Comments (5)
I am against "it should be handled by a simple flag" but reproducability of rpm file is acceptable.
As you know it is depending on timestamp and other time-related conditions. I believe that these parameter should be manually set by the user who wanna get reproducable builds.
Of cause currently compression issue and some missing fields needed to be added to the purpose. Simply speaking, it is just depending on rpm-rs/rpm#117.
from cargo-generate-rpm.
I think a SOURCE_DATE_EPOCH
-like flag should be sufficient for time-related conditions. As a convenience it would be nice to have additional flags which set it to the beginning of the UNIX epoch and to date of last commit in current repository.
from cargo-generate-rpm.
Again, simply speaking, this issue is just depending on rpm-rs/rpm#117 and need to clarify on requirements on rpm-rs/rpm. It is impossible to clarify single flag is suitable or not.
BTW, the original rpmbuild have such a "simple flag"?
from cargo-generate-rpm.
this issue is just depending on rpm-rs/rpm#117 and need to clarify on requirements on rpm-rs/rpm.
Yes, I understand. This is why I linked the issue. I created this issue to make it easier to find for users of generate-rpm
who are interested in reproducibility and to discuss potential shape of CLI API.
BTW, the original rpmbuild have such a "simple flag"?
IIUC it's done by setting %source_date_epoch_from_changelog
, but I haven't used it myself.
from cargo-generate-rpm.
So, the feasibility of a fully working simple flag is not clear. Such a simple flag need to be careful about because users expect complete behavior.
I will leave this ticket open. Please create other tickets or PRs to introduce each respective settings (mtime, build time, etc.).
from cargo-generate-rpm.
Related Issues (20)
- Keep basename of source when it is a file and dest is directory
- Release Binaries HOT 1
- mc cannot read resulting rpm file HOT 4
- Missing Cargo.lock HOT 4
- Getting SIGSEGV: invalid memory reference for `config::test::test_table_to_dependencies` HOT 2
- Support for `summary` silently dropped HOT 2
- Missing field: package.metadata HOT 2
- Support for `license-file` HOT 2
- setting `CARGO_TARGET_DIR` and using auto-req results in malformed RPM
- Future-incompatibilities warning HOT 2
- Script parameters should accept path to files, not script intself HOT 6
- error: unpacking of archive failed on file /lib/systemd/system/xxx.service;6496c577: cpio: Digest mismatch HOT 3
- Feature Request: allow not replacing config files HOT 5
- RPM is not readable by rpmlint HOT 4
- Could not generate generate-rpm in case of --target specified HOT 2
- Failed dependencies: libc.so.6(GLIBC_2.29)(64bit) is needed when install generated .rpm package HOT 1
- Issue with generate RPM not matching the PowerPC64 LE architecture HOT 3
- [Feature-Request] Add `%pretrans %posttrans`? HOT 1
- Building rpm for `foo-bar` package means `foo-bar/Cargo.toml` must exists?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cargo-generate-rpm.