:06PM +0000, Alexey Dokuchaev wrote: > > >> ... > > >> I'm still not convinced though, sorry. Ports tree can be obtained by > > >> a number of means, but this new ugly TIMESTAMP thingy is added for a > > >> very specific usecase, and there should be no problem to require that > > >> for that particular usecase, exported ports tree must have its files' > > >> mtimes correctly set. (If svn/git/hg are not setting right mtimes on > > >> export, they should be fixed.) It looks more like quick'n'dirty hack > > >> rather than thoroughly thought-out solution. > > > > > > Given lack of replies, I guess I'd have to elaborate a bit on problem= s with > > > TIMESTAMP and why I'm against it. > > > > > > 1. It does not line up with distinfo format... > > > 2. It is not needed even if ports repo is obtained as tarball... > >=20 > > Maybe it could/should be implemented as a makefile variable instead? > >=20 > > e.g. REP_TIMESTAMP=3D > >=20 > > Just a suggestion. I don't disagree with you. >=20 > While still hackish, it's a *lot* less ugly and bogus as tainting distinf= o. > (New variable in Makefile is OK because that's what Makefiles are made of: > variables, targets, and recipes. Adding TIMESTAMP to distinfo is NOT OK > because distinfo describes port's distfiles in a form of FOO(), BAR(), ... > values per each distfile.) >=20 Implementing it as a Makefile variable would make it not automatically upda= ted. Meaning more work for maintainers and more chances for mistakes to happen. As stated before using the mtime of the files will end up updating this timestamp too often and then defeating the goal of the reproducible build. If you have watched the differents talks about reproducible builds and the different links provided earlier you would understand the huge benefit of reproducible builds for Q/A for exp-run for example where you can quickly f= igure out the real inpact of a change in base or in ports by getting quickly the = list of packages that have changed and analyse them, instead of relying on build failures and discovering later that there are runtime problems like failure= s or unexpected changes. That would also allow to discover which ports needs to = be bumped because they do link statically (unoticed until now) to a lib that h= as received a security fix. Not stating the benefits for users using binary packages, the speedup on publishing packages etc. Now if you disagree with the TIMESTAMP in distinfo they please make sure to provide a reliable in all case solution for getting this information. The choice of using distinfo this way has been decided after actually testi= ng getting informations from other places like mtime from the Makefile itself,= from the distinfo files, from the distfiles etc. We may have missed an obvious b= etter solution, if that is the case then please provide a solution and please a t= ested one, because this change does not come out of nowhere, it has been sitting = for a wile after many many tests (I do work on reproducible builds for years). the ports is a very complicated place for that because upstream builds systems = are full of hidden dragons. There are many changes that would be added to the ports tree later, but we = need that TIMESTAMP source of information first, before getting further. As a conclusion this is the less worse solution we found it works, if one h= as a better one, please provide it, but after understanding and taking in acco= unt the requirements. Best regards, Bapt --BEa57a89OpeoUzGD Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJXQFOxAAoJEGOJi9zxtz5aLfkP/3k/iSSgdQGeIjwUFdF91dy1 0MH4g9USbMNfeCk4RCJ/GjZ8pPY6d4OWJGsHiSfISLcOYRi6YmruHHgOa++ciBHW yxsHOc0adeZjIUmxvMhdN9+907wUNvU0YhTPiZW3e4JBMt1Jxom+t9fa9wXfvovf iZJF5SDTnlFtRPzstbkRJRKpqXAaYBt7VQecL/NMg8wUvKGrOQ+AIfr/l1nnjQMw Vj/VG24QDAlS+tCgSQQovgH8UcgQ3eItt2dGDd1mnXvslJjC9Q0zbUFGuZ/4i/OA xflW9ExyeHSmH3GjGD0aMsuHxI/f5SV04fdOgfJ2/5deG9IulKqwZVHjxRChwygD ClM/0N7aiSkNOwsETArzPUwfhgyTqbbZqMIsbiYee9Spk2FvLD3qE7VbhEz9E+4N QMTjC9fCcRql8wg1povbGt7o+bPWwjkGEuWy3lC58XO34fyDUO0uP38YXsgvKBDg 294XFifh0bfpMxo+csGtqJy62uDRVy/XAwi+tWSSZ7kB9wcoFQGJ0hJf3znGMxeV yhZyhhYezad/5Y+yNtRGUjC+iFDAqL/9AxZfsJY01SLBZ8GuuavE/kiPgltiTMLR MUMetkJs9EW4H0hlI9sYiXETYP9tVW2XazfUOHZzNC83XAOQ4M7MGDkFFD/WFrPb N7nslmPV4msCh/AQ8jVm =maAF -----END PGP SIGNATURE----- --BEa57a89OpeoUzGD--