#16 reproducible builds?

any plans on that?

Hello,

Honestly, I haven't dig (research) too much about the reproducible things (stuff coming from https://reproducible-builds.org),but I am open to any idea/help about how to implement all of this...

As the question was very general, I assumed it was about Dragora's construction scripts. For a more extended answer to the topic of "reproducible builds". Dragora supports or has activated the support for deterministic archives, this is for all the software that can be reproduced, Dragora includes the support from the toolchain (by default). If we talk about the construction of Dragora, the build produces packages in .tlz format, both for the cross compiler and for the final distribution (final stage). This is based on the LZMA implementation of lzip, it is just lzip one of the most reproducible formats (via lziprecover) out there.

Of course there are details of the specification of the "reproducible builds" to be covered as SOURCE_DATE_EPOCH. I have already asked the lzip maintainer to incorporate this.

I don't know if this is what you meant.

UPDATE:

Support for SOURCE_DATE_EPOCH has been added recently to Qi 2.0 (Dragora's 3 package manager). This is thanks to the release of tarlz[1] 0.17.

[1] http://lzip.nongnu.org/tarlz.html

cool :D