[Reproducible-builds] [Reproducible-commits] [notes] 01/01: Remove packages that were built reproducibly.

Esa Peuha esa.peuha at gmail.com
Fri Jun 12 13:58:53 UTC 2015


On Fri, Jun 12, 2015 at 3:59 PM, Holger Levsen <holger at layer-acht.org> wrote:
> On Freitag, 12. Juni 2015, Esa Peuha wrote:
>
>> -akuma:
>> -  version: 1.9-1
>> -  comments: |
>> -    it builds fine on jenkins.d.n, but when building locally it embeds the
>> username into the manifest file -    unclear, why this is hidden on
>> jenkins.d.n
>> -  issues:
>> -    - user_in_java_jar_manifest
>
> did you confirm this ain't the case anymore or did you blindly remove this
> package?

Sorry, I must have missed that comment. Feel free to put it back if you
think it should be preserved, but maybe we should just explicitly state
that any claim about building packages reproducibly is strictly about
building them on jenkins, and building them anywhere else may not be
reproducible; that is really all that the automated checking can do,
whether we say so or not. If we do say so, then I don't see much point
in having comments about building a package somewhere else.



More information about the Reproducible-builds mailing list