grarpamp <grarpamp at gmail.com> writes:> Not to mention the irreproducible builds / pkgs / ISO's.The base system build is 99% reproducible. ISOs should be reproducible as well, modulo timestamps. Reproducible packages are extremely difficult to get right. Baptiste spent a lot of time and effort trying to get them to work before the official switch to pkgng. Many packages compile the build host's name and / or the current date and time into various binaries. Python stores the timestamp of the original .py file into the .pyc file and will attempt to recompile it if that timestamp does not match or the .py file's mtime is equal to or greater than the .pyc file's mtime. Emacs does similar shenanigans with .el and .elc files.> These days these flaws are more than a bit ridiculous,You seem to be implying that everybody else is doing it except us. This is not true. Debian and Fedora are or have been working on it but with no success to date.> Can we get a wiki project page and some traction on this?https://wiki.freebsd.org/ReproducibleBuilds https://wiki.freebsd.org/PortsReproducibleBuilds Are you volunteering? DES -- Dag-Erling Sm?rgrav - des at des.no
On Fri, Sep 18, 2015 at 02:49:01PM +0200, Dag-Erling Sm?rgrav wrote:> > These days these flaws are more than a bit ridiculous, > > You seem to be implying that everybody else is doing it except us. This > is not true. Debian and Fedora are or have been working on it but with > no success to date. >In fact, Debian has been kind enough to even provide a page that shows which parts of the FreeBSD build are non-reproducible. https://reproducible.debian.net/freebsd/freebsd.html Glen -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 819 bytes Desc: not available URL: <http://lists.freebsd.org/pipermail/freebsd-security/attachments/20150918/455173c3/attachment.bin>
On Fri, Sep 18, 2015 at 02:49:01PM +0200, Dag-Erling Smorgrav wrote:> grarpamp <grarpamp at gmail.com> writes: > > Not to mention the irreproducible builds / pkgs / ISO's. > > The base system build is 99% reproducible. ISOs should be reproducible > as well, modulo timestamps.freebsd-update builds is inreproducible by the freebsd-update-server bug[s].