From owner-freebsd-arch@FreeBSD.ORG  Fri Apr 11 07:51:08 2014
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
Delivered-To: arch@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id C1A5A1FE
 for <arch@freebsd.org>; Fri, 11 Apr 2014 07:51:08 +0000 (UTC)
Received: from csmtp5.one.com (csmtp5.one.com [195.47.247.105])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 84AD713B2
 for <arch@freebsd.org>; Fri, 11 Apr 2014 07:51:08 +0000 (UTC)
Received: from bigmac.router9fbd7c.com (unknown [176.222.238.90])
 by csmtp5.one.com (Postfix) with ESMTPA id 2CBA4400000B5;
 Fri, 11 Apr 2014 07:51:00 +0000 (UTC)
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\))
Subject: Re: ar and ranlib -D
From: Erik Cederstrand <erik@cederstrand.dk>
In-Reply-To: <86eh15usv2.fsf@nine.des.no>
Date: Fri, 11 Apr 2014 09:51:00 +0200
Content-Transfer-Encoding: quoted-printable
Message-Id: <8F5B6CDC-3680-4F3A-887B-B01F0E9C3E5D@cederstrand.dk>
References: <86eh15usv2.fsf@nine.des.no>
To: =?iso-8859-1?Q?Dag-Erling_Sm=F8rgrav?= <des@des.no>
X-Mailer: Apple Mail (2.1874)
Cc: arch@freebsd.org
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Discussion related to FreeBSD architecture <freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-arch>,
 <mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch/>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
 <mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Apr 2014 07:51:08 -0000

Den 10/04/2014 kl. 17.06 skrev Dag-Erling Sm=F8rgrav <des@des.no>:

> The attached patch adds -D to ARFLAGS and introduces RANLIBFLAGS which
> defaults to -D.  This ensures that all timestamps inside static
> libraries in the base system are hardcoded to 0 (aka the epoch), which
> is a huge step towards fully reproducible builds.  Any objections?

I've used a similar patch for some time without problems. You should =
grep the tree to check that ar and ranlib are always called with =
${ARFLAGS} and ${RANLIBFLAGS}. I seem to remember that some makefiles =
just hardcode the flags.

Erik=