[Pkg-libburnia-devel] [Reproducible-builds] Reproducible patches for libisoburn and libisofs
lamby at debian.org
Mon Aug 15 15:09:34 UTC 2016
> If file "$HOME/project_42_iso_ids" exists, then the lengthy parameter
> is taken from there. It defines a timestamp, a disk GUID, and what else
> might turn out to be in need of being reproduced.
I also understand and appreciate that some use-cases need more entropy
than a 32-bit integer can provide. However, I feel like the parameter you
suggest could quite easily fallback to SOURCE_DATE_EPOCH with the extra
bits -- I use the term hand-wavingly for now -- masked to zero.
Anyone needing to provide more "secure" entropy could then use the
interface you suggest.
Otherwise, I sincerely worry that your efforts to make the output
reproducible will be neglected as the user interface is simply too
I agree that an environment variable is not the perfect channel to
communicate values to a process, but this particular now has such
widespread adoption that its becoming somewhat quixotic not to make use
: :' : Chris Lamb
`. `'` lamby at debian.org / chris-lamb.co.uk
More information about the Pkg-libburnia-devel