[Reproducible-builds] SOURCE_DATE_EPOCH specification document

Ximin Luo infinity0 at debian.org
Thu Aug 27 13:57:24 UTC 2015


On 27/08/15 15:32, Chris Lamb wrote:
> Chris Lamb wrote:
> 
>> I plan to dump the rest of what's in my head today (depending on the
>> level of sun)
> 
> Sincere apologies that this took longer than promised, but I think I've
> reached a good point:
> 
>   https://reproducible.debian.net/specs/source-date-epoch-spec/
> 
> I'll wait a few days, proof-read a more few times and then declare it
> published.
> 
> In the meantime, suggestions and contributions are highly welcome. Feel
> free to commit "rough" changes directly to the repo; I am very happy to
> "fold in" improvements in this way. (If you are not already a member of
> our Alioth group, this would be the excuse you were waiting for..)
> 

Hi, very nice work.

I would add in a paragraph about why it's not feasible to keep embedded timestamps and simply have a "diff" program ignore these. I've encountered this proposal before by lazy upstreams that don't want to acknowledge that the problem (and hence solution) lies on *their* side.

Something like (from the current wiki page):

.. it is not feasible to develop a diff algorithm to ignore "build dates" in arbitrary data formats, and fundamentally impossible in the case of Turing-complete data formats such as executables, since the real behaviour of the result could easily change based on a piece of data embedded in the file, even if the data is itself static or immutable.

> exposed through the system's usual environment mechanism

unsure what "environment mechanism" means - hardware clock? syscall?

In the meantime I'll push some other minor edits too.

X

-- 
GPG: 4096R/1318EFAC5FBBDBCE
git://github.com/infinity0/pubkeys.git



More information about the Reproducible-builds mailing list